Proxy Phishing Detection via Embedded Authorization Logic
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Proxy-based phishing sites pose a significant online security threat as they can easily be established and are difficult to detect, allowing malicious actors to capture private information by proxying requests from client devices to authorized websites, making existing manual detection methods ineffective.
Innovation Solution
An authorization verification logic is embedded within a computer-executable web resource, which identifies the computing domain it is executed in and compares it to authorized domains, initiating remedial actions if it detects an unauthorized domain, such as notifying the authorized website or preventing execution, to automatically detect and impede proxy-based phishing sites.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If manual detection methods are used to identify proxy-based phishing sites, then detection capability is maintained, but detection efficiency and speed deteriorate due to the ease with which new phishing sites can be created
Solution Approach 1:
The patent embeds authorization verification logic directly into web resources before they are served. This preliminary action ensures that when a phishing site attempts to proxy requests, the embedded logic automatically detects the unauthorized domain and blocks execution, eliminating the need for reactive manual detection and significantly improving detection efficiency
Solution Approach 2:
The authorization verification logic is self-executing within the web resource. When the web resource runs on an unauthorized domain, the embedded logic automatically identifies the domain mismatch and initiates remedial actions without external intervention, enabling self-service detection that scales efficiently against rapidly created phishing sites
2Extent of automation
If authorization verification logic is embedded in web resources, then automatic detection capability improves, but device complexity increases
Solution Approach 1:
The patent merges the authorization verification logic directly into the web resource code itself. This combining approach integrates detection functionality within the existing web resource structure, avoiding the need for separate detection systems and minimizing additional complexity while achieving automatic detection
Solution Approach 2:
The embedded authorization verification logic serves multiple functions: it verifies domain authorization, detects phishing attempts, and triggers remedial actions. This multi-functionality consolidates what could be separate complex systems into a single integrated component, reducing overall system complexity while enhancing automatic detection capability
Data Source
AI summary
Systems and/or techniques for facilitating automatic detection of proxy-based phishing sites are provided. In various embodiments, a system can access a computer-executable web resource and can embed an authorization verification logic within the computer-executable web resource. In various aspects, upon execution of the computer-executable web resource, the authorization verification logic can be configured to: identify a computing domain via which the computer-executable web resource is being executed; compare the identified computing domain with one or more authorized computing domains; determine that the identified computing domain is an unauthorized proxy site if the identified computing domain does not match at least one of the one or more authorized computing domains; and initiate a remedial action based on determining that the identified computing domain is an unauthorized proxy site.