Message Checking Apparatus for Malicious URL Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for filtering out malicious URLs in SMS, MMS, and packet-based messages are insufficient, as they rely on limited pattern detection and may leak personal information, failing to block a wide range of malicious applications effectively.
Innovation Solution
A message checking apparatus and method that extracts URLs from incoming messages, checks for security risks using an API verification unit, and determines whether the URL is malicious through pre-filtering, vaccine checks, authorization/API checks, and dynamic analysis, blocking or alerting users to potential threats.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If pattern-searching filtering is used to detect malicious URLs, then the filtering process is simple, but the filtering performance is insufficient and cannot detect many kinds of malicious URLs
Solution Approach 1:
The filtering system is divided into multiple independent checking modules: pre-filtering module, vaccine checking module, authorization/API checking module, and dynamic analysis module. Each module performs a specific type of analysis, allowing the system to handle complex malicious URLs through coordinated work of simpler subsystems rather than a single complex filter.
Solution Approach 2:
The system performs preliminary actions by downloading applications from suspicious URLs before analysis, and by pre-filtering URLs against known malicious patterns before deeper analysis. This allows the system to prepare data for subsequent checking stages and improves overall detection capability without requiring all analysis to occur simultaneously.
2Reliability
If multiple checking methods are implemented to improve filtering accuracy, then the detection capability increases, but the processing time and system complexity increase
Solution Approach 1:
The checking process is segmented into sequential modules that can operate independently. The pre-filtering module quickly eliminates obvious malicious URLs, while subsequent modules (vaccine checking, authorization/API checking, dynamic analysis) only process URLs that pass previous stages, reducing total processing time through early elimination of false positives.
Solution Approach 2:
The system applies partial checking actions based on risk level. Not all URLs undergo full multi-stage analysis; instead, the system selectively applies checking depth according to initial assessment results, using excessive action (full analysis) only when necessary to maintain high detection accuracy while minimizing overall processing time.
Data Source
AI summary
A message checking apparatus comprising one or more processors, the message checking apparatus includes: a uniform resource locator(URL) extracting unit to check, when a message is received, whether a URL is included in the message and extract the URL from the message; a communication unit to download an application using the URL; and an authorization/application program interface(API) verifying unit to check whether an authorization or API having a security risk is included in the application to be downloaded through the communication unit and then determine whether the URL is malicious based thereon.