专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10567171B2 Client-side security key generation 有权
公开(公告)号：US10567171B2
公开(公告)日：2020-02-18
申请号：US15640399
申请日：2017-06-30
申请人： Shape Security, Inc.
发明人： Carl Schroeder , Ariya Hidayat , Chandrasekhar Rentachintala , Ricky Y. Chiu
IPC分类号： G06F21/00 , H04L29/06 , H04L9/08 , H04L9/06 , H04L9/32 , G06F12/14
摘要： Techniques are provided for client-side security key generation. An initial request is received from an application executing on a client device. The application includes a security component includes security code. In response to the initial request, a key component is generated. The key component includes one or more parameters from which a valid security key can be generated at the client device by executing the security code. The key component is provided to the client device. A security key associated with a request from the client device to an application server is received. The security key is checked for validity. In response to determining that the security key is valid, processing of the request by the application server is caused.

2. 发明授权

US09602543B2 Client/server polymorphism using polymorphic hooks 有权
公开(公告)号：US09602543B2
公开(公告)日：2017-03-21
申请号：US14481867
申请日：2014-09-09
申请人： SHAPE SECURITY, INC.
发明人： Ariya Hidayat
IPC分类号： G06F17/00 , H04L29/06 , G06F21/52
CPC分类号： H04L63/20 , G06F21/52
摘要： Computer systems and methods in various embodiments are configured for improving the security and efficiency of client computers interacting with server computers through an intermediary computer using one or more polymorphic protocols. In an embodiment, a computer system comprises a memory; a processor coupled to the memory; a processor logic coupled to the processor and the memory, and configured to: intercept, from a server computer, a first file and a second file, wherein the first file defines a first object with a first identifier and the second file comprises a reference to the first object by the first identifier; generate a second identifier; replace the first identifier with the second identifier in the first file; add one or more first instructions to the first file; remove the reference to the first identifier from the second file; add, to the second file, one or more second instructions, which when executed cause the one or more first instructions to be executed and produce the second identifier.

3. 发明授权

US09405910B2 Automatic library detection 有权
标题翻译：自动库检测
公开(公告)号：US09405910B2
公开(公告)日：2016-08-02
申请号：US14293895
申请日：2014-06-02
申请人： Shape Security, Inc.
发明人： Ariya Hidayat , Bei Zhang
IPC分类号： G06F21/57
CPC分类号： G06F21/563 , G06F21/566 , G06F21/57 , G06F2221/033 , H04L63/1441 , H04L67/42
摘要： The automated, real-time detection of specific blocks of code within a larger body of source code is described. Specific implementations relate to the detection of known code libraries in web page code to improve the efficiency of the generation of polymorphic transformations of the web page code for the purpose of impeding automated cyber-attacks.
摘要翻译：描述了在更大体积的源代码中的特定的代码块的自动化的实时检测。具体实现涉及检测网页代码中的已知代码库，以提高为阻止自动网络攻击的目的而产生网页代码的多态转换的效率。

4. 发明申请

US20180006814A1 CLIENT-SIDE SECURITY KEY GENERATION 审中-公开
公开(公告)号：US20180006814A1
公开(公告)日：2018-01-04
申请号：US15640399
申请日：2017-06-30
申请人： Shape Security, Inc.
发明人： Carl Schroeder , Ariya Hidayat , Chandrasekhar Rentachintala , Ricky Y. Chiu
IPC分类号： H04L9/08 , H04L9/06 , H04L9/32
CPC分类号： H04L9/0877 , H04L9/06 , H04L9/0819 , H04L9/0838 , H04L9/321 , H04L9/3234
摘要： Techniques are provided for client-side security key generation. An initial request is received from an application executing on a client device. The application includes a security component includes security code. In response to the initial request, a key component is generated. The key component includes one or more parameters from which a valid security key can be generated at the client device by executing the security code. The key component is provided to the client device. A security key associated with a request from the client device to an application server is received. The security key is checked for validity. In response to determining that the security key is valid, processing of the request by the application server is caused.

5. 发明申请

US20170118241A1 Multi-Layer Computer Security Countermeasures 审中-公开
公开(公告)号：US20170118241A1
公开(公告)日：2017-04-27
申请号：US14922436
申请日：2015-10-26
申请人： Shape Security, Inc.
发明人： Justin D. Call , Ariya Hidayat , Timothy Dylan Peacock , Siying Yang
IPC分类号： H04L29/06 , H04L29/08
CPC分类号： H04L63/1441 , H04L67/02 , H04L67/04 , H04L67/20 , H04L67/22 , H04L67/2833 , H04L67/42
摘要： A computer-implemented security method includes receiving, at a server sub-system, reports from a plurality of clients that were served content served by a web server system, the different versions of content varying from each other by polymorphic transformation that inserts varying content at common locations in the content; determining, with the server sub-system, an effectiveness level of security countermeasures applied to the content, using the received reports; selecting an updated security countermeasure package determined to address malware identified using data from the reports; and providing to the web server system information causing the web server system to switch to the updated security countermeasure package.

6. 发明授权

US11139966B2 Security code for integration with an application 有权
公开(公告)号：US11139966B2
公开(公告)日：2021-10-05
申请号：US16732123
申请日：2019-12-31
申请人： Shape Security, Inc.
发明人： Carl Schroeder , Ariya Hidayat , Chandrasekhar Rentachintala , Ricky Y. Chiu
IPC分类号： H04L9/00 , H04L29/06 , G06F21/44 , H04L9/08 , H04L9/32 , H04L9/06
摘要： Techniques are provided for security code for integration with an application. A first request associated with a request by an application to an application server is received. The application includes security code that performs a set of one or more operations on one or more input parameters. The application is provided one or more parameter values, wherein the security code generates a secret cryptographic key based on the one or more parameter values. A security key is received that includes encrypted client data collected at the client device that is encrypted using the secret cryptographic key. The secret cryptographic key is generated based on the one or more parameter values and knowledge of the set of one or more operations. It is determined that the decrypted client data matches a pattern of data associated with malware. The application server is prevented from processing a second request.

7. 发明授权

US10855696B2 Variable runtime transpilation 有权
公开(公告)号：US10855696B2
公开(公告)日：2020-12-01
申请号：US15059080
申请日：2016-03-02
申请人： Shape Security, Inc.
发明人： Jarrod S. Overson , Ariya Hidayat , Michael Ficarra , Bei Zhang , Justin Call
IPC分类号： H04L29/06 , H04L29/08
摘要： In an approach, an apparatus comprises: one or more processors; a processor logic coupled to the one or more processors and configured to: intercept, from a client computer, a request directed to a server computer that identifies a purported user agent executing on the client computer; send, to the server computer, the request from the client computer; intercept, from the server computer, one or more original instructions to be executed by the purported user agent of the client computer; determine one or more features supported by the purported user agent that are not utilized by the one or more original instructions; transform the one or more original instructions into one or more revised instructions which, when executed by the purported user agent, cause the purported user agent to utilize the one or more features; send, to the client computer, the one or more revised instructions.

8. 发明申请

US20150347756A1 AUTOMATIC LIBRARY DETECTION 有权
标题翻译：自动图书馆检测
公开(公告)号：US20150347756A1
公开(公告)日：2015-12-03
申请号：US14293895
申请日：2014-06-02
申请人： Shape Security, Inc.
发明人： Ariya Hidayat , Bei Zhang
IPC分类号： G06F21/57
CPC分类号： G06F21/563 , G06F21/566 , G06F21/57 , G06F2221/033 , H04L63/1441 , H04L67/42
摘要： The automated, real-time detection of specific blocks of code within a larger body of source code is described. Specific implementations relate to the detection of known code libraries in web page code to improve the efficiency of the generation of polymorphic transformations of the web page code for the purpose of impeding automated cyber-attacks.
摘要翻译：描述了在更大体积的源代码中的特定的代码块的自动化的实时检测。具体实现涉及检测网页代码中的已知代码库，以提高为阻止自动网络攻击的目的而产生网页代码的多态转换的效率。

9. 发明授权

US10708249B2 Challenge-dynamic credential pairs for client/server request validation 有权
公开(公告)号：US10708249B2
公开(公告)日：2020-07-07
申请号：US15563509
申请日：2016-02-16
申请人： Shape Security, Inc.
发明人： Ariya Hidayat , Justin Call
IPC分类号： G06F21/00 , H04L29/06 , G06F21/44 , H04L29/08
摘要： In an embodiment, a computer system configured to: generate a first challenge credential to be sent to a client computer; render one or more first dynamic-credential instructions, which when executed by the client computer, cause the client computer to generate a first dynamic credential that corresponds to the first challenge credential; modify a first set of instructions, which define one or more original operations, to produce a second set of instructions, wherein the second set of instructions include the first challenge credential and the one or more first dynamic-credential instructions, and which when executed by the client computer, cause the first challenge credential to be included in the one or more requests sent from the client computer; send the second set of instructions to a second computer.

10. 发明授权

US09608975B2 Challenge-dynamic credential pairs for client/server request validation 有权
公开(公告)号：US09608975B2
公开(公告)日：2017-03-28
申请号：US14673669
申请日：2015-03-30
申请人： SHAPE SECURITY, INC.
发明人： Ariya Hidayat , Justin Call
IPC分类号： G06F21/00 , H04L29/06 , H04L29/08
CPC分类号： H04L63/08 , G06F21/00 , G06F21/445 , H04L63/0807 , H04L67/02 , H04L67/42
摘要： Computer systems and methods in various embodiments are configured for improving the security and efficiency of server computers interacting through an intermediary computer with client computers that may be executing malicious and/or autonomous headless browsers or “bots”. In an embodiment, a computer system comprises: a memory; a processor coupled to the memory; a protocol client module that is coupled to the processor and the memory and configured to intercept a first set of instructions that define one or more original operations, which are configured to cause one or more requests to be sent to the server computer when executed by the client computer; a forward transformer module that is coupled to the processor and the memory and configured to: generate, at the intermediary computer system, a first challenge credential to be sent to the client computer; render one or more first dynamic-credential instructions, which when executed by the client computer, cause the client computer to generate a first dynamic credential that corresponds to the first challenge credential and to include the first dynamic credential in the one or more requests from the client computer; modify the first set of instructions to produce a second set of instructions, wherein the second set of instructions include the first challenge credential and the one or more first dynamic-credential instructions, and which when executed by the client computer, cause the first challenge credential to be included in the one or more requests sent from the client computer; send the second set of instructions to a second computer.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式