Method and system for preventing browser-based abuse

A method of preventing browser-based abuse, the method comprising:

• extracting one or more connection points between an Internet browser and a browser object of the Internet browser;
• identifying a browser function extension module connected to the extracted connection point;
• and
• determining whether the browser function extension module is authorized by,
• intercepting an original function requested by the browser function extension module,
• substituting a new function for the original function, and
• checking whether the browser function extension module including the new function is authorized,
• the original function for acquiring the data of the Internet browser, and
• the substituting including substituting a new window procedure function for an original window procedure function.

A non-transitory computer-readable medium comprising an executable program, that when executed by a processor, configures the processor to:

• determine whether a browser function extension module is authorized to access data of an Internet browser by intercepting an original function requested by the browser function extension module;
• substitute a new function for the original function, the original function being used for acquiring the data of the Internet browser, the substituting including substituting a new window procedure function for an original window procedure function;
• check whether the browser function extension module including the new function is authorized;
• and
• prevent the browser function extension module from accessing the data, when the access is determined to be unauthorized.

A system of preventing browser-based abuse, the system comprising:

• a processor including,
• an abuse determining unit configured to determine whether an access request of a browser function extension module is an unauthorized request to acquire data of an Internet browser, the abuse determining unit including a function substitution unit configured to
• intercept an original function requested by the browser function extension module,
• substitute a new function for the original function, the original function configured to acquire the data of the Internet browser, the substituting including substituting a new window procedure function for an original window procedure function and
• check whether the browser function extension module including the new function is authorized;
• and
• an abuse blocking unit stored on a non-transitory computer readable medium and configured to prevent the browser function extension module from acquiring the data, when the access is determined to be unauthorized.