Patent ID: 8510443
Filing Date: 2013-08-13
Classification: G06F,H04L

Abstract:
1. A real-time harmful website blocking method using an object attribute access engine, comprising: obtaining information about visual objects, currently being displayed on a screen by a process currently being executed, from a client; extracting attributes of the visual objects from the information about the visual objects; determining whether harmfulness is present based on the extracted object attributes, and thus deciding whether to block access to a server being connected thereto; and requesting the client to terminate the process for displaying the visual objects, wherein the obtaining comprises: retrieving a list of processes currently being executed and process information from the client; transmitting an instruction for obtaining a handle ID value of a currently activated window to the client and obtaining the handle ID value; requesting the client to convert the handle ID value into a process ID value for executing the window, and obtaining the process ID value; finding an identical process corresponding to the process ID value from the list of processes currently being executed and process information, based on the process ID value; extracting a root visual object from the found identical process, and obtaining a handle ID value of the visual object; and obtaining handle ID values of lower visual objects based on the handle ID value of the root visual object, wherein the extracting comprises: calling individual attributes of the visual objects on the client and obtaining the individual attributes from the client, based on the handle ID values of the visual objects; and grouping visual objects having an identical parent visual object through the obtained attributes of the visual objects, and generating connection relationships between the visual objects, wherein the determining comprises: comparing, in a first blocking determination stage, connection relationships between objects previously obtained from obscene websites to be blocked and previously stored, with connection relationships between the visual objects obtained from the process currently being executed, and then deciding to block the process when the connection relationships are identical to each other; if the process passes the first blocking determination stage, comparing, in a second blocking determination stage, object style attributes and location and size attributes, previously set as properties of obscene websites to be blocked, with object style attributes and location and size attributes of the visual objects obtained from the process currently being executed, and then deciding to block the process when the object style attributes and the location and size attributes are identical to each other; if the process passes the second blocking determination stage, determining, in a third blocking determination stage, using a database in which words having a possibility of being highly obscene are previously selected from Hypertext Markup Language (HTML) text of obscene websites to be blocked and are previously stored, whether the selected words are included in HTML text of the visual objects obtained from the process currently being executed, and then deciding to block the process, based on a result of the determination; and if the process passes the third blocking determination stage, deciding to block the process in a fourth blocking determination stage when an Internet address of a website on which the visual objects obtained from the process currently being executed are displayed is present in a database in which Internet addresses of obscene websites to be blocked are stored.