Methods, systems, and media for detecting alteration of a web page

Abstract

Methods, systems, and media for detecting alteration of a web page are provided. In some embodiments, a method for detecting alteration of a web page is provided, the method comprising: analyzing a web page; generating a forensic footprint associated with the web page based on the analyzing; determining whether the forensic footprint matches reference information associated with the web page; and in response to determining that the forensic footprint does not match the reference information, blocking at least a portion of the web page from being presented.

What is claimed is: 
     
         1 . A method for detecting alteration of a web page, comprising:
 requesting, using a hardware processor of a user device, a web page;   receiving, using the hardware processor of the user device, the web page;   generating, using the hardware processor of the user device, a forensic footprint associated with the web page;   requesting a reference footprint using an identifier corresponding to the web page from a server;   receiving the reference footprint from the server;   determining, using the hardware processor of the user device, whether the forensic footprint matches the reference footprint associated with the web page; and   in response to determining that the forensic footprint does not match the reference footprint, blocking, using the hardware processor of the user device, at least a portion of the web page.   
     
     
         2 . The method of  claim 1 , wherein the forensic footprint comprises at least one of a size of the web page, a number of scripted files included in the web page, a number of user input fields included in the web page, a number of selectable icons included in the web page, a number of images included in the web page, and information indicating content of the web page. 
     
     
         3 . The method of  claim 1 , wherein the reference footprint is generated prior to the receiving. 
     
     
         4 . The method of  claim 1 , further comprising at least one of redirecting a browser to another web page and presenting a notification to a user. 
     
     
         5 . The method of  claim 1 , further comprising, in response to determining that the forensic footprint matches the reference footprint, iteratively performing the generating and the determining after a predetermined amount of time. 
     
     
         6 . A system for detecting alteration of a web page, comprising:
 a hardware processor of a user device configured to:
 request a web page; 
 receive the web page; 
 generate a forensic footprint associated with the web page; 
 request a reference footprint using an identifier corresponding to the web page from a server; 
 receive the reference footprint from the server; 
 determine whether the forensic footprint matches reference footprint associated with the web page; and 
 in response to determining that the forensic footprint does not match the reference footprint, blocking at least a portion of the web page. 
   
     
     
         7 . The system of  claim 6 , wherein the forensic footprint comprises at least one of a size of the web page, a number of scripted files included in the web page, a number of user input fields included in the web page, a number of selectable icons included in the web page, a number of images included in the web page, and information indicating content of the web page. 
     
     
         8 . The system of  claim 6 , wherein the reference footprint is generated prior to the receiving. 
     
     
         9 . The system of  claim 6 , wherein the hardware processor is further configured to perform at least one of redirecting a browser to another web page and presenting a notification to a user. 
     
     
         10 . The system of  claim 6 , wherein the hardware processor is further configured to, in response to determining that the forensic footprint matches the reference footprint, iteratively perform the generating and the determining after a predetermined amount of time. 
     
     
         11 . A non-transitory computer-readable medium containing computer-executable instructions that, when executed by a processor of a user device, cause the processor to perform a method for detecting alteration of a web page, the method comprising:
 requesting a web page;   receiving, at the user device, the web page;   generating a forensic footprint associated with the web page;   requesting a reference footprint using an identifier corresponding to the web page from a server;   receiving the reference footprint from the server;   determining at the user device whether the forensic footprint matches reference footprint associated with the web page; and   in response to determining at the user device that the forensic footprint does not match the reference footprint, blocking at least a portion of the web page.   
     
     
         12 . The non-transitory computer-readable medium of  claim 11 , wherein the forensic footprint comprises at least one of a size of the web page, a number of scripted files included in the web page, a number of user input fields included in the web page, a number of selectable icons included in the web page, a number of images included in the web page, and information indicating content of the web page. 
     
     
         13 . The non-transitory computer-readable medium of  claim 11 , wherein the reference footprint is generated prior to the receiving. 
     
     
         14 . The non-transitory computer-readable medium of  claim 11 , further comprising at least one of redirecting a browser to another web page and presenting a notification to a user. 
     
     
         15 . The non-transitory computer-readable medium of  claim 11 , the method further comprising, in response to determining that the forensic footprint matches the reference footprint, iteratively performing the generating and the determining after a predetermined amount of time.