Method, computer software, and system for providing end to end security protection of an online transaction
View Patent ↗A method for implementing an online transaction security product includes downloading an online transaction security product program from a web site to an information handling system. The security product program includes an anti-malicious code program configured to detect malicious code on the information handling system. Lastly, the security product program is executed, wherein the anti-malicious code program of the security product program operates to detect malicious code on the information handling system.
1. A method, comprising:
sending a request from a computer system to a web server, wherein said request is for a first website configured to perform an online transaction;
subsequent to said request and prior to completion of the online transaction, receiving, at said computer system, executable code from the web server; and
at the point of entry into the online transaction or during the online transaction, executing the received code on the computer system to determine whether malicious code is executing on said computer system;
wherein, upon the executed code indicating that malicious code is executing on the computer system, either the online transaction is terminated or the online transaction is suspended until a mitigation action is performed with respect to the malicious code.
2. The method of claim 1 , wherein the received code is executed within a browser running on the computer system.
3. The method of claim 1 , wherein the received code includes code configured to detect a trojan horse.
4. The method of claim 1 , wherein the executable code is executable to disable a first piece malicious code only for the duration of the online transaction.
5. The method of claim 1 , wherein the online transaction is an online banking transaction.
6. The method of claim 1 , wherein the mitigation action includes quarantining the malicious code.
7. The method of claim 6 , wherein the executable program is executable to unquarantine the quarantined malicious code.
8. A computer system comprising:
a processor; and
a memory storing program instructions executable by the processor to:
send a request from a computer system to a web server, wherein said request is for a first website configured to perform an online transaction;
subsequent to said request and prior to completion of the online transaction, receive, at said computer system, executable code from the web server; and
at the point of entry into the online transaction or during the online transaction, execute the received code on the computer system to determine whether malicious code is executing on said computer system;
wherein, upon the executed code indicating that malicious code is executing on the computer system, either the online transaction is terminated or the online transaction is suspended until a mitigation action is performed with respect to the malicious code.
9. A computer-readable memory medium, including program instructions executable by a computer system to:
send a request from the computer system to a web server, wherein said request is for a first website configured to perform an online transaction;
subsequent to said request and prior to completion of the online transaction, receive, at said computer system, executable code from the web server; and
at the point of entry into the online transaction or during the online transaction, execute the received code on the computer system to determine whether malicious code is executing on said computer system;
wherein, upon the executed code indicating that malicious code is executing on the computer system, either the online transaction is terminated or the online transaction is suspended until a mitigation action is performed with respect to the malicious code.
10. The method of claim 1 , wherein the received code is executed at the point of entry into the online transaction, wherein the point of entry is prior to entry of a login sequence to the first website.
11. The method of claim 1 , wherein the received code is executed at the point of entry into the online transaction, wherein the point of entry is immediately after entry of a login sequence to the first website.
12. The method of claim 11 , further comprising prompting a user of the computer system to change login information upon the received code indicating that malicious code is present on the computer system.
13. The method of claim 1 , wherein the first website is an online banking website.
14. The method of claim 13 , wherein the online transaction includes determining an account balance.
15. The method of claim 1 , wherein the request is for a web address associated with the first website, and wherein the online transaction is an online banking transaction.
16. The method of claim 1 , wherein the received code is executed at the point of entry into the online transaction, the method further comprising executing the received code one or more additional times during the online transaction.
17. The method of claim 1 , wherein the received code is executed
substantially continuously during the online transaction.
18. The method of claim 1 , further comprising:
if the executed code indicates that malicious code is executing on the computer system, notifying the web server that malicious code is executing on the computer system.
19. The method of claim 1 , wherein the received code is automatically executed on the computer system, and wherein the received code includes a plurality of malicious code detection routines and a plurality of valid code detection routines.
20. The computer system of claim 8 , wherein the received code is configured to determine the extent to which the currently executing programs on the computer system have characteristics and behaviors typically associated with both malicious and valid code.
21. The computer system of claim 8 , wherein the received code is executed at the point of entry into the online transaction, wherein the point of entry is prior to entry of a login sequence to the first website.
22. The computer system of claim 8 , wherein the received code is executed at the point of entry into the online transaction, wherein the point of entry is immediately after entry of a login sequence to the first website.
23. The computer system of claim 22 , the memory further comprising program instructions executable by the processor to:
prompt a user of the computer system to change login information upon the received code indicating that malicious code is present on the computer system.
24. The computer system of claim 8 , wherein the first website is an online banking website, and wherein the online transaction is an online banking transaction.
25. The computer system of claim 24 , wherein the online transaction includes determining an account balance.
26. The computer system of claim 8 , wherein the request is for a web address associated with the first website, and wherein the online transaction includes the transmission of personal information of a user of the computer system.
27. The computer system of claim 8 , wherein the received code is configured to execute at the point of entry into the online transaction, and wherein the received code is further configured to execute one or more additional times during the online transaction.
28. The computer system of claim 8 , wherein the received code is configured to execute substantially continuously during the online transaction.
29. The computer system of claim 8 , the memory storing program instructions executable to notify the web server that malicious code is executing on the computer system.
30. The computer system of claim 8 , wherein the received code is automatically executed on the computer system, and wherein execution of the received code determines the extent to which the various programs currently running on the computer system have characteristics and behaviors typically associated with both malicious and valid code.
31. The memory medium of claim 9 , wherein the received code is configured to disable or quarantine a first piece of code running on the computer system in response to categorizing that code as malicious code.
32. The memory medium of claim 9 , wherein the received code is executed at the point of entry into the online transaction, wherein the point of entry is prior to or immediately after entry of a login sequence to the first website; and wherein the memory medium stores program instructions executable to:
prompt a user of the computer system to change login information upon the received code indicating that malicious code is present on the computer system.
33. The memory medium of claim 9 , wherein the first website is an online banking website.
34. The memory medium of claim 9 , wherein the received code is automatically executed on the computer system, and wherein the received code is executable to determine behaviors associated with the programs currently running on the computer system.
35. The memory medium of claim 9 , wherein the received code is executed substantially continuously during the online transaction.
36. The method of claim 1 , wherein the executable code is executable as a plug-in for a web browser.
37. The method of claim 36 , further comprising saving the executable code on the computer system for future transactions between the computer system and the web server.