利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

62 条记录 (耗时 0.038 秒)

    Blocking download of content
    1.
    发明授权
    Blocking download of content 有权

    公开(公告)号：US11855964B1

    公开(公告)日：2023-12-26

    申请号：US17574495

    申请日：2022-01-12

    申请人： Palo Alto Networks, Inc.

    发明人： Huagang Xie

    IPC分类号： H04L29/00 ,  H04L67/00 ,  H04L9/40 ,  H04L67/06 ,  H04L67/02 ,  H04L67/01

    CPC分类号： H04L63/0236 ,  H04L67/06 ,  H04L67/01 ,  H04L67/02

    摘要： At least initially blocking client download of certain content and injecting a user verification step for such downloads is disclosed. In some embodiments, a notification page with an option to accept a response from a server is provided to a client, an indication of user selection of the option to accept in the notification page is received from the client, and requested content received from the server is provided to the client. Injecting a user verification step via the notification page before providing requested content facilitates protecting the client from security threats.

    Integrating a honey network with a target network to counter IP and peer-checking evasion techniques
    2.
    发明授权
    Integrating a honey network with a target network to counter IP and peer-checking evasion techniques 有权

    公开(公告)号：US10404661B2

    公开(公告)日：2019-09-03

    申请号：US16030637

    申请日：2018-07-09

    申请人： Palo Alto Networks, Inc.

    发明人： Taylor Ettema ,  Huagang Xie

    IPC分类号： H04L29/06 ,  G06F9/455 ,  G06F8/60 ,  G06F8/61

    摘要： Techniques for integrating a honey network with a target network environment (e.g., an enterprise network) to counter IP and peer-checking evasion techniques are disclosed. In some embodiments, a system for integrating a honey network with a target network environment includes a device profile data store that includes a plurality of attributes of each of a plurality of devices in the target network environment; a virtual clone manager executed on a processor that instantiates a virtual clone of one or more devices in the target network environment based on one or more attributes for a target device in the device profile data store; and a honey network policy that is configured to route an external network communication from the virtual clone for the target device in the honey network to an external device through the target network environment.

    Sinkholing bad network domains by registering the bad network domains on the internet
    3.
    发明授权
    Sinkholing bad network domains by registering the bad network domains on the internet 有权

    公开(公告)号：US10305927B2

    公开(公告)日：2019-05-28

    申请号：US16054945

    申请日：2018-08-03

    申请人： Palo Alto Networks, Inc.

    发明人： Huagang Xie ,  Wei Xu ,  Nir Zuk

    IPC分类号： H04L29/06 ,  G06F21/56 ,  H04L29/12

    摘要： Techniques for sinkholing bad network domains by registering the bad network domains on the Internet are provided. In some embodiments, sinkholing bad network domains by registering the bad network domains on the Internet includes determining a network domain is a bad network domain, in which the bad network domain is determined to be associated with an identified malware (e.g., malware that has been identified and has been determined to be associated with the bad domain), and the bad network domain is sinkholed by registering the bad network domain with a sinkholed IP address; and identifying a host that is infected with the identified malware based on an attempt by the host to connect to the sinkholed IP address.

    INTEGRATING A HONEY NETWORK WITH A TARGET NETWORK TO COUNTER IP AND PEER-CHECKING EVASION TECHNIQUES
    4.
    发明申请
    INTEGRATING A HONEY NETWORK WITH A TARGET NETWORK TO COUNTER IP AND PEER-CHECKING EVASION TECHNIQUES 审中-公开

    公开(公告)号：US20180332005A1

    公开(公告)日：2018-11-15

    申请号：US16030637

    申请日：2018-07-09

    申请人： Palo Alto Networks, Inc.

    发明人： Taylor Ettema ,  Huagang Xie

    IPC分类号： H04L29/06 ,  G06F9/455

    CPC分类号： H04L63/0227 ,  G06F8/60 ,  G06F8/63 ,  G06F9/45533 ,  G06F9/45558 ,  G06F2009/45587 ,  H04L63/1491

    摘要： Techniques for integrating a honey network with a target network environment (e.g., an enterprise network) to counter IP and peer-checking evasion techniques are disclosed. In some embodiments, a system for integrating a honey network with a target network environment includes a device profile data store that includes a plurality of attributes of each of a plurality of devices in the target network environment; a virtual clone manager executed on a processor that instantiates a virtual clone of one or more devices in the target network environment based on one or more attributes for a target device in the device profile data store; and a honey network policy that is configured to route an external network communication from the virtual clone for the target device in the honey network to an external device through the target network environment.

    Static and dynamic security analysis of apps for mobile devices
    6.
    发明授权
    Static and dynamic security analysis of apps for mobile devices 有权

    公开(公告)号：US09811665B1

    公开(公告)日：2017-11-07

    申请号：US13954815

    申请日：2013-07-30

    申请人： Palo Alto Networks, Inc.

    发明人： Zhi Xu ,  Xinran Wang ,  Huagang Xie

    IPC分类号： G06F21/56

    CPC分类号： G06F21/566 ,  G06F21/562

    摘要： Techniques for performing static and dynamic analysis on a mobile device application are disclosed. Static analysis is performed on a mobile device application using a static analysis engine. A static analysis report is generated. Dynamic analysis of the application is performed using a dynamic analysis engine. The dynamic analysis performed is customized based on results of the static analysis. A determination of whether the application is malicious is made based at least on the dynamic analysis.

    Identification of malware sites using unknown URL sites and newly registered DNS addresses
    10.
    发明授权
    Identification of malware sites using unknown URL sites and newly registered DNS addresses 有权

    公开(公告)号：US09473528B2

    公开(公告)日：2016-10-18

    申请号：US14596055

    申请日：2015-01-13

    申请人： Palo Alto Networks, Inc.

    发明人： Nir Zuk ,  Renzo Lazzarato ,  Huagang Xie

    IPC分类号： G06F11/00 ,  H04L29/06 ,  G06F21/57

    CPC分类号： H04L63/145 ,  G06F21/57 ,  G06F2221/034 ,  G06F2221/2111 ,  H04L63/1408 ,  H04L63/168

    摘要： In some embodiments, identification of malware sites using unknown URL sites and newly registered DNS addresses includes performing a heuristic analysis for information associated with a network site; and assigning a score based on the heuristic analysis, in which the score indicates whether the network site is potentially malicious. In some embodiments, the system includes a security appliance that is in communication with the Internet. In some embodiments, the network site is associated with a network domain and/or a network uniform resource locator (URL). In some embodiments, performing a heuristic analysis for information associated with a network site further includes determining if a network site has recently been registered. In some embodiments, performing a heuristic analysis for information associated with a network site further includes determining if a network site is associated with recently changed DNS information. In some embodiments, performing a heuristic analysis for information associated with a network site further includes determining geographical information as well as an IP network location associated with the network site.