Security Processor Detection of Malicious Webpage Interaction

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Traditional communication systems fail to detect and mitigate malicious noise introduced by malicious applications, which alter or substitute legitimate messages, making it difficult to secure client-server communications.

Innovation Solution

A security processor uses soft information to predict how hard information will be rendered by a client device and compares the actual response to the prediction, detecting deviations caused by malicious applications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional communication systems are used to transmit information, then communication efficiency is maintained, but the system becomes vulnerable to malicious noise that alters or substitutes legitimate messages

Engineering Contradiction:
Improvemessage integrityVSAvoidmalicious noise
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a security processor as an intermediary component between the communication channel and the application layer. This security processor intercepts, validates, and monitors communications to detect and mitigate malicious noise, thereby protecting message integrity without disrupting normal communication efficiency

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements feedback mechanisms where the security processor continuously monitors communications, compares expected versus actual messages, and adjusts its detection algorithms based on identified patterns of malicious noise, improving reliability over time

Inventive Principle:
Principle #23Feedback

2Reliability

If error correction functions are implemented to handle haphazard noise, then communication reliability improves, but the system cannot detect engineered malicious noise that switches valid codewords

Engineering Contradiction:
Improveerror correction capabilityVSAvoidmalicious codeword substitution
Core Design Contradiction:
ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The patent segments the communication validation process into multiple independent checks: traditional error correction for haphazard noise, and a separate security processor layer for detecting malicious codeword substitution. This segmentation allows each layer to specialize in detecting specific types of errors without interfering with the other

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Instead of trying to correct all errors uniformly, the system inverts the approach by assuming communications are legitimate unless proven otherwise. The security processor actively searches for signs of malicious substitution rather than passively correcting errors, enabling detection of engineered attacks

Inventive Principle:
Principle #13The other way round (Inversion)

3Reliability

If a security processor is added to detect malicious applications, then communication security improves, but system complexity increases

Engineering Contradiction:
Improvesecurity against malicious applicationsVSAvoidsecurity processor architecture
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The security processor is designed to perform multiple functions: validating messages, detecting malicious noise, monitoring communication patterns, and coordinating with error correction mechanisms. This multi-functionality consolidates security operations into a single component, managing complexity while comprehensive protection

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS20250350635A1Methods and apparatus for detecting a presence of a malicious application
Publication Date: 2025.11.13 SUNSTONE INFORMATION DEFENSE INC
  • US20250350635A1 patent drawing
  • US20250350635A1 patent drawing
  • US20250350635A1 patent drawing

AI summary

Methods, systems, and apparatuses for detecting a presence of a malicious application are disclosed. In an example, a method includes determining a prediction for human user interaction with webpage content of a website. The method further includes using the prediction for human user interaction with the webpage content to determine when received webpage interaction information from a client device is indicative of a presence of a malicious application. The method provides an indication of the presence of the malicious application when the received interaction information is indicative of the presence of a malicious application.