INSTRUMENTING APPLICATIONS TO PREVENT ABUSE BY PRIVILEGED USERS

    公开(公告)号:US20230325478A1

    公开(公告)日:2023-10-12

    申请号:US17718565

    申请日:2022-04-12

    CPC classification number: G06F21/31

    Abstract: In one embodiment, a device obtains data regarding a transaction attempted by a user within an online application that is captured by instrumentation code that is inserted into the online application at runtime, wherein the user has sufficient privileges within the online application to perform the transaction; The device sends, based on the data regarding the transaction, one or more approval requests to one or more authorizers. The device receives one or more responses to the one or more approval requests. The device blocks, and based on the one or more responses, the transaction attempted by the user within the online application via the instrumentation code.

    NETWORK API PATH TRACING
    5.
    发明公开

    公开(公告)号:US20230379365A1

    公开(公告)日:2023-11-23

    申请号:US17749609

    申请日:2022-05-20

    CPC classification number: H04L63/20 G06F9/547

    Abstract: In one embodiment, a device receives traffic flow information regarding an application programming interface call made to a particular endpoint via a path in a network. The device requests, based on the traffic flow information, that a plurality of distributed agents in the network perform a trace of the path taken by the application programming interface call. The device receives results from the trace of the path performed by the plurality of distributed agents. The device causes a security policy to be enforced with respect to application programming interface calls made to the particular endpoint, based on the results from the trace.

    SECURE ACCESS SERVICE EDGE FUNCTION WITH CONFIGURED METRIC COLLECTION INTELLIGENCE

    公开(公告)号:US20230379319A1

    公开(公告)日:2023-11-23

    申请号:US17749274

    申请日:2022-05-20

    CPC classification number: H04L63/083 H04L63/20

    Abstract: In one embodiment, a method herein comprises: receiving, at a device, a registration request from a telemetry exporter that transmits telemetry data; generating, by the device, a telemetry configuration file for the telemetry exporter, the telemetry configuration file defining a policy for transmission of telemetry data from the telemetry exporter and an authentication token for the telemetry exporter; sharing, by the device, the policy with a security enforcer; and sending, by the device, the telemetry configuration file to the telemetry exporter, wherein the telemetry exporter is caused to connect with the security enforcer using the authentication token, send the telemetry configuration file to the security enforcer, and transmit collected telemetry data to the security enforcer, and wherein the security enforcer is caused to create a dynamic publish-subscribe stream for publishing the collected telemetry data received from the telemetry exporter based on the telemetry configuration file and the policy.

    PROTECTING CONFIDENTIAL INFORMATION IN ONLINE APPLICATIONS

    公开(公告)号:US20230376632A1

    公开(公告)日:2023-11-23

    申请号:US17746517

    申请日:2022-05-17

    CPC classification number: G06F21/6254

    Abstract: In one embodiment, a device obtains transaction data regarding a transaction attempted by a client of an online application to access confidential information within the online application. The transaction data is captured by instrumentation code inserted into the online application at runtime. The device permits, based on a policy, the transaction to complete within the online application. The device determines, based on the policy, a set of one or more client-side functions to disable during the transaction. The device instructs an agent executed by the client to disable the set of one or more client-side functions during the transaction.

    CLOUD NATIVE OBSERVABILITY MIGRATION AND ASSESSMENT

    公开(公告)号:US20250007812A1

    公开(公告)日:2025-01-02

    申请号:US18215508

    申请日:2023-06-28

    Abstract: In one embodiment, a device obtains testing parameters used by a plurality of agents in a network to perform testing with respect to an online application. The device identifies overlapping parameters among the testing parameters and generates a consolidated set of testing parameters for the overlapping parameters. The device configures the plurality of agents such that a singular testing agent performs testing with respect to the online application using the consolidated set of testing parameters instead of multiple testing agents performing testing with respect to the online application using the overlapping parameters.

Patent Agency Ranking