System for managing extension modifications to web pages

Patent metadata

Field	Value
Publication number	US-9930095-B2
Application number	US-201414226013-A
Country	US
Kind code	B2
Filing date	Mar 26, 2014
Priority date	Mar 26, 2014
Publication date	Mar 27, 2018
Grant date	Mar 27, 2018

Abstract

A method and system provide, using a microprocessor of computing device associated with a web publisher, content including a web page. The method includes accessing, by the web publisher, a list including at least one extension associated with a web browser rendering the content at a second computing device, and a key generated based on the content, the key being generated at a specific time after the providing. The method includes comparing a value associated with the key to an expected value to determine a difference between the key and the expected value.

First claim

What is claimed is:

1. A method comprising:
providing, using a microprocessor of a computing device associated with a web publisher, content including a web page;
accessing, by the web publisher, a list including at least one extension associated with a web browser that renders the content at a second computing device, and a key generated based on the content, wherein
the content is rendered by the web browser using the at least one extension, the key being generated at a specific time after the providing, and the key being generated using a reversible function configured to generate the content from the key and the key from the content;
comparing a value associated with the key to an expected value to determine a difference between the key and the expected value;
determining whether an extension, from the list of at least one extension, has modified the content based on the difference between the key and the expected value, where the determining is performed by the microprocessor of the computing device associated with the web publisher, using iterative comparisons of a plurality of keys from a plurality of different browsers, to the expected value; and
upon determining the extension has modified the content, providing code to the second computing device, the code, when execute by the second computing device preventing operation of the extension on the web page.

2. The method of claim 1 , where the list includes all extensions installed in the web browser.

3. The method of claim 1 , further comprising: locking the content being rendered on the web browser at a specific time identified by the web publisher.

4. The method of claim 3 , where the locking is performed by the web browser.

5. The method of claim 1 , further comprising generating the key using the web browser.

6. The method of claim 5 , further comprising creating the key using a checksum of the content.

7. The method of claim 5 , further comprising creating the key using a trace.

8. The method of claim 5 , further comprising creating the key based on a text file version of a document object model of the web page.

9. The method of claim 1 , further comprising recreating the content using the key.

10. A system comprising:
a memory storing a set of instructions; and
a processor configured to execute the set of instructions to cause the system to:
provide content including a web page;
receive a list including at least one extension associated with a web browser rendering the content at a computing device, and a key generated based on the content, wherein
the content is rendered by the web browser using the at least one extension, the key being generated at a specific time, and
the key being generated using a reversible function configured to generate the content from the key and the key from the content;
compare a value associated with the key to an expected value to determine a difference between the key and the expected value;
determine whether an extension from the list has modified the content based on the difference between the key and the expected value, wherein determining whether an extension has modified the content, is performed by the microprocessor of the computing device associated with the web publisher, using iterative comparisons of a plurality of keys from a plurality of different browsers, to the expected value; and
upon determining the extension has modified the content, provide code to the computing device, the code, when execute by the computing device prevents operation of the extension on the web page.

11. The system of claim 10 , where the system determines the extension using iterative comparisons of a plurality of keys to a plurality of expected values.

12. The system of claim 10 , where the list includes all extensions installed in the web browser.

13. The system of claim 10 , where the processor is further configured to execute the set of instructions to cause the system to lock the content being rendered on the web browser at a specific time identified by a web publisher.

14. The system of claim 10 , where the key is generated by the web browser.

15. A non-transitory computer readable medium containing instructions that when executed cause a microprocessor of a computer system to:
provide content including a web page;
receive a list including at least one extension associated with a web browser rendering the content at a computing device, and a key generated based on the content, wherein the content is rendered by the web browser using the at least one extension, the key being generated at a specific time, and the key being generated using a reversible function configured to generate the content from the key and the key from the content;
compare a value associated with the key to an expected value to determine a difference between the key and the expected value;
determine whether an extension from the list has modified the content based on the difference between the key and the expected value, wherein determining whether an extension has modified the content, is performed by the microprocessor of the computing device associated with the web publisher, using iterative comparisons of a plurality of keys from a plurality of different browsers, to the expected value; and
upon determining the extension has modified the content, provide code to the computing device, the code, when execute by the computing device prevents operation of the extension on the web page.

16. The non-transitory computer readable medium of claim 15 , where the extension modified the content when it was being rendered using the web browser.

17. The non-transitory computer readable medium of claim 15 , where the list includes all extensions associated with the web browser rendering the content at the computing device.

18. The non-transitory computer readable medium of claim 15 , where the instructions further cause the computer system to provide a specified time to the web browser to lock the content.

Assignees

• Google Inc
• Google Llc

Inventors

• Warner Craig
• Stone Luke
• Fenenbock Elysa Wesley
• Kassis Ronit
• O'Connor Timothy Wong

Classifications

• G06F21/577

  Assessing vulnerabilities and evaluating computer system security · CPC title

• G06F2221/033

  Test or assess software · CPC title

• H04L67/02 Primary

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• G06F21/566

  Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities · CPC title

• G06F16/95 Primary

  Retrieval from the web · CPC title