Content policy based notification of application users about malicious browser plugins
AssigneeMicrosoft Technology Licensing, LLC
InventorFilip {hacek over (S)}ebesta
Life of this patent
Estimating the term…
Abstract
Disclosed systems and methods include receiving, by a browser application, a web application data including a trusted source rule having a web application user identifier (ID) unique to a user of the web application, and upon determining by the browser application of a violation of the trusted source rule, transmitting a rule violation report, with the web application user ID, to a data processing system for analysis to determine a malicious manipulation of the browser application, and receiving at the user device, from the data processing system, an alert of malicious manipulation of the browser application, corresponding to the rule violation report.
Claims20
A data processing system, comprising:
- a processor;
- a memory, coupled to the processor, storing instructions that when executed by the processor, cause the processor to:
- receive, from a user device executing an application, a request for a web application content,
- transmit to the user device, after receiving the request for the web application content, a corresponding web application content data and content source rules, the content source rules including a web application user identifier (ID),
- receive from the browser application a rule violation report, associated with the content source rules, and including an indication of the web application user ID,
- analyze the rule violation report to determine presence of a malicious modification of the browser application, and
- transmit, based at least in part on a result of analyzing the rule violation report, a user alert to a user device associated with the web application user ID, indicating determined presence of a malicious modification of the browser application.
A method comprising:
- receiving, by an application executed by a user device, a web application data from a web application, the web application data including a content source rule having a web application user identifier (ID) unique to a user of the web application;
- determining, by the application, whether there is indication of a violation of the content source rule;
- and
- upon a result of the determining:
- generating a rule violation report that includes indication of the web application user ID,
- transmitting the rule violation report to a data processing system, for analysis to determine a malicious manipulation of the application, and
- receiving at the user device, from the data processing system, an alert, the alert indicating a determined malicious manipulation of the application, corresponding to the rule violation report.
A system comprising:
- means for receiving, from a user device executing an application, a request for a web application content and, in response, transmitting to the device a corresponding web application content data and a content source rule, the content source rule including a web application user identifier (ID);
- means for receiving from the application a rule violation report, associated with the content source rule, and including an indication of the web application user ID, and analyzing the rule violation report to determine presence of a malicious modification of the application;
- and
- means for transmitting, based at least in part on a result of analyzing the rule violation report, a user alert to the user device associated with the web application user ID, indicating determined presence of a malicious modification of the application.
Dependencies are inferred from the claim text.