System and method for malware detection using hashing techniques
A system and method in accordance with example embodiments may include systems and methods for generating and transforming data presentation. The method may include receiving, using a processor, a request for a web page, and submitting, by the processor, the request to a computer server system. The request can include a user identification and a user password. The method may further include receiving, from the computer server system, data corresponding to the requested web page. Further, the method includes storing, in a memory, the received data, and causing the received data to be shown on a display associated with the user device.
1. A system, comprising:
a backend server that includes a backend processor configured to calculate a hash value for a known web application;
backend data storage configured to store the known web application and the calculated hash value for the known web application;
a backend communication interface configured to:
receive, via a network, a request for the known web application from a mobile device,
provide, via the network, the known web application to the mobile device, and
receive, via the network, at least one mobile hash value that has been calculated by the mobile device;
a hash processor configured to:
compare the calculated hash value to the at least one received mobile hash value to determine if the calculated hash value matches the at least one received mobile hash value, and
identify malware when the hash processor determines that the calculated hash value does not match the at least one received mobile hash value.
2. The system of claim 1 , wherein the backend processor and the mobile device are configured to calculate the hash value for the known web application and mobile hash value, respectively, using at least one of a trivial hash function, a perfect hash function, a special-purpose hash function, and a rolling hash function.
3. The system of claim 1 , wherein the request for the known web application from the mobile device includes a request to authenticate the mobile device in order to log into an account maintained by the backend server.
4. The system of claim 1 , wherein the backend data storage is configured to store the known web application and the calculated hash value for the known web application for comparison to more than one received mobile hash value.
5. The system of claim 1 , wherein:
the known web application includes a plurality of scripts, and the backend communication interface receives, via the network, at least one mobile hash value, that has been calculated by the mobile device, for each of the plurality of scripts, and
the backend communication interface is configured to transmit an alert to the mobile device via the network when the hash processor determines that the calculated hash value for the known web application and the received mobile hash value do not match.
6. The system of claim 1 , wherein the backend processor is configured to generate a log of the identified malware that is stored within the backend data storage, and
wherein the log comprises date and time that the malware was identified, a mobile device identifier associated with the identified malware, and the at least one received mobile hash value associated with the identified malware.
7. The system of claim 1 , wherein the hash processor is configured to not identify malware when the hash processor determines that the calculated hash value for the known web application and the received mobile hash value match.
8. The system of claim 1 , wherein the backend server is configured to enable receiving content from the mobile device.
9. A system, comprising:
a hardware request communication interface of a mobile device configured to request a web application from a backend server via a network and receive the web application from the backend server; and
a hardware mobile device hash processor configured to calculate a mobile hash value of the received web application, wherein
the backend server includes:
backend data storage configured to store the web application and a hash value for the web application,
a backend communication interface configured to receive the request, provide the web application to the mobile device, and receive at least one mobile hash value that has been calculated by the mobile device,
a backend hash processor configured to:
compare the stored hash value for the web application with the at least one mobile hash value that has been calculated by the mobile device,
determine if the stored hash value for the web application is the same as the at least one mobile hash value that has been calculated by the mobile device, and
identify malware when the hash processor determines that the stored hash value for the web application is not the same as the at least one mobile hash value.
10. The system of claim 9 , wherein the mobile device is configured to calculate the mobile hash value using at least one of a trivial hash function, a perfect hash function, a special-purpose hash function, and a rolling hash function.
11. The system of claim 9 , wherein the request for web application from the mobile device includes a request to authenticate the mobile device in order to log into an account maintained by the backend server.
12. The system of claim 9 , wherein the backend data storage is configured to store the known web application and the calculated hash value for the known web application for comparison to more than one received mobile hash value.
13. The system of claim 9 , wherein:
the web application includes a plurality of scripts, and the backend communication interface receives, via the network, at least one mobile hash value, that has been calculated by the mobile device, for each of the plurality of scripts, and
the backend communication interface is configured to transmit an alert to the mobile device via the network when the backend hash processor determines that the calculated hash value for the web application and the received mobile hash value do not match.
14. The system of claim 9 , wherein the backend server is configured to generate a log of the identified malware that is stored within the backend data storage, and
wherein the log comprises date and time that the malware was identified, a mobile device identifier associated with the identified malware, and the at least one mobile hash value associated with the identified malware.
15. A method, comprising:
accessing, using at least one backend processor, an accepted hash value for a script associated with a known web application;
storing the known web application and hash value for the script in backend data storage;
receiving, via a network at a backend communication interface, a request for the known web application from a mobile device;
providing, via the network and backend communication interface, the known web application to the mobile device;
receiving, via a network at the backend communication interface, at least one mobile hash value that has been calculated by the mobile device;
comparing, using a hash processor, the accepted hash value with the at least one received mobile hash values in order to determine if the accepted hash value for the script is the same as the at least one received mobile hash value;
identifying malware when the hash processor determines that the accepted hash value for the script is not the same as the at least one received mobile hash value.
16. The method of claim 15 , further comprising calculating, using the backend processor and the mobile device, the hash value for the known web application and mobile hash value, respectively, using at least one of a trivial hash function, a perfect hash function, a special-purpose hash function, and a rolling hash function.
17. The method of claim 15 , wherein the request for the known web application from the mobile device includes a request to authenticate the mobile device in order to log into an account maintained by the backend server.
18. The method of claim 15 , wherein:
the known web application includes a plurality of scripts, and further comprising receiving, via the network, at the backend communication interface, at least one mobile hash value, that has been calculated by the mobile device, for each of the plurality of scripts, and
the backend data storage is configured to store the known web application and hash value for the script for comparison to more than one received mobile hash value.
19. The method of claim 15 , further comprising transmitting, via the network and backend communication interface, an alert to the mobile device when the hash processor determines that the calculated hash value for the known web application and the received mobile hash value do not match.
20. The method of claim 15 , further comprising:
generating, via the backend server, a log of the identified malware; and
storing the generated log within the backend data storage,
wherein the log comprises date and time that the malware was identified, mobile device identification associated with the identified malware, and the at least one mobile hash value associated with the identified malware.