Tiered object-related trust decisions

• US 20050198287A1
• Filed: 02/17/2004
• Published: 09/08/2005
• Est. Priority Date: 02/17/2004
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Huang, Li-Hsin, Davis, Jeffrey, Hally, J. Craig, Gass, Jonathan, Pipinich, Tom, Schreiner, Tony, Sauve, Aaron
• Granted Patent: US 8,332,943 B2
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

Adware and viruses are examples of objects that may be embedded in a web page or linked to a web page. When such an object is detected to be associated with a web page loading on a browser, an analysis may be performed to determine a trust level for the object. The object is suppressed based on the trust level. A prompt is displayed to advise a user that the object has been suppressed, and to provide an opportunity to interactively accept or decline activation of an action for the object.

Claims

1. A method, comprising:

detecting an object associated with a web page;

assessing which of plural trust levels is to be accorded to the object; and

suppressing the object based on the accorded trust level.

2. A method according to claim 1, wherein the object is one of a COM object or an ActiveX control.

3. A method according to claim 1, wherein the object is embedded in the web page, and includes any one of downloadable code, a link to a URL, a popup window, graphic data, a video file, an audio file, and a text file.

4. A method according to claim 1, wherein the object is a link to an object on a remote server, wherein further the object on the remote server includes any one of downloadable code, a URL, a popup window, graphic data, a video file, an audio file, and a text file.

5. A method according to claim 1,

wherein assessing which of the plural trust levels is to be accorded to the object evaluates criteria including whether the object is from a trusted source, whether the object is to upgrade an existing object, and whether a download flag is set, and

wherein further suppressing the object includes displaying a prompt to indicate the suppression of the object based upon a positive evaluation of any of the criteria.

6. A method according to claim 5, wherein the prompt is a modal prompt to provide a user with an activation choice.

7. A method according to claim 5, wherein the prompt is a modeless prompt to advise a user of the object being suppressed.

8. A method according to claim 5, wherein the prompt is a modeless prompt to advise a user of the object being suppressed and to provide the user with an activation choice.

9. A method according to claim 1,

wherein assessing which of the plural trust levels is to be accorded to the object evaluates criteria including whether the object is to be rendered and whether a download flag is set, and

wherein further suppressing the object includes displaying a prompt to indicate the suppression of the object based upon a positive evaluation of any of the criteria.

10. A method according to claim 9, wherein the prompt is a modal prompt to provide a user with an activation choice.

11. A method according to claim 9, wherein the prompt is a modeless prompt to advise a user of the object being suppressed.

12. A method according to claim 9, wherein the prompt is a modeless prompt to advise a user of the object being suppressed and to provide the user with an activation choice.

13. A method according to claim 1,

wherein assessing which of the plural trust levels is to be accorded to the object determines whether the object is a popup window, and

wherein further suppressing the object includes displaying a prompt to indicate the suppression of the object based upon a positive determination.

14. A method according to claim 13, wherein the prompt is a modeless prompt to advise a user of the object being suppressed.

15. A method according to claim 13, wherein the prompt is a modeless prompt to advise a user of the object being suppressed and to provide the user with an activation choice.

16. A method according to claim 1,

wherein assessing which of the plural trust levels is to be accorded to the object evaluates criteria including whether the object is beneath a security setting and whether a security setting flag is set, and

wherein further suppressing the object includes displaying a prompt to indicate the suppression of the object based upon a positive evaluation of any of the criteria.

17. A method according to claim 16, wherein the prompt is a modal prompt to provide a user with an activation choice.

18. A method according to claim 16, wherein the prompt is a modeless prompt to advise a user of the object being suppressed.

19. A method according to claim 16, wherein the prompt is a modeless prompt to advise a user of the object being suppressed and to provide the user with an activation choice.

20. A method according to claim 1, wherein suppressing the object includes displaying a user interface to describe the content of the suppressed object and to provide a user with an opportunity to activate the content of the suppressed object.

21. A computer-readable medium having one or more instructions that, when read, cause one or more processors to:

determine a trust level for an object associated with a web page;

suppress an action associated with the object based on the trust level; and

provide an activation opportunity for the action.

22. A computer-readable medium according to claim 21, wherein the object is one of a COM object or an ActiveX control.

23. A computer-readable medium according to claim 21, wherein the object is embedded in the web page, and includes any one of a downloadable file, a link to another file, a popup window, graphic data, a video file, an audio file, and a text file.

24. A computer-readable medium according to claim 21, wherein the object is a link to an object on a remote server, wherein further the object on the remote server includes any one of a downloadable file, another web page, a popup window, graphic data, a video file, an audio file, and a text file.

25. A computer-readable medium according to claim 21,

wherein the one or more instructions to determine the trust level for the object causes the one or more processors to evaluate criteria including whether the object is from a trusted source, whether the object is to upgrade an existing file, and whether a download flag is set, and

wherein further the one or more instructions to provide the activation opportunity for the action causes the one or more processors to display a user interface indicating the suppression of the action due to a positive evaluation of any of the criteria and offering an activation option.

26. A computer-readable medium according to claim 25, wherein the user interface is a modal prompt.

27. A computer-readable medium according to claim 25, wherein the user interface is a modeless prompt.

28. A computer-readable medium according to claim 21,

wherein the one or more instructions to determine the trust level for the object causes the one or more processors to evaluate criteria including whether the object is to be rendered and whether a download flag is set, and

wherein further the one or more instructions to provide an activation opportunity for the action causes the one or more processors to display a user interface indicating the suppression of the action due to a positive evaluation of any of the criteria and offering an activation option.

29. A computer-readable medium according to claim 28, wherein the user interface is a modal prompt.

30. A computer-readable medium according to claim 28, wherein the prompt is a modeless prompt.

31. A computer-readable medium according to claim 21,

wherein the one or more instructions to determine the trust level for the object causes the one or more processors to determine whether the object is a popup window, and

wherein further the one or more instructions to provide an activation opportunity for the action causes the one or more processors to display a user interface indicating the suppression of the action due to a positive determination and offering an activation option.

32. A computer-readable medium according to claim 31, wherein the prompt is a modeless prompt.

33. A computer-readable medium according to claim 21,

wherein the one or more instructions to determine the trust level for the object causes the one or more processors to evaluate criteria including whether the object is beneath a security setting and whether a security setting flag is set, and

wherein further the one or more instructions to provide an activation opportunity for the action causes the one or more processors to display a user interface indicating the suppression of the action due to a positive evaluation of either of the criteria and offering an activation option.

34. A computer-readable medium according to claim 33, wherein the prompt is a modal prompt.

35. A computer-readable medium according to claim 33, wherein the prompt is a modeless prompt.

36. An apparatus, comprising:

a detector to detect an object associated with a web page;

an analyzer to perform a trust analysis for the object;

a blocker to block an action associated with the object; and

an interface to provide an activation opportunity.

37. An apparatus according to claim 36, wherein the object is one of a COM object or an ActiveX control.

38. An apparatus according to claim 36, wherein the object is embedded in the web page, and includes any one of downloadable code, a link to a URL, a popup window, graphic data, a video file, an audio file, and a text file.

39. An apparatus according to claim 36, wherein the object is a link to an object on a remote server, wherein further the object on the remote server includes any one of downloadable code, a URL, a popup window, graphic data, a video file, an audio file, and a text file.

40. An apparatus according to claim 36,

wherein the analyzer is to evaluate criteria including whether the object is from a trusted source, whether the object is to upgrade an existing object, and whether a download flag is set, and

wherein further the blocker is to display a prompt indicating that the action has been blocked based upon a positive evaluation of any of the criteria.

41. An apparatus according to claim 40, wherein the prompt is a modal user interface to provide a user with an activation choice.

42. An apparatus according to claim 40, wherein the prompt is a modeless user interface to advise a user of the action being blocked.

43. An apparatus according to claim 40, wherein the prompt is a modeless user interface to advise a user of the action being blocked and to provide the user with an activation choice.

44. An apparatus according to claim 36,

wherein the analyzer is to evaluate criteria including whether the object is to be rendered and whether a download flag is set, and

wherein further the blocker is to display a prompt indicating that the action has been blocked based upon a positive evaluation of any of the criteria.

45. An apparatus according to claim 44, wherein the prompt is a modal user interface to provide a user with an activation choice.

46. An apparatus according to claim 44, wherein the prompt is a modeless user interface to advise a user of the action being blocked.

47. An apparatus according to claim 44, wherein the prompt is a modeless user interface to advise a user of the action being blocked and to provide the user with an activation choice.

48. An apparatus according to claim 36,

wherein the analyzer is to determine whether the object is a popup window, and

wherein further the blocker is to display a prompt indicating that the action has been blocked based upon a positive determination.

49. An apparatus according to claim 48, wherein the prompt is a modeless user interface to advise a user of the action being blocked.

50. An apparatus according to claim 48, wherein the prompt is a modeless user interface to advise a user of the action being blocked and to provide the user with an activation choice.

51. An apparatus according to claim 36,

wherein the analyzer is to evaluate criteria including whether the object is beneath a security setting and whether a security setting flag is set, and

wherein further the blocker is to display a prompt indicating that the action has been blocked based upon a positive evaluation of any of the criteria.

52. An apparatus according to claim 51, wherein the prompt is a modal user interface to provide a user with an activation choice.

53. An apparatus according to claim 51, wherein the prompt is a modeless user interface to advise a user of the action being blocked.

54. An apparatus according to claim 51, wherein the prompt is a modeless user interface to advise a user of the action being blocked and to provide the user with an activation choice.

55. An apparatus according to claim 36, wherein the blocker is to display a user interface to describe the content of the suppressed action and to provide a user with an opportunity to activate the action of the object.

56. An apparatus, comprising:

means for detecting an object associated with a media object;

means for performing a trust analysis for the object;

means for blocking an action associated with the object; and

means for providing an activation opportunity.

57. An apparatus according to claim 56, wherein the media object is a web page.

58. An apparatus according to claim 56, wherein the media object is a computer-readable media object.

59. An apparatus according to claim 56, wherein the object is one of a COM object or an ActiveX control.

60. An apparatus according to claim 56, wherein the object is embedded in the web page, and includes any one of downloadable code, a link to a URL, a popup window, graphic data, a video file, an audio file, and a text file.

61. An apparatus according to claim 56, wherein the object is a link to an object on a remote server, wherein further the object on the remote server includes any one of downloadable code, a URL, a popup window, graphic data, a video file, an audio file, and a text file.

62. An apparatus according to claim 56,

wherein the means for performing a trust analysis is to evaluate criteria including whether the object is from a trusted source, whether the object is to upgrade an existing object, and whether a download flag is set, and

wherein further the means for blocking is to display a prompt indicating that the action has been blocked based upon a positive evaluation of any of the criteria.

63. An apparatus according to claim 56,

wherein the means for performing a trust analysis is to evaluate criteria including whether the object is to be rendered and whether a download flag is set, and

wherein further the means for blocking is to display a prompt indicating that the action has been blocked based upon a positive evaluation of any of the criteria.

64. An apparatus according to claim 56,

wherein the means for performing a trust analysis is to determine whether the object is a popup window, and

wherein further the means for blocking is to display a prompt indicating that the action has been blocked based upon a positive determination.

65. An apparatus according to claim 56,

wherein the means for performing a trust analysis is to evaluate criteria including whether the object is beneath a security setting and whether a security setting flag is set, and

wherein further the means for blocking is to display a prompt indicating that the action has been blocked based upon a positive evaluation of any of the criteria.

66. An apparatus according to claim 56, wherein the means for blocking is to display a user interface to describe the content of the suppressed action and to provide a user with an opportunity to activate the action of the object.