专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

81. 发明申请

US20150163201A1 CLIENT/SERVER SECURITY BY AN INTERMEDIARY RENDERING MODIFIED IN-MEMORY OBJECTS 有权
标题翻译：通过中间渲染修改的内存对象的客户端/服务器安全性
公开(公告)号：US20150163201A1
公开(公告)日：2015-06-11
申请号：US14099437
申请日：2013-12-06
申请人： Shape Security, Inc.
发明人： Justin Call
IPC分类号： H04L29/06
CPC分类号： H04L63/04 , G06F9/45529 , H04L29/06972 , H04L63/0281 , H04L63/1466 , H04L67/42
摘要： In an embodiment, a method comprises intercepting, from a server computer, a first set of instructions that define one or more objects and one or more operations that are based, at least in part, on the one or more objects; generating, in memory, one or more data structures that correspond to the one or more objects; performing the one or more operations on the one or more data structures; updating the one or more data structures, in response to performing the one or more operations, to produce one or more updated data structures; rendering a second set of instructions, which when executed by a remote client computer cause the remote client computer to generate the updated data structures in memory on the remote client computer, wherein the second set of instructions are different than the first set of instructions; sending the second set of instructions to the remote client computer.
摘要翻译：在一个实施例中，一种方法包括从服务器计算机拦截定义一个或多个对象的第一组指令和至少部分地基于所述一个或多个对象的一个或多个操作; 在存储器中产生对应于所述一个或多个对象的一个或多个数据结构; 对所述一个或多个数据结构执行所述一个或多个操作; 响应于执行所述一个或多个操作来更新所述一个或多个数据结构以产生一个或多个更新的数据结构; 呈现第二组指令，当由远程客户端计算机执行时，远程客户端计算机在远程客户端计算机上的存储器中生成更新的数据结构，其中第二组指令与第一组指令不同; 将第二组指令发送到远程客户端计算机。

82. 发明授权

US11552936B2 Management of dynamic credentials 有权
公开(公告)号：US11552936B2
公开(公告)日：2023-01-10
申请号：US15658129
申请日：2017-07-24
申请人： Shape Security, Inc.
发明人： Justin Call , Subramanian Varadarajan , Bryan Hanks
IPC分类号： G06F21/44 , H04L9/08 , H04L9/00 , H04L29/06 , H04L9/40 , H04L29/08
摘要： In an embodiment, a method comprises intercepting, from a first computer, a first set of instructions that define one or more original operations, which are configured to cause one or more requests to be sent if executed by a client computer; modifying the first set of instructions to produce a modified set of instructions, which are configured to cause a credential to be included in the one or more requests sent if executed by the client computer; rendering a second set of instructions comprising the modified set of instructions and one or more credential-morphing-instructions, wherein the one or more credential-morphing-instructions define one or more credential-morphing operations, which are configured to cause the client computer to update the credential over time if executed; sending the second set of instructions to a second computer.

83. 发明授权

US11475122B1 Mitigating malicious client-side scripts 有权
公开(公告)号：US11475122B1
公开(公告)日：2022-10-18
申请号：US17232805
申请日：2021-04-16
申请人： Shape Security, Inc.
发明人： Madhukar Nagaraja Kedlaya , Timothy Charles Disney , Nitish Kishore Khadke , Claire Madison Schlenker
IPC分类号： H04L29/06 , G06F21/54
摘要： Technology related to detecting and/or mitigating malicious client-side scripts is disclosed. In one example, a method includes sending a request for a page of a client application. In response to the request for the page, the page and a supervisory script of the page are received. The supervisory script of the page of the client application can be executed within a client environment. The supervisory script can override an operation associated with an architected application programming interface (API) of the client environment. During rendering of the page, a call to the architected API of the client environment can be serviced by performing a modified operation that is different than the architected operation associated with the architected API.

84. 发明授权

US11349816B2 Obfuscating source code sent, from a server computer, to a browser on a client computer 有权
公开(公告)号：US11349816B2
公开(公告)日：2022-05-31
申请号：US15829751
申请日：2017-12-01
申请人： Shape Security, Inc.
发明人： Kevin Gibbons , Tim Disney , Michael J. Ficarra
IPC分类号： G06F21/00 , H04L9/40 , G06F9/455 , H04L67/02 , G06F21/12 , G06F9/448 , G06F8/41
摘要： Programs written in interpreted languages, such as JavaScript, are distributed in source form, which is helpful to attackers so that they can more easily derive the purposes and effects of a program. As discussed herein, a program's high-level code may be effectively obfuscated by transforming the program's code from its high-level programming language to low-level processor-specific language, such as x86 instructions for x86 processors, JVM bytecode for JVMs, or proprietary opcodes for a corresponding proprietary processor or interpreter. Additional obfuscation techniques can be applied the program's low-level processor-specific code.

85. 发明授权

US11297097B2 Code modification for detecting abnormal activity 有权
公开(公告)号：US11297097B2
公开(公告)日：2022-04-05
申请号：US16729395
申请日：2019-12-29
申请人： Shape Security, Inc.
发明人： Justin D. Call , Xiaoming Zhou , Xiaohan Huang , Subramanian Varadarajan , Roger S. Hoover
IPC分类号： H04L29/06 , G06F21/54 , G06F21/56 , H04L67/1001 , H04L67/02
摘要： Techniques for code modification for detecting abnormal activity are described. Web code is obtained. Modified web code is generated by changing a particular programmatic element to a modified programmatic element throughout the web code. Instrumentation code is generated configured to monitor and report on one or more interactions with versions of the particular programmatic element. The instrumentation code is caused to be provided in association with the modified web code to the first client device in response to the first request from the first client device. Report data generated by the instrumentation code is received. The report data describes abnormal activity at the first client device, the abnormal activity comprising an interaction with a version of the particular programmatic element that does not exist in the modified web code. Based on the report, it is determined that the first client device is likely controlled by malware.

86. 发明授权

US11258819B1 Security scoring based on multi domain telemetry data 有权
公开(公告)号：US11258819B1
公开(公告)日：2022-02-22
申请号：US16881251
申请日：2020-05-22
申请人： Shape Security, Inc.
发明人： Sumit Agarwal
IPC分类号： H04L29/06
摘要： A method, non-transitory compute r readable medium, device, and system that receives telemetry data collected based on instrumentation code executed at one of a plurality of client computing devices with a requested transaction with one of a plurality of web server systems. Identifying signal data (IDSD) usable to identify the one of client computing devices is determined based on the received telemetry data. Any matching telemetry data in a telemetry data set for a plurality of prior transactions between one or more of the client computing devices and one or more of the web server systems is identified based on any stored IDSDs that match the received IDSD. A security score associated with the one of the client computing devices is generated based on the identified matching telemetry data. A response to the requested transaction to the one of client computing devices is managed based on the generated security score.

87. 发明授权

US11138463B1 Unsupervised and supervised machine learning approaches to detecting bots and other types of browsers 有权
公开(公告)号：US11138463B1
公开(公告)日：2021-10-05
申请号：US15669618
申请日：2017-08-04
申请人： Shape Security, Inc.
发明人： Xinran Wang , Yao Zhao
IPC分类号： G06F16/20 , G06K9/62 , G06N5/02 , G06F16/35 , G06N20/00
摘要： Unsupervised or supervised machine learning (“ML”) techniques discussed herein can be used to classify browsers as one or more types of browser or within one or more browser groups. For example, a computer system configured to improve security of server computers interacting with client computers through an intermediary computer, and comprising: a memory comprising processor logic; one or more processors coupled to the memory, wherein the one or more processors execute the processor logic, which causes the one or more processors to: receive a first plurality of requests from a first plurality of browsers; generate a first plurality of request-feature vectors from the first plurality of requests; generate a plurality of browser groups based on the first plurality of request-feature vectors; receive a first new request from a first client computer; generate a first new request-feature vector based on the first new request; determine that the first new request-feature vector belongs to a first browser group among the plurality of browser groups; determine that the first browser group is associated with a first rule, and in response, respond to the first new request according to the first rule.

88. 发明授权

US10834101B2 Applying bytecode obfuscation techniques to programs written in an interpreted language 有权
公开(公告)号：US10834101B2
公开(公告)日：2020-11-10
申请号：US15453048
申请日：2017-03-08
申请人： Shape Security, Inc.
发明人： Michael J. Ficarra , Kevin Gibbons
IPC分类号： H04L29/06 , G06F9/455 , G06F21/71 , G06F9/30
摘要： In an embodiment, a computer system configured to improve security of client computer interacting with server computers comprises one or more processors; a digital electronic memory storing a set of program instructions which when executed using the one or more processors cause the one or more processors to: process a first set of original instructions that produce a first set of outputs or effects; generate a first set of interpreter instructions that define a first interpreter; generate a first set of alternate instructions from the first set of original instructions, wherein the first set of alternate instructions is functionally equivalent to the first set of original instructions when the first set of alternate instructions is executed by the first interpreter; send, to the first client computer, the first set of alternate instructions and the first set of interpreter instructions.

89. 发明申请

US20200177592A1 DELAYED SERVING OF PROTECTED CONTENT 审中-公开
公开(公告)号：US20200177592A1
公开(公告)日：2020-06-04
申请号：US16730975
申请日：2019-12-30
申请人： Shape Security, Inc.
发明人： Nwokedi Idika , Justin D. Call
IPC分类号： H04L29/06 , G06F21/55 , G06F21/36 , G06Q20/40 , G06F8/60 , G06F21/31
摘要： Techniques are described for delayed serving of protected content. A request has been made by a client computing device for a requested resource comprising a first portion and a second portion that is initially withheld from the client computing device. First content comprising the first portion of the requested resource and reconnaissance code is served for execution on the client computing device. When executed at the client computing device, the reconnaissance code gathers data at the client computing device that indicates whether the client computing device is human-controlled or bot-controlled. The data gathered by the reconnaissance code is received. Based on the data, it is determined that the client computing device is not bot-controlled. In response to determining that the client computing device is not bot-controlled, the second portion of the requested resource is served to the client computing device,

90. 发明授权

US10536479B2 Code modification for automation detection 有权
公开(公告)号：US10536479B2
公开(公告)日：2020-01-14
申请号：US15925748
申请日：2018-03-19
申请人： Shape Security, Inc.
发明人： Justin D Call , Xiaoming Zhou , Xiaohan Huang , Subramanian Varadarajan , Roger S. Hoover
IPC分类号： H04L29/06 , G06F21/54 , G06F21/56 , H04L29/08
摘要： Techniques for code modification for automation detection are described. Web code is obtained corresponding to content to be served to a first client device in response to a first request from the first client device. Instances of a particular programmatic element in the web code are identified. In response to the first request, modified web code is generated from the web code by consistently changing the particular programmatic element to a modified programmatic element throughout the web code. The modified web code is caused to be provided to the first client device in response to the first request from the first client device. A communication is received from the first client device that is made in response to the modified web code. The communication includes an attempt to interact with the particular programmatic element that exists in the web code but not in the modified web code.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式