Application layer security policy implementation

A computer program product comprising a nontransitive storage medium, the computer program product including code that, when executed by processing circuitry, causes the processing circuitry to perform a method, the method comprising:

• receiving, by the processing circuitry via an application layer in a browser, a set of uniform resource indicators (URIs), each URI of the set of URIs indicating an address of a website to which a user has requested access;
• sending the set of URIs to a cloud controller external to the processing circuitry, the cloud controller being configured to locate the set of URIs in a threat intelligence database;
• receiving, from the cloud controller, threat intelligence data from the threat intelligence database;
• analyzing a document object model (DOM) of a website associated with the set of URIs according to the threat intelligence data;
• applying a set of security policies to the browser based on the threat intelligence data;
• and
• displaying a rendered browser image on a display for the user according to the set of security policies.

An electronic apparatus, the electronic apparatus comprising:

• memory;
• and
• processing circuitry coupled to the memory, the processing circuitry being configured to:
• receive, via an application layer in a browser, a set of uniform resource indicators (URIs), each URI of the set of URIs indicating an address of a website to which a user has requested access;
• send the set of URIs to a cloud controller external to the processing circuitry, the cloud controller being configured to locate the set of URIs in a threat intelligence database;
• receive, from the cloud controller, threat intelligence data from the threat intelligence database;
• analyze a document object model (DOM) of a website associated with the set of URIs according to the threat intelligence data;
• apply a set of security policies to the browser based on the threat intelligence data;
• and
• display a rendered browser image on a display for the user according to the set of security policies.