Shape Security, Inc.

Other

Wesley Hales

Justin David Call

Sergey Shekyan

Tim Peacock

Michael Coates

Jarrod S Overson

Techniques are provided for detecting compromised web pages in a runtime environment. A first version of a web page is retrieved and loaded in a browser comprising a browser extension configured to detect event listeners added when web pages are loaded by the browser. First data is generated describing a first set of event listeners detected by the browser extension when the first version of the web page is loaded. At a second time a second version of the web page is retrieved and loaded in the browser. Second data is generated describing a second set of event listeners detected by the browser extension when the second version of the web page is loaded. It is determined that the web page is compromised based on comparing the first data and the second data. In response to determining that the web page is compromised, a threat response action is performed.

Detecting compromised web pages in a runtime environment

Methods and apparatus are described for automatically modifying web page source code to address a variety of security vulnerabilities such as, for example, vulnerabilities that are exploited by mixed content attacks.

Mitigating security vulnerabilities in web content

Securing web page content

Automated hardening of web page content

Growing community of inventors

Mountain View, CA, United States of America

Wesley Hales