Client side protection against drive-by pharming via...

Details Client side protection against drive-by pharming via... Client side protection against drive-by pharming via...

2007-05-09

2010-11-02

Lin, Wen-Tai (Department: 2454)

Electrical computers and digital processing systems: multicomput

Computer-to-computer data addressing

C709S225000, C726S002000, C726S023000

Reexamination Certificate

active

07827311

ABSTRACT:
HTTP requests initiated from a web browser of a client computer system are proxied prior to release to a router, such as a home router. HTTP requests identifying a referrer URL corresponding to routable, public IP address and a target URL corresponding to a non-routable, private IP address are determined to be indicative of a drive-by pharming attack, and are blocked from sending to the router. HTTP requests not identifying a referrer URL corresponding to a routable, public IP address and a target URL corresponding to a non-routable, private IP address, the HTTP request are not determined to be indicative of a drive-by pharming attack, and are released for sending to the router. In some embodiments, an HTTP response received in response to a released HTTP request is proxied prior to release to the web browser. An HTTP response having content of type text/html or script is modified as indicated to prevent malicious activity and released to the web browser.

REFERENCES:
patent: 2006/0075494 (2006-04-01), Bertman et al.
patent: 2007/0074169 (2007-03-01), Chess et al.
patent: 2007/0174630 (2007-07-01), Shannon et al.
patent: 2008/0060054 (2008-03-01), Srivastava
patent: 2009/0089426 (2009-04-01), Yamasaki et al.
patent: 2009/0292925 (2009-11-01), Meisel
patent: 1 681 825 (2006-07-01), None
Ramzan, Z. (posting), “Drive-By Pharming: How Clicking on a Link Can Cost You Dearly”, pp. 1-4 [online]. Retrieved from the Internet: <URL:http://www.symantec.com/enterprise/security—response/weblog/2007/02/driveby—pharming—how—clicking—1.html>., Mar. 5, 2007.
Stamm, S., Ramzan, Z., and Jakobsson, M., “Drive-By Pharming”, pp. 1-15 [online]. Indiana University Technical TR641, Dec. 13, 2006. Retrieved from the Internet: <URL:http://www.symantec.com/avcenter/reference/Drivenby-Pharming.pdf>.
“Symantec Warns Consumers to Protect Home Broadband Networks From New Attack”, pp. 1-2 [online]. Retrieved from the Internet:<URL: http://biz.yahoo.com/iw/070215/0215656.html>. No author provided, Mar. 5, 2007.

Affiliated with

Also associated with

Rating

Client side protection against drive-by pharming via... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Client side protection against drive-by pharming via..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Client side protection against drive-by pharming via... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4243730