US 12,294,608 B2
Graphical rendering of malicious web pages
Phillip John Sobolewski, Charleston, SC (US); and Mark Doyle, Aptos, CA (US)
Assigned to Isolated Technologies, LLC, Sausalito, CA (US)
Filed by Isolated Technologies, LLC, Sausalito, CA (US)
Filed on Nov. 18, 2019, as Appl. No. 16/687,084.
Application 16/687,084 is a continuation of application No. 15/295,585, filed on Oct. 17, 2016, granted, now 10,484,421.
Application 15/295,585 is a continuation of application No. 14/498,404, filed on Sep. 26, 2014, granted, now 9,485,227, issued on Nov. 1, 2016.
Application 14/498,404 is a continuation of application No. 13/197,651, filed on Aug. 3, 2011, granted, now 8,875,273, issued on Oct. 28, 2014.
Claims priority of provisional application 61/459,748, filed on Dec. 17, 2010.
Prior Publication US 2020/0084226 A1, Mar. 12, 2020
Int. Cl. H04L 9/40 (2022.01); G06F 3/04842 (2022.01); G06F 16/958 (2019.01); G06F 21/53 (2013.01); G06F 21/56 (2013.01); G06F 21/74 (2013.01)
CPC H04L 63/145 (2013.01) [G06F 3/04842 (2013.01); G06F 21/53 (2013.01); G06F 21/56 (2013.01); G06F 21/568 (2013.01); G06F 21/74 (2013.01); H04L 63/02 (2013.01); H04L 63/1408 (2013.01); G06F 16/986 (2019.01)] 24 Claims
OG exemplary drawing
 
1. A method, performed by an intermediate device, for prevention of malware infection of a user device, the method comprising:
receiving, from a browser operating on the user device, a first request for a first web page associated with an Internet web site, the browser being capable of rendering the first web page;
transmitting, to a website associated with the requested first web page and in response to the first request, a second request for the first web page;
receiving, responsive to the second request, a first set of data associated with the first web page, the first set of data being in a code domain format;
generating, based on the first set of data in the code domain format, a first set of images, the first set of images representing only all the renderable data of the first set of data in an image format, said generating of said first set of images performed without knowledge of a location or a presence of said malware infection, or code corresponding to said malware infection, within said first set of data in said code domain format, wherein said generating of said first set of images is performed without requiring a malware detection process; and
transmitting, to the browser, in place of the first web page, the first set of images with correlation data configured to enable a user to interact with the first set of images on the user device in a manner that is substantially the same as though the user device had received the first web page in the code domain format and the first web page had been rendered from the code domain format by the browser, wherein said method, performed by said intermediate device, for said prevention of said malware infection of said user device is entirely accomplished via code isolation.