US20150339766A1 - Information protection system - Google Patents
Information protection system Download PDFInfo
- Publication number
- US20150339766A1 US20150339766A1 US14/820,205 US201514820205A US2015339766A1 US 20150339766 A1 US20150339766 A1 US 20150339766A1 US 201514820205 A US201514820205 A US 201514820205A US 2015339766 A1 US2015339766 A1 US 2015339766A1
- Authority
- US
- United States
- Prior art keywords
- user interface
- information
- user
- interface information
- field
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q40/00—Finance; Insurance; Tax strategies; Processing of corporate or income taxes
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
Definitions
- the present application relates generally to the technical field of protecting information associated with a user interface.
- user information to be received from a user or from form fill functionality associated with a user interface in an network environment is protected against a spoofing or phishing attack or vulnerability.
- a spoofing attack is a situation in which a person or program successfully masquerades as another person or entity by falsifying data, thereby to obtain personal and confidential information of a user.
- Web page spoofing, or phishing is a security attack where a legitimate web page, for example a bank or on-line vendor web site, is reproduced with similar characteristics of the original authentic web page, on another server under the control of an attacker. The attacker aims to mislead a user into believing that the user is connected to a trusted web site. Should the user enter any information on the spoofed web site, such as a username, password or banking information, the attacker would obtain this information and succeed in a security breach.
- Phishing attacks may be performed with the aid of URL spoofing, where web browser bugs are exploited in order to display incorrect URLs in the browser's location bar.
- DNS cache poisoning may be used in order to direct the user away from the legitimate site and to the fake site.
- FIG. 1 is a network diagram depicting an information protection system according to an example embodiment
- FIG. 2 is a block diagram showing the data structure of the information that may be stored in a memory of the information protection system, in accordance with an example embodiment
- FIG. 3 is a high-level flow diagram of the method according to an example embodiment
- FIGS. 4 a and 4 b show a detailed flow diagram of the method, in accordance with an example embodiment
- FIGS. 5 to 8 show screenshots of various user interfaces, according to an example embodiment, where user interface information is identified as originating from a verified source;
- FIG. 9 shows a screenshot of a user interface, according to an example embodiment, where user interface information is identified as originating from a fraudulent source.
- FIG. 10 is a block diagram illustrating a machine for performing the method in accordance with an example embodiment.
- an information protection system comprising a parser to parse user interface information to be included within a user interface to be displayed to a user by an information display application.
- the parser identifies at least one field, within the user interface, to receive user information from a user.
- a detection module is provided to determine whether the user interface information is associated with fraudulent activity.
- a form fill module provides a warning indicia in or over the at least one field, when the user interface is presented to a user by the display application.
- FIG. 1 is a network diagram depicting an information display application 12 which includes an information protection system 10 , according to one exemplary embodiment.
- the information display application 12 forms part of a larger computer system 14 , which is connected via the Internet 16 to various servers 18 and 20 . While the example embodiment is described below as being implemented in a client/server network, it will be appreciated other embodiments may be deployed within a peer-to-peer network.
- Security server 20 communicates with the information display application 12 , and in particular with the information protection system 10 , to provide information on web sites or web pages accessed by the computer system 14 .
- the computer system 14 is connected to or comprises a graphical user interface (GUI) 22 , e.g. a CRT or LCD screen, which is used to access information presented to a user.
- GUI graphical user interface
- the computer system 14 includes various other modules and components 24 , which is described in more detail according to FIG. 10 .
- the information display application 12 provides the computer system 14 with display functionality to display information to a user on the GUI 22 .
- the information display application 12 which may be a web browser (e.g. Netscape or Internet Explorer) receives information and data over the Internet 16 from various servers 18 and 20 , and displays this information to the user as user interfaces on the GUI 22 .
- the user interface information may be a markup language document, e.g. an HTML document and the user interface may be a web page.
- the information display application 12 may typically also include functionality to automatically provide predefined user information into identified fields.
- the information protection system 10 includes a form fill module 26 having a parser 28 .
- the form fill module 26 predefines an authorized set of fields to receive user information.
- the predefined authorized set of fields is described in more detail in FIG. 2 , but would typically include user login information, user personal information, user contact details, user banking details and payment specific details.
- the form fill module 26 further receives information from the user relating to the authorized set of fields to receive user information, and predefines and stores this received information which corresponds to the authorized set of fields, to allow the information display application 12 to form fill certain user interfaces when authorized.
- the information protection system 10 receives, via the information display application 12 , user interface information to be displayed by the information protection system 10 as a user interface, e.g. web page, to the user.
- the parser 28 parses this user interface information and identifies at least one field within the user interface, which forms part of the authorized set of fields, to receive user information from a user.
- the user interface information may include a number of personal, address and/or banking detail fields to be filled in by the user. Each of these fields may be identified by the parser 28 , in combination with the information predefined as authorized fields to receive user information, as a field to receive user information.
- the form fill module 26 receives information from a detection module 30 on the authenticity of the source of the user interface information.
- the detection module 30 determines whether the user interface information is associated with fraudulent activity, e.g. that the user interface information originated from a fraudulent source, and the detection module 30 may alternatively determine whether the user interface information originated from a verified source.
- the detection module 30 determines the authenticity of user interface information by comparing certain user interface information obtained from the user interface to be displayed with lists of addresses of fraudulent or verified sources of user interface information stored in a memory 36 of the information protection system 10 . By conducting this comparison, the detection module 30 determines whether the user interface information is fraudulent or verified.
- the detection module 30 may communicate with the security server 20 to which the computer system 14 has access through an Internet connection, thereby to determine whether the user interface information is associated with fraudulent activity or originated from a verified source.
- the form fill module 26 is to provide a warning indicia in or over the field or multiple fields identified by the parser 28 , when the user interface is presented to the user by the information display application 12 .
- the form fill module 26 may disable the functionality of the information display application 12 to automatically provide the user information into the fields identified by the parser 28 .
- the form fill module 26 may further prevent the user from manually inputting any information in the identified fields, thereby to provide an even higher level of protection and security.
- the warning indicia may vary between applications, but will typically be selected from a striking colour, a warning message, warning signals or a combination thereof.
- the warning indicia may be various red blocks displayed over the identified fields, with a centered message in black bold letters stating “DO NOT PROVIDE DETAILS: FRAUDULENT WEB SITE”.
- the warning indicia may, in another example embodiment, be a red stop sign, with the message “STOP—FRAUDULENT SITE” written in it.
- the form fill module 26 may enable the functionality of the information display application 12 to automatically provide user information into some or all of the fields identified by the parser 28 .
- the form fill module 26 may enable the functionality of the information display application 12 to automatically provide the user information into the fields identified by the parser 28 .
- the memory 36 is used to store data relating to the user interface, a predefined authorized set of fields to receive user information, predefined information corresponding to the predefined authorized set of fields, a list of addresses of fraudulent sources of user interface information and a list of addresses of verified sources of user interface information.
- the detection module 30 may communicate with the security server 20 to which the computer system 14 has access thereby to obtain an updated list of addresses of fraudulent or verified sources of user interface information periodically.
- the information protection system 10 also includes a disposable credit card number module 32 to generate a limited use credit card number.
- the disposable credit card number module 32 is used in certain applications where there is a need for increased security.
- the disposable credit card number module 32 will generate a credit card number that can only be used once, and will provide this credit card number to the form fill module 26 to automatically fill this number into the designated field identified by the detection module 30 . This functionality will only be enabled once the detection module 30 has verified that the user interface information originated from a verified source.
- FIG. 2 shows a block diagram of the data structures of the information, according to an example embodiment, that may be stored in the memory 60 .
- the information stored in the memory 60 typically relates to a predefined authorized set of fields to receive user information 62 , predefined information corresponding to the predefined authorized set of fields 64 , a list of addresses of fraudulent sources 66 of user interface information and a list of addresses of verified sources 68 of user interface information.
- the predefined authorized set of fields to receive user information 62 may be subdivided in user login information, user personal information, user contact details, user banking details and payment specific details, e.g. Paypal details.
- User login information may include a username and user password, while user personal information may include the user's name and last name.
- Contact details may include a telephone number, cellular number, fax number and e-mail address.
- Banking details may include any type of banking account details, but would typically be the user's type of credit card, the credit card number and expiry date of the credit card. It will be appreciated that other fields may also be included as authorized fields, but that the examples of fields to receive user information are typical fields required by most web pages to either register or transact on the Internet.
- the predefined information corresponding to the predefined authorized set of fields 64 may be defined when a user first registers for a form fill application.
- the user may define information to be automatically filled in on any web page or user interface.
- more than one set of information may be predefined by a user, for example the user may create a private profile which would include the user's personal and home details, and a business profile that will include the user's business numbers and e-mail.
- FIG. 2 provides an example of a set of predefined information 64 corresponding to the predefined authorized set of fields 62 .
- the list of fraudulent web site addresses typically includes addresses that closely resemble authentic web site addresses, thereby to enable the URL to be masqueraded.
- FIG. 2 An example of a list of addresses of verified sources of user interface information 66 is shown in FIG. 2 .
- the list may include www.paypal.com, www.ebay.com, www.bankofamerica.com and www.americanexpress.com.
- both lists are updated periodically by the detection module 30 communicating with the security server 18 to obtain an updated list of addresses of fraudulent or verified sources.
- the parser 28 parses the user interface information which is to be included within the user interface to be displayed to a user by the information display application.
- the parser 28 identifies, in operation 102 , from the parsed user interface information at least one field, within the user interface, to receive user information from a user.
- the detection module 30 now determines, as shown in operation 104 , whether the user interface information is associated with fraudulent activity; and in response to determining that the user interface information is associated with fraudulent activity, the form fill module 26 provides a warning indicia in or over the at least one field, in operation 106 , when the user interface is presented to a user by the information display application. Also, once it is determined that the user interface information is associated with fraudulent activity, and as shown in operation 108 , the form fill module 26 disables the functionality of the information display application 12 to automatically provide user information into the identified fields.
- the form fill module 26 enables, in operation 110 , the functionality of the information display application 12 to automatically provide user information into the at least one field.
- FIGS. 4 a and 4 b show a detailed flow diagram of the method, in accordance with an example embodiment.
- the form fill module 26 predefines an authorized set of fields to receive user information. This authorized set of fields may be similar to those described in FIG. 2 .
- the form fill module 26 further predefines and stores information received from a user, which corresponds to the authorized set of fields, in the memory 36 (operation 142 ), to later use this information to form fill authorized user interfaces.
- a list of addresses of fraudulent sources of user interface information and a list of addresses of verified sources of user interface information are stored in the memory 36 . These lists may be obtained from the security server 20 , by the detection module 30 . The detection module 30 may also update the lists from time to time by communicating with the security server 20 .
- the parser 28 Similar to operation 100 of FIG. 3 , the parser 28 now parses, in operation 146 , the user interface information which is to be included within the user interface to be displayed to a user by the information display application.
- the parser 28 identifies, in operation 148 , from the parsed user interface information, at least one field within the user interface, to receive user information from a user.
- the detection module 30 determines whether the user interface information is associated with fraudulent activity, or alternatively, whether the user interface information originated from a verified source.
- Operation 150 determining whether the user interface information is from a fraudulent or verified source, may include, as shown in operation 152 , comparing a network address included in the user interface information with the list of addresses of fraudulent sources 66 stored in the memory 36 .
- operation 150 may include comparing a network address included in the user interface information with the list of addresses of verified sources 68 stored in the memory 36 (operation 154 ).
- the detection module 30 may also communicate with the security server 20 to compare a network address included in the user interface information with a list of addresses of fraudulent or verified sources stored in a memory on the server.
- the form fill module 26 provides a warning indicia in or over the at least one field, as shown in operation 158 of FIG. 4 b , when the user interface is presented to a user by the information display application.
- the form fill module 26 may also display a pop-up window (e.g., as shown in FIG. 9 ).
- the form fill module 26 may disable the functionality of the information display application 12 to automatically provide user information into the identified fields.
- the form fill module 26 may, in response to determining that the user interface information is associated with fraudulent activity, prevent the user from manually inputting any information in the identified fields (operation 162 ).
- a limited use credit card number may be generated by the disposable credit card module 32 , for a financial transaction relating to one of the identified fields.
- the form fill module 26 enables the functionality of the information display application 12 to automatically provide user information into the at least one field.
- FIGS. 5 to 8 show screenshots of various user interfaces according to an example embodiment, where the user interface information is identified as originating from a verified source.
- the screenshots are from Target's web site, which is an on-line vendor.
- Target's web site which is an on-line vendor.
- the present application can also be used with other web sites, such as banking web sites, other on-line vendor web sites and payment web sites.
- FIG. 5 shows a screenshot 200 of the payment page of the Target web site, after a user has already signed in, entered an address, selected items to be purchased, provided wrapping information and has entered shipping information. All the information shown on the screenshot forms part of the user interface information to be displayed.
- This web page provides the user with information on the amount to be paid 202 and requests information from the user to enter payment method details 204 .
- the form fill module 26 would already have predefined an authorized set of fields to receive user information.
- the predefined authorized set of fields may be payment method 206 , credit card number 208 , expiry date of the credit card 210 and the card holder's name 212 .
- the form fill module 26 has further already predefined and stored user information which corresponds with these authorized fields in the memory 36 . This stored information will be filled in the open fields 214 , 216 , 218 and 220 , should the user interface information have originated from a verified source.
- a PayPal form fill pop-up 222 is also shown, requesting information from the user to select PayPal as the payment method.
- FIG. 6 shows a screenshot 240 where the user has selected Paypal, from the form fill pop up 222 , as the payment method.
- a PayPal login pop-up 242 is displayed over the payment page of the Target web site, and requests the e-mail address of the user 244 and the user's password 246 .
- the PayPal login pop-up 242 also displays a secure icon 248 to indicate that the transaction is secure.
- the PayPal login pop-up 242 may further include a security image 250 which is a preselected image selected by a user. This security image 250 is stored in the security module 34 and provides further security features to the application. If this security image is not displayed with the PayPal login pop-up 242 , a user should know that the web site is fraudulent.
- the information protection system parses the interface information which is to be included within the user interface and identifies from the parsed user interface information, the fields within the user interface, to receive user information e.g. from FIG. 5 the payment method 206 , credit card number 208 , expiry date of the credit card 210 and the card holder's name 212 , and, from FIG. 6 , the e-mail address of the user 244 and the user's PayPal password 246 .
- the detection module 30 now determines that the user interface information is not associated with fraudulent activity but that the user interface information originated from a verified source.
- a limited use credit card number is generated by the disposable credit card module 32 and presented to the user 262 .
- the form fill module 26 further enables the functionality of the information display application 12 to automatically provide user information into identified fields which is shown to be “Mastercard” in the payment method open field 214 , “1079454010151048” in the credit card number open field 216 , “01/2005” in the expiry date of the credit card open field 218 and “John Smith” in the card holder's name open field 220 .
- FIG. 8 details 282 of the limited use credit card are shown again.
- a security icon 284 is also shown to indicate that it is a secure transaction.
- the user can now press the continue button 286 as all the necessary payment information has been provided. The order placement will be confirmed and completed.
- the detection module 30 determines that the user interface information, as shown in screenshot 240 of FIG. 6 , is associated with fraudulent activity and therefore originated from a fraudulent source
- the information display application will display the user interface as shown by screenshot 300 in FIG. 9 .
- the form fill module 26 provides various warning indicia 302 , 304 and 306 in and over the identified fields. Also, the form fill module 26 disables the functionality of the information display application 12 to automatically provide user information into the identified fields.
- a security alert icon 308 e.g. a red hand stop signal, is also displayed in the toolbar.
- FIG. 10 shows a diagrammatic representation of machine in the exemplary form of a computer system 400 within which a set of instructions, for causing the machine to perform any one or more of the methodologies discussed herein, may be executed.
- the machine operates as a standalone device or may be connected (e.g., networked) to other machines.
- the machine may operate in the capacity of a server or a client machine in server-client network environment, or as a peer machine in a peer-to-peer (or distributed) network environment.
- the machine may be a server computer, a client computer, a personal computer (PC), a tablet PC, a set-top box (STB), a Personal Digital Assistant (PDA), a cellular telephone, a web appliance, a network router, switch or bridge, or any machine capable of executing a set of instructions (sequential or otherwise) that specify actions to be taken by that machine.
- PC personal computer
- PDA Personal Digital Assistant
- STB set-top box
- a cellular telephone a web appliance
- network router switch or bridge
- the exemplary computer system 400 includes a processor 402 (e.g., a central processing unit (CPU) a graphics processing unit (GPU) or both), a main memory 404 and a static memory 406 , which communicate with each other via a bus 408 .
- the computer system 400 may further include a video display unit 410 (e.g., a liquid crystal display (LCD) or a cathode ray tube (CRT)).
- the computer system 400 also includes an alphanumeric input device 412 (e.g., a keyboard), a cursor control device 414 (e.g., a mouse), a disk drive unit 416 , a signal generation device 418 (e.g., a speaker) and a network interface device 420 .
- the disk drive unit 416 includes a machine-readable medium 422 on which is stored one or more sets of instructions (e.g., software 424 ) embodying any one or more of the methodologies or functions described herein.
- the software 424 may also reside, completely or at least partially, within the main memory 404 and/or within the processor 402 during execution thereof by the computer system 400 , the main memory 404 and the processor 402 also constituting machine-readable media.
- the software 424 may further be transmitted or received over a network 426 via the network interface device 420 .
- machine-readable medium 422 is shown in an exemplary embodiment to be a single medium, the term “machine-readable medium” should be taken to include a single medium or multiple media (e.g., a centralized or distributed database, and/or associated caches and servers) that store the one or more sets of instructions.
- the term “machine-readable medium” shall also be taken to include any medium that is capable of storing, encoding or carrying a set of instructions for execution by the machine and that cause the machine to perform any one or more of the methodologies of the present invention.
- the term “machine-readable medium” shall accordingly be taken to include, but not be limited to, solid-state memories, optical and magnetic media, and carrier wave signals.
Abstract
Description
- This application is based upon and claims the benefit of priority of U.S. application Ser. No. 11/365,644, filed on Feb. 28, 2006, the contents of which are incorporated herein by reference in their entirety.
- The present application relates generally to the technical field of protecting information associated with a user interface. In one specific example, user information to be received from a user or from form fill functionality associated with a user interface in an network environment is protected against a spoofing or phishing attack or vulnerability.
- In recent years, spoofing attacks to illegally obtain user information, in particular banking or payment details of a user, have become a more prevalent.
- A spoofing attack (or event) is a situation in which a person or program successfully masquerades as another person or entity by falsifying data, thereby to obtain personal and confidential information of a user. Web page spoofing, or phishing, is a security attack where a legitimate web page, for example a bank or on-line vendor web site, is reproduced with similar characteristics of the original authentic web page, on another server under the control of an attacker. The attacker aims to mislead a user into believing that the user is connected to a trusted web site. Should the user enter any information on the spoofed web site, such as a username, password or banking information, the attacker would obtain this information and succeed in a security breach.
- Phishing attacks may be performed with the aid of URL spoofing, where web browser bugs are exploited in order to display incorrect URLs in the browser's location bar.
- Alternatively, DNS cache poisoning may be used in order to direct the user away from the legitimate site and to the fake site.
- The risks associated with spoofing and phishing attacks have been increased by the use of form fill applications, which provides user information for multiple predefined fields on a user interface or web page that has to be filled in.
- To address the risks posed by spoofing and phishing attacks some applications make use of icons on toolbars to indicate that a web page is fraudulent. However, as these icons or toolbars are small and insignificant, users rarely pay attention to them and may even ignore them when providing a form fill instruction.
- The present application is illustrated by way of example and not limitation in the figures of the accompanying drawings, in which like references indicate similar elements and in which:
-
FIG. 1 is a network diagram depicting an information protection system according to an example embodiment; -
FIG. 2 is a block diagram showing the data structure of the information that may be stored in a memory of the information protection system, in accordance with an example embodiment; -
FIG. 3 is a high-level flow diagram of the method according to an example embodiment; -
FIGS. 4 a and 4 b show a detailed flow diagram of the method, in accordance with an example embodiment; -
FIGS. 5 to 8 show screenshots of various user interfaces, according to an example embodiment, where user interface information is identified as originating from a verified source; -
FIG. 9 shows a screenshot of a user interface, according to an example embodiment, where user interface information is identified as originating from a fraudulent source; and -
FIG. 10 is a block diagram illustrating a machine for performing the method in accordance with an example embodiment. - A method and system to protect information in a network and in particular, an Internet environment, are described. In the following description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the present application. It will be evident, however, to one skilled in the art that the present application may be practiced without these specific details. It will further be appreciated that this application may be relevant to various applications, for example banking web sites, on-line vendor web sites, e.g. e-Bay or Amazon, commercial web sites, or specific payment web sites, e.g. Paypal.
- According to one example embodiment, there is provided an information protection system. The system comprises a parser to parse user interface information to be included within a user interface to be displayed to a user by an information display application. The parser identifies at least one field, within the user interface, to receive user information from a user. A detection module is provided to determine whether the user interface information is associated with fraudulent activity. In response to determining that the user interface is associated with fraudulent activity, a form fill module provides a warning indicia in or over the at least one field, when the user interface is presented to a user by the display application.
- Other features of the application will be apparent from the accompanying drawings and from the detailed description that follows.
-
FIG. 1 is a network diagram depicting aninformation display application 12 which includes aninformation protection system 10, according to one exemplary embodiment. Theinformation display application 12 forms part of alarger computer system 14, which is connected via the Internet 16 tovarious servers Security server 20 communicates with theinformation display application 12, and in particular with theinformation protection system 10, to provide information on web sites or web pages accessed by thecomputer system 14. Thecomputer system 14 is connected to or comprises a graphical user interface (GUI) 22, e.g. a CRT or LCD screen, which is used to access information presented to a user. Thecomputer system 14 includes various other modules andcomponents 24, which is described in more detail according toFIG. 10 . - The
information display application 12 provides thecomputer system 14 with display functionality to display information to a user on theGUI 22. For example, theinformation display application 12, which may be a web browser (e.g. Netscape or Internet Explorer) receives information and data over the Internet 16 fromvarious servers GUI 22. The user interface information may be a markup language document, e.g. an HTML document and the user interface may be a web page. Theinformation display application 12 may typically also include functionality to automatically provide predefined user information into identified fields. - As shown in
FIG. 1 , theinformation protection system 10 includes aform fill module 26 having aparser 28. Theform fill module 26 predefines an authorized set of fields to receive user information. The predefined authorized set of fields is described in more detail inFIG. 2 , but would typically include user login information, user personal information, user contact details, user banking details and payment specific details. Theform fill module 26 further receives information from the user relating to the authorized set of fields to receive user information, and predefines and stores this received information which corresponds to the authorized set of fields, to allow theinformation display application 12 to form fill certain user interfaces when authorized. - The
information protection system 10 receives, via theinformation display application 12, user interface information to be displayed by theinformation protection system 10 as a user interface, e.g. web page, to the user. Theparser 28 parses this user interface information and identifies at least one field within the user interface, which forms part of the authorized set of fields, to receive user information from a user. For example, the user interface information may include a number of personal, address and/or banking detail fields to be filled in by the user. Each of these fields may be identified by theparser 28, in combination with the information predefined as authorized fields to receive user information, as a field to receive user information. - The
form fill module 26 receives information from adetection module 30 on the authenticity of the source of the user interface information. Thedetection module 30 determines whether the user interface information is associated with fraudulent activity, e.g. that the user interface information originated from a fraudulent source, and thedetection module 30 may alternatively determine whether the user interface information originated from a verified source. - Typically the
detection module 30 determines the authenticity of user interface information by comparing certain user interface information obtained from the user interface to be displayed with lists of addresses of fraudulent or verified sources of user interface information stored in amemory 36 of theinformation protection system 10. By conducting this comparison, thedetection module 30 determines whether the user interface information is fraudulent or verified. - Alternatively, the
detection module 30 may communicate with thesecurity server 20 to which thecomputer system 14 has access through an Internet connection, thereby to determine whether the user interface information is associated with fraudulent activity or originated from a verified source. - In response to the
detection module 30 determining that the user interface is associated with fraudulent activity, theform fill module 26 is to provide a warning indicia in or over the field or multiple fields identified by theparser 28, when the user interface is presented to the user by theinformation display application 12. In addition, theform fill module 26 may disable the functionality of theinformation display application 12 to automatically provide the user information into the fields identified by theparser 28. Theform fill module 26 may further prevent the user from manually inputting any information in the identified fields, thereby to provide an even higher level of protection and security. - The warning indicia may vary between applications, but will typically be selected from a striking colour, a warning message, warning signals or a combination thereof. For example, the warning indicia may be various red blocks displayed over the identified fields, with a centered message in black bold letters stating “DO NOT PROVIDE DETAILS: FRAUDULENT WEB SITE”. The warning indicia may, in another example embodiment, be a red stop sign, with the message “STOP—FRAUDULENT SITE” written in it.
- Alternatively, in response to the
detection module 30 determining that the user interface is not associated with fraudulent activity, theform fill module 26 may enable the functionality of theinformation display application 12 to automatically provide user information into some or all of the fields identified by theparser 28. In this scenario, theform fill module 26 may enable the functionality of theinformation display application 12 to automatically provide the user information into the fields identified by theparser 28. - The
memory 36 is used to store data relating to the user interface, a predefined authorized set of fields to receive user information, predefined information corresponding to the predefined authorized set of fields, a list of addresses of fraudulent sources of user interface information and a list of addresses of verified sources of user interface information. Thedetection module 30 may communicate with thesecurity server 20 to which thecomputer system 14 has access thereby to obtain an updated list of addresses of fraudulent or verified sources of user interface information periodically. - The
information protection system 10 also includes a disposable credit card number module 32 to generate a limited use credit card number. The disposable credit card number module 32 is used in certain applications where there is a need for increased security. The disposable credit card number module 32 will generate a credit card number that can only be used once, and will provide this credit card number to theform fill module 26 to automatically fill this number into the designated field identified by thedetection module 30. This functionality will only be enabled once thedetection module 30 has verified that the user interface information originated from a verified source. -
FIG. 2 shows a block diagram of the data structures of the information, according to an example embodiment, that may be stored in thememory 60. The information stored in thememory 60 typically relates to a predefined authorized set of fields to receiveuser information 62, predefined information corresponding to the predefined authorized set offields 64, a list of addresses offraudulent sources 66 of user interface information and a list of addresses of verifiedsources 68 of user interface information. - As shown, the predefined authorized set of fields to receive
user information 62 may be subdivided in user login information, user personal information, user contact details, user banking details and payment specific details, e.g. Paypal details. User login information may include a username and user password, while user personal information may include the user's name and last name. Contact details may include a telephone number, cellular number, fax number and e-mail address. Banking details may include any type of banking account details, but would typically be the user's type of credit card, the credit card number and expiry date of the credit card. It will be appreciated that other fields may also be included as authorized fields, but that the examples of fields to receive user information are typical fields required by most web pages to either register or transact on the Internet. - The predefined information corresponding to the predefined authorized set of
fields 64 may be defined when a user first registers for a form fill application. For example, the user may define information to be automatically filled in on any web page or user interface. It will further be appreciated that more than one set of information may be predefined by a user, for example the user may create a private profile which would include the user's personal and home details, and a business profile that will include the user's business numbers and e-mail.FIG. 2 provides an example of a set ofpredefined information 64 corresponding to the predefined authorized set offields 62. - An example of a list of addresses of fraudulent sources of
user interface information 66 is shown inFIG. 2 . The list of fraudulent web site addresses, as in the example, typically includes addresses that closely resemble authentic web site addresses, thereby to enable the URL to be masqueraded. - An example of a list of addresses of verified sources of
user interface information 66 is shown inFIG. 2 . For example, the list may include www.paypal.com, www.ebay.com, www.bankofamerica.com and www.americanexpress.com. - As mentioned above, both lists are updated periodically by the
detection module 30 communicating with thesecurity server 18 to obtain an updated list of addresses of fraudulent or verified sources. - A high-level method according to an example embodiment is now described with reference to
FIG. 3 . Inoperation 100, theparser 28 parses the user interface information which is to be included within the user interface to be displayed to a user by the information display application. Theparser 28 identifies, inoperation 102, from the parsed user interface information at least one field, within the user interface, to receive user information from a user. - The
detection module 30 now determines, as shown inoperation 104, whether the user interface information is associated with fraudulent activity; and in response to determining that the user interface information is associated with fraudulent activity, theform fill module 26 provides a warning indicia in or over the at least one field, inoperation 106, when the user interface is presented to a user by the information display application. Also, once it is determined that the user interface information is associated with fraudulent activity, and as shown inoperation 108, theform fill module 26 disables the functionality of theinformation display application 12 to automatically provide user information into the identified fields. - In the event that the
detection module 30 determines that the user interface information is not associated with fraudulent activity, theform fill module 26 enables, inoperation 110, the functionality of theinformation display application 12 to automatically provide user information into the at least one field. -
FIGS. 4 a and 4 b show a detailed flow diagram of the method, in accordance with an example embodiment. Inoperation 140 ofFIG. 4 a, theform fill module 26 predefines an authorized set of fields to receive user information. This authorized set of fields may be similar to those described inFIG. 2 . Theform fill module 26 further predefines and stores information received from a user, which corresponds to the authorized set of fields, in the memory 36 (operation 142), to later use this information to form fill authorized user interfaces. - In
operation 144, a list of addresses of fraudulent sources of user interface information and a list of addresses of verified sources of user interface information are stored in thememory 36. These lists may be obtained from thesecurity server 20, by thedetection module 30. Thedetection module 30 may also update the lists from time to time by communicating with thesecurity server 20. - Similar to
operation 100 ofFIG. 3 , theparser 28 now parses, inoperation 146, the user interface information which is to be included within the user interface to be displayed to a user by the information display application. Theparser 28 identifies, inoperation 148, from the parsed user interface information, at least one field within the user interface, to receive user information from a user. - In
operation 150, thedetection module 30 determines whether the user interface information is associated with fraudulent activity, or alternatively, whether the user interface information originated from a verified source.Operation 150, determining whether the user interface information is from a fraudulent or verified source, may include, as shown inoperation 152, comparing a network address included in the user interface information with the list of addresses offraudulent sources 66 stored in thememory 36. Alternatively,operation 150 may include comparing a network address included in the user interface information with the list of addresses of verifiedsources 68 stored in the memory 36 (operation 154). As shown inoperation 156, thedetection module 30 may also communicate with thesecurity server 20 to compare a network address included in the user interface information with a list of addresses of fraudulent or verified sources stored in a memory on the server. - Once it has been determined that the user interface information is associated with fraudulent activity, the
form fill module 26 provides a warning indicia in or over the at least one field, as shown inoperation 158 ofFIG. 4 b, when the user interface is presented to a user by the information display application. In addition to providing warning indicia in association with the at least one field, theform fill module 26 may also display a pop-up window (e.g., as shown inFIG. 9 ). Also, and as shown inoperation 160, theform fill module 26 may disable the functionality of theinformation display application 12 to automatically provide user information into the identified fields. To further increase the security features of this application, theform fill module 26 may, in response to determining that the user interface information is associated with fraudulent activity, prevent the user from manually inputting any information in the identified fields (operation 162). - Should it be determined by the
detection module 30 that the user interface information originated from a verified source, and as shown inoperation 164, a limited use credit card number may be generated by the disposable credit card module 32, for a financial transaction relating to one of the identified fields. Also, inoperation 166, theform fill module 26 enables the functionality of theinformation display application 12 to automatically provide user information into the at least one field. -
FIGS. 5 to 8 show screenshots of various user interfaces according to an example embodiment, where the user interface information is identified as originating from a verified source. The screenshots are from Target's web site, which is an on-line vendor. As already mentioned, it will be appreciated that the present application can also be used with other web sites, such as banking web sites, other on-line vendor web sites and payment web sites. -
FIG. 5 shows ascreenshot 200 of the payment page of the Target web site, after a user has already signed in, entered an address, selected items to be purchased, provided wrapping information and has entered shipping information. All the information shown on the screenshot forms part of the user interface information to be displayed. This web page provides the user with information on the amount to be paid 202 and requests information from the user to enter payment method details 204. - The
form fill module 26 would already have predefined an authorized set of fields to receive user information. For example, the predefined authorized set of fields may bepayment method 206,credit card number 208, expiry date of thecredit card 210 and the card holder'sname 212. Theform fill module 26 has further already predefined and stored user information which corresponds with these authorized fields in thememory 36. This stored information will be filled in theopen fields up 222 is also shown, requesting information from the user to select PayPal as the payment method.FIG. 6 shows ascreenshot 240 where the user has selected Paypal, from the form fill pop up 222, as the payment method. A PayPal login pop-up 242 is displayed over the payment page of the Target web site, and requests the e-mail address of theuser 244 and the user'spassword 246. The PayPal login pop-up 242 also displays asecure icon 248 to indicate that the transaction is secure. The PayPal login pop-up 242 may further include asecurity image 250 which is a preselected image selected by a user. Thissecurity image 250 is stored in thesecurity module 34 and provides further security features to the application. If this security image is not displayed with the PayPal login pop-up 242, a user should know that the web site is fraudulent. - The information protection system, through the parser 128, parses the interface information which is to be included within the user interface and identifies from the parsed user interface information, the fields within the user interface, to receive user information e.g. from
FIG. 5 thepayment method 206,credit card number 208, expiry date of thecredit card 210 and the card holder'sname 212, and, fromFIG. 6 , the e-mail address of theuser 244 and the user'sPayPal password 246. - The
detection module 30 now determines that the user interface information is not associated with fraudulent activity but that the user interface information originated from a verified source. - As shown in the
screenshot 260 ofFIG. 7 , after it has been determined that the user interface information is from a verified source, a limited use credit card number is generated by the disposable credit card module 32 and presented to theuser 262. Theform fill module 26 further enables the functionality of theinformation display application 12 to automatically provide user information into identified fields which is shown to be “Mastercard” in the payment methodopen field 214, “1079454010151048” in the credit card numberopen field 216, “01/2005” in the expiry date of the credit cardopen field 218 and “John Smith” in the card holder's nameopen field 220. - In the final screen shot 280 of
FIG. 8 ,details 282 of the limited use credit card are shown again. Asecurity icon 284 is also shown to indicate that it is a secure transaction. The user can now press the continuebutton 286 as all the necessary payment information has been provided. The order placement will be confirmed and completed. In the event that thedetection module 30 determines that the user interface information, as shown inscreenshot 240 ofFIG. 6 , is associated with fraudulent activity and therefore originated from a fraudulent source, the information display application will display the user interface as shown byscreenshot 300 inFIG. 9 . Theform fill module 26 providesvarious warning indicia form fill module 26 disables the functionality of theinformation display application 12 to automatically provide user information into the identified fields. Asecurity alert icon 308, e.g. a red hand stop signal, is also displayed in the toolbar. -
FIG. 10 shows a diagrammatic representation of machine in the exemplary form of acomputer system 400 within which a set of instructions, for causing the machine to perform any one or more of the methodologies discussed herein, may be executed. In alternative embodiments, the machine operates as a standalone device or may be connected (e.g., networked) to other machines. In a networked deployment, the machine may operate in the capacity of a server or a client machine in server-client network environment, or as a peer machine in a peer-to-peer (or distributed) network environment. The machine may be a server computer, a client computer, a personal computer (PC), a tablet PC, a set-top box (STB), a Personal Digital Assistant (PDA), a cellular telephone, a web appliance, a network router, switch or bridge, or any machine capable of executing a set of instructions (sequential or otherwise) that specify actions to be taken by that machine. Further, while only a single machine is illustrated, the term “machine” shall also be taken to include any collection of machines that individually or jointly execute a set (or multiple sets) of instructions to perform any one or more of the methodologies discussed herein. - The
exemplary computer system 400 includes a processor 402 (e.g., a central processing unit (CPU) a graphics processing unit (GPU) or both), amain memory 404 and astatic memory 406, which communicate with each other via abus 408. Thecomputer system 400 may further include a video display unit 410 (e.g., a liquid crystal display (LCD) or a cathode ray tube (CRT)). Thecomputer system 400 also includes an alphanumeric input device 412 (e.g., a keyboard), a cursor control device 414 (e.g., a mouse), adisk drive unit 416, a signal generation device 418 (e.g., a speaker) and anetwork interface device 420. Thedisk drive unit 416 includes a machine-readable medium 422 on which is stored one or more sets of instructions (e.g., software 424) embodying any one or more of the methodologies or functions described herein. Thesoftware 424 may also reside, completely or at least partially, within themain memory 404 and/or within theprocessor 402 during execution thereof by thecomputer system 400, themain memory 404 and theprocessor 402 also constituting machine-readable media. - The
software 424 may further be transmitted or received over anetwork 426 via thenetwork interface device 420. - While the machine-
readable medium 422 is shown in an exemplary embodiment to be a single medium, the term “machine-readable medium” should be taken to include a single medium or multiple media (e.g., a centralized or distributed database, and/or associated caches and servers) that store the one or more sets of instructions. The term “machine-readable medium” shall also be taken to include any medium that is capable of storing, encoding or carrying a set of instructions for execution by the machine and that cause the machine to perform any one or more of the methodologies of the present invention. The term “machine-readable medium” shall accordingly be taken to include, but not be limited to, solid-state memories, optical and magnetic media, and carrier wave signals. - Thus, a method and system to protect information have been described. Although the present invention has been described with reference to specific exemplary embodiments, it will be evident that various modifications and changes may be made to these embodiments without departing from the broader spirit and scope of the invention. Accordingly, the specification and drawings are to be regarded in an illustrative rather than a restrictive sense.
Claims (20)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US14/820,205 US20150339766A1 (en) | 2006-02-28 | 2015-08-06 | Information protection system |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/365,644 US9135469B2 (en) | 2006-02-28 | 2006-02-28 | Information protection system |
US14/820,205 US20150339766A1 (en) | 2006-02-28 | 2015-08-06 | Information protection system |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/365,644 Continuation US9135469B2 (en) | 2006-02-28 | 2006-02-28 | Information protection system |
Publications (1)
Publication Number | Publication Date |
---|---|
US20150339766A1 true US20150339766A1 (en) | 2015-11-26 |
Family
ID=38605966
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/365,644 Active 2029-12-21 US9135469B2 (en) | 2006-02-28 | 2006-02-28 | Information protection system |
US14/820,205 Abandoned US20150339766A1 (en) | 2006-02-28 | 2015-08-06 | Information protection system |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/365,644 Active 2029-12-21 US9135469B2 (en) | 2006-02-28 | 2006-02-28 | Information protection system |
Country Status (1)
Country | Link |
---|---|
US (2) | US9135469B2 (en) |
Families Citing this family (12)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7566002B2 (en) * | 2005-01-06 | 2009-07-28 | Early Warning Services, Llc | Identity verification systems and methods |
US7913292B2 (en) * | 2006-10-18 | 2011-03-22 | Microsoft Corporation | Identification and visualization of trusted user interface objects |
US8024267B2 (en) * | 2007-09-14 | 2011-09-20 | Ebay Inc. | Centralized transaction record storage |
US20090171900A1 (en) * | 2007-12-28 | 2009-07-02 | Ebay Inc. | Printer driver for transaction record storage |
FR2941312B1 (en) * | 2009-01-19 | 2017-06-23 | Cie Ind Et Financiere D'ingenierie Ingenico | METHOD OF SECURING AN INTERFACE BETWEEN A USER AND AN APPLICATION, SYSTEM, TERMINAL AND CORRESPONDING COMPUTER PROGRAM PRODUCT. |
US20110029702A1 (en) * | 2009-07-28 | 2011-02-03 | Motorola, Inc. | Method and apparatus pertaining to portable transaction-enablement platform-based secure transactions |
WO2013059822A1 (en) * | 2011-10-22 | 2013-04-25 | Coon Jonathan | Systems and methods for automatically filling-in information |
FR2985400B1 (en) * | 2012-01-03 | 2013-12-20 | Alcatel Lucent | SECURE TRANSMISSION OF DATA |
US20130232074A1 (en) * | 2012-03-05 | 2013-09-05 | Mark Carlson | System and Method for Providing Alert Messages with Modified Message Elements |
US9870485B2 (en) * | 2014-11-12 | 2018-01-16 | Nec Corporation | System and method for detecting sensitive user input leakages in software applications |
US10069864B2 (en) * | 2015-03-20 | 2018-09-04 | Oracle International Corporation | Method and system for using smart images |
US20220269517A1 (en) * | 2021-02-25 | 2022-08-25 | Avaya Management L.P. | Adaptable warnings and feedback |
Citations (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6192380B1 (en) * | 1998-03-31 | 2001-02-20 | Intel Corporation | Automatic web based form fill-in |
US20010034720A1 (en) * | 2000-03-07 | 2001-10-25 | David Armes | System for facilitating a transaction |
US20030028792A1 (en) * | 2001-08-02 | 2003-02-06 | International Business Machines Corportion | System, method, and computer program product for automatically inputting user data into internet based electronic forms |
US6651217B1 (en) * | 1999-09-01 | 2003-11-18 | Microsoft Corporation | System and method for populating forms with previously used data values |
US20050172229A1 (en) * | 2004-01-29 | 2005-08-04 | Arcot Systems, Inc. | Browser user-interface security application |
US7006993B1 (en) * | 1999-05-28 | 2006-02-28 | The Coca-Cola Company | Method and apparatus for surrogate control of network-based electronic transactions |
US20060080437A1 (en) * | 2004-10-13 | 2006-04-13 | International Busines Machines Corporation | Fake web addresses and hyperlinks |
US20060253584A1 (en) * | 2005-05-03 | 2006-11-09 | Dixon Christopher J | Reputation of an entity associated with a content item |
US20070114274A1 (en) * | 2005-11-21 | 2007-05-24 | Simon Gibbs | System, apparatus and method for obtaining one-time credit card numbers using a smart card |
US7664699B1 (en) * | 2005-12-21 | 2010-02-16 | Symantec Corporation | Automatic generation of temporary credit card information |
Family Cites Families (23)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5706507A (en) | 1995-07-05 | 1998-01-06 | International Business Machines Corporation | System and method for controlling access to data located on a content server |
US5835712A (en) | 1996-05-03 | 1998-11-10 | Webmate Technologies, Inc. | Client-server system using embedded hypertext tags for application and database development |
US6167520A (en) | 1996-11-08 | 2000-12-26 | Finjan Software, Inc. | System and method for protecting a client during runtime from hostile downloadables |
AU3032600A (en) | 1999-01-07 | 2000-08-07 | Remedan Aps. | A control device for a computer, use of a control device, a computer comprising a control device, and a method of connecting and disconnecting units in a computer |
US6286001B1 (en) | 1999-02-24 | 2001-09-04 | Doodlebug Online, Inc. | System and method for authorizing access to data on content servers in a distributed network |
US6604131B1 (en) | 1999-04-22 | 2003-08-05 | Net Shepherd, Inc. | Method and system for distributing a work process over an information network |
US6510458B1 (en) | 1999-07-15 | 2003-01-21 | International Business Machines Corporation | Blocking saves to web browser cache based on content rating |
US20020186249A1 (en) * | 1999-10-28 | 2002-12-12 | Qi Lu | Method and system of facilitating automatic login to a web site using an internet browser |
WO2001057609A2 (en) * | 2000-01-31 | 2001-08-09 | Trivnet Ltd. | Applications of automatic internet identification methods |
US20020016910A1 (en) | 2000-02-11 | 2002-02-07 | Wright Robert P. | Method for secure distribution of documents over electronic networks |
US6874084B1 (en) | 2000-05-02 | 2005-03-29 | International Business Machines Corporation | Method and apparatus for establishing a secure communication connection between a java application and secure server |
US20020062342A1 (en) * | 2000-11-22 | 2002-05-23 | Sidles Charles S. | Method and system for completing forms on wide area networks such as the internet |
US7003479B2 (en) * | 2000-12-15 | 2006-02-21 | First Data Corporation | Systems and methods for ordering and distributing incentive messages |
JP2003108297A (en) | 2001-09-28 | 2003-04-11 | Canon Inc | Information providing device, information processing method, control program and recording medium |
JP3983035B2 (en) | 2001-11-19 | 2007-09-26 | 富士通株式会社 | User terminal authentication program |
US7287054B2 (en) | 2002-05-31 | 2007-10-23 | Microsoft Corporation | Systems and methods for shared browsing among a plurality of online co-users |
US20040078422A1 (en) | 2002-10-17 | 2004-04-22 | Toomey Christopher Newell | Detecting and blocking spoofed Web login pages |
AU2003293501A1 (en) | 2002-12-13 | 2004-07-09 | Wholesecurity, Inc. | Method, system, and computer program product for security within a global computer network |
US7698159B2 (en) * | 2004-02-13 | 2010-04-13 | Genworth Financial Inc. | Systems and methods for performing data collection |
US20070107053A1 (en) * | 2004-05-02 | 2007-05-10 | Markmonitor, Inc. | Enhanced responses to online fraud |
US7606821B2 (en) | 2004-06-30 | 2009-10-20 | Ebay Inc. | Method and system for preventing fraudulent activities |
US20060253582A1 (en) * | 2005-05-03 | 2006-11-09 | Dixon Christopher J | Indicating website reputations within search results |
US20070271339A1 (en) * | 2006-05-16 | 2007-11-22 | Barry Katz | Telephone-based personnel tracking system with authorization control and reporting |
-
2006
- 2006-02-28 US US11/365,644 patent/US9135469B2/en active Active
-
2015
- 2015-08-06 US US14/820,205 patent/US20150339766A1/en not_active Abandoned
Patent Citations (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6192380B1 (en) * | 1998-03-31 | 2001-02-20 | Intel Corporation | Automatic web based form fill-in |
US7006993B1 (en) * | 1999-05-28 | 2006-02-28 | The Coca-Cola Company | Method and apparatus for surrogate control of network-based electronic transactions |
US6651217B1 (en) * | 1999-09-01 | 2003-11-18 | Microsoft Corporation | System and method for populating forms with previously used data values |
US20010034720A1 (en) * | 2000-03-07 | 2001-10-25 | David Armes | System for facilitating a transaction |
US20030028792A1 (en) * | 2001-08-02 | 2003-02-06 | International Business Machines Corportion | System, method, and computer program product for automatically inputting user data into internet based electronic forms |
US20050172229A1 (en) * | 2004-01-29 | 2005-08-04 | Arcot Systems, Inc. | Browser user-interface security application |
US20060080437A1 (en) * | 2004-10-13 | 2006-04-13 | International Busines Machines Corporation | Fake web addresses and hyperlinks |
US20060253584A1 (en) * | 2005-05-03 | 2006-11-09 | Dixon Christopher J | Reputation of an entity associated with a content item |
US20070114274A1 (en) * | 2005-11-21 | 2007-05-24 | Simon Gibbs | System, apparatus and method for obtaining one-time credit card numbers using a smart card |
US7664699B1 (en) * | 2005-12-21 | 2010-02-16 | Symantec Corporation | Automatic generation of temporary credit card information |
Non-Patent Citations (2)
Title |
---|
Henshaw, James Presley, "Phishing Warden: Enhancing Content-Triggered Trust Negotiation to Prevent Phishing Attacks" (2005). All Theses and Dissertations. 322. http://scholarsarchive.byu.edu/etd/322 * |
SPS: A Simple Filtering Algorithm to Thwart Phishing Attacks written by Daisuke Miyamoto, Hiroaki Hazeyama, Youki Kadobayashi, Springer-Verlag Berlin Heidelberg 2005, page 195-209 * |
Also Published As
Publication number | Publication date |
---|---|
US9135469B2 (en) | 2015-09-15 |
US20070244761A1 (en) | 2007-10-18 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US9135469B2 (en) | Information protection system | |
US7802298B1 (en) | Methods and apparatus for protecting computers against phishing attacks | |
US10834102B2 (en) | Client-side attack detection in web applications | |
USRE46158E1 (en) | Methods and systems to detect attacks on internet transactions | |
US8079087B1 (en) | Universal resource locator verification service with cross-branding detection | |
US9038171B2 (en) | Visual display of website trustworthiness to a user | |
US8850526B2 (en) | Online protection of information and resources | |
US7603699B2 (en) | Method for establishing trust online | |
US9270644B2 (en) | Thwarting keyloggers using proxies | |
US11063963B2 (en) | Methods and apparatus for detecting remote control of a client device | |
Maurer et al. | Using data type based security alert dialogs to raise online security awareness | |
EP2756441B1 (en) | Apparatus and methods for preventing payment webpage tampering | |
US20080229109A1 (en) | Human-recognizable cryptographic keys | |
US10015191B2 (en) | Detection of man in the browser style malware using namespace inspection | |
Ollmann | The phishing guide | |
US20190222587A1 (en) | System and method for detection of attacks in a computer network using deception elements | |
Stebila | Reinforcing bad behaviour: the misuse of security indicators on popular websites | |
WO2019213175A1 (en) | Challenge interceptor | |
US20240037572A1 (en) | Fraud prevention through friction point implementation | |
Rajalingam et al. | Prevention of phishing attacks based on discriminative key point features of webpages | |
Jakobsson | The death of the internet | |
US20200412762A1 (en) | Protecting users from phishing attempts | |
US20080313732A1 (en) | Preventing the theft of protected items of user data in computer controlled communication networks by intruders posing as trusted network sites | |
Marchetto et al. | An investigation of cryptojacking: Malware analysis and defense strategies | |
US8819049B1 (en) | Frame injection blocking |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: PAYPAL INC., CALIFORNIA Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:KADISON, AVERY;SCIPIONI, GERMAN;SIGNING DATES FROM 20150729 TO 20150803;REEL/FRAME:036272/0601 |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: RESPONSE TO NON-FINAL OFFICE ACTION ENTERED AND FORWARDED TO EXAMINER |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: FINAL REJECTION MAILED |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: RESPONSE AFTER FINAL ACTION FORWARDED TO EXAMINER |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: ADVISORY ACTION MAILED |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: DOCKETED NEW CASE - READY FOR EXAMINATION |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: NON FINAL ACTION MAILED |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: RESPONSE TO NON-FINAL OFFICE ACTION ENTERED AND FORWARDED TO EXAMINER |
|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |