利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

40 条记录 (耗时 0.026 秒)

    Methods and systems for securing and retrieving sensitive data using indexable databases
    3.
    发明授权
    Methods and systems for securing and retrieving sensitive data using indexable databases 有权

    公开(公告)号：US11620402B2

    公开(公告)日：2023-04-04

    申请号：US17027556

    申请日：2020-09-21

    申请人： netSkope, Inc.

    发明人： Ravi Ithal ,  Shaila Vasudev ,  Khurram Saqlain ,  Mahesh Gupta ,  Karan Mendiratta ,  Krishna Narayanaswamy

    IPC分类号： G06F21/62 ,  H04L9/06 ,  G06F16/22 ,  G06F16/245 ,  H04L9/40 ,  H04L9/08 ,  G06F21/60 ,  H04L9/32

    摘要： The technology disclosed teaches protecting sensitive data in the cloud via indexable databases. The method includes identifying sensitive fields of metadata for encryption and for hashing. The method also includes hashing at least partial values in the indexable sensitive fields to non-reversible hash values, concatenating the non-reversible hash values with the metadata for the network events, and encrypting the sensitive fields of metadata. Also included is sending the metadata for the network events, with the non-reversible hash values and the encrypted sensitive fields, to a remote database server that does not have a decryption key for the encrypted sensitive fields and that indexes the non-reversible hash values for indexed retrieval against the indexable sensitive fields. The disclosed technology also teaches retrieving sensitive information that is secured at rest: receiving a sensitive field query, hashing the query, querying and receiving network event metadata responsive to the query, and decrypting the metadata.

    Systems and methods of detecting and responding to ransomware on a file system
    4.
    发明授权
    Systems and methods of detecting and responding to ransomware on a file system 有权

    公开(公告)号：US11190540B2

    公开(公告)日：2021-11-30

    申请号：US16673922

    申请日：2019-11-04

    申请人： Netskope, Inc.

    发明人： Sean Hittel ,  Krishna Narayanaswamy ,  Ravindra K. Balupari ,  Ravi Ithal

    IPC分类号： H04L29/06 ,  G06F21/56 ,  G06F21/55 ,  G06F16/907

    摘要： The technology disclosed relates to detecting a data attack on a local file system. The detecting includes scanning a list to identify files of the local file system that have been updated within a timeframe, reading payloads of files identified by the scanning, calculating current content properties from the payload of the files, obtaining historical content properties of the files, determining that a malicious activity is in process by analyzing the current content properties and the historical content properties to identify a pattern of changes that exceeds a predetermined change velocity. Further, the detecting includes determining that the malicious activity is in process by analyzing the current content properties and known patterns of malicious metadata to identify a match between the current metadata and the known patterns of malicious metadata, determining a machine/user that initiated the malicious activity, and implementing a response mechanism that restricts file modifications by the machine/user.

    Points of presence (POPs) architecture for cloud security
    5.
    发明授权
    Points of presence (POPs) architecture for cloud security 有权

    公开(公告)号：US11184398B2

    公开(公告)日：2021-11-23

    申请号：US16554482

    申请日：2019-08-28

    申请人： Netskope, Inc.

    发明人： Krishna Narayanaswamy ,  Lebin Cheng ,  Ravi Ithal ,  Sanjay Beri

    IPC分类号： H04L29/06 ,  H04L12/813 ,  H04L29/08

    摘要： A computer-implemented method for accessing a hosted service on client devices is described. The client devices include client software that uses a remotely delivered policy to redirect network requests for hosted services to a server to enforce visibility, policy and data security for network delivered services. The method can be used in conjunction with existing VPN and proxy solutions, but provides distinct additional functionality, particularly suited to corporate needs. Policies allow entities to centralize enforcement of service-specific restrictions across networks and communication channels, e.g. only certain users can download client records from a service—irrespective of the network used to access the service.

    Reducing error in security enforcement by a network security system (NSS)
    6.
    发明授权
    Reducing error in security enforcement by a network security system (NSS) 有权

    公开(公告)号：US10819749B2

    公开(公告)日：2020-10-27

    申请号：US15958637

    申请日：2018-04-20

    申请人： Netskope, Inc.

    发明人： Ravi Ithal ,  Krishna Narayanaswamy

    IPC分类号： H04L29/06 ,  H04L29/08 ,  H04L29/12

    摘要： The technology disclosed relates to reducing error in security enforcement by a network security system (abbreviated NSS). The NSS classifies incoming connection access requests as loss prevention inspectable or connection preserving by determining their conformance or non-conformance with semantic and content requirements of HTTP and HTTPs protocols. The NSS forwards the loss prevention inspectable connection access requests to a data inspection and loss prevention appliance (abbreviated DILPA) for deep inspection. The NSS directly sends the connection preserving connection access requests to the destination servers, preventing connection termination and error generation.

    Security for network delivered services
    7.
    发明授权
    Security for network delivered services 有权
    网络传送服务的安全

    公开(公告)号：US09398102B2

    公开(公告)日：2016-07-19

    申请号：US14198499

    申请日：2014-03-05

    申请人： Netskope, Inc.

    发明人： Krishna Narayanaswamy ,  Lebin Cheng ,  Ravi Ithal ,  Sanjay Beri

    IPC分类号： H04L29/08 ,  H04L29/06

    CPC分类号： H04L63/20 ,  H04L63/0272 ,  H04L63/0281 ,  H04L63/08 ,  H04L63/1425 ,  H04L63/168 ,  H04L67/20

    摘要： A computer-implemented method for accessing a hosted service on client devices is described. The client devices include client software that uses a remotely delivered policy to redirect network requests for hosted services to a server to enforce visibility, policy and data security for network delivered services. The method can be used in conjunction with existing VPN and proxy solutions, but provides distinct additional functionality, particularly suited to corporate needs. Policies allow entities to centralize enforcement of service-specific restrictions across networks and communication channels, e.g. only certain users can download client records from a service—irrespective of the network used to access the service.

    摘要翻译： 描述了用于访问客户端设备上的托管服务的计算机实现的方法。 客户端设备包括使用远程传递的策略的客户端软件，将托管服务的网络请求重定向到服务器，以实现对网络传送服务的可见性，策略和数据安全性。 该方法可以与现有的VPN和代理解决方案结合使用，但提供了独特的附加功能，特别适合企业需求。 政策允许实体集中执行网络和通信渠道之间的服务特定限制，例如 只有某些用户可以从服务下载客户端记录，而不管用于访问服务的网络如何。