Automatic dynamic vetting of browser extensions and web applications

    公开(公告)号:US09762598B1

    公开(公告)日:2017-09-12

    申请号:US14944011

    申请日:2015-11-17

    Applicant: GOOGLE INC.

    Abstract: A digital good offered for downloading from a first computing system to a client computing device for execution by a browser executing on the client is identified. The digital good is received at a third computing system, where source code for the received digital good includes scripting language code. The code is re-written to include tracking code to track behavior of the digital good during execution of the digital good, and the re-written digital good is executed in a browser run by the third computing system. Based on evaluation of results of executing the re-written digital good, it is automatically determined, by the third computer system, whether the digital good violates one or more predetermined conditions, and based on the determination of whether the digital good violates a predetermined conditions, it is automatically determined whether to discourage downloading the digital good to, or executing the digital good by, the client.

    Flagging binaries that drop malicious browser extensions and web applications
    2.
    发明授权
    Flagging binaries that drop malicious browser extensions and web applications 有权
    标记删除恶意浏览器扩展和Web应用程序的二进制文件

    公开(公告)号:US09443077B1

    公开(公告)日:2016-09-13

    申请号:US14141118

    申请日:2013-12-26

    Applicant: GOOGLE INC.

    CPC classification number: G06F21/566 G06F21/53

    Abstract: A program binary file is identified as part of a webpage, where the file can be downloaded from the webpage for execution by a client. A browser-executable web application or browser extension that is installed on a client computing device as a consequence of executing the program binary is identified, where source code for the web application or browser extension includes scripting language code. The source code of the web application or browser extension is re-written to include tracking code to track behavior during execution of the re-written web application or browser extension. It is determined whether execution of the re-written web application or browser extension violates one or more predetermined conditions. Then, it is determined whether to discourage downloading the program binary from the webpage to the client computing device or whether to disable execution of the web application or browser extension on the client.

    Abstract translation: 程序二进制文件被识别为网页的一部分,其中文件可以从网页下载以供客户端执行。 识别出由于执行程序二进制而安装在客户端计算设备上的浏览器可执行的Web应用程序或浏览器扩展,其中Web应用程序或浏览器扩展的源代码包括脚本语言代码。 重新编写Web应用程序或浏览器扩展的源代码以包含跟踪代码,以在执行重写的Web应用程序或浏览器扩展时跟踪行为。 确定重写的Web应用程序或浏览器扩展的执行是否违反一个或多个预定条件。 然后,确定是否阻止将程序二进制文件从网页下载到客户端计算设备,还是禁止在客户机上执行Web应用程序或浏览器扩展。

    Automatic dynamic vetting of browser extensions and web applications
    3.
    发明授权
    Automatic dynamic vetting of browser extensions and web applications 有权
    自动动态审查浏览器扩展和Web应用程序

    公开(公告)号:US09219719B1

    公开(公告)日:2015-12-22

    申请号:US13624120

    申请日:2012-09-21

    Applicant: Google Inc.

    Abstract: A digital good offered for downloading from a first computing system to a client computing device for execution by a browser executing on the client is identified. The digital good is received at a third computing system, where source code for the received digital good includes scripting language code. The code is re-written to include tracking code to track behavior of the digital good during execution of the digital good, and the re-written digital good is executed in a browser run by the third computing system. Based on evaluation of results of executing the re-written digital good, it is automatically determined, by the third computer system, whether the digital good violates one or more predetermined conditions, and based on the determination of whether the digital good violates a predetermined conditions, it is automatically determined whether to discourage downloading the digital good to, or executing the digital good by, the client.

    Abstract translation: 识别从第一计算系统向客户端计算设备下载的数字商品,以供在客户机上执行的浏览器执行。 在第三计算系统处接收数字商品,其中所接收的数字商品的源代码包括脚本语言代码。 该代码被重新编写成包括跟踪代码以跟踪在数字商品的执行期间的数字商品的行为,并且重写的数字商品在由第三计算系统运行的浏览器中执行。 基于对执行重写数字商品的结果的评估,由第三计算机系统自动确定数字商品是否违反一个或多个预定条件,并且基于数字商品是否违反预定条件的确定 ,自动确定是否阻止客户下载数字商品或执行数字商品。

Patent Agency Ranking