Method and system for destroying browser-based memory corruption vulnerabilities
AssigneeCheck Point Software Technologies Ltd.
InventorsTomer TELLER, Adi HAYON
Life of this patent
Estimating the term…
Abstract
Client-less methods and systems destroy/break the predictive layout of, for example, a client computer memory. The methods and systems operate by injecting a library that manipulates the client computer memory during exploitation attempts.
Claims19
A method for preventing browser-based memory corruption in computers comprising:
- monitoring HTTP responses transmitted over a network from a web page to which the browser associated with a computer has been directed;
- and,
- injecting a library, into an HTTP response, to modify the HTTP response to mitigate attacks on the memory of the computer.
A computer usable non-transitory storage medium having a computer program embodied thereon for causing a suitable programmed system to preventing browser-based memory corruption in computers accessible via a network, by performing the following steps when such program is executed on the system, the steps comprising:
- monitoring HTTP responses transmitted over a network from a web page to which the browser associated with a computer, accessible via the network, has been directed;
- and,
- injecting a library into an HTTP response to modify the HTTP response to mitigate attacks on the memory of the computer.
A server for linking to a network, the server for preventing browser-based memory corruption in client computers linked to the network, comprising:
- at least one library to modify at least one of an HTTP response or an HTTPS response, sent to a client computer over the network, to mitigate attacks on the memory of the client computer;
- and,
- a processor for executing computer components, the computer components comprising:
- a first component for intercepting at least one of an HTTP response or an HTTPS response, sent to a client computer over the network;
- and,
- a second component for injecting the at least one library into the at least one HTTP response or an HTTPS response.
Dependencies are inferred from the claim text.