Window Entity Attribution via API Hooking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face difficulties in determining which software entities contribute to a window being displayed, particularly in cases of popup windows and targeted content, due to the complexity of identifying malicious software and cookies that affect webpage displays.
Innovation Solution
A method and system that determine properties of a window or webpage, identify contributing entities using a set of rules, and provide content to users indicating these entities, including threat assessment and entity threat values to identify malicious entities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If the system monitors and tracks all software entities that contribute to window display, then the user can identify contributing entities, but the device complexity and processing overhead increase
Solution Approach 1:
The system performs preliminary tracking and recording of entity contributions to window display before the user needs to identify them. Hook procedures are installed in advance to intercept API calls and build a chain of contributing entities, so that when identification is needed, the information is already prepared and available.
Solution Approach 2:
The patent introduces hook procedures as intermediary components that sit between the software entities and the window display system. These hooks intercept API calls and track contributions without requiring direct modification of the entities being monitored, thereby reducing overall system complexity while maintaining tracking capability.
2Loss of information
If the system provides detailed information about contributing entities including threat assessments, then the user can make informed decisions, but the amount of information presented increases
Solution Approach 1:
The information about contributing entities is segmented into hierarchical levels: basic entity identification, detailed contribution information, and threat assessment data. The system can present different segments based on user needs, allowing comprehensive information availability while maintaining interface simplicity through selective presentation.
Solution Approach 2:
Different levels of detail are provided for different entities based on their threat level and relevance. High-threat entities receive more detailed analysis and prominent display, while low-threat entities are summarized, allowing the interface to adapt its information density to local needs rather than uniformly presenting all details for all entities.
Data Source
AI summary
A method, system, and computer program product for presenting content indicative of one or more entities which contributed to a window being displayed using a processing system. The method comprises determining one or more properties of the window; identifying, using the one or more properties and a set of rules, one or more entities which contributed to the window being displayed; and providing to a user, using the processing system, content indicative of the one or more entities which contributed to the window being displayed.