Web Widget Malicious Code Inspection via Remote Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Client computers without local antivirus software are vulnerable to malicious codes in downloadable files, as existing solutions require cumbersome scanning processes and may not provide real-time protection.
Innovation Solution
A web widget is deployed from a security server to client computers, which detects malicious codes in downloadable files by communicating with a remotely located server when a user points to a link, using antivirus algorithms to scan the files before they are downloaded, and displays warnings if malicious code is detected.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If local antivirus software is installed on client computers, then protection against malicious codes is improved, but device complexity and ease of operation deteriorate due to cumbersome scanning processes
Solution Approach 1:
The patent introduces a server-based scanning system that acts as an intermediary between users and downloadable files. Instead of requiring antivirus software on each client computer, the system uses a centralized server to scan files before they are downloaded, simplifying the client-side architecture while maintaining protection.
Solution Approach 2:
The scanning system automatically inspects downloadable files without requiring user initiation or intervention. The server proactively scans files when they are requested for download, eliminating the need for users to manually start scanning processes or configure antivirus settings.
2Reliability
If local antivirus software is installed on client computers, then protection against malicious codes is improved, but ease of operation worsens due to cumbersome scanning processes
Solution Approach 1:
The server-based scanning system serves as an intermediary that handles all scanning operations remotely. Users simply access downloadable files through the system, and the server automatically performs security checks, making the process as easy as normal file access while ensuring protection.
Solution Approach 2:
The system performs automatic scanning without requiring user action. When a user requests a downloadable file, the server autonomously scans it for malicious codes and either allows or blocks the download based on the results, eliminating any operational burden on the user.
3Ease of operation
If files are scanned before download using a server-based system, then ease of operation is improved, but measurement precision of malicious code detection may worsen
Solution Approach 1:
The patent replaces traditional client-based antivirus mechanisms with a server-based scanning system. The server performs comprehensive file analysis using multiple detection methods including signature matching, heuristic analysis, and behavior inspection, achieving high detection accuracy while simplifying user operations.
Data Source
AI summary
A web page available for download from a web server computer may include a reference to a web widget. When the web page is received in a client computer, the reference executes and retrieves the web widget from a security server computer. The web widget may be configured to detect when a cursor in the client computer is pointed to a link displayed on the web page. The web widget may communicate with a remotely located computer to determine if the link points to a downloadable file that contains malicious code. The web widget may display a warning message to alert a user of the client computer when the downloadable file contains malicious code.