System and method for codifying security concerns into a user interface
View Patent ↗A system and method are provided for codifying security concerns into a user interface. An application launching a window may be determined, and the security attributes associated with the application may be ascertained. If the security attributes indicate that the application is insecure, the window may be visually and/or behaviorally modified to reflect the level of security of the application.
1. A system for codifying security concerns into user interface, wherein the system comprises at least one processor configured to:
manage a display of a computer-generated window launched by an application, wherein the computer-generated window includes one or more display elements;
traverse an execution path from the window to the application that launched the window, wherein the processor traverses the execution path from the window to the application that launched the window to obtain binary object code from the application that launched the window;
obtain on one or more security attributes for the traversed execution path, wherein the processor obtains the one or more security attributes for the traversed execution path from the binary object code obtained from the application that launched the window;
modify one or more of a behavior or an appearance of at least one of the one or more display elements in the window in response to determining that the one or more security attributes obtained for the traversed execution path indicate that the application is not trustworthy, wherein the modified behavior or appearance of the at least one display element visually indicates that the application is not trustworthy;
determine whether content displayed in the window is trustworthy in response to determining that the one or more security attributes obtained for the traversed execution path indicate that the application is trustworthy; and
modify one or more of the behavior or the appearance of the at least one of the one or more display elements in the window in response to determining that the content displayed in the window is not trustworthy, wherein the modified behavior or appearance of the at least one display element visually indicates that the content displayed in the window is not trustworthy.
2. The system of claim 1 , wherein the processor determines that the one or more security attributes obtained for the traversed execution path indicate that the application is not trustworthy in response to the obtained binary object code having an invalid binary signature, displaying untrusted data in the window, not having appropriate user permissions, having a pending upgrade, or sniffing data on a network.
3. The system of claim 1 , wherein the modified appearance includes a modified color of the at least one display element.
4. The system of claim 1 , wherein the modified behavior causes the at least one display element to blink.
5. The system of claim 1 , wherein the processor determines that the one or more security attributes obtained for the traversed execution path indicate that the application is not trustworthy in response to the obtained binary object indicating that the application originates from a source that does not appear in an approved applications list.
6. A method for codifying security concerns into user interface comprising:
managing, by a processor, a display of a computer-generated window that includes one or more display elements, wherein managing the display of a computer-generated window includes determining an application that launched the window;
traversing an execution path from the window to the application that launched the window, wherein the processor traverses the execution path from the window to the application that launched the window to obtain binary object code from the application that launched the window;
obtaining one or more security attributes for the traversed execution path, wherein the processor obtains the one or more security attributes for the traversed execution path from the binary object code obtained from the application that launched the window;
modifying one or more of a behavior or an appearance of at least one of the one or more display elements in the window in response to determining that the one or more security attributes obtained for the traversed execution path indicate that the application is not trustworthy, wherein the modified behavior or appearance of the at least one display element visually indicates that the application is not trustworthy;
determining whether content displayed in the window is trustworthy in response to determining that the one or more security attributes obtained for the traversed execution path indicate that the application is trustworthy; and
modifying one or more of the behavior or the appearance of the at least one of the one or more display elements in the window in response to determining that the content displayed in the window is not trustworthy, wherein the modified behavior or appearance of the at least one display element visually indicates that the content displayed in the window is not trustworthy.
7. The method of claim 6 , wherein the processor determines that the one or more security attributes obtained for the traversed execution path indicate that the application is trustworthy in response to the binary object code having a cryptographic signature originating from a trusted agent.
8. The method of claim 6 , wherein the processor determines that the one or more security attributes obtained for the traversed execution path indicate that the application is not trustworthy in response to the binary object code having an invalid binary signature.
9. The method of claim 6 , wherein the modified appearance includes a modified color of the at least one display element.
10. The method of claim 6 , wherein the modified behavior causes the at least one display element to blink.
11. The method of claim 6 , wherein
the processor determines that the one or more security attributes obtained for the traversed execution path indicate that the application is not trustworthy in response to the obtained binary object code having a pending upgrade, and wherein the modified appearance visually indicates that the obtained binary object needs the pending upgrade.
12. The method of claim 11 , wherein the modified appearance further visually indicates a severity of the pending upgrade.
13. A non-transitory computer readable storage medium including computer readable instructions stored thereon for codifying security concerns into a user interface, wherein executing the computer readable instructions on a processor causes the processor to:
manage a display of a computer-generated window that includes one or more display elements, wherein the processor determines an application that launched the window to manage the display of the window;
traverse an execution path from the window to the application that launched the window, wherein the processor traverses the execution path from the window to the application that launched the window to obtain binary object code from the application that launched the window;
obtain one or more security attributes for the traversed execution path, wherein the processor obtains the one or more security attributes for the traversed execution path from the binary object code obtained from the application that launched the window;
modify one or more of a behavior or an appearance of at least one of the one or more display elements in the window in response to determining that the one or more security attributes obtained for the traversed execution path indicate that the application is not trustworthy, wherein the modified behavior or appearance of the at least one display element visually indicates that the application is not trustworthy;
determine whether content displayed in the window is trustworthy in response to determining that the one or more security attributes obtained for the traversed execution path indicate that the application is trustworthy; and
modify one or more of the behavior or the appearance of the at least one of the one or more display elements in the window in response to determining that the content displayed in the window is not trustworthy, wherein the modified behavior or appearance of the at least one display element visually indicates that the content displayed in the window is not trustworthy.
14. A system for codifying security concerns into a user interface, wherein the system comprises at least one processor configured to:
manage a display of a computer-generated window launched by an application, wherein the computer-generated window includes one or more display elements;
traverse an execution path from the window to the application that launched the window, wherein the processor traverses the execution path from the window to the application that launched the window to obtain binary object code from the application that launched the window;
obtain one or more security attributes for the traversed execution path, wherein the processor obtains the one or more security attributes for the traversed execution path from the binary object code obtained from the application that launched the window;
modify one or more of a behavior or an appearance of at least one of the one or more display elements in the window in response to determining that the one or more security attributes obtained for the traversed execution path indicate that the application is not trustworthy, wherein the modified behavior or appearance of the at least one display element visually indicates that the application is not trustworthy;
determine whether content displayed in the window is trustworthy in response to determining that the one or more security attributes obtained for the traversed execution path indicate that the application is trustworthy, wherein the processor determines that the content displayed in the window is not trustworthy in response to determining that the traversed execution path indicates that a source of the content is not trustworthy; and
modify one or more of the behavior or the appearance of the at least one of the one or more display elements in the window in response to determining that the content displayed in the window is not trustworthy, wherein the modified behavior or appearance of the at least one display element visually indicates that the content displayed in the window is not trustworthy.