Server defenses against use of tainted cache

摘要

Systems, methods, and computer readable media are described for validating objects stored in a web cache. In one embodiment, a computing device caches objects received while accessing networked content over a network. The computing device generates a description of conditions associated with the caching of the objects. When the computing device accesses networked content via a second network, the computing device or a remote server connected thereto utilizes the description to determine whether an object in the cache is trusted or untrusted. The server manages a policy that defines rules for making the determination. The policy can be generated based on descriptions received from a plurality of devices.

主权项

1. A method of managing a browser cache operating on a client node connected to a second network, the method comprising:
receiving a description of an object on a server computing node, the description received by the server computing node from the client node over the second network, the object being contained in the browser cache on the client node; analyzing the description with respect to a policy associated with a use of a first network to obtain the object contained in the browser cache; and based at least in part on the analyzing, sending an indication to the client node with respect to a use of the object by a browser operating on the client node when connected to a web-based resource over the second network.