Methods and Systems for Detecting Man-in-the-Browser Attacks
AssigneeSymantec Corporation
InventorsWilliam E. Sobel, Sourabh Satish
Life of this patent
Estimating the term…
Abstract
A computer-implemented method for detecting man-in-the-browser attacks may include identifying a transaction fingerprint associated with a web site. The method may also include tracking a user's input to the web site. The user's input may be received through a web browser. The method may further include intercepting an outgoing submission to the web site. The method may additionally include determining whether, in light of the transaction fingerprint, the user's input generated the outgoing submission. Various other methods, systems, and computer-readable media are also disclosed.
Claims20
A computer-implemented method for detecting man-in-the-browser attacks, the method comprising:
- identifying a transaction fingerprint associated with a web site;
- tracking a user's input to the web site, the user's input being received through a web browser;
- intercepting an outgoing submission to the web site;
- determining whether, in light of the transaction fingerprint, the user's input generated the outgoing submission.
A system for detecting and intercepting man-in-the-browser attacks, the system comprising:
- a fingerprint module programmed to:
- identify a transaction fingerprint associated with a web site;
- a user interaction module programmed to:
- track a user's input to the web site in a web browser;
- a web request module in communication with the fingerprint module and the user interaction module and programmed to:
- intercept an outgoing submission to the web site;
- determine whether, in light of the transaction fingerprint, the user's input generated the outgoing submission.
A computer-readable medium that, when executed by a computing device, causes the computing device to:
- identify a transaction fingerprint associated with a web site;
- track a user's input to the web site in a web browser;
- intercept an outgoing submission with the web site;
- determine whether, in light of the transaction fingerprint, the user's input generated the outgoing submission.
Dependencies are inferred from the claim text.