Patent ID: 8464318
Filing Date: 2013-06-11
Classification: H04L

Abstract:
1. A method for securing a web client against malicious web attacks, the method is performed by a secure gateway deployed between a web client and a web server, comprising: receiving a uniform resource locator (URL) request from the web client; sending the URL request to the web server for executing server side web application code responsive to the URL request; receiving client side application code from the web server; executing, by the secure gateway, the client side application code on behalf of the web client based in part on user events received from the web client, wherein the execution of the client side application code further includes synchronizing changes made in a document object model (DOM) in the secure gateway to a DOM in the web client, wherein no harmful client side application code is processed by the web client and no changes in the DOM that can harm the web client are synchronized with the web client; and sending to the web client user interface updates rendered responsive to the execution of the client side application code, wherein the user interface updates are serialized for extracting user interface information from the client side application code, wherein the serialization is performed in real time as a new web page is downloaded from the web server.