Web Application Data Masking With Authentication Against Malicious Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Web applications are vulnerable to cyberattacks and unauthorized access of non-public information by malicious users and codes, leading to network congestion and performance degradation.
Innovation Solution
A system and method that integrates a security device to detect malicious codes and users, analyze configuration parameters for anomalies, and implement countermeasures to protect non-public information by masking it and requiring authentication, thereby reducing unauthorized access and network congestion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If web applications are made accessible to increasing numbers of users, then network traffic and usability improve, but vulnerability to cyberattacks and unauthorized access increases
Solution Approach 1:
The patent introduces a security device as an intermediary component positioned between the web application and network traffic. This device monitors configuration parameters, detects malicious patterns, and blocks unauthorized access attempts before they reach the application, thus protecting the system while maintaining network accessibility.
Solution Approach 2:
The security device performs preliminary detection and analysis of incoming network traffic by examining configuration parameters before requests reach the web application. By identifying and blocking malicious patterns in advance, the system prevents cyberattacks from compromising the application while allowing legitimate traffic to proceed.
2Reliability
If security measures are implemented to detect and block malicious code, then security improves, but network performance and application speed may degrade
Solution Approach 1:
The security device applies partial monitoring by selectively analyzing only those configuration parameters that indicate potential malicious activity. Rather than inspecting every single parameter or request, the system focuses on anomaly detection for specific security-relevant parameters, thus maintaining security while minimizing performance overhead.
Solution Approach 2:
The system dynamically adjusts its monitoring intensity and threshold levels based on observed traffic patterns and security threats. By changing detection parameters adaptively, the security device optimizes the balance between thorough security scanning and maintaining application performance, reducing unnecessary processing of legitimate traffic.
3Measurement precision
If configuration parameters are monitored and analyzed in real-time, then detection accuracy improves, but system complexity and processing overhead increase
Solution Approach 1:
The security device extracts and monitors only the specific configuration parameters that are most indicative of malicious activity, rather than analyzing all possible system parameters. By selecting and focusing on key security-relevant parameters, the system achieves high detection accuracy while keeping the monitoring mechanism relatively simple and manageable.
Data Source
AI summary
A system for protecting non-public information from a malicious user determines a set of input data entered into a web application. The system determines whether each input data is associated with non-public information. In this process, the system compares each input data with each of a set of keywords that are known to be associated with non-public information. In response to determining that input data corresponds to a keyword, the system determines that the input data comprises non-public information. In response, the system masks the input data and tags an authentication instruction to the masked input data. The system may receive a request to unmask the masked input data. In response to receiving the request, the system executes the authentication instruction.