公开(公告)号：US11444956B2

公开(公告)日：2022-09-13

申请号：US17221779

申请日：2021-04-03

Applicant: VERINT SYSTEMS LTD.

Inventor： Offri Gil ,  Omer Ziv ,  Yuval Altman ,  Yaron Gvilli ,  Hodaya Shabtay ,  Omri David ,  Yitshak Yishay

IPC: H04L9/40 ,  H04L9/06 ,  G06F16/951 ,  H04L67/104 ,  H04L61/5007 ,  H04L9/00

Abstract: A traffic-monitoring system that monitors encrypted traffic exchanged between IP addresses used by devices and a network, and further receives the user-action details that are passed over the network. By correlating between the times at which the encrypted traffic is exchanged and the times at which the user-action details are received, the system associates the user-action details with the IP addresses. In particular, for each action specified in the user-action details, the system identifies one or more IP addresses that may be the source of the action. Based on the IP addresses, the system may identify one or more users who may have performed the action. The system may correlate between the respective action-times of the encrypted actions and the respective approximate action-times of the indicated actions. The system may hypothesize that the indicated action may correspond to one of the encrypted actions having these action-times.

公开(公告)号：US20220038466A1

公开(公告)日：2022-02-03

申请号：US17221779

申请日：2021-04-03

Applicant: VERINT SYSTEMS LTD.

Inventor： Offri Gil ,  Omer Ziv ,  Yuval Altman ,  Yaron Gvilli ,  Hodaya Shabtay ,  Omri David ,  Yitshak Yishay

IPC: H04L29/06 ,  H04L29/12 ,  H04L9/06 ,  G06F16/951 ,  H04L29/08

Abstract: A traffic-monitoring system that monitors encrypted traffic exchanged between IP addresses used by devices and a network, and further receives the user-action details that are passed over the network. By correlating between the times at which the encrypted traffic is exchanged and the times at which the user-action details are received, the system associates the user-action details with the IP addresses. In particular, for each action specified in the user-action details, the system identifies one or more IP addresses that may be the source of the action. Based on the IP addresses, the system may identify one or more users who may have performed the action. The system may correlate between the respective action-times of the encrypted actions and the respective approximate action-times of the indicated actions. The system may hypothesize that the indicated action may correspond to one of the encrypted actions having these action-times.

公开(公告)号：US10999295B2

公开(公告)日：2021-05-04

申请号：US16823421

申请日：2020-03-19

Applicant: Verint Systems Ltd.

Inventor： Offri Gil ,  Omer Ziv ,  Yuval Altman ,  Yaron Gvili ,  Hodaya Shabtay ,  Omri David ,  Yitshak Yishay

IPC: H04L29/06 ,  H04L29/12 ,  H04L9/06 ,  G06F16/951 ,  H04L29/08

Abstract: A traffic-monitoring system that monitors encrypted traffic exchanged between IP addresses used by devices and a network, and further receives the user-action details that are passed over the network. By correlating between the times at which the encrypted traffic is exchanged and the times at which the user-action details are received, the system associates the user-action details with the IP addresses. In particular, for each action specified in the user-action details, the system identifies one or more IP addresses that may be the source of the action. Based on the IP addresses, the system may identify one or more users who may have performed the action. The system may correlate between the respective action-times of the encrypted actions and the respective approximate action-times of the indicated actions. The system may hypothesize that the indicated action may correspond to one of the encrypted actions having these action-times.