URL Salience Phishing Detection Intermediary System

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current email and web browser technologies do not provide adequate defenses against phishing attacks, which deceive users into revealing sensitive information by impersonating authorized parties.

Innovation Solution

Implementing a system that analyzes URLs for suspicious characteristics such as obfuscation, cloaking, and redirection, and applies differential treatment based on security settings to prevent phishing attempts, including displaying warnings and blocking access to potentially unsafe URLs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If current email and web browser technology are used, then ease of operation is maintained, but security against phishing attacks is insufficient

Engineering Contradiction:
Improvesecurity against phishingVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary security system that sits between the user and the email/web browser interface. This intermediary analyzes URLs and electronic communications for phishing indicators without requiring users to change their interaction patterns, thus improving security while maintaining ease of operation.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary analysis of URLs and electronic communications before users interact with them. By pre-identifying phishing indicators in URLs and communications, the system prevents users from encountering deceptive content, thereby improving security without adding complexity to the user interface.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If URL analysis and phishing detection systems are implemented, then security is improved, but processing time and system complexity increase

Engineering Contradiction:
Improvephishing detection accuracyVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system applies partial analysis to all URLs and full analysis only to suspicious ones. By initially scanning for basic phishing indicators in all URLs and then performing more intensive analysis only on those that trigger alerts, the system achieves high detection accuracy while minimizing overall processing time.

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The system rapidly processes URLs through multiple analysis stages, skipping detailed examination of obviously safe URLs. By implementing a multi-stage filtering approach that quickly eliminates benign content and focuses computational resources on suspicious URLs, the system maintains both accuracy and speed.

Inventive Principle:
Principle #21Skipping (Rushing through)

Data Source

PatentUS8990928B1URL salience
Publication Date: 2015.03.24 HUAWEI TECH CO LTD
  • US8990928B1 patent drawing
  • US8990928B1 patent drawing
  • US8990928B1 patent drawing

AI summary

In some embodiments, techniques for displaying a URL comprise reducing the deceptiveness of electronic communications.