Systems and methods for certifying client-side security for internet sites
AssigneeSymantec Corporation
InventorJason Franklin
Life of this patent
Estimating the term…
Abstract
A computer-implemented method for certifying client-side security for Internet sites may include 1) identifying an Internet site that is subject to a security evaluation, 2) retrieving at least one resource from the Internet site, 3) parsing the resource to determine that the resource includes at least one client-side security policy for an Internet client to enforce on the Internet site, and 4) certifying the Internet site as providing client-side security based on determining that the resource includes the client-side security policy. Various other methods, systems, and computer-readable media are also disclosed.
Claims20
A computer-implemented method for certifying the security of Internet sites, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:
- evaluating, via a security vendor server, the security of an Internet site by:
- retrieving a plurality of hypertext documents from the Internet site;
- checking the plurality of hypertext documents for client-side security policies configured to be enforced by a browser of a client attempting to access the Internet site, the checking comprising parsing respective headers of the plurality of hypertext documents to determine that each hypertext document within the plurality of hypertext documents comprises at least one client-side security policy that is configured to be enforced by a browser of a client attempting to access the Internet site;
- based on determining that each hypertext document within the plurality of hypertext documents comprises the client-side security policy that is configured to be enforced by a browser of a client attempting to access the Internet site, certifying, via the security vendor server, that the Internet site provides client-side security by providing a trust seal for display on the Internet site, wherein the trust seal certifies, to visitors of the Internet site, that the Internet site provides a client-side security policy for client-side Internet browsers to enforce.
A system for certifying the security of Internet sites, the system comprising:
- an identification module programmed to identify an Internet site that is subject to a security evaluation and evaluate, via a security vendor server, the security of the Internet site;
- a retrieval module programmed to retrieve a plurality of hypertext documents from the Internet site;
- a parsing module programmed to check the plurality of hypertext documents for client-side security policies configured to be enforced by a browser of a client attempting to access the Internet site, the checking comprising parsing respective headers of the plurality of hypertext documents to determine that each hypertext document within the plurality of hypertext documents comprises at least one client-side security policy that is configured to be enforced by a browser of a client attempting to access;
- a certification module programmed to certify, via the security vendor server and based on determining that each hypertext document within the plurality of hypertext documents comprises the client-side security policy configured to be enforced by a browser of a client attempting to access the Internet site, that the Internet site provides client-side security by providing a trust seal for display on the Internet site, wherein the trust seal certifies, to visitors of the Internet site, that the Internet site provides a client-side security policy for client-side Internet browsers to enforce;
- at least one physical processor configured to execute the identification module, the retrieval module, the parsing module, and the certification module.
A non-transitory computer-readable-storage medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:
- evaluate, via a security vendor server, the security of an Internet site by:
- retrieving a plurality of hypertext documents from the Internet site;
- checking the plurality of hypertext documents for client-side security policies configured to be enforced by a browser of a client attempting to access the Internet site, the checking comprising parsing respective headers of the plurality of hypertext documents to determine that each hypertext document within the plurality of hypertext documents comprises at least one client-side security policy that is configured to be enforced by a browser of a client attempting to access the Internet site;
- certify, via the security vendor server and based on determining that each hypertext document within the plurality of hypertext documents comprises the client-side security policy configured to be enforced by a browser of a client attempting to access the Internet site, that the Internet site provides client-side security by providing a trust seal for display on the Internet site, wherein the trust seal certifies, to visitors of the Internet site, that the Internet site provides a client-side security policy for client-side Internet browsers to enforce.
Dependencies are inferred from the claim text.