Web Reputation Service for Real-Time Threat Filtering

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current solutions fail to provide enhanced security for computer users against various online threats such as viruses, malware, spyware, adware, and phishing, as they lack real-time reputation assessment and filtering mechanisms for web content.

Innovation Solution

A web reputation service that utilizes a real-time database query interface to assess the reputation of web content through link structure analysis, white lists, heuristic tests, and user feedback, providing filtering and alerting mechanisms to prevent interactions with malicious sites and content.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If real-time reputation assessment and filtering mechanisms are implemented, then user security is improved, but system complexity increases

Engineering Contradiction:
Improveuser securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a reputation service as an intermediary component that mediates between the user's web browser and the internet. This service acts as a proxy, intercepting web requests, assessing their reputation in real-time, and filtering them before they reach the user's device. By placing this intermediary layer, the system achieves enhanced security without fundamentally redesigning the entire web browsing architecture, thus managing complexity while improving reliability.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary reputation assessment of web content before the user interacts with it. By pre-evaluating websites, scripts, and downloadable content for malicious characteristics, the system can block threats before they execute on the user's device. This preliminary action prevents security incidents rather than responding to them, improving user security while keeping the real-time processing requirements manageable.

Inventive Principle:
Principle #10Preliminary action

2Measurement precision

If real-time database queries are performed for each web content request, then reputation accuracy is improved, but processing speed decreases

Engineering Contradiction:
Improvereputation accuracyVSAvoidprocessing speed
Core Design Contradiction:
Measurement precisionVSSpeed

Solution Approach 1:

The system performs preliminary reputation assessments and stores results in a database before users need them. Websites, scripts, and content are evaluated in advance, and their reputation scores are cached. When users make web requests, the system queries this pre-computed database rather than performing full real-time analysis, thus maintaining accurate reputation information while significantly improving processing speed.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent combines multiple reputation assessment methods (link structure analysis, white lists, black lists, heuristic tests, and user feedback) into a unified database system. By merging these different data sources and assessment techniques into a single integrated reputation database, the system achieves comprehensive and accurate reputation evaluation while streamlining the query process, thereby maintaining precision without sacrificing speed.

Inventive Principle:
Principle #5Merging (Combining)

3Measurement precision

If multiple reputation assessment methods are combined, then assessment accuracy is improved, but computational resources increase

Engineering Contradiction:
Improveassessment accuracyVSAvoidcomputational resources
Core Design Contradiction:
Measurement precisionVSUse of energy by moving object

Solution Approach 1:

The system implements a tiered reputation assessment approach where not all assessment methods are applied to every web content request. Instead, it uses a combination of white lists, black lists, and cached reputation data for common websites, reserving more computationally intensive methods like link structure analysis and heuristic tests for less common or suspicious content. This partial application of assessment methods maintains accuracy for high-risk content while conserving computational resources for routine requests.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS9384345B2Providing alternative web content based on website reputation assessment
Publication Date: 2016.07.05 MCAFEE LLC
  • US9384345B2 patent drawing
  • US9384345B2 patent drawing
  • US9384345B2 patent drawing

AI summary

An aspect of the present invention relates to methods and systems involving receiving a request for web content from a client computing facility, presenting the web content, and retrieving an indicia of a reputation assessment of the web content and delivering the indicia to the client computing facility in coordination with delivery of the web content to the client computing facility.