Login Window Authenticity Detection Against Fake Credential Prompts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to effectively detect and prevent fake login window attacks, allowing attackers to obtain user passwords through keylogging attacks.
Innovation Solution
A system and method that utilizes screencast technologies and operating system graphics architecture to gather images, analyze login windows, and execute security actions such as sending notifications, executing Ctrl+Alt+Del commands, and deleting non-essential processes to thwart fake login attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security measures are used, then system security is maintained, but fake login window attacks cannot be detected
Solution Approach 1:
The patent replaces traditional mechanical security verification methods with visual-based detection using screencast technologies and image processing. The system captures visual output of login windows and uses image analysis to detect fake windows, substituting conventional security mechanisms with vision-based authentication verification.
Solution Approach 2:
The patent introduces an intermediary detection layer between the user and the login window. This intermediary system captures screenshots, analyzes visual characteristics, and verifies window authenticity before allowing user interaction, acting as a mediator that prevents direct access to potentially malicious windows.
2Reliability
If real-time detection is implemented, then attack prevention is improved, but processing time and system resources increase
Solution Approach 1:
The patent performs preliminary actions by continuously capturing and analyzing login window visuals in the background before actual user authentication attempts. The system pre-identifies suspicious windows and prepares detection results, so when a user encounters a login window, the verification is already complete or near-complete.
Solution Approach 2:
The patent implements continuous detection by maintaining an ongoing process of capturing login window visuals and analyzing them for authenticity. This continuous action ensures that detection is always active without requiring separate triggering events, maintaining constant security monitoring with minimal interruption to user flow.
Data Source
AI summary
The present disclosure relates generally to cybersecurity and, more particularly, to a system and method to detect and prevent login attacks. A computer-implemented method includes: gathering, by a computing device, a login window from a display of a user device; determining, by the computing device, that the login window is invalid; flagging, by the computing device, the login window as an attack on the user device upon determining that the login window is invalid; and executing, by the computing device, a security action on the user device.