公开(公告)号：WO2019135919A1

公开(公告)日：2019-07-11

申请号：PCT/US2018/066614

申请日：2018-12-19

Applicant: SYMANTEC CORPORATION

Inventor： SARIN, Sumit ,  DODKE, Dhananjay ,  CHATURVEDI, Bishnu ,  APTE, Kedar

IPC: G06F21/44 ,  G06F21/74 ,  G06F21/85

CPC classification number: H04L63/20 ,  G06F21/44 ,  G06F21/6218 ,  G06F21/74 ,  G06F21/85 ,  G06F2221/2101 ,  G06F2221/2113 ,  H04L63/1408 ,  H04L63/1441

Abstract: The disclosed computer-implemented method for enforcing data loss prevention policies on endpoint devices may include (i) detecting that an endpoint device has terminated a connection with a protected network that is protected by a network-level data loss prevention system and has connected to an external network that is not protected, (ii) switching, in response to detecting that the endpoint device has connected to the external network, from an in-network data loss prevention policy to an out-of-network data loss prevention policy, (iii) detecting an inbound data transfer to the endpoint device, (iv) determining that the inbound data transfer comprises a transfer from a protected source that is protected by the out-of-network data loss prevention policy, and (v) performing a security action in response to determining that the inbound data transfer to the endpoint device comprises the transfer from the protected source. Various other methods, systems, and computer-readable media are also disclosed.

公开(公告)号：WO2019032907A1

公开(公告)日：2019-02-14

申请号：PCT/US2018/046126

申请日：2018-08-09

Applicant: MMODAL IP LLC

Inventor： MARTIN, Jason ,  RANDALL, Martin Harper ,  MANSFIELD, Lance

IPC: G06F21/46 ,  H04L9/32

CPC classification number: G06F21/45 ,  G06F2221/2101 ,  H04L63/08 ,  H04L63/0815 ,  H04L63/083 ,  H04L63/20

Abstract: A method for managing password usage in a system for secure usage of shared accounts includes generating, by a password manager executing on a first computing device, a first credential assigned to a first user, the first credential used for accessing a first user account in an application executing on a second computing device. The method includes transferring, by the password manager, ownership of the first credential from the first user to a second user. The method includes receiving, by the password manager, over a network, a request from the first user to access the first credential. The method includes verifying, by the password manager, ownership of the first credential by the second user. The method includes denying, by the password manager, the request from the first user.

公开(公告)号：WO2018111271A1

公开(公告)日：2018-06-21

申请号：PCT/US2016/066808

申请日：2016-12-15

Applicant: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.

Inventor： ELLAM, Daniel ,  BALDWIN, Adrian ,  HUSSON, Remy

IPC: G06F21/12 ,  G06F21/56

CPC classification number: G06F21/561 ,  G06F21/12 ,  G06F21/554 ,  G06F21/56 ,  G06F21/566 ,  G06F21/568 ,  G06F2221/034 ,  G06F2221/2101

Abstract: Examples associated with ransomware attack monitoring are described. One example includes a monitor module to monitor files stored on the system for sequences of file accesses that match a predefined pattern of file accesses. An investigation module is activated when a number of sequences of file accesses that match the predefined pattern exceeds a first threshold. The investigation module logs actions taken by processes to modify files. A reaction module pauses a set of processes operating on the system when the number of sequences of file accesses that match the predefined pattern exceeds a second threshold. The reaction module then identifies processes associated with a suspected ransomware attack based on the logging performed by the investigation module, and resumes legitimate processes.

公开(公告)号：WO2017193845A1

公开(公告)日：2017-11-16

申请号：PCT/CN2017/082843

申请日：2017-05-03

Applicant: 华为技术有限公司

Inventor： 张波 ,  谢于明 ,  黄志钢 ,  汪洋 ,  夏靓

IPC: H04L12/26

CPC classification number: G06F21/552 ,  G06F21/554 ,  G06F2221/034 ,  G06F2221/2101 ,  H04L41/064 ,  H04L41/0816 ,  H04L41/28 ,  H04L67/16

Abstract: 本发明实施例提供一种虚拟网络功能的审计方法和装置，用于审计由包括认证授权组件、业务组件和虚拟基础设施的平台生成的虚拟网络功能，该方法包括：接收认证授权组件上报的事件、接收业务组件上报的事件、接收虚拟基础设施上报的事件；根据接收到的所有事件，获取每个VNF的事件发生序列；对每个VNF的事件发生序列进行审计，得到VNF的审计结果。该方法通过将分散在不同组件的事件，整合在一个事件发生序列中，可直观快速的检测出绕过某个组件而实现的恶意VNF，可以更全面的检测出恶意VNF，降低VNF操作审计的漏检率。

公开(公告)号：WO2017099972A1

公开(公告)日：2017-06-15

申请号：PCT/US2016/062762

申请日：2016-11-18

Applicant: VISA INTERNATIONAL SERVICE ASSOCIATION

Inventor： WHITE, David

IPC: H04L9/08 ,  H04L29/06

CPC classification number: G06F21/6245 ,  G06F21/602 ,  G06F21/64 ,  G06F2221/2101 ,  G06F2221/2107 ,  G06F2221/2147 ,  H04L9/0822 ,  H04L9/0825 ,  H04L9/0894 ,  H04L9/14 ,  H04L9/321 ,  H04L9/3247 ,  H04L9/3263 ,  H04L2209/805

Abstract: An appliance is capable of storing and processing data related to details surrounding its ownership, behavior, and history within itself in a secure and unalterable way. The appliance may experience multiple transfers in ownership during its lifetime. Certain data stored in the appliance may be encrypted such that only qualifying parties (e.g., owners) may be able to access the data. Some data may remain private to an individual owner while other data may be made available to subsequent owners by passing a shared secret that can be utilized to decrypt the other data. Data may be stored in the appliance in chronological order and may be signed by appropriate parties such that it is not possible to alter the data without detection.

Abstract translation:

设备能够以安全且不可改变的方式存储和处理与其自身所有权，行为和历史相关的细节相关的数据。 设备在使用期间可能会经历多次所有权转让。 存储在设备中的某些数据可以被加密，使得只有合格方（例如，所有者）才能够访问数据。 有些数据可能对个人所有者保持私有，而其他数据可能通过传递可用于解密其他数据的共享密钥而提供给后续所有者。 数据可能按时间顺序存储在设备中，并可能由适当的人员签名，以至于无法检测到数据时无法更改数据。

公开(公告)号：WO2017091876A1

公开(公告)日：2017-06-08

申请号：PCT/BR2016/000138

申请日：2016-12-02

Applicant: GAS INFORMATICA LTDA

Inventor： VIEIRA, Juliano Galhiego ,  REIS, Silvio Jr. ,  ARAUJO, Rodrigo Antonio

IPC: G06F21/55 ,  H04L29/06 ,  G06F21/62

CPC classification number: G06F21/83 ,  G06F21/552 ,  G06F21/6218 ,  G06F21/6245 ,  G06F2221/2101 ,  G06F2221/2119 ,  H04L63/101 ,  H04L63/1483

Abstract: In an example embodiment described herein, keyboard monitoring logic is operable to obtain data typed into a keyboard. The data typed into the keyboard is compared with predefined protected data stored in a local credential file, if data typed into the keyboard matches predefined protected data stored in the credential file, the keyboard monitoring logic determines whether the destination of the typed data ( e.g. , the application, website, or both the application and website are stored in a whitelist. If the destination is not stored in the whitelist, the keyboard monitoring logic determines that an attempt of unauthorized access to protected data is occurring.

Abstract translation: 在这里描述的示例实施例中，键盘监视逻辑可操作来获得键入到键盘中的数据。 如果键入键盘的数据与存储在凭证文件中的预定义受保护数据匹配，键入键盘的数据与存储在本地凭证文件中的预定义受保护数据相比较，键盘监控逻辑确定键入数据的目的地（例如，应用程序，网站或应用程序和网站都存储在白名单中，如果目标未存储在白名单中，则键盘监控逻辑确定发生了未经授权访问受保护数据的企图