Method and system for detecting data modification within computing device

A system for detecting data modification in a computing device having a processor, a kernel-space memory storing a network driver and a user-space memory storing a web browser module, the system comprising:

• a first memory device, associated with said user-space memory, having stored thereon a first set of instructions which cause said processor to:
• determine multiple primary outbound content indicators of an outbound data record leaving said web browser;
• and
• append said multiple primary outbound content indicators to said outbound data record;
• a second memory device, associated with said kernel-space memory, having stored thereon a second set of instructions which cause said processor to:
• extract said multiple primary outbound content indicators from said outbound data record;
• determine multiple secondary outbound content indicators of said outbound data record as it reaches said network driver;
• and
• compare at least two of said multiple secondary outbound content indicators with corresponding primary outbound content indicators of said multiple primary outbound content indicators to determine integrity indicators of said outbound data record.

A computing device, comprising:

• a processor;
• a shared memory segmented into:
• a user memory having stored thereon user-mode applications and a web browser module comprising instructions which cause said processor to retrieve information from a network and send information to a network;
• a kernel memory having stored thereon a kernel of an operating system of said computing device and a network-interface module comprising instructions which cause said processor to retrieve information from a network and send information to a network;
• a first memory device having stored thereon a first set of instructions which cause said processor to:
• determine a first set of content indicators of said outbound data;
• and
• append said first set of content indicators to said outbound data to produce appended outbound data;
• a second memory device having stored thereon a second set of instructions which cause said processor to:
• determine a second set of content indicators of said outbound data;
• and
• compare at least two content indicators of said second set of content indicators with corresponding content indicators of said first set of content indicators of said appended outbound data to determine an integrity indicator of said outbound data.