专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09800560B1 Systems and methods for monitoring encrypted data transmission 有权
公开(公告)号：US09800560B1
公开(公告)日：2017-10-24
申请号：US14693912
申请日：2015-04-23
申请人： Symantec Corporation
发明人： Fanglu Guo , Susanta K. Nanda
IPC分类号： H04L9/32 , H04L29/06 , H04L9/08
CPC分类号： H04L63/0435 , H04L9/0822 , H04L63/0442 , H04L63/1408 , H04L63/1425 , H04L63/1441 , H04L2209/24
摘要： The disclosed computer-implemented method for monitoring encrypted data transmission may include (1) detecting a data transmission session between an application running on a first device and an application running on a second device, (2) identifying a shared library loaded by the application running on the first device to establish encryption for the data transmission session, (3) retrieving, from the shared library, a symmetric session key designated for the data transmission session, (4) intercepting data transmitted during the data transmission session, the data having been encrypted using the symmetric session key, and (5) decrypting the data utilizing the symmetric session key retrieved from the shared library. Various other methods, systems, and computer-readable media are also disclosed.

2. 发明申请

US20160191545A1 SYSTEMS AND METHODS FOR MONITORING VIRTUAL NETWORKS 有权
标题翻译：用于监控虚拟网络的系统和方法
公开(公告)号：US20160191545A1
公开(公告)日：2016-06-30
申请号：US14587048
申请日：2014-12-31
申请人： Symantec Corporation
发明人： Susanta K. Nanda , Yuqiong Sun
IPC分类号： H04L29/06
CPC分类号： H04L63/145 , H04L43/028 , H04L43/062 , H04L43/12 , H04L63/0227 , H04L63/1408 , H04L63/20
摘要： The disclosed computer-implemented method for monitoring virtual networks may include (1) identifying a virtual network containing at least one virtualized switching device that routes network traffic from a source port within the virtual network to a destination port, (2) providing, within the virtualized switching device, a set of software-defined network rules containing criteria for identifying packets having at least one predetermined property associated with a security policy, (3) intercepting, at the source port, a packet destined for the destination port, (4) determining that at least one characteristic of the packet satisfies at least one of the rules, and (5) in response to determining that the characteristic of the packet satisfies at least one of the rules, forwarding a copy of the packet to a virtual tap port that analyzes the packet for security threats. Various other methods, systems, and computer-readable media are also disclosed.
摘要翻译：所公开的用于监控虚拟网络的计算机实现的方法可以包括（1）识别包含至少一个虚拟交换设备的虚拟网络，该虚拟网络将网络流量从虚拟网络内的源端口路由到目的地端口，（2）虚拟化交换设备，一套软件定义的网络规则，其中包含用于标识具有与安全策略相关联的至少一个预定属性的分组的标准;（3）在源端口拦截目的地为目的地端口的分组;（4）确定所述分组的至少一个特征满足所述规则中的至少一个，以及（5）响应于确定所述分组的特性满足所述规则中的至少一个规则，将所述分组的副本转发到虚拟抽头端口分析数据包的安全威胁。还公开了各种其它方法，系统和计算机可读介质。

3. 发明授权

US11132447B1 Determining security vulnerabilities of Internet of Things devices 有权
公开(公告)号：US11132447B1
公开(公告)日：2021-09-28
申请号：US16368672
申请日：2019-03-28
申请人： SYMANTEC CORPORATION
发明人： Yuqiong Sun , Xueqiang Wang , Susanta K. Nanda , Petros Efstathopoulos
IPC分类号： G06F11/00 , G06F21/57 , H04L29/06 , H04L12/28 , H04L12/24
摘要： Determining security vulnerabilities of smart home devices. A method may include obtaining data regarding a first application associated with a first IoT device associated with a known security vulnerability; analyzing the data regarding the first application to analyze expected communications with the first IoT device; identifying a second application available for download associated with a second IoT device; analyzing expected communications between the second application and the second IoT device; comparing the expected communications between the first application and first IoT device and between the second application and second IoT device to determine a similarity level between the first and second IoT devices; determining the second IoT device shares the same known security vulnerability as the first IoT device based on determining the similarity level; and implementing a security action on the second IoT device based on determining that the second IoT device shares the same known security vulnerability.

4. 发明申请

US20190342339A1 Security for IoT Home Voice Assistants 审中-公开
公开(公告)号：US20190342339A1
公开(公告)日：2019-11-07
申请号：US15969193
申请日：2018-05-02
申请人： Symantec Corporation
发明人： Susanta K. Nanda , Yuqiong Sun , Saurabh Shintre
IPC分类号： H04L29/06
摘要： A method for implementing security of Internet of Things (IoT) home voice assistants is described. In one embodiment, a computer-implemented method for implementing a security policy with a voice assistant includes obtaining, by one or more computing devices, encrypted traffic from a voice assistant; identifying, by the one or more computing devices, a user voice command in the encrypted traffic based at least in part on one or more identifiable attributes of the encrypted traffic; determining, by the one or more computing devices, the user voice command triggers at least one security policy; and upon determining the user voice command triggers the at least one security policy, performing, by the one or more computing devices, a security action that implements the at least one security policy. In some cases, the method may include obtaining an audio recording of the user voice command with a microphone built into the router.

5. 发明授权

US10447663B2 Decrypting network traffic on a middlebox device using a trusted execution environment 有权
公开(公告)号：US10447663B2
公开(公告)日：2019-10-15
申请号：US16021950
申请日：2018-06-28
申请人： SYMANTEC CORPORATION
发明人： Yuqiong Sun , Daniel Marino , Susanta K. Nanda , Saurabh Shintre , Brian T. Witten , Ronald A. Frederick , Qing Li
IPC分类号： H04L29/06 , G06F21/62
摘要： Decrypting network traffic on a middlebox device using a trusted execution environment (TEE). In one embodiment, a method may include loading a kernel application inside the TEE, loading a logic application outside the TEE, intercepting, by the logic application, encrypted network traffic, forwarding, from the logic application to the kernel application, the encrypted network traffic, decrypting, at the kernel application, the encrypted network traffic, inspecting, at the kernel application, the decrypted network traffic according to a sensitivity policy to determine whether the decrypted network traffic includes sensitive data, forwarding, from the kernel application to the logic application, filtered decrypted network traffic that excludes the sensitive data, processing, at the logic application, the filtered decrypted network traffic, forwarding, from the logic application to the kernel application, the filtered decrypted network traffic after the processing by the logic application, and forwarding, from the kernel application, the encrypted network traffic.

6. 发明授权

US10264020B1 Systems and methods for scalable network monitoring in virtual data centers 有权
公开(公告)号：US10264020B1
公开(公告)日：2019-04-16
申请号：US14614819
申请日：2015-02-05
申请人： Symantec Corporation
发明人： Susanta K. Nanda , Yuqiong Sun
IPC分类号： H04L29/06 , H04L12/26
摘要： A computer-implemented method for scalable network monitoring in virtual data centers may include (1) identifying a plurality of network monitoring agents executing on a plurality of virtual machine host systems within a virtual data center, (2) intercepting, at a receiving virtual machine host system, a traffic flow within a virtual network within the virtual data center, (3) determining a processor load on each of the plurality of virtual machine host systems, (4) selecting, based on the processor load on the receiving virtual machine host system exceeding an established threshold, an alternate virtual machine host system that executes a second network monitoring agent for inspecting the traffic flow, and (5) limiting the processor load on the receiving virtual machine host system by designating the second network monitoring agent executing on the alternate virtual machine host system to inspect the traffic flow. Various other methods, systems, and computer-readable media are also disclosed.

7. 发明授权

US11184162B1 Privacy preserving secure task automation 有权
公开(公告)号：US11184162B1
公开(公告)日：2021-11-23
申请号：US16147014
申请日：2018-09-28
申请人： SYMANTEC CORPORATION
发明人： Sandeep Bhatkar , Susanta K. Nanda , Yuqiong Sun , Saurabh Shintre
IPC分类号： H04L9/08 , G06F9/48 , H04L9/14 , G06F16/22
摘要： Privacy preserving secure task automation. A method may include generating, by a first section of a platform, a pair of encryption keys (private and shared secret keys); receiving, by a second section of the platform, platform user data, trigger service user data; and action service user data, wherein the user of the services and platform are the same; sending the shared secret key to the services; storing the private key in the first section; receiving from the trigger service, by the second section, a first communication encrypted with the shared secret key, regarding occurrence of a trigger; determining, by the first section, that the trigger corresponds to the user of the platform; encrypting a second message with the shared secret key, requesting invocation of the action based on the trigger; and transmitting the second encrypted message to the action service without the data related to the user of the platform.

8. 发明授权

US10601864B1 Using disposable profiles for privacy in internet sessions 有权
公开(公告)号：US10601864B1
公开(公告)日：2020-03-24
申请号：US15725673
申请日：2017-10-05
申请人： Symantec Corporation
发明人： Susanta K. Nanda
IPC分类号： H04L29/06
摘要： A method for applying user profiles in electronic sessions is described. In one embodiment, the method includes detecting a request to initiate an electronic session with a web server; identifying a user profile associated with the request; generating an alternative profile; initiating the electronic session; and replacing the user profile with the alternative profile during the electronic session. In some examples, the method includes performing a security action, including modifying one or more data points in a set of metadata and/or a set of latent user characteristics associated with the user profile. In some cases, the alternative profile includes a set of modified metadata and a set of modified latent user characteristics. In some examples, the method includes replacing a cookie associated with the user profile with a cookie associated with the alternative profile.

9. 发明申请

US20190253398A1 DECRYPTING NETWORK TRAFFIC ON A MIDDLEBOX DEVICE USING A TRUSTED EXECUTION ENVIRONMENT 审中-公开
公开(公告)号：US20190253398A1
公开(公告)日：2019-08-15
申请号：US16021950
申请日：2018-06-28
申请人： SYMANTEC CORPORATION
发明人： Yuqiong Sun , Daniel Marino , Susanta K. Nanda , Saurabh Shintre , Brian T. Witten , Ronald A. Frederick , Qing Li
IPC分类号： H04L29/06 , G06F21/62
CPC分类号： H04L63/0435 , G06F21/57 , G06F21/6263 , H04L63/0281
摘要： Decrypting network traffic on a middlebox device using a trusted execution environment (TEE). In one embodiment, a method may include loading a kernel application inside the TEE, loading a logic application outside the TEE, intercepting, by the logic application, encrypted network traffic, forwarding, from the logic application to the kernel application, the encrypted network traffic, decrypting, at the kernel application, the encrypted network traffic, inspecting, at the kernel application, the decrypted network traffic according to a sensitivity policy to determine whether the decrypted network traffic includes sensitive data, forwarding, from the kernel application to the logic application, filtered decrypted network traffic that excludes the sensitive data, processing, at the logic application, the filtered decrypted network traffic, forwarding, from the logic application to the kernel application, the filtered decrypted network traffic after the processing by the logic application, and forwarding, from the kernel application, the encrypted network traffic.

10. 发明授权

US10044691B1 Decrypting network traffic on a middlebox device using a trusted execution environment 有权
公开(公告)号：US10044691B1
公开(公告)日：2018-08-07
申请号：US15894619
申请日：2018-02-12
申请人： SYMANTEC CORPORATION
发明人： Yuqiong Sun , Daniel Marino , Susanta K. Nanda , Saurabh Shintre , Brian T. Witten , Ronald A. Frederick , Qing Li
IPC分类号： H04L29/06 , G06F21/62
摘要： Decrypting network traffic on a middlebox device using a trusted execution environment (TEE). In one embodiment, a method may include loading a kernel application inside the TEE, loading a logic application outside the TEE, intercepting, by the logic application, encrypted network traffic, forwarding, from the logic application to the kernel application, the encrypted network traffic, decrypting, at the kernel application, the encrypted network traffic, inspecting, at the kernel application, the decrypted network traffic according to a sensitivity policy to determine whether the decrypted network traffic includes sensitive data, forwarding, from the kernel application to the logic application, filtered decrypted network traffic that excludes the sensitive data, processing, at the logic application, the filtered decrypted network traffic, forwarding, from the logic application to the kernel application, the filtered decrypted network traffic after the processing by the logic application, and forwarding, from the kernel application, the encrypted network traffic.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式