Virtual browser application systems and methods
Disclosed embodiments provide a framework for provisioning a virtual browser application environment accessible using a native browser application. The virtual browser application environment is implemented on a virtual machine instance, where the virtual environment is isolated from other functionality of the virtual machine instance. In response to a request to access the environment, a set of access control policies are identified. The access control policies define a level of access to actions that can be performed within the environment. The environment is presented through a website executed on a user's native browser application. The user's interactions with the environment and with any other users within the environment are monitored in real-time according to the access control policies.
1. A computer-implemented method, comprising:
detecting a request to access a suspicious website through a native browser application, wherein the request is detected by a browser extension application that continuously monitors user interactions with the native browser application, wherein the request includes a Uniform Resource Identifier (URI) associated with the suspicious website, and wherein the request is detected by the browser extension application through user interaction with one or more interaction elements presented through the native browser application;
processing the URI and the one or more interaction elements through a trained machine learning algorithm to identify a legitimate URI corresponding to a legitimate website, wherein the trained machine learning algorithm is trained using a dataset of sample suspicious URIs, corresponding interaction elements, and known elements associated with legitimate websites;
executing a virtual browser application on a virtual machine instance in a cloud computing environment, wherein access to the virtual browser application is isolated from other functionalities of the virtual machine instance in the cloud computing environment; and
re-directing the native browser application to a viewer page associated with the virtual browser application, wherein when the native browser application is re-directed to the viewer page, the legitimate website corresponding to the legitimate URI is presented through the virtual browser application.
2. The computer-implemented method of claim 1 , further comprising:
generating a prompt for a unique code associated with the virtual browser application; and
receiving the unique code, wherein when the unique code is received, the virtual browser application is identified and executed on the virtual machine instance.
3. The computer-implemented method of claim 1 , wherein the one or more interaction elements are presented with other elements associated with the legitimate website, and wherein the other elements are processed through the trained machine learning algorithm to further identify the legitimate URI.
4. The computer-implemented method of claim 1 , further comprising:
identifying one or more access control policies associated with a user of the native browser application, wherein the one or more access control policies define a level of access to actions performable by the user within the virtual browser application; and
facilitating interaction with the legitimate website through the virtual browser application according to the one or more access control policies.
5. The computer-implemented method of claim 1 , wherein the browser extension application is unable to discern any activity associated with the virtual browser application.
6. The computer-implemented method of claim 1 , further comprising:
receiving feedback corresponding to the legitimate URI and the legitimate website presented through the virtual browser application; and
updating the trained machine learning algorithm based on the feedback.
7. The computer-implemented method of claim 1 , wherein the one or more interaction elements are provided through an unsolicited message presented through an e-mail web client, and wherein the e-mail web client is accessed using the native browser application.
8. A system, comprising:
one or more processors; and
memory storing thereon instructions that, as a result of being executed by the one or more processors, cause the system to:
detect a request to access a suspicious website through a native browser application, wherein the request is detected by a browser extension application that continuously monitors user interactions with the native browser application, wherein the request includes a Uniform Resource Identifier (URI) associated with the suspicious website, and wherein the request is detected by the browser extension application through user interaction with one or more interaction elements presented through the native browser application;
process the URI and the one or more interaction elements through a trained machine learning algorithm to identify a legitimate URI corresponding to a legitimate website, wherein the trained machine learning algorithm is trained using a dataset of sample suspicious URIs, corresponding interaction elements, and known elements associated with legitimate websites;
execute a virtual browser application on a virtual machine instance in a cloud computing environment, wherein access to the virtual browser application is isolated from other functionalities of the virtual machine instance in the cloud computing environment; and
re-direct the native browser application to a viewer page associated with the virtual browser application, wherein when the native browser application is re-directed to the viewer page, the legitimate website corresponding to the legitimate URI is presented through the virtual browser application.
9. The system of claim 8 , wherein the instructions further cause the system to:
generate a prompt for a unique code associated with the virtual browser application; and
receive the unique code, wherein when the unique code is received, the virtual browser application is identified and executed on the virtual machine instance.
10. The system of claim 8 , wherein the one or more interaction elements are presented with other elements associated with the legitimate website, and wherein the other elements are processed through the trained machine learning algorithm to further identify the legitimate URI.
11. The system of claim 8 , wherein the instructions further cause the system to:
identify one or more access control policies associated with a user of the native browser application, wherein the one or more access control policies define a level of access to actions performable by the user within the virtual browser application; and
facilitate interaction with the legitimate website through the virtual browser application according to the one or more access control policies.
12. The system of claim 8 , wherein the browser extension application is unable to discern any activity associated with the virtual browser application.
13. The system of claim 8 , wherein the instructions further cause the system to:
receive feedback corresponding to the legitimate URI and the legitimate website presented through the virtual browser application; and
update the trained machine learning algorithm based on the feedback.
14. The system of claim 8 , wherein the one or more interaction elements are provided through an unsolicited message presented through an e-mail web client, and wherein the e-mail web client is accessed using the native browser application.
15. A non-transitory, computer-readable storage medium storing thereon executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to:
detect a request to access a suspicious website through a native browser application, wherein the request is detected by a browser extension application that continuously monitors user interactions with the native browser application, wherein the request includes a Uniform Resource Identifier (URI) associated with the suspicious website, and wherein the request is detected by the browser extension application through user interaction with one or more interaction elements presented through the native browser application;
process the URI and the one or more interaction elements through a trained machine learning algorithm to identify a legitimate URI corresponding to a legitimate website, wherein the trained machine learning algorithm is trained using a dataset of sample suspicious URIs, corresponding interaction elements, and known elements associated with legitimate websites;
execute a virtual browser application on a virtual machine instance in a cloud computing environment, wherein access to the virtual browser application is isolated from other functionalities of the virtual machine instance in the cloud computing environment; and
re-direct the native browser application to a viewer page associated with the virtual browser application, wherein when the native browser application is re-directed to the viewer page, the legitimate website corresponding to the legitimate URI is presented through the virtual browser application.
16. The non-transitory, computer-readable storage medium of claim 15 , wherein the executable instructions further cause the computer system to:
generate a prompt for a unique code associated with the virtual browser application; and
receive the unique code, wherein when the unique code is received, the virtual browser application is identified and executed on the virtual machine instance.
17. The non-transitory, computer-readable storage medium of claim 15 , wherein the one or more interaction elements are presented with other elements associated with the legitimate website, and wherein the other elements are processed through the trained machine learning algorithm to further identify the legitimate URI.
18. The non-transitory, computer-readable storage medium of claim 15 , wherein the executable instructions further cause the computer system to:
identify one or more access control policies associated with a user of the native browser application, wherein the one or more access control policies define a level of access to actions performable by the user within the virtual browser application; and
facilitate interaction with the legitimate website through the virtual browser application according to the one or more access control policies.
19. The non-transitory, computer-readable storage medium of claim 15 , wherein the browser extension application is unable to discern any activity associated with the virtual browser application.
20. The non-transitory, computer-readable storage medium of claim 15 , wherein the executable instructions further cause the computer system to:
receive feedback corresponding to the legitimate URI and the legitimate website presented through the virtual browser application; and
update the trained machine learning algorithm based on the feedback.
21. The non-transitory, computer-readable storage medium of claim 15 , wherein the one or more interaction elements are provided through an unsolicited message presented through an e-mail web client, and wherein the e-mail web client is accessed using the native browser application.