Script verification using a hash
Systems and methods of the present invention provide for one or more server computers communicatively coupled to a network and configured to: identify, within a data store: a web page including a script tag; a URL in the script tag referencing a location for a second server hosting a script file; and a first hash data in the script tag generated from the script file using a hash function algorithm. The server computer(s) execute a request that accesses the script file and a second hash generated from the script file and stored on the second server computer. If the second hash data does not match the first hash data, execution of the script tag is disabled, and a notification is generated.
1. A system, comprising at least one processor executing instructions within a memory coupled to a first server computer coupled to a network, the instructions causing the first server computer to:
receive a plurality of user-defined rules for managing a plurality of script tags;
wherein the plurality of user-defined rules comprise at least one user-defined rule for disabling execution of a script file;
access a web page hosted by the first server computer, wherein the web page includes a reference to the script file and a first hash data, wherein the first hash data is at least partially determined by a contents of the script file;
access the script file and a second hash data using the reference in the web page, wherein the script file and the second hash data are stored on a second server computer;
determine the first hash data does not match the second hash data;
responsive to a determination that the second hash data does not match the first hash data:
i) prevent the first server computer from executing a portion of the script file,
ii) transmit a notification to a security center operating the first server computer, and
iii) automatically disable the execution of the script file using the at least one user-defined rule for disabling execution of the script file.
2. The system of claim 1 , wherein the first hash data is generated as output from a one-way cryptographic hash function algorithm executed using a copy of the script file, or a data associated with the script file, as an input.
3. The system of claim 1 , wherein the second hash data is generated subsequent to an access of the script file.
4. The system of claim 1 , wherein the instructions further cause the first server computer, responsive to a determination that the first hash data matches the second hash data, to download and execute the script file.
5. The system of claim 1 , wherein the script file is a JavaScript file.
6. The system of claim 1 , wherein the at least one processor executing instructions accesses the web page in a manner analogous to a web browser and provided by a plurality of servers at a plurality of IP address locations within a network.
7. The system of claim 1 , further comprising a web browser running on a client computer coupled to the network, the web browser configured to:
request the web page;
download the script file;
generate the second hash data; and
execute the script file.
8. The system of claim 1 , wherein:
the web page is hosted on the first server computer; and the script file and the second hash data are hosted on the second server computer, which is operated by a third party script vendor.
9. A method, comprising:
receiving a plurality of user-defined rules for managing a plurality of script taps;
wherein the plurality of user-defined rules comprise at least one user-defined rule for disabling execution of a script file;
accessing, by a first server computer coupled to a network, a web page hosted by the first server computer, wherein the web page includes a reference to a script file and a first hash data, wherein the first hash data is at least partially determined by a contents of the script file;
accessing, by the first server computer, the script file and a second hash data using the reference in the web page, wherein the script file and the second hash data are stored on a second server computer;
determining, by the first server computer, the first hash data does not match the second hash data; and
responsive to a determination that the second hash data does not match the first hash data;
i) preventing, by the first server computer, the first server computer from executing a portion of the script file,
ii) transmitting a notification to a security center operating the first server computer, and
iii) automatically disabling the execution of the script file using the at least one user-defined rule for disabling execution of the script file.
10. The method of claim 9 , wherein the first hash data and the second hash data are generated as output from a one-way cryptographic hash function algorithm using the script file, or a data associated with the script file, as an input.
11. The method of claim 9 , wherein the second hash data is generated subsequent to an access of the script file.
12. The method of claim 9 , wherein the instructions further cause the first server computer, responsive to a determination that the first hash data matches the second hash data, to download and execute the script file.
13. The method of claim 9 , wherein the script file is a JavaScript file.
14. The method of claim 9 , further comprising accessing, by the first server computer, the script file by executing a request of the web page analogous to a web browser.
15. The method of claim 9 , further comprising executing a web browser running on a client computer coupled to the network, the web browser configured to:
request the web page;
download the script file;
generate the second hash data;
authenticate the second hash data; and
execute the script file.
16. The method of claim 9 , wherein:
the web page is hosted on the first server computer; and
the script file, and the second hash data is hosted on the second server computer, which is operated by a third party script vendor.