Apparatus, system, and method for protecting against keylogging malware
An apparatus, system, and method is disclosed for protecting against key logger malware. The protection includes protection form grabbing keylogger malware. In response to detecting a form submission event from a browser associated with a user entering data into a form, confidential data is cleared to prevent it being captured by malware. Additional protection of data inputs, entered at a driver level, may be provided as an additional level of protection against hook based malware operating at a virtual keyboard level or operating system level. Data inputs received at a physical driver level may be protected as they pass through a virtual keyboard level and an operating system level. The projection against malware may be provided as a preventive measure that does not require detection of the key logger malware itself.
1. A method for preventing software key logging executable by a microprocessor, comprising:
invoking an anti-key logger by an individual web page or website accessed by a user in an online access session;
installing and maintaining the anti-key logger at a most privileged access level;
detecting, by the anti-key logger, a form submission initiation call event associated with data inputs entered by a user to be submitted to the individual webpage or the website;
encrypting at least some of the data inputs to generate encrypted data inputs;
submitting the encrypted data inputs to an intended application;
decrypting, by a component of the intended application, the encrypted data inputs;
submitting the decrypted data inputs to a designated receiving party; and
preventing, by the anti-key logger, malware from capturing the at least some of the data inputs.
2. The method of claim 1 , wherein the most privileged access level is a most privileged access level for browser events.
3. The method of claim 1 , wherein the anti-key logger does not require detection of the malware to prevent the malware from capturing the at least some of the data inputs.
4. The method of claim 1 , wherein the form submission initiation call event is an OnSubmit call event or a BeforeNavigate call event.
5. A method for preventing software key logging executable by a microprocessor, comprising:
invoking an anti-key logger in response to an initiation of an online access session;
installing and maintaining the anti-key logger at a most privileged access level;
detecting, by the anti-key logger, a form submission initiation call event associated with data inputs entered by a user to be submitted to a website;
encrypting at least some of the data inputs to generate encrypted data inputs;
submitting the encrypted data inputs to an intended application;
decrypting the encrypted data inputs;
submitting the decrypted data inputs to a designated receiving party;
preventing, by the anti-key logger, malware from capturing the at least some of the data inputs;
and uninstalling the anti-key logger in response to a logoff of the online access session.
6. The method of claim 5 , wherein the most privileged access level is a most privileged access level for browser events.
7. The method of claim 5 , wherein the anti-key logger does not require detection of the malware to prevent the malware from capturing the at least some of the data inputs.
8. The method of claim 5 , wherein the form submission initiation call event is an OnSubmit call event or a BeforeNavigate call event.
9. A computer program product to prevent software key logging including computer program code embedded in a non-transitory microprocessor-readable storage medium executable by a microprocessor, which when executed on the microprocessor, implements a method, comprising:
invoking an anti-key logger by an individual web page or website accessed by a user in an online access session;
installing and maintaining the anti-key logger at a most privileged access level;
detecting, by the anti-key logger, a form submission initiation call event associated with data inputs entered by a user to be submitted to the individual webpage or the website;
encrypting at least some of the data inputs to generate encrypted data inputs;
submitting the encrypted data inputs to an intended application;
decrypting, by a component of the intended application, the encrypted data inputs;
submitting the decrypted data inputs to a designated receiving party; and
preventing, by the anti-key logger, malware from capturing the at least some of the data inputs.
10. The computer program product of claim 9 , wherein the most privileged access level is a most privileged access level for browser events.
11. The computer program product of claim 9 , wherein the anti-key logger does not require detection of the malware to prevent the malware from capturing the at least some of the data inputs.
12. The computer program product of claim 9 , wherein the form submission initiation call event is an OnSubmit call event or a BeforeNavigate call event.
13. A computer program product to prevent software key logging including computer program code embedded in a non-transitory microprocessor-readable storage medium executable by a microprocessor, which when executed on the microprocessor, implements a method, comprising:
invoking an anti-key logger in response to an initiation of an online access session;
installing and maintaining the anti-key logger at a most privileged access level;
detecting, by the anti-key logger, a form submission initiation call event associated with data inputs entered by a user to be submitted to a website;
encrypting at least some of the data inputs to generate encrypted data inputs;
submitting the encrypted data inputs to an intended application;
decrypting the encrypted data inputs;
submitting the decrypted data inputs to a designated receiving party;
preventing, by the anti-key logger, malware from capturing the at least some of the data inputs; and
uninstalling the anti-key logger in response to a logoff of the online access session.
14. The computer program product of claim 13 , wherein the most privileged access level is a most privileged access level for browser events.
15. The computer program product of claim 13 , wherein the anti-key logger does not require detection of the malware to prevent the malware from capturing the at least some of the data inputs.
16. The computer program product of claim 11 , wherein the form submission initiation call event is an OnSubmit call event or a BeforeNavigate call event.