Mobile App URL Interception for Malicious Link Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile applications can launch malicious links that evade accessibility-based detection, posing a risk for system-level browser attacks, as they use custom views or web view-like alert windows, rendering existing security measures ineffective.
Innovation Solution
A system and method that intercepts messages from mobile applications, obtains URLs, retrieves reputation data, and determines if the URL is malicious, prompting a security action such as blocking the URL or adding it to a bypass list, to prevent system-level browser attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If mobile applications use custom views or web view-like alert windows to launch links, then the ability to launch browser links is improved, but accessibility-based detection becomes ineffective
Solution Approach 1:
The system performs preliminary analysis of URL reputation data before allowing the browser link to be launched. By checking the reputation database in advance and presenting security alerts to users before navigation occurs, the system prevents malicious links from executing while still allowing legitimate links to function normally.
Solution Approach 2:
The patent introduces an intermediary security system that sits between the mobile application and the browser. This intermediary intercepts URL launch requests, analyzes them against reputation databases, and mediates whether the link should be allowed to proceed based on security assessment results.
2Reliability
If security measures are implemented to detect malicious links, then protection from attacks is improved, but the complexity of the system increases
Solution Approach 1:
The system leverages existing URL reputation databases and services that already perform the heavy lifting of analyzing and categorizing URLs. By integrating with these external services rather than building complete analysis capabilities in-house, the system achieves reliable protection while keeping its own architecture relatively simple.
Solution Approach 2:
The patent implements a layered security approach where basic URL reputation checking is performed for all links, with additional analysis applied only when suspicious patterns are detected. This partial action approach provides comprehensive protection while avoiding the complexity of analyzing every single link at maximum depth.
3Measurement precision
If all URL launch requests are analyzed for security, then detection accuracy is improved, but the time required for link launching increases
Solution Approach 1:
URL reputation data is pre-calculated and stored in databases before being needed. When a link is clicked, the system performs a quick lookup of already-analyzed reputation data rather than performing complete analysis in real-time, significantly reducing the time added to the link launching process.
Solution Approach 2:
The system combines multiple security checks into a single integrated flow that presents users with a unified security alert. By merging URL reputation checking, malware database verification, and user consent requests into one coordinated process, the system maintains high detection accuracy while minimizing the total time required.
Data Source
AI summary
The disclosed computer-implemented method for preventing system level browser attacks through mobile applications may include (i) intercepting a message transmitted by a mobile application, wherein the message is based on data received by the mobile application, (ii) obtaining a universal resource locator (URL) from the message, (iii) obtaining reputation data using the URL, (iv) determining that the URL is for a malicious website based on the reputation data, and (v) in response to determining that the URL is for the malicious website, performing a security action to protect the computing device from system level browser attacks. Various other methods, systems, and computer-readable media are also disclosed.