Web Page Integrity Verification via Portal Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Legitimate websites can be compromised by cybercriminals to redirect users to malicious sites or infect computers with viruses, even without users opening suspicious files, as existing antivirus solutions do not effectively protect against such malicious modifications to web pages.
Innovation Solution
A system comprising a portal page and a web page verifier is implemented, where the portal page is provided to a client computer to download and run the web page verifier, which checks for malicious modifications by calculating integrity values and scanning for patterns indicative of unauthorized changes, and can initiate security actions if modifications are detected.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a web page is accessed directly, then the user can view the content quickly, but the web page may have been maliciously modified without detection
Solution Approach 1:
The portal page is loaded and executed before the actual web page content is displayed. The portal page includes the web page verifier code that proactively checks the web page for malicious modifications before the user can access it, preventing delayed detection of compromised pages
Solution Approach 2:
The portal page acts as an intermediary layer between the user's web browser and the actual web page content. It includes verification code that mediates the loading process by checking the web page's integrity through integrity values and patterns before allowing the content to be displayed
2Reliability
If antivirus software is installed, then known viruses are detected, but malicious modifications to legitimate web pages are not prevented
Solution Approach 1:
The portal page with embedded verifier code serves as an intermediary security layer that operates within the existing browser environment. It adds web page integrity verification capabilities without requiring separate antivirus software or complex external security systems
Solution Approach 2:
The web page verifier code is self-contained within the portal page itself, enabling the portal page to autonomously verify the integrity of subsequent web pages. The verification logic, including integrity value calculation and pattern matching, is embedded directly in the portal page without requiring external verification services
3Reliability
If web page verification is implemented, then malicious modifications are detected, but the verification process may slow down page loading
Solution Approach 1:
The web page verifier performs partial verification by checking specific integrity values and looking for suspicious patterns rather than analyzing the entire web page content. This selective approach detects malicious modifications while minimizing the time added to page loading
Solution Approach 2:
The verification process is integrated into the existing page loading flow, allowing the portal page to verify integrity values and patterns in parallel with content loading where possible. The verifier quickly skips through critical checks without sequentially blocking all loading operations
Data Source
AI summary
Methods and systems for checking for malicious modifications in web pages. A web page may have corresponding portal page and web page verifier. To receive the web page in a client computer, the portal page is provided to the client computer. The portal page allows for checking of the web page for malicious modifications. For example, the portal page may include or download the web page verifier. The web page verifier may check the web page for signs indicative of malicious modifications. The web page itself may be verified by program code included in the web page.