Protected document elements

• US 8,423,471 B1
• Filed: 12/17/2004
• Issued: 04/16/2013
• Est. Priority Date: 02/04/2004
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Radix Holdings, LLC
• Inventors: Emigh, Aaron T., Roskind, James A.
• Primary Examiner(s): Hewitt, II, Calvin L
• Assistant Examiner(s): MCINTYRE, CHARLES AARON
• Application Number:
  US11/016,150
• Time in Patent Office: 3,042 Days
• Field of Search: 705/1, 705 50- 59
• US Class Current: 705/51
• CPC Class Codes: G06F 16/955 using information identifiers, e.g. uniform resource locators [URL]
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12

Abstract

In some embodiments, techniques for computer security comprise displaying an electronic document, detecting a request to traverse a link, such as a hyperlink or a form submission, wherein the link is associated with an element of the document, evaluating an attribute, wherein the attribute is associated with the element of the document, and determining whether to perform the action based on the evaluation. Applications of these techniques include mitigating the effect of an attempt to modify web pages for fraudulent purposes, such as by a “phishing” attack incorporating malicious scripting.

Claims

1. A method for computer security, comprising:

displaying, by a programmable computing device executing instructions, an electronic document;

detecting, by the computing device, a request to traverse a link, wherein the link is associated with an element of the document;

evaluating, by the computing device, an attribute, wherein the attribute is associated with the element of the document and wherein evaluating the attribute includes determining whether a destination associated with the link was enumerated; and

determining, by the computing device, whether to traverse the link based on the evaluation.

2. The method of claim 1, wherein the document is an HTML document.

3. The method of claim 1, wherein the element of the document is associated with a document object model.

4. The method of claim 1, wherein determining, by the computing device, whether the destination was enumerated includes determining, by the computing device, whether the destination was enumerated in a predetermined section, wherein the section is associated with the document.

5. The method of claim 4, wherein the document is an HTML document and the section is a head section associated with the document.

6. The method of claim 1, wherein the link is associated with submitting a form.

9. The method of claim 1, wherein the enumeration includes a wildcard.

7. A system for computer security, comprising:

a processor;

a memory coupled to the processor;

the memory storing instructions which when executed by the processor cause the processor to execute the steps of;

displaying an electronic document;

detecting a request to traverse a link, wherein the link is associated with an element of the document;

evaluating an attribute, wherein the attribute is associated with the element of the document and wherein evaluating the attribute includes determining whether a destination associated with the link was enumerated; and

determining whether to traverse the link based on the evaluation.

10. The system of claim 7, wherein the link is associated with submitting a form.

12. The system of claim 7, wherein the document is an HTML document.

13. The system of claim 7, wherein determining whether the destination was enumerated includes determining whether the destination was enumerated in a predetermined section, wherein the section is associated with the document.

14. The system of claim 13, wherein the document is an HTML document and the section is a head section associated with the document.

15. The system of claim 7, wherein the enumeration includes a wildcard.

8. A non-transitory computer readable medium storing computer instructions which when executed by a processor cause the processor to perform the steps of:

displaying an electronic document;

detecting a request to traverse a link, wherein the link is associated with an element of the document;

evaluating an attribute, wherein the attribute is associated with the element of the document and wherein evaluating the attribute includes determining whether a destination associated with the link was enumerated; and

determining whether to traverse the link based on the evaluation.

11. The computer program product of claim 8, wherein the link is associated with submitting a form.

16. The non-transitory computer readable medium of claim 8, wherein the document is an HTML document.

17. The non-transitory computer readable medium of claim 8, wherein determining whether the destination was enumerated includes determining whether the destination was enumerated in a predetermined section, wherein the section is associated with the document.

18. The non-transitory computer readable medium of claim 17, wherein the document is an HTML document and the section is a head section associated with the document.

19. The non-transitory computer readable medium of claim 8, wherein the enumeration includes a wildcard.