Enhancing container security by performing container vulnerability reduction based on static analysis of dynamically loaded symbols and system call blocking
US-2024220632-A1 · Jul 4, 2024 · US
US2016110470A1 · US · A1
| Field | Value |
|---|---|
| Publication number | US-2016110470-A1 |
| Application number | US-201514983618-A |
| Country | US |
| Kind code | A1 |
| Filing date | Dec 30, 2015 |
| Priority date | Apr 27, 2012 |
| Publication date | Apr 21, 2016 |
| Grant date | — |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
A client system interacts with a sandbox environment to host a web browser control within the sandbox. A webpage URL, a URL to a script file to be injected into the webpage, a name of the script method to be invoked, and the event to look for to trigger the script method sent to the sandbox environment from the client. The sandbox environment downloads the script file from the cloud using the script URL and loads a rendering engine with the specified webpage URL. The specified script file is subsequently injected into the loaded webpage at the sandbox environment. After the specified event is fired, the sandbox environment triggers the specified script method and stores the results within a results array, accessible to the client system.
Opening claim text (preview).
What is claimed is: 1 . A method executed on a computing device for retrieving content from a website through a sandbox, the method comprising: detecting a request for the content from a client, wherein the request includes a Uniform Resource Locator (URL) for a webpage, a URL for a script, a name of a script method to be executed, and a system defined trigger event; loading the webpage associated with the request within the sandbox; retrieving the script from a cloud source; triggering a mechanism to inject the script into the loaded webpage to extract the content within the sandbox according to the system defined trigger event; and executing the script method in response to detecting the system defined trigger event. 2 . The method of claim 1 , wherein the mechanism to inject the script includes screening the loaded webpage and the extracted content for malware. 3 . The method of claim 1 , further comprising: injecting the script into the loaded webpage to extract the content within the sandbox. 4 . The method of claim 1 , further composing: isolating the loaded webpage within the sandbox. 5 . The method of claim 1 , further comprising: isolating execution of the script method and extraction of the content within the sandbox. 6 . The method of claim 1 , wherein the extracted content includes at least one from a set of: an image, an icon, a textual content, and a graphic content. 7 . The method of claim 6 , wherein the textual content includes one or more of a title, a header, and a body text. 8 . The method of claim 1 , further comprising: triggering a mechanism to transmit the content to the client outside of the sandbox. 9 . The method of claim 1 , further comprising: loading results of the script execution into a results array for a client access. 10 . The method of claim 9 , further comprising: loading the content into the results array according to instructions in the script; and customizing the array according to specifications of the client. 11 . The method of claim 1 , further comprising: employing one of hypertext transmission protocol (HTTP) and secure http (HTTPS) for communicating with the client. 12 . A computing device for retrieving content from a website through a sandbox, the computing device comprising: a memory configured to store instructions; and a processor coupled to the memory, the processor executing an sandbox hosting application in conjunction with the instructions stored in the memory, wherein the sandbox hosting application is configured to: detect a request for the content from a client, wherein the request includes a Uniform Resource Locator (URL) for a webpage, a URL for a script, a name of a script method to be executed, and a system defined trigger event; load the webpage associated with the request within the sandbox; retrieve the script from a cloud source; trigger a mechanism to inject the script into the loaded webpage to extract the content within the sandbox according to the system defined trigger event; execute the script method in response to detecting the system defined trigger event; and isolate the loaded webpage within the sandbox. 13 . The computing device of claim 12 , wherein the sandbox hosting application is further configured to: execute a component of the script matching a specified event subsequent to detecting the system defined trigger event on the loaded webpage; and provide the extracted content to the client for display in conjunction with one of a feed and a preview, wherein the extracted content is representative of the loaded webpage. 14 . The computing device of claim 12 , wherein the sandbox hosting application is further configured to: render the loaded webpage with a hypertext markup language (HTML) rendering engine within the sandbox, wherein one or more components of the HTML rendering engine are updated dynamically. 15 . The computing device of claim 12 , wherein the sandbox hosting application is further configured to: retrieve the script from the cloud source through an interface that enables one or more of updating and refreshing of the script. 16 . The computing device of claim 12 , wherein the sandbox hosting application is further configured to: update extraction logic within the sandbox outside of the client. 17 . The computer-readable memory device with instructions stored thereon for retrieving content from a website through a sandbox, the instructions comprising: detecting a request for the content from a client, wherein the request includes a Uniform Resource Locator (URL) for a webpage, a URL for a script, a name of a script method to be executed, and a system defined trigger event; loading the webpage associated with the request within the sandbox; retrieving the script from a cloud source; triggering a mechanism to inject the script into the loaded webpage to extract the content within the sandbox according to the system defined trigger event; executing tire script method in response to detecting the system defined trigger event; and isolating the loaded webpage within the sandbox. 18 . The computer-readable memory device of claim 17 , wherein the instructions further comprise: loading results of the script execution into a results array for an access by the client; loading the extracted content into the results array according to instructions in the script; and customizing the results array according to specifications of the client. 19 . The computer-readable memory device of claim 17 , wherein instructions further comprise; isolating execution of the script method and extraction of the content within the sandbox. 20 . The computer-readable memory device of claim 17 , wherein the extracted content is a thumbnail of the loaded webpage.
at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability · CPC title
Physics · mapped topic
Physics · mapped topic
based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title
Authenticating web pages, e.g. with suspicious links · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.