Web Resource Integrity Verification via Embedded Convolution Scripts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current antivirus technologies are inadequate in detecting unknown modifications of web resources, which can lead to vulnerabilities and potential unlawful data transfer, especially since they often rely on signature analysis, heuristic analysis, and black/white lists that may not cover all malicious activities.
Innovation Solution
A method and system that generate a script to verify the integrity of web resources by calculating characteristics of objects within the resource, embedding the script in the resource, executing it, and using a trained model to determine modifications based on vector representations of the resource's content, thereby identifying potential changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If signature analysis, heuristic analysis, and black/white lists are used to detect modifications of web resources, then known malicious activities can be identified, but unknown modifications cannot be detected
Solution Approach 1:
The system performs preliminary actions by generating integrity verification scripts and embedding them in web resources before they are potentially modified. These scripts calculate characteristic values (convolutions) of the web resource objects and store them as reference data. When the web resource is later accessed, the embedded script recalculates the convolution and compares it with the stored reference value, enabling detection of any modifications including unknown ones.
Solution Approach 2:
The patent introduces an intermediary mechanism - a generated script that acts as a mediator between the web resource and the integrity verification system. This script embeds itself in the web resource and performs convolution calculations on web resource objects, serving as an automated intermediary that continuously monitors for modifications without requiring constant external analysis.
2Ease of operation
If personal user data is sent from clients to servers in web resources, then data transfer functionality is enabled, but vulnerability to unlawful interception and modification increases
Solution Approach 1:
The system applies preliminary anti-action by embedding integrity verification scripts in web resources before they are transmitted to clients. These scripts pre-calculate characteristic values (convolutions) of the web resource objects and store them as reference data. When the web resource is accessed by the client, the script automatically verifies its integrity by recalculating the convolution and comparing it with the stored reference, preventing undetected interception or modification of personal data during transmission.
3Measurement precision
If convolution calculations are performed on web resource objects to generate integrity verification data, then modification detection capability is improved, but computational complexity increases
Solution Approach 1:
The patent extracts only the essential characteristic information from web resources by calculating convolution values of specific objects within the web resource. Instead of analyzing the entire web resource or all its content, the system identifies and extracts key objects (such as forms, input fields, or critical data elements) and calculates their convolutions as representative integrity indicators. This extraction approach maintains high detection precision while significantly reducing computational complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present disclosure provides for systems and methods for detecting a modification of a web resource. An exemplary method comprises generating a script for verifying the integrity of the web resource, wherein the script is a description of the process of calculating characteristics of objects of that web resource, embedding the script in the web resource, receiving a convolution of the web resource after execution, generating an image of the web resource on the basis of the at least one calculated convolution, the image of the web resource being a vector representation of the content of the web resource and making, by a processor, a decision as to the modification of the web resource on the basis of the determined characteristics of modification of the web resource.