Security-risk plugin to help targeted users interact with web pages and applications
The present disclosure relates to techniques for helping targeted users determine whether it is safe to supply personal information requested by a web site. In one embodiment, a method generally includes extracting textual content from a web page that requests information from a user and determining, based on the textual content, the type of information requested. A service type the web page provides is also determined based on the textual content. The service type and the information type are then compared to a set of predefined rules to determine a risk level associated with the web page. A visual indicator of the risk level is then displayed with the web page.
1. A method comprising:
extracting text content from a web page, wherein the web page includes one or more elements supporting user-input;
determining, based on the text content, an information type of the user-input that the one or more elements are designed to collect;
determining, based on the information type, a risk level associated with the web page;
disabling the one or more elements based on the risk level;
displaying a visual indicator of the risk level with the web page; and
upon determining that the risk level meets a predefined threshold, activating a remote assistance mode, comprising:
identifying a designated assistance provider;
transmitting, to the designated assistance provider, a request for assistance with the one or more elements;
upon receiving acceptance from the designated assistance provider, streaming a view of the web page to the designated assistance provider;
receiving a disapproval of the one or more elements from the designated assistance provider;
refraining from enabling the one or more elements based on the disapproval; and
storing an indication that the designated assistance provider did not approved re-enabling the one or more elements.
2. The method of claim 1 , wherein activating the remote assistance mode further comprises:
streaming a view of a user screen to the designated assistance provider; and
allowing the designated assistance provider to remotely control a mouse cursor.
3. The method of claim 1 , further comprising:
receiving an approval from the designated assistance provider requesting to re-enable at least one element;
re-enabling the at least one element based on the approval; and
storing an indication that the designated assistance provider approved re-enabling the at least one element.
4. The method of claim 1 , further comprising:
determining a respective individualized risk level for each of the one or more elements;
highlighting each of the one or more elements on the web page according to a coloring scheme, wherein each respective element is highlighted with a respective color that indicates the respective individualized risk level.
5. The method of claim 1 , further comprising:
determining, based on the text content, a service type the web page provides;
comparing the service type and the information type to a set of predefined rules, wherein at least one rule maps text to a risk level; and
determining the risk level associated with the web page based on the comparison of the service type and the information type to the set of predefined rules.
6. The method of claim 1 , further comprising:
determining that the risk level does not meet a predefined threshold; and
displaying the visual indicator of the risk level to indicate that the risk level does not meet the predefined threshold.
7. A non-transitory computer-readable storage medium containing instructions that, when executed by one or more processors, perform an operation for helping users determine whether it is safe to supply personal information to a web site, the operation comprising:
extracting text content from a web page, wherein the web page includes one or more elements supporting user-input;
determining, based on the text content, an information type of the user-input that the one or more elements are designed to collect;
determining, based on the information type, a risk level associated with the web page;
disabling the one or more elements based on the risk level;
displaying a visual indicator of the risk level with the web page; and
upon determining that the risk level meets a predefined threshold, activating a remote assistance mode, comprising:
identifying a designated assistance provider;
transmitting, to the designated assistance provider, a request for assistance with the one or more elements;
upon receiving acceptance from the designated assistance provider, streaming a view of the web page to the designated assistance provider;
receiving a disapproval of the one or more elements from the designated assistance provider;
refraining from enabling the one or more elements based on the disapproval; and
storing an indication that the designated assistance provider did not approved re-enabling the one or more elements.
8. The non-transitory computer-readable storage medium of claim 7 , wherein activating the remote assistance mode further comprises:
streaming a view of a user screen to the designated assistance provider; and
allowing the designated assistance provider to remotely control a mouse cursor.
9. The non-transitory computer-readable storage medium of claim 7 , wherein the operation further comprises:
receiving an approval from the designated assistance provider requesting to re-enable at least one element;
re-enabling the at least one element based on the approval; and
storing an indication that the designated assistance provider approved re-enabling the at least one element.
10. The non-transitory computer-readable storage medium of claim 7 , wherein the operation further comprises:
determining a respective individualized risk level for each of the one or more elements;
highlighting each of the one or more elements on the web page according to a coloring scheme, wherein each respective element is highlighted with a respective color that indicates the respective individualized risk level.
11. The non-transitory computer-readable storage medium of claim 7 , wherein the operation further comprises:
determining, based on the text content, a service type the web page provides;
comparing the service type and the information type to a set of predefined rules, wherein at least one rule maps text to a risk level; and
determining the risk level associated with the web page based on the comparison of the service type and the information type to the set of predefined rules.
12. A system for helping users determine whether it is safe to supply personal information to a web site, the system comprising:
one or more processors; and
a memory storing one or more applications that, when executed on the one or more processors, perform an operation, the operation comprising:
extracting text content from a web page, wherein the web page includes one or more elements supporting user-input;
determining, based on the text content, an information type of the user-input that the one or more elements are designed to collect;
determining, based on the information type, a risk level associated with the web page;
disabling the one or more elements based on the risk level;
displaying a visual indicator of the risk level with the web page; and
upon determining that the risk level meets a predefined threshold, activating a remote assistance mode, comprising:
identifying a designated assistance provider;
transmitting, to the designated assistance provider, a request for assistance with the one or more elements;
upon receiving acceptance from the designated assistance provider, streaming a view of the web page to the designated assistance provider;
receiving an approval from the designated assistance provider requesting to re-enable the one or more elements;
re-enabling the one or more elements based on the approval; and
storing an indication that the designated assistance provider approved re-enabling the one or more elements.
13. The system of claim 12 ,
wherein activating the remote assistance mode further comprises:
streaming a view of a user screen to the designated assistance provider; and
allowing the designated assistance provider to remotely control a mouse cursor.
14. The system of claim 12 , wherein the operation further comprises:
receiving an approval from the designated assistance provider requesting to re-enable at least one element;
re re-enabling at least one element based on the approval; and
storing an indication that the designated assistance provider approved re-enabling at least one element.
15. The system of claim 12 , wherein the operation further comprises:
determining a respective individualized risk level for each of the one or more elements;
highlighting each of the one or more elements on the web page according to a coloring scheme, wherein each respective element is highlighted with a respective color that indicates the respective individualized risk level.
16. The system of claim 12 , wherein the operation further comprises:
determining, based on the text content, a service type the web page provides;
comparing the service type and the information type to a set of predefined rules, wherein at least one rule maps text to a risk level; and
determining the risk level associated with the web page based on the comparison of the service type and the information type to the set of predefined rules.