Certificate authority framework
    21.
    发明授权

    公开(公告)号:US10791110B2

    公开(公告)日:2020-09-29

    申请号:US15206118

    申请日:2016-07-08

    Abstract: A server receives a single certificate signature request from a requestor and determines that the requestor is authorized for a certificate corresponding to the single certificate signature request. The server generates a first certificate corresponding to the single certificate signature request, wherein the first certificate has a first expiry value. The server transmits the generated first certificate to the requestor. Responsive to an amount of time elapsing, the server automatically generating a second certificate corresponding to the single certificate signature request, wherein the amount of time expiring is less than the first expiry value. The server transmits the generated second certificate to the requestor.

    Methods and apparatuses for enabling HSTS policy for a subdomain of a domain

    公开(公告)号:US10178128B2

    公开(公告)日:2019-01-08

    申请号:US14967156

    申请日:2015-12-11

    Abstract: A method and apparatus for enabling an HSTS policy for a subdomain of a domain is described. A request for content at a subdomain of a domain is received at a proxy server from a client device over a secure transport. The proxy server determines whether the subdomain is associated with a rule indicating that Hypertext Transport Protocol Strict Transport Security (HSTS) is to be enabled for the subdomain of the domain. Responsive to determining that the subdomain is associated with the rule, the proxy server transmits, to the client device, a first response that includes an HSTS header and which instructs the client device to communicate only over the secure transport for requests for content at the subdomain, wherein the first response includes the HSTS header regardless of whether HSTS has been enabled for the subdomain at an origin server.

    METHODS AND SYSTEMS FOR IDENTIFICATION OF A DOMAIN OF A COMMAND AND CONTROL SERVER OF A BOTNET

    公开(公告)号:US20170180312A1

    公开(公告)日:2017-06-22

    申请号:US14978209

    申请日:2015-12-22

    CPC classification number: H04L61/3025 H04L61/1511 H04L61/6013 H04L67/28

    Abstract: Methods and apparatuses for identifying a domain of a command and control server of a botnet are described. Upon receipt of a request to register a domain for a service that includes a proxy server, where the proxy server is to receive and process traffic for that domain if registration is successful, a determination of whether the domain was generated by a domain generation algorithm (DGA) is performed. Responsive to determining that the domain was generated by the DGA, performing at least one of: denying registration of the domain for the service, and accepting registration of the domain for the service and causing the proxy server to monitor communications received to and from the domain

    Web form protection
    28.
    发明授权
    Web form protection 有权
    Web表单保护

    公开(公告)号:US09401919B2

    公开(公告)日:2016-07-26

    申请号:US14578223

    申请日:2014-12-19

    Abstract: A request for a web page is received and the requested web page is retrieved. The web page is modified to obfuscate a set of form attribute values into a corresponding set of obfuscated form attribute values. The modified web page is transmitted to the requesting device. The modified web page does not include the set of form attribute values in their original form. Form data for the set of obfuscated form attribute values is received from the requesting device. The set of obfuscated form attribute values is deobfuscated thereby revealing the original set of form attribute values. The form data for the set of original form attribute values is further processed.

    Abstract translation: 接收到对网页的请求,并且检索所请求的网页。 修改网页以将一组表单属性值混淆到相应的一组混淆形式属性值中。 被修改的网页被发送到请求设备。 修改后的网页不包含其原始形式的表单属性值集合。 从请求设备接收到用于一组混淆形式属性值的表单数据。 混淆形式属性值的集合被反混淆,从而揭示原始的表单属性值集合。 进一步处理原始表单属性值集合的表单数据。

Patent Agency Ranking