Web Link Replacement for Unrecognized Resource Phishing Defense
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing anti-phishing technologies are inadequate in identifying and mitigating phishing attacks, particularly novel and spear-phishing attempts, and often require user interaction that can activate malicious programs or expose sensitive information.
Innovation Solution
A web resource recognition system that monitors electronic communications for embedded links, determines whether they point to recognized or unrecognized resources, and replaces unsafe links with redirecting pages that prompt user input or provide constrained views, initiating administrative reviews when necessary.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If links to unrecognized web resources are blocked, then phishing attack success rate is reduced, but user productivity is impacted due to inability to access legitimate unrecognized sites
Solution Approach 1:
The patent introduces an intermediary mechanism (replacement link system) between the user and unrecognized web resources. When a link to an unrecognized web resource is detected, it is replaced with a link to a predetermined web page that acts as an intermediary, prompting the user for additional input or providing administrative review options. This mediator allows the system to block potential phishing attacks while still permitting legitimate unrecognized sites to be accessed through user-initiated processes, thus resolving the contradiction between security and productivity.
2Reliability
If all unrecognized web resources are blocked, then security against novel phishing attacks is improved, but usability for legitimate sites is reduced
Solution Approach 1:
The patent implements a dynamic link replacement system that adapts its behavior based on user interaction. Instead of statically blocking all unrecognized links, the system dynamically replaces them with interactive replacement links that provide users with options (such as requesting administrative review or providing additional authentication). This dynamic approach allows the system to maintain high security while adapting to user needs in real-time, thereby improving usability without compromising security against novel phishing attacks.
3Speed
If automated message classification is used, then phishing detection speed is improved, but effectiveness against novel attacks deteriorates
Solution Approach 1:
The patent employs preliminary action by proactively replacing links to unrecognized web resources before users can interact with them. Instead of waiting for automated classification to detect novel phishing attacks (which may be slow or inaccurate), the system preemptively substitutes unrecognized links with safe replacement links that redirect to predetermined web pages. This preliminary measure ensures that even novel phishing attacks are neutralized immediately upon link detection, maintaining both high detection speed and high effectiveness without relying solely on automated classification algorithms.
Data Source
AI summary
A computer system is provided. The system includes a memory, a user interface, and a processor coupled with the at least one memory and the at least one user interface. The processor is configured to detect an electronic communication to a user comprising one or more links that address one or more web resources, determine whether each link of the one or more links addresses a recognized web resource or an unrecognized web resource, replace each link that addresses an unrecognized web resource with a replacement link that addresses a predetermined web page, and render the electronic communication to the user via a user interface.