IP Address Filtering via URL Resolution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for blocking malicious Internet content are manual, time-consuming, and often result in devices accessing harmful content before identification, as they rely on URL blocking rather than proactive IP address filtering.
Innovation Solution
Implementing IP address filtering that uses web crawlers to identify suspicious URLs, resolve them to IP addresses, and create a suspicious IP address list for proactive blocking or warning, based on context and threat ranking.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual URL blocking is used, then users can control what content is accessed, but the process is time-consuming and devices may access harmful content before identification
Solution Approach 1:
The system performs preliminary actions by proactively identifying and blocking malicious IP addresses before users can access harmful content. Web crawlers continuously scan the internet to find suspicious URLs, resolve them to IP addresses, and add them to block lists in advance, preventing access before any harm occurs to the device.
Solution Approach 2:
The system provides self-service by automatically detecting, analyzing, and blocking malicious content without requiring manual user intervention. The automated web crawling, IP resolution, and block list generation processes occur autonomously, eliminating the need for users to manually monitor and block threats.
2Extent of automation
If automated web crawling and IP resolution is implemented, then proactive blocking of malicious content is achieved, but system complexity increases
Solution Approach 1:
The system introduces intermediary components including web crawlers that scan for suspicious URLs, IP resolution services that translate URLs to IP addresses, and block list databases that store filtered IPs. These intermediary elements work together to automate the threat identification process while managing system complexity through modular design.
Data Source
AI summary
A method and apparatus for providing IP address filtering. The method identifies one or more suspicious Uniform Resource Locators (URLs) and resolves the one or more suspicious URLs to one or more suspicious IP addresses. A suspicious IP address list is created containing the one or more suspicious IP addresses. The suspicious IP address list may be used to facilitate a security response to filter one or more of the IP addresses in the suspicious IP address list.


