Web Injection Protection via Form Structure Baseline Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Malware techniques like form-grabbing and web injects intercept and modify electronic forms, allowing malicious entities to steal sensitive information by intercepting data before encryption or after decryption, posing a significant threat to user security.
Innovation Solution
A method and system that detect unauthorized electronic forms by comparing input fields of rendered forms against a database of authorized forms, triggering protective actions such as blocking access or notifying administrators when discrepancies are found, using an agent installed on end-point clients to monitor browser activity and analyze forms for correlations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Object-generated harmful factors
If web injects intercept data after SSL decryption, then malware can read and steal sensitive information, but user security is compromised
Solution Approach 1:
The system performs preliminary actions by establishing a baseline of authorized form structures before comparison. The database stores known good form configurations, and the system proactively compares rendered forms against this baseline to detect unauthorized modifications before they can compromise security.
Solution Approach 2:
The system implements feedback by continuously monitoring form rendering processes and comparing actual forms against authorized templates. When discrepancies are detected, the system provides feedback through alerts and protective actions, creating a closed-loop security mechanism that responds to potential threats.
2Object-generated harmful factors
If form data is transmitted before encryption, then malware can intercept credentials, but data security is compromised
Solution Approach 1:
The system performs preliminary validation of form structures before data transmission occurs. By comparing the form's HTML structure, input field configurations, and associated scripts against authorized templates in advance, the system prevents malicious forms from capturing credentials even before encryption is applied.
3Adaptability or versatility
If web pages are dynamically modified by malware, then unauthorized input fields can be added, but form integrity is compromised
Solution Approach 1:
The system monitors dynamic modifications to web forms by comparing rendered forms against authorized templates. When unauthorized input fields or modifications are detected through this continuous feedback mechanism, the system triggers protective actions to maintain form integrity while allowing legitimate dynamic content updates.
Solution Approach 2:
The system establishes authorized form templates and structures in advance, creating a baseline for what constitutes legitimate form content. This preliminary definition of authorized structures enables the system to distinguish between legitimate dynamic modifications and malicious injections.
4Object-generated harmful factors
If browser functions are hooked to intercept data, then form-grabbing malware can steal information, but system security is compromised
Solution Approach 1:
The system implements a feedback mechanism that monitors browser form rendering and submission processes. By continuously comparing actual form structures against authorized templates, the system detects hooking attempts and unauthorized interceptors, providing real-time security feedback without requiring changes to browser core functions.
Data Source
AI summary
Computerized methods and systems detect unauthorized and potentially malicious, as well as malicious records, typically in the form of electronic forms, such as those where users input information (into input blocks or fields), such as bank and financial institution electronic forms and the like. Should such an unauthorized form, be detected, the detection causes the taking of protective action by the computer whose on whose browser the unauthorized form has been rendered.