US 10,454,949 B2 · Guarding against cross-site request forgery (CSRF) attacks

Abstract

Cross-Site Request Forgery attacks are mitigated by a CSRF mechanism executing at a computing entity. The CSRF mechanism is operative to analyze information associated with an HTTP request for a resource. The HTTP request typically originates as an HTTP redirect from another computing entity, such as an enterprise Web portal. Depending on the nature of the information associated with the HTTP request, the HTTP request may be rejected because the CSRF mechanism determines that the request is or is likely associated with a CSRF attack. To facilitate this determination, the approach leverages a new type of “referer” attribute, a trustedReferer, which indicates that the request originates from a server that has previously established a trust relationship with the site at which the CSRF mechanism executes. The trustedReferer attribute typically is set by the redirecting entity, and in an HTTP request header field dedicated for that attribute.

Claims14

Dependent claims

A method to guard against Cross-Site Request Forgery (CSRF) attacks, operative at a first service, comprising:

upon receipt of a request redirected to the first service from a second service in an HTTP redirect, evaluating an HTTP request header field of the request to determine whether the second service has set a particular attribute in the HTTP request header field, the HTTP request header field being a request header field designated for the particular attribute, the particular attribute being dedicated to indicating a trust relationship as having been established between the first service and the second service prior to the HTTP request, the particular attribute being distinct from a referer attribute that is indicative of the request having been referred to the first service from the second service;
performing a validation assessment to determine whether the request is associated with a CSRF attack, the validation assessment being based at least in part on information associated with the particular attribute;
and
based on the validation assessment, accepting the request for further processing, or rejecting the request.

1 more element

An apparatus operative at a first service, comprising:

a processor;
a computer memory holding computer program instructions executed by the processor to guard against Cross-Site Request Forgery (CSRF) attacks, the computer program instructions configured:
upon receipt of a request redirected to the first service from a second service in an HTTP redirect, to evaluate an HTTP request header field of the request to determine whether the second service has set a particular attribute in the HTTP request header field, the HTTP request header field being a request header field designated for the particular attribute, the particular attribute being dedicated to indicating a trust relationship as having been established between the first service and the second service prior to the HTTP request, the particular attribute being distinct from a referer attribute that is indicative of the request having been referred to the first service from the second service;
to perform a validation assessment to determine whether the request is associated with a CSRF attack, the validation assessment being based at least in part on information associated with the particular attribute;
and
based on the validation assessment, accepting the request for further processing, or rejecting the request.

3 more elements

A computer program product in a non-transitory computer readable medium for use in a data processing system, the computer program product holding computer program instructions which, when executed by the data processing system operative at a first service, guard against Cross-Site Request Forgery (CSRF) attacks, the computer program instructions operative:

upon receipt of a request redirected to the first service from a second service in an HTTP redirect, to evaluate an HTTP request header field of the request to determine whether the second service has set a particular attribute in the HTTP request header field, the HTTP request header field being a request header field designated for the particular attribute, the particular attribute being dedicated to indicating a trust relationship as having been established between the first service and the second service prior to the HTTP request, the particular attribute being distinct from a referer attribute that is indicative of the request having been referred to the first service from the second service;
to perform a validation assessment to determine whether the request is associated with a CSRF attack, the validation assessment being based at least in part on information associated with the particular attribute;
and
based on the validation assessment, accepting the request for further processing, or rejecting the request.

1 more element

Dependencies are inferred from the claim text.

Guarding against cross-site request forgery (CSRF) attacks

Life of this patent

Guarding against cross-site request forgery (CSRF) attacks

Life of this patent

Abstract

Claims14