利索-全球专利检索

  1. Login
  2. Sign Up

Search Results

3758 records (took 0.03 seconds)

    Efficient threat context-aware packet filtering for network protection
    55.
    发明授权
    Efficient threat context-aware packet filtering for network protection 有权

    公开(公告)号：US11824875B2

    公开(公告)日：2023-11-21

    申请号：US18084366

    申请日：2022-12-19

    Applicant: Centripetal Networks, LLC

    Inventor： Sean Moore ,  Jonathan R. Rogers ,  Vincent Mutolo ,  Peter P. Geremia

    IPC: H04L29/06 ,  H04L9/40

    CPC classification number: H04L63/1416 ,  H04L63/0245 ,  H04L63/1425 ,  H04L63/1466 ,  H04L63/166

    Abstract: A threat intelligence gateway (TIG) may protect TCP/IP networks from network (e.g., Internet) threats by enforcing certain policies on in-transit packets that are crossing network boundaries. The policies may be composed of packet filtering rules with packet-matching criteria derived from cyber threat intelligence (CTI) associated with Internet threats. These CTI-derived packet-filtering rules may be created offline by policy creation and management servers, which may distribute the policies to subscribing TIGs that subsequently enforce the policies on in-transit packets. Each packet filtering rule may specify a disposition that may be applied to a matching in-transit packet, such as deny/block/drop the in-transit packet or pass/allow/forward the in-transit packet, and also may specify directives that may be applied to a matching in-transit packet, such as log, capture, spoof-tcp-rst, etc. Often, however, the selection of a rule's disposition and directives that best protect the associated network may not be optimally determined before a matching in-transit packet is observed by the associated TIG. In such cases, threat context information that may only be available (e.g., computable) at in-transit packet observation and/or filtering time, such as current time-of-day, current TIG/network location, current TIG/network administrator, the in-transit packet being determined to be part of an active attack on the network, etc., may be helpful to determine the disposition and directives that may best protect the network from the threat associated with the in-transit packet. The present disclosure describes examples of methods, systems, and apparatuses that may be used for efficiently determining (e.g., accessing and/or computing), in response to the in-transit packet, threat context information associated with an in-transit packet. The threat context information may be used to efficiently determine the disposition and/or one or more directives to apply to the in-transit packet. This may result in dispositions and/or directives being applied to in-transit packets that better protect the network as compared with solely using dispositions and directives that were predetermined prior to receiving the in-transit packet.

    Remote debugging of cloud application
    56.
    发明授权
    Remote debugging of cloud application 有权

    公开(公告)号：US11822461B2

    公开(公告)日：2023-11-21

    申请号：US17453902

    申请日：2021-11-08

    Applicant: SAP SE

    Inventor： Arley Triana Morin

    IPC: G06F11/36 ,  H04L67/141 ,  H04L9/40

    CPC classification number: G06F11/3664 ,  G06F11/362 ,  H04L63/166 ,  H04L67/141

    Abstract: Provided are systems and methods for remotely debugging a software application hosted on a cloud platform. Rather than download and test code locally, a developer may login directly to the cloud platform, and debug the software application in its native cloud environment. In one example, the method may include establishing a communication channel between a remote computing terminal and an application instance hosted on a cloud platform, enabling port forwarding at the remote computing terminal to redirect requests from the remote computing terminal to the application instance hosted on the cloud platform via the communication channel, attaching a debugger to a port at the remote computing terminal that is associated with the communication channel, and forwarding, via the debugger, debugging commands input at the remote computing terminal to the application instance hosted on the cloud platform via the communication channel.

    Certificate authority (CA) security model in an overlay network supporting a branch appliance
    58.
    发明授权
    Certificate authority (CA) security model in an overlay network supporting a branch appliance 有权

    公开(公告)号：US11818279B2

    公开(公告)日：2023-11-14

    申请号：US17888251

    申请日：2022-08-15

    Applicant: Akamai Technologies, Inc.

    Inventor： Brandon O. Williams ,  Andres Guedez

    IPC: H04L9/32 ,  H04L9/08 ,  H04L9/40

    CPC classification number: H04L9/3268 ,  H04L9/0894 ,  H04L63/0209 ,  H04L63/0823 ,  H04L63/166 ,  H04L63/06

    Abstract: A method to generate a trusted certificate on an endpoint appliance located in an untrusted network, wherein client devices are configured to trust a first Certificate Authority (CA) that is administered by the untrusted network. In this approach, an overlay network is configured between the endpoint appliance and an origin server associated with the endpoint appliance. The overlay comprises an edge machine located proximate the endpoint appliance, and an associated key management service. A second CA is configured in association with the key management service to receive a second certificate signed by the first CA. A third CA is configured in association with the edge machine to receive a third certificate signed by the second CA. In response to a request from the appliance, a server certificate signed by the third CA is dynamically generated and provided to the appliance. A client device receiving the server certificate from the endpoint appliance trusts the server certificate as if the server certificate originated from the first CA, thereby enabling the endpoint appliance to terminate a secure information flow received at the endpoint appliance.

    Monitoring for lateral movements-related security threats
    59.
    发明授权
    Monitoring for lateral movements-related security threats 有权

    公开(公告)号：US11818168B2

    公开(公告)日：2023-11-14

    申请号：US17814908

    申请日：2022-07-26

    Applicant: Cymulate Ltd.

    Inventor： Avihai Ben-Yosef ,  Eyal Aharoni ,  Shmuel Ur

    IPC: G06F21/00 ,  H04L9/40 ,  G06F16/901 ,  G06F17/18

    CPC classification number: H04L63/1466 ,  G06F16/9024 ,  G06F17/18 ,  H04L63/1425 ,  H04L63/166

    Abstract: Method, product and apparatus for monitoring for security threats from lateral movements. A method comprises obtaining a graph of network lateral movements, that comprises nodes, representing network assets, and directed edges, representing a network lateral movement from a source asset to a target asset. An event that affects the graph of network lateral movements is detected. The event affects at least one of: the payload utility of the node and the probability of penetration to the node. The graph of network lateral movements is updated based on the event. The updated graph is analyzed to determine one or more mitigation actions to be applied. The one or more mitigation actions are applied automatically, manually or the like.

Patent Agency Ranking