Patent ID: 8904558
Filing Date: 2014-12-02
Classification: H04L

Abstract:
1. A non-transitory computer-readable storage medium having instructions stored therein, which when executed by a processor of a security gateway coupled between a web application and an HTTP (Hypertext Transfer Protocol) client device coupled to a cloud server, cause the security gateway to perform operations comprising: receiving an HTTP response message from the web application for delivery to the HTTP client device; computing a first digest based on content of the HTTP response message; modifying the HTTP response message from the web application to include code that when executed by the HTTP client device, causes the HTTP client device to request and execute a digest script from the cloud server, wherein the digest script, when executed by the HTTP client device, causes the HTTP client device to compute locally, based on content of the HTTP response message it receives, a second digest for comparison to the first digest; sending to the HTTP client device the modified HTTP response message with the code; and responsive to receiving a comparison result that indicates the first digest does not match the second digest, generating an alert because malware on the HTTP client may have modified the content of the HTTP response message.