Client application based access control in cloud security systems for mobile devices

    公开(公告)号:US10728252B2

    公开(公告)日:2020-07-28

    申请号:US16029558

    申请日:2018-07-07

    Applicant: Zscaler, Inc.

    Abstract: A cloud-based security system enforcing application-based control of network resources includes a plurality of nodes communicatively coupled to the Internet; and one or more authority nodes communicatively coupled to the plurality of nodes; wherein a node of the plurality of nodes is communicatively coupled to a user device via the Internet, and wherein the node is configured to receive a request from a user device for network resources on the Internet or in an external network, to evaluate the request to determine an application on the user device associated with the request, and to provide application-based control of the request based on the determined application and the network resources.

    Systems and methods for cloud-based service function chaining using security assertion markup language (SAML) assertion

    公开(公告)号:US10574652B2

    公开(公告)日:2020-02-25

    申请号:US15404761

    申请日:2017-01-12

    Applicant: Zscaler, Inc.

    Abstract: A cloud-based method of service function chaining using Security Assertion Markup Language (SAML) assertions includes receiving configuration information related to any of users, services, and correspondence between the users and the services; responsive to a request from a user, generating a SAML assertion for the request and attaching a stack of service tags with the SAML assertion, wherein the stack of service tags defines a service chain for the user and for the request; and providing the SAML assertion with the stack of service tags to the user in response to the request. The method can further include providing the SAML assertion by the user to one or more services, wherein each of the services creates a context based on the stack of service tags. Each of the services identifies itself in the stack and sends the SAML assertion to a next service or application in the stack.

    SYSTEMS AND METHODS FOR TROUBLESHOOTING AND PERFORMANCE ANALYSIS OF CLOUD BASED SERVICES

    公开(公告)号:US20180115463A1

    公开(公告)日:2018-04-26

    申请号:US15377051

    申请日:2016-12-13

    Applicant: Zscaler, Inc.

    Abstract: A method for troubleshooting and performance analysis of a cloud based system, the method implemented by an analyzer service executed on one or more servers, and the analyzer service communicatively coupled to a network and to user devices, the method includes receiving results from execution of an analyzer application on each of the user devices, wherein the analyzer application is executed locally on user devices to perform tests comprising traceroutes and web page loads, and wherein the plurality of tests are performed both through the cloud based system to the network and directly to the network; processing the results to determine a status of the cloud based system and associated user devices communicating therewith; utilizing the status to identify bottlenecks and issues associated with the cloud based system and the network; and causing performance of remedial actions based on the identified bottlenecks and the issues.

    Systems and methods for troubleshooting and performance analysis of cloud based services

    公开(公告)号:US10728113B2

    公开(公告)日:2020-07-28

    申请号:US15377051

    申请日:2016-12-13

    Applicant: Zscaler, Inc.

    Abstract: A method for troubleshooting and performance analysis of a cloud based system, the method implemented by an analyzer service executed on one or more servers, and the analyzer service communicatively coupled to a network and to user devices, the method includes receiving results from execution of an analyzer application on each of the user devices, wherein the analyzer application is executed locally on user devices to perform tests comprising traceroutes and web page loads, and wherein the plurality of tests are performed both through the cloud based system to the network and directly to the network; processing the results to determine a status of the cloud based system and associated user devices communicating therewith; utilizing the status to identify bottlenecks and issues associated with the cloud based system and the network; and causing performance of remedial actions based on the identified bottlenecks and the issues.

    In-channel event processing for network agnostic mobile applications in cloud based security systems

    公开(公告)号:US10432673B2

    公开(公告)日:2019-10-01

    申请号:US15420715

    申请日:2017-01-31

    Applicant: Zscaler, Inc.

    Abstract: Systems and methods in a mobile device communicatively coupled to a cloud based security system, the method for detecting and processing in-channel events associated with a network agnostic mobile application, the method includes intercepting outgoing data from the network agnostic mobile application at a tunnel interface on the mobile device; monitoring the outgoing data for network transactions from the network agnostic mobile application to maintain a context of the network transactions and intended responses for every request; transmitting the outgoing data from the tunnel interface to the cloud based security system; and receiving a response from the cloud based security system responsive to the outgoing data and processing any deviation from the intended responses.

    Multidimensional risk profiling for network access control of mobile devices through a cloud based security system

    公开(公告)号:US20190158503A1

    公开(公告)日:2019-05-23

    申请号:US16252961

    申请日:2019-01-21

    Applicant: Zscaler, Inc.

    Abstract: A server configured to profile a mobile device for a cloud-based system, includes a network interface, a data store, and a processor communicatively coupled to one another; and memory storing computer executable instructions, and in response to execution by the processor, the computer-executable instructions cause the processor to, based on communication to a client application on the mobile device, cause the client application to collect data associated with the mobile device; receive the collected data; and determine a device fingerprint and a risk index for the mobile device based on the collected data, wherein the device fingerprint is utilized to uniquely identify the mobile device and the risk index is utilized to manage the mobile device

Patent Agency Ranking