Hyperlink Validation via Search Engine Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Phishing threats, particularly through manipulated hyperlinks, pose a significant security risk as existing methods rely on continuous updates of blacklists and are vulnerable to social engineering techniques that deceive users into accessing untrusted web resources.
Innovation Solution
A computer-implemented method and system that uses search engines to analyze and classify suspected hyperlinks, replacing untrusted ones with trusted alternatives by evaluating syntactic, semantic, and visual similarities, thereby preventing access to fraudulent websites.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If blacklist-based methods are used to detect phishing hyperlinks, then implementation is simple, but the system becomes vulnerable to social engineering tactics and requires continuous updates
Solution Approach 1:
The patent introduces search engines as an intermediary mechanism between the user and the hyperlink validation process. Instead of directly comparing against static blacklists, the system uses search engine results to indirectly assess hyperlink legitimacy through syntactic, semantic, and visual analysis of search results, thereby improving reliability while maintaining ease of implementation
Solution Approach 2:
The system performs preliminary analysis of hyperlinks by querying search engines and comparing the hyperlink's syntax, semantics, and visual presentation against search results before the user clicks. This preliminary action identifies potential phishing attempts early, preventing users from accessing fraudulent sites while avoiding the need for continuous blacklist updates
2Device complexity
If static blacklist methods are used, then the system is simple to maintain, but it cannot adapt to new phishing techniques
Solution Approach 1:
The patent transforms the static blacklist approach into a dynamic system that queries search engines in real-time. The system adapts to new phishing techniques by analyzing current search results and comparing them against the suspected hyperlink, allowing the system to automatically adapt to emerging threats without manual updates or increased complexity
Solution Approach 2:
The system changes the parameters used for hyperlink validation from static blacklist entries to dynamic search engine result comparisons. By analyzing syntactic parameters (URL structure), semantic parameters (page content meaning), and visual parameters (display appearance), the system gains adaptability to new phishing techniques while maintaining manageable complexity
3Measurement precision
If search engine analysis is used to validate hyperlinks, then security detection accuracy improves, but processing time increases
Solution Approach 1:
The patent applies partial action by selectively analyzing only the necessary components of hyperlinks (syntax, semantics, visuals) against search results rather than performing exhaustive validation. This approach achieves high detection accuracy by focusing on key discriminative features while minimizing processing time through targeted analysis
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A computer implemented method, comprising obtaining a first hyperlink associated with a first web resource accessible via a client terminal, converting one or more portions of the first hyperlink into a query comprising search terms(s) derived, at least partially, from the portion(s) of the first hyperlink, submitting the query to search engine(s) configured to search for information via the internet, receiving, from the search engine(s), search results associated with the query, the search results including one or more second hyperlinks, determining whether to replace the first hyperlink with a replacement hyperlink selected from the second hyperlink(s) based, at least partially, on a result of an analysis of similarity of the first hyperlink compared to each of the second hyperlink(s) and causing the client terminal to access either the first web resource associated with the first hyperlink or a second web resource associated with the replacement hyperlink based on the determination.