Patent ID: 9178904
Filing Date: 2015-11-03
Classification: G06F,H04L

Abstract:
1. A computer-implemented method for detecting malicious browser-based scripts, the method comprising: identifying an attempt by a web browser to access sensitive information stored on a server; locating a web browser script installed in the web browser by inspecting Document Object Model nodes in the web browser prior to determining whether to allow the web browser to access the sensitive information; calculating a signature hash for the web browser script; querying, using the signature hash, a browser script signature database that associates web browser script signature hashes with script security indicators; receiving, in response to querying the browser script signature database, a script security indicator associated with the signature hash, the script security indicator indicating whether the web browser script is identified, within the browser script signature database, as a security threat; applying, based on the script security indicator that indicates whether the web browser script is identified as a security threat, a script security policy associated with the web browser script, the script security policy indicating whether to allow the web browser to access the sensitive information stored on the server; wherein a computing device comprising at least one processor performs the method.