Remote Browser Webpage Monitoring for Rendered Code Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing webpage security monitoring systems fail to detect alterations in remotely called code that compromise webpage security, allowing unauthorized data capture by third parties.
Innovation Solution
A system and method that captures and analyzes webpage images and interaction data to monitor webpage security, including the execution of user interactions through a remote browser, enabling detection of security issues in both source and remotely called code.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If webpage security monitoring is performed using traditional source code analysis, then detection of security issues in source code is improved, but detection of alterations in remotely called code is not achieved
Solution Approach 1:
The patent segments the webpage into multiple components including source code portions, remotely called code portions, and rendered code portions. This segmentation allows the system to apply different analysis methods to different segments, enabling detection of alterations in remotely called code while maintaining the benefits of source code analysis.
Solution Approach 2:
The patent introduces rendered code as an intermediary between source code and the final displayed webpage. By comparing the rendered code against expected values, the system can detect alterations in remotely called code that may not be visible in the source code alone, thus expanding monitoring coverage without sacrificing detection accuracy.
2Reliability
If comprehensive security analysis of all code portions is performed, then detection capability is improved, but processing time and system complexity increase
Solution Approach 1:
The patent applies different analysis depths and methods to different code portions based on their security criticality. Source code portions undergo one type of analysis while remotely called code portions undergo another type of analysis through rendered code comparison. This localized approach maintains high security monitoring effectiveness while reducing overall system complexity compared to uniform comprehensive analysis of all code.
3Measurement precision
If rendered code analysis is used to detect alterations, then detection of remotely called code compromises is improved, but processing overhead increases
Solution Approach 1:
The patent performs rendered code analysis selectively rather than continuously for all webpages. By applying rendered code comparison primarily to pages with remotely called code and only analyzing critical portions, the system achieves accurate detection of alterations while minimizing processing overhead and resource consumption compared to exhaustive rendered code analysis of all webpage content.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method to control a remote browser may include executing a webpage by a web browser on a system and capturing, by the system, an image of the webpage. The method may further include directing the image of the webpage to a device for presentation of the image and after directing the image of the webpage to the device, obtaining, at the system, image interaction data from the device. In some embodiments, the image interaction data may represent a user interaction with the image of the webpage. The method may also include in response to obtaining the image interaction data, applying, at the system via the web browser, an interaction to the webpage that corresponds to the user interaction using the image interaction data.