Real-time harmful website blocking method using object attribute access engine

A real-time harmful website blocking system using an object attribute access engine, comprising:

• means for obtaining information about visual objects, currently being displayed on a screen by a process currently being executed, from a client;
• means for extracting attributes of the visual objects from the information about the visual objects;
• means for determining whether harmfulness is present based on the extracted object attributes, and thus deciding whether to block access to a server being connected thereto;
• and means for requesting the client to terminate a process for displaying the visual objects,
• wherein the obtaining comprises:
• means for retrieving a list of processes currently being executed and process information from the client;
• means for transmitting an instruction for obtaining a handle ID value of a currently activated window to the client and obtaining the handle ID value;
• means for requesting the client to convert the handle ID value into a process ID for executing the window, and obtaining the process ID value;
• means for finding an identical process corresponding to the process ID value from the list of processes currently being executed and process information, based on the process ID value;
• means for extracting a root visual object from the found identical process, and obtaining a handle ID value of the visual object;
• and
• means for obtaining handle ID values of lower visual objects based on the handle ID value of the root visual object,
• wherein the extracting comprises:
• means for calling individual attributes of the visual objects on the client and obtaining the individual attributes from the client, based on the handle ID values of the visual objects;
• and
• means for grouping visual objects having an identical parent visual object through the obtained attributes of the visual objects, and generating connection relationships between the visual objects,
• wherein the determining comprises:
• means for comparing, in a first blocking determination stage, connection relationships between objects previously obtained from obscene websites to be blocked and previously stored, with connection relationships between the visual objects obtained from the process currently being executed, and then deciding to block a process when the connection relationships are identical to each other;
• if the process passes the first blocking determination stage, means for comparing, in a second blocking determination stage, object style attributes and location and size attributes, previously set as properties of obscene websites to be blocked, with object style attributes and location and size attributes of the visual objects obtained from the process currently being executed, and then deciding to block the process when the object style attributes and the location and size attributes are identical to each other;
• if the process passes the second blocking determination stage, means for determining, in a third blocking determination stage, using a database in which words having a possibility of being highly obscene are previously selected from Hypertext Markup Language (HTML) text of obscene websites to be blocked and are previously stored, whether the selected words are included in HTML text of the visual objects obtained from the process currently being executed, and then deciding to block the process, based on a result of the determination;
• and
• if the process passes the third blocking determination stage, means for deciding to block the process in a fourth blocking determination stage when an Internet address of a website on which the visual objects obtained from the process currently being executed are displayed is present in a database in which Internet addresses of obscene websites to be blocked are stored.