HOST MULTI-PATH LAYER WITH IO ANALYTICS FOR MALWARE DEFENSE

    公开(公告)号:US20230351013A1

    公开(公告)日:2023-11-02

    申请号:US17732620

    申请日:2022-04-29

    Abstract: An apparatus comprises at least one processing device configured to implement a multi-path layer in a host device, wherein the multi-path layer controls delivery of input-output (IO) operations from the host device to a storage system over selected ones of a plurality of paths through a network. The multi-path layer is configured, for each of at least a subset of the IO operations, to store at least a process identifier, a user identifier and an access type for the IO operation. The multi-path layer is further configured to perform analytics on the stored process identifiers, user identifiers and access types to detect an access pattern, and responsive to the detected access pattern having one or more designated characteristics associated with malware, to generate an alert. The alert may be generated by inserting security alert indicators into respective ones of the IO operations, for extraction therefrom by the storage system.

    PROACTIVE DATA SECURITY USING FILE ACCESS PERMISSIONS

    公开(公告)号:US20230342492A1

    公开(公告)日:2023-10-26

    申请号:US18217381

    申请日:2023-06-30

    Applicant: Rubrik, Inc.

    Abstract: Techniques for implementing proactive data security operations for files using an analysis of access permission levels for the files are disclosed. In some embodiments, a computer system performs operations comprising: determining that data of a file includes sensitive information based on an analysis of the data using a data classification model; determining that access to the file is open using an access classification model; and based on the determination that the data of the file includes sensitive information and the determination that the access to the file is open, causing a notification to be displayed on a computing device of a user, the notification comprising an indication that the file includes sensitive information and that access to the file is open.

    Systems and methods for subscription management of specific classification groups based on user's actions

    公开(公告)号:US11792225B2

    公开(公告)日:2023-10-17

    申请号:US17978115

    申请日:2022-10-31

    Applicant: KnowBe4, Inc.

    Abstract: Embodiments of the disclosure describe systems and methods for selecting a first group of users, which is selected to receive simulated phishing emails as part of a simulated phishing campaign, and adding users to a second group of users based upon those selected users interacting with a simulated phishing email that is part of a simulated phishing campaign; tracking the completion of remediation training related to phishing emails by users in the second group of users and receiving one or more indications that the users in the second group of users have completed remedial training; and automatically adding users, who are members of the second user group, to the first user group, to a third user group, or to a predetermined user group responsive to the one or more indications that the users in the second group of users have completed remedial training.

    Protecting against a tracking parameter in a web link

    公开(公告)号:US11777908B1

    公开(公告)日:2023-10-03

    申请号:US17356987

    申请日:2021-06-24

    CPC classification number: H04L63/0414 G06F16/9566 G06F21/552 G06F2221/2149

    Abstract: Protecting against a tracking parameter in a web link. In one embodiment, a method may include receiving an input URL during a browser navigation session on a user device, the input URL including parameters, determining that the parameters include a tracking parameter, pausing the browser navigation session on the user device, launching the input URL in a headless browser that operates in an isolated environment that simulates one or more features of the user device, landing on a destination web page in the isolated environment, identifying a URL of the destination web page as a destination URL, and resuming the browser navigation session on the user device by replacing the input URL, which includes the tracking parameter, with the destination URL, which does not include the tracking parameter, in order to protect the user device from the tracking parameter.

Patent Agency Ranking