MALWARE WARNING

• US 20160337379A1
• Filed: 03/15/2016
• Published: 11/17/2016
• Est. Priority Date: 05/11/2015
• Status: Active Grant

• Current Assignee: Finjan Mobile LLC (SoftBank Group Corp.)
• Original Assignee: Finjan Mobile, Inc. (SoftBank Group Corp.)
• Inventors: Godlewski, Michael, House, Geoffrey, Tong, Winnie, Mutter, Rudolph, Feore, Bay Lee, Shipman, Timothy, Scherba, Anthony, McDole, Lee, Kremer, Alexander Lin, Mar-Spinola, Julie
• Granted Patent: US 10,091,214 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 3/048 Interaction techniques based on graphical user interfaces [GUI]
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

A malware warning system, including a client sending requests to and receiving replies from a server, and a server, including a first warning generator sending to the client a warning including a threat level of content located at a web site, in response to receiving from the client a URL for accessing content at the web site, a second warning generator sending to the client a warning including information about at least one of the nature of the threat of the content located at the web site and a location of the web site, in response to receiving from the client a request for more information about the nature of the threat, and a third warning generator, sending to the client a warning including an instruction to perform a swipe gesture to confirm a request to access the URL, in response to receiving that request from the client.

Claims

1. A non-transitory computer readable medium storing instructions, which, when executed by a processor of an electronic device, cause the processor to:

receive an identifier for accessing content at a destination web site;

in response to receiving the identifier, generate a warning comprising a threat level of content located at the destination web site;

receive a request for more information about the nature of the threat;

in response to receiving the request for more information, generate a warning comprising information about at least one of (i) the nature of the threat of the content, and (ii) a location of the destination web site;

receive a request to access the content; and

in response to receiving the request to access the content, generating a warning comprising an instruction to perform a confirmatory touch gesture to confirm the request to access the content.

2. The computer readable medium of claim 1 wherein the identifier is a URL.

3. The computer readable medium of claim 1 wherein the confirmatory touch gesture is a swipe gesture.

4. The computer readable medium of claim 1 wherein the instructions further cause the processor to:

in response to detecting the confirmatory touch gesture, attempt to access the content at the destination web site;

recognize an event that the identifier is being re-directed by the destination web site to another identifier; and

prior to accessing the content using the other identifier, repeating operations of claim 1 using the other identifier.

5. A malware warning module for an electronic device, comprising:

a touch-enabled input module, receiving touch-based user input;

a first warning generator, generating a warning comprising a threat level of content located at a destination web site, in response to said one or more input devices receiving an identifier for accessing content at the destination web site;

a second warning generator, generating a warning comprising information about at least one of (i) the nature of the threat of the content, and (ii) a location of the destination web site, in response to said one or more input devices receiving a request for more information about the nature of the threat; and

a third warning generator, generating a warning comprising an instruction to perform a confirmatory touch gesture to confirm a request to access the content, in response to said one or more input devices receiving a request to access the content.

6. The module of claim 5 wherein the identifier is a URL.

7. The module of claim 5 wherein the confirmatory touch gesture is a swipe gesture.

8. The module of claim 5 further comprising a content accessor, attempting to access the content in response to detecting the confirmatory touch gesture, recognizing an event that the identifier is being re-directed by the destination web site to another identifier, and re-invoking said first, second and third warning generators with the other identifier, prior to accessing the content using the other identifier.

9. A malware warning system, comprising:

a touch-enabled client computing device sending requests to and receiving replies from a server computing device; and

a server computing device receiving the requests from the client, comprising;

a first warning generator, sending to the client a warning comprising a threat level of content located at a destination web site, in response to receiving from the client an identifier for accessing content at the destination web site;

a second warning generator, sending to the client a warning comprising information about at least one of (i) the nature of the threat of the content, and (ii) a location of the destination web site, in response to receiving from the client a request for more information about the nature of the threat; and

a third warning generator, sending to the client a warning comprising an instruction to perform a swipe gesture to confirm a request to access the content, in response to receiving from the client a request to access the content.

10. The system of claim 9 wherein the identifier is a URL.

11. The system of claim 9 wherein the confirmatory touch gesture is a swipe gesture.

12. The system of claim 9 wherein said server further comprises a content accessor, attempting to access the content in response to detecting that the confirmatory touch gesture has been performed on said client, recognizing an event that the identifier is being re-directed by the destination web site to another identifier, and re-invoking said first, second and third warning generators with the other identifier, prior to accessing the content using the other identifier.

13. A non-transitory computer readable medium storing instructions, which, when executed by a processor of an electronic device, cause the processor to:

receive an identifier for accessing content at a destination web site;

in response to receiving the identifier, generate a warning comprising a threat level of content located;

receive a request to access the content; and

in response to receiving the request to access the content, generate a warning comprising an instruction to perform a confirmatory touch gesture to confirm the request to access the content.

14. The computer readable medium of claim 13 wherein the identifier is a URL.

15. The computer readable medium of claim 13 wherein the confirmatory touch gesture is a swipe gesture.

16. The computer readable medium of claim 13 wherein the instructions further cause the processor to:

in response to detecting the confirmatory touch gesture, attempt to access the content at the destination web site;

recognize an event that the identifier is being re-directed by the destination web site to another identifier; and

prior to accessing the content using the other identifier, repeating operations of claim 13 using the other identifier.

17. A malware warning module for an electronic device, comprising:

one or more touch-enabled input devices receiving user input;

a first warning generator, generating a warning comprising a threat level of content located at a destination web site, in response to said one or more input devices receiving an identifier for accessing content at the destination web site; and

a second warning generator, generating a warning comprising an instruction to perform a confirmatory touch gesture to confirm a request to access the content, in response to said one or more input devices receiving a request to access the content.

18. The module of claim 17 wherein the identifier is a URL.

19. The module of claim 17 wherein the confirmatory touch gesture is a swipe gesture.

20. The module of claim 17 further comprising a content accessor, attempting to access the content in response to detecting the confirmatory touch gesture, recognizing an event that the identifier is being re-directed by the destination web site to another identifier, and re-invoking said first, second and third warning generators with the other identifier, prior to accessing the content using the other identifier.

21. A malware warning system, comprising:

a touch-enabled client computer device sending requests to and receiving replies from a server computing device; and

a server computing device receiving the requests from the client computer device, comprising;

a first warning generator, sending to the client a warning comprising a threat level of content located at a destination web site, in response to receiving from the client an identifier for accessing content at the destination web site; and

a second warning generator, sending to the client a warning comprising an instruction to perform a confirmatory touch gesture to confirm a request to access the content, in response to receiving from the client a request to access the content.

22. The system of claim 21 wherein the identifier is a URL.

23. The system of claim 21 wherein the confirmatory touch gesture is a swipe gesture.

24. The system of claim 21 wherein said server further comprises a content accessor, attempting to access the content in response to detecting that the confirmatory touch gesture has been performed on said client, recognizing an event that the identifier is being re-directed by the destination web site to another identifier, and re-invoking said first, second and third warning generators with the other identifier, prior to accessing the content using the other identifier.