System for managing extension modifications to web pages

• US 9,930,095 B2
• Filed: 03/26/2014
• Issued: 03/27/2018
• Est. Priority Date: 03/26/2014
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google LLC (Alphabet Inc.)
• Inventors: Warner, Craig, Stone, Luke, Fenenbock, Elysa Wesley, Kassis, Ronit, O'Connor, Timothy Wong
• Primary Examiner(s): WON, MICHAEL YOUNG
• Application Number:
  US14/226,013
• Publication Number:
  US 20150281318A1
• Time in Patent Office: 1,462 Days
• Field of Search: 709203, 709220, 709223, 709246
• CPC Class Codes: G06F 16/95 Retrieval from the web
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

A method and system provide, using a microprocessor of computing device associated with a web publisher, content including a web page. The method includes accessing, by the web publisher, a list including at least one extension associated with a web browser rendering the content at a second computing device, and a key generated based on the content, the key being generated at a specific time after the providing. The method includes comparing a value associated with the key to an expected value to determine a difference between the key and the expected value.

Claims

1. A method comprising:

providing, using a microprocessor of a computing device associated with a web publisher, content including a web page;

accessing, by the web publisher, a list including at least one extension associated with a web browser that renders the content at a second computing device, and a key generated based on the content, wherein

the content is rendered by the web browser using the at least one extension, the key being generated at a specific time after the providing, and the key being generated using a reversible function configured to generate the content from the key and the key from the content;

comparing a value associated with the key to an expected value to determine a difference between the key and the expected value;

determining whether an extension, from the list of at least one extension, has modified the content based on the difference between the key and the expected value, where the determining is performed by the microprocessor of the computing device associated with the web publisher, using iterative comparisons of a plurality of keys from a plurality of different browsers, to the expected value; and

upon determining the extension has modified the content, providing code to the second computing device, the code, when execute by the second computing device preventing operation of the extension on the web page.

2. The method of claim 1, where the list includes all extensions installed in the web browser.

3. The method of claim 1, further comprising:

locking the content being rendered on the web browser at a specific time identified by the web publisher.

4. The method of claim 3, where the locking is performed by the web browser.

5. The method of claim 1, further comprising generating the key using the web browser.

6. The method of claim 5, further comprising creating the key using a checksum of the content.

7. The method of claim 5, further comprising creating the key using a trace.

8. The method of claim 5, further comprising creating the key based on a text file version of a document object model of the web page.

9. The method of claim 1, further comprising recreating the content using the key.

10. A system comprising:

a memory storing a set of instructions; and

a processor configured to execute the set of instructions to cause the system to;

provide content including a web page;

receive a list including at least one extension associated with a web browser rendering the content at a computing device, and a key generated based on the content, wherein

the content is rendered by the web browser using the at least one extension, the key being generated at a specific time, and

the key being generated using a reversible function configured to generate the content from the key and the key from the content;

compare a value associated with the key to an expected value to determine a difference between the key and the expected value;

determine whether an extension from the list has modified the content based on the difference between the key and the expected value, wherein determining whether an extension has modified the content, is performed by the microprocessor of the computing device associated with the web publisher, using iterative comparisons of a plurality of keys from a plurality of different browsers, to the expected value; and

upon determining the extension has modified the content, provide code to the computing device, the code, when execute by the computing device prevents operation of the extension on the web page.

11. The system of claim 10, where the system determines the extension using iterative comparisons of a plurality of keys to a plurality of expected values.

12. The system of claim 10, where the list includes all extensions installed in the web browser.

13. The system of claim 10, where the processor is further configured to execute the set of instructions to cause the system to lock the content being rendered on the web browser at a specific time identified by a web publisher.

14. The system of claim 10, where the key is generated by the web browser.

15. A non-transitory computer readable medium containing instructions that when executed cause a microprocessor of a computer system to:

provide content including a web page;

receive a list including at least one extension associated with a web browser rendering the content at a computing device, and a key generated based on the content, wherein the content is rendered by the web browser using the at least one extension, the key being generated at a specific time, and the key being generated using a reversible function configured to generate the content from the key and the key from the content;

compare a value associated with the key to an expected value to determine a difference between the key and the expected value;

determine whether an extension from the list has modified the content based on the difference between the key and the expected value, wherein determining whether an extension has modified the content, is performed by the microprocessor of the computing device associated with the web publisher, using iterative comparisons of a plurality of keys from a plurality of different browsers, to the expected value; and

upon determining the extension has modified the content, provide code to the computing device, the code, when execute by the computing device prevents operation of the extension on the web page.

16. The non-transitory computer readable medium of claim 15, where the extension modified the content when it was being rendered using the web browser.

17. The non-transitory computer readable medium of claim 15, where the list includes all extensions associated with the web browser rendering the content at the computing device.

18. The non-transitory computer readable medium of claim 15, where the instructions further cause the computer system to provide a specified time to the web browser to lock the content.