Dynamic frame buster injection
View Patent ↗A parsing module receives a web page from a network. The parsing module identifies a frame embedded within the intercepted web page. The parsing module identifies information regarding the embedded frame. A collection module collects the identified information regarding the embedded frame and maintains such information in an exclusion list stored in a memory module. A lookup module intercepts a web page from the network before the web page reaches the client. The lookup module identifies information regarding this web page and accesses the memory module to determine if the identified information is included in the exclusion list. If the identified information regarding the web page is not included in the exclusion list, a modification module modifies the web page such that the web page will not be loaded on the client within a frame.
1. A method of protecting a user of a client from computer frauds, comprising:
using a computer to perform steps comprising:
establishing an exclusion list identifying web pages that are legitimately framed;
identifying information regarding a first web page in a frameset of a second web page, the first and second web pages received from a network; and
modifying, if the identified information regarding the first web page is not included in the exclusion list, the first web page by inserting a frame-busting module in the first web page for loading the first web page outside the frameset of the second web page on the client.
2. The method of claim 1 , wherein establishing the exclusion list comprises:
identifying one or more frames within one or more web pages received from the network; and
storing information regarding the identified one or more frames in a memory.
3. The method of claim 2 , wherein identifying the one or more frames within the one or more web pages comprises:
parsing a syntax of the one or more web pages to identify a frame tag within the syntax; and
identifying a uniform resource locator associated with the frame tag.
4. The method of claim 3 ,
wherein storing the information regarding the identified one or more frames comprises:
storing the uniform resource locator associated with the frame tag in the memory; and
wherein identifying the information regarding the first web page received from the network comprises:
identifying a uniform resource locator of the first web page.
5. The method of claim 1 , further comprising:
sending the first web page to the client without modifying the first web page if the identified information regarding the first web page is included in the exclusion list.
6. The method of claim 1 , wherein establishing the exclusion list comprises:
receiving, from a server, uniform resource locators of the web pages that are legitimately framed; and
storing the received uniform resource locators in a memory.
7. A system having a computer-readable storage medium having computer-executable code for protecting a user of a client from computer frauds, the computer-executable code comprising:
a memory module for storing an exclusion list identifying web pages that are legitimately framed;
a lookup module for identifying information regarding a first web page in a frameset of a second web page, the first and second web pages received from a network; and
a modification module for modifying, if the identified information regarding the first web page is not included in the exclusion list, the first web page by inserting a frame-busting module in the first web page for loading the first web page outside the frameset of the second web page on the client.
8. The system of claim 7 , further comprising:
a parsing module for identifying one or more frames within one or more web pages received from the network; and
wherein the memory module is adapted to:
store information regarding the identified one or more frames in the exclusion list.
9. The system of claim 8 , wherein the parsing module is adapted to:
parse a syntax of the one or more web pages to identify a frame tag within the syntax; and
identify a uniform resource locator associated with the frame tag.
10. The system of claim 9 ,
wherein the memory module is adapted to store the uniform resource locator associated with the frame tag in the exclusion list; and
wherein the lookup module is adapted to identify a uniform resource locator of the first web page.
11. The system of claim 7 , wherein the lookup module is adapted to send the first web page to the client without modifying the first web page if the identified information regarding the first web page is included in the exclusion list.
12. The system of claim 7 , wherein the memory module is adapted to:
receive, from a server, uniform resource locators of the web pages that are legitimately framed; and
store the received uniform resource locators in the exclusion list.
13. A computer-readable storage medium having embodied thereon executable program code for protecting a user of a client from computer frauds, the executable program code comprising:
a memory module for storing an exclusion list identifying web pages that are legitimately framed;
a lookup module for identifying information regarding a first web page in a frameset of a second web page, the first and second web pages received from a network; and
a modification module for modifying, if the identified information regarding the first web page is not included in the exclusion list, the first web page by inserting a frame-busting module in the first web page for loading the first web page outside the frameset of the second web page on the client.
14. The computer-readable storage medium of claim 13 , further comprising:
a parsing module for identifying one or more frames within one or more web pages received from the network; and
wherein the memory module is adapted to:
store information regarding the identified one or more frames in the exclusion list.
15. The computer-readable storage medium of claim 14 , wherein the parsing module is adapted to:
parse a syntax of the one or more web pages to identify a frame tag within the syntax; and
identify a uniform resource locator associated with the frame tag.
16. The computer-readable storage medium of claim 15 ,
wherein the memory module is adapted to store the uniform resource locator associated with the frame tag in the exclusion list; and
wherein the lookup module is adapted to identify a uniform resource locator of the first web page.
17. The computer-readable storage medium of claim 13 , wherein the lookup module is adapted to send the first web page to the client without modifying the first web page if the identified information regarding the first web page is included in the exclusion list.
18. The computer-readable storage medium of claim 13 , wherein the memory module is adapted to:
receive, from a server, uniform resource locators of the web pages that are legitimately framed; and
store the received uniform resource locators in the exclusion list.