专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

61. 发明申请

US20200380109A1 EFFICIENT AND SECURE PROVISIONING AND UPDATING OF IDENTITY CREDENTIALS 审中-公开
公开(公告)号：US20200380109A1
公开(公告)日：2020-12-03
申请号：US16846771
申请日：2020-04-13
申请人： CyberArk Software Ltd.
发明人： Arthur Bendersky , Nir Popik , Tal Zigman
IPC分类号： G06F21/36 , G06F21/35 , G06F21/60 , G06F21/84 , G06F21/46
摘要： Disclosed embodiments relate to systems and methods for securely and seamlessly provisioning credentials for use by personal computing devices. Techniques include obtaining a session identifier; making available an encoded representation to a personal computing device, the encoded representation encoding the session identifier; wherein the personal computing device is configured to: decode the encoded representation, access an identity credential stored on the personal computing device, encrypt the identity credential using a first cryptographic key, and send, to a mediator resource, the session identifier and the encrypted identity credential; receiving, from the mediator resource, the session identifier and the encrypted identity credential; and storing the encrypted identity credential.

62. 发明授权

US10848491B2 Automatically detecting a violation in a privileged access session 有权
公开(公告)号：US10848491B2
公开(公告)日：2020-11-24
申请号：US15873924
申请日：2018-01-18
申请人： CyberArk Software Ltd.
发明人： Sagi Eliyahu , Millie Richter
IPC分类号： H04L29/06 , H04L12/24 , H04L29/08 , G06F11/34
CPC分类号： H04L63/10 , G06F11/3495 , H04L41/5054 , H04L41/5074 , H04L65/1066 , H04L67/14 , H04L67/32 , H04L63/20
摘要： Disclosed embodiments include securing privileged access communication with target systems. Techniques include identifying a request for access to a target resource by an identity, the request being associated with a requested activity that requires privileged access, identifying a connection session in which the identity communicates with the target resource, automatically analyzing an actual activity of the identity occurring in the connection session, automatically comparing the actual activity to the requested activity to determine whether the actual activity complies with the requested activity, and automatically detecting, based on the determination, an inconsistency between the actual activity of the identity and the requested activity associated with the request for access.

63. 发明授权

US10812272B1 Identifying computing processes on automation servers 有权
公开(公告)号：US10812272B1
公开(公告)日：2020-10-20
申请号：US16741067
申请日：2020-01-13
申请人： CyberArk Software Ltd.
发明人： Andrew Copeland , Edward Nunez
IPC分类号： H04L9/32 , H04L9/14 , H04L9/08
摘要： Disclosed embodiments relate to systems and methods for identifying computing processes on automation servers and authorizing computing processes to grant access to secure resources. Techniques include receiving an access request, obtaining process data, identifying a cryptographic key, generating a digital signature, sending the digital signature, and receiving authorization data from a security server. Further techniques include receiving process data, receiving a digital signature, accessing a cryptographic key, validating the signature with the key, verifying the process, and transmitting authorization data to an automation server to complete an authentication process.

64. 发明授权

US10607015B1 Security risk assessment and control for code 有权
公开(公告)号：US10607015B1
公开(公告)日：2020-03-31
申请号：US16414124
申请日：2019-05-16
申请人： CyberArk Software Ltd.
发明人： Asaf Hecht , Hadas Elkabir
IPC分类号： G06F21/57 , G06F9/54
摘要： Disclosed embodiments relate to systems and methods for automatically detecting and addressing security risks in code segments. Techniques include accessing a plurality of code segments developed for execution in a network environment, automatically identifying a first code segment from the plurality of code segments for analysis, automatically performing a first code-level security risk assessment for the first code segment, and determining a first security risk level for the first code segment based on the application programming interface risk level. The first code-level security risk assessment may be performed based on at least one of an application programming interface risk level, an embedded credentials risk level, and a target resource risk level. Further techniques may include determining a second security risk level for a modified version of the first code segment; and enabling a comparison between the first security risk level and the second security risk level.

65. 发明申请

US20190392137A1 SECURITY ANNOTATION OF APPLICATION SERVICES 审中-公开
公开(公告)号：US20190392137A1
公开(公告)日：2019-12-26
申请号：US16014332
申请日：2018-06-21
申请人： CyberArk Software Ltd.
发明人： Evgeny Beskrovny
IPC分类号： G06F21/54 , G06F21/55
摘要： Disclosed embodiments include systems, methods, and computer-readable media for maintaining and accessing security metadata associated with a micro service. Aspects include generating security metadata associated with a micro service. The security metadata may be separate from an executable portion of the micro service and define a plurality of security attributes of the micro service. Examples of security attributes include a security grade level for the micro service, a security sensitive operation that the micro service is programmed to perform, a function classification for the micro service, and an idempotence property for the micro service, among others. Aspects also include accessing the security metadata, and determining, based on the security metadata, whether to perform a control action of various different types for the micro service.

66. 发明申请

US20190332788A1 CLASSIFICATION OF GUI ITEMS ACCORDING TO EXPOSURE TO SECURITY SENSITIVE OPERATIONS 审中-公开
公开(公告)号：US20190332788A1
公开(公告)日：2019-10-31
申请号：US15966872
申请日：2018-04-30
申请人： CyberArk Software Ltd.
发明人： Evgeny Beskrovny
IPC分类号： G06F21/62 , G06F9/54
摘要： The disclosed embodiments include systems, methods, and computer readable media configured to classify graphical user interface items according to their exposure to security sensitive operations. The techniques described in the disclosed embodiments may be used to reduce the risk of application errors by disabling graphical user interface items. Thus, the techniques may be used to minimize the risk of system crashes caused by restricting application access to a certain resource. As a result, the disclosed embodiments improve usability of application running in a restricted mode.

67. 发明授权

US10447727B1 Predicting and addressing harmful or sensitive network activity 有权
公开(公告)号：US10447727B1
公开(公告)日：2019-10-15
申请号：US16286890
申请日：2019-02-27
申请人： CyberArk Software Ltd.
发明人： Asaf Hecht
IPC分类号： H04L29/06 , G06N20/00
摘要： Disclosed embodiments relate to systems and methods for predictable detection in a computing network. Techniques include identifying an activity associated with an identity in the computer network; accessing hierarchical-chained progression states representing timelines defining one or more process flows for operations in the computer network between beginning states and corresponding predictable result states to be controlled; identifying a hierarchical-chained progression state corresponding to the identified activity; automatically predicting a likelihood that the at least one activity will reach the predictable result state corresponding to the identified hierarchical-chained progression state; and implementing a control action for the activity, the identity, or a resource to which the identity is seeking to communicate.

68. 发明授权

US10445490B2 Remote desktop access to a target machine 有权
公开(公告)号：US10445490B2
公开(公告)日：2019-10-15
申请号：US15619621
申请日：2017-06-12
申请人： Cyber-Ark Software Ltd.
发明人： Doron Shem Tov , Amir Carmi , Arthur Bendersky
IPC分类号： H04L29/06 , G06F21/44
摘要： A method for assessing a risk level of a remote desktop access connection includes establishing a remote desktop access connection session between a target machine and the client machine over a network. The remote desktop access connection is established in response to a request received from the client machine. The remote desktop access connection is used acquire, from the client machine, information pertaining to a system environment of the client machine during the connection session. The acquired information is analyzed by comparing the acquired information to information indicative of a defined use of the client machine. Based on the analysis, an assessment is generated of the risk level of the connection session and/or to identify suspicious use of the remote desktop access connection by the client machine.

69. 发明授权

US10341350B2 Actively identifying and neutralizing network hot spots 有权
公开(公告)号：US10341350B2
公开(公告)日：2019-07-02
申请号：US15948940
申请日：2018-04-09
申请人： CyberArk Software Ltd.
发明人： Lavi Lazarovitz , Asaf Hecht
IPC分类号： H04L29/06 , H04L12/26 , H04L12/24 , H04W12/12 , H04W12/06
摘要： Disclosed embodiments include identifying a first identity having a first level of privileged network access, identifying a network resource that the first identity is communicating with, classifying the network resource as a network resource to be dynamically monitored, dynamically monitoring connections activity of the identified network resource to determine a second identity, wherein the second identity is determined based on it having a second level of privileged network access that is different from the first level of privileged network access and having attempted to establish a connection with the network resource, classifying, based on the determination of the second identity, the network resource as a potential source of privileged access escalation vulnerabilities, and performing, based on the classification that the network resource is a potential source of privileged access escalation vulnerabilities, at least one of: triggering an alert regarding the potential source of privileged access escalation vulnerabilities, performing a network security remediation operation for at least one of the first identity, the second identity, and the network resource, and identifying a plurality of other identities with levels of privileged network access different from the first level of privileged network access and that have attempted to establish connections with the network resource.

70. 发明授权

US10264026B2 Providing privileged access to non-privileged accounts 有权
公开(公告)号：US10264026B2
公开(公告)日：2019-04-16
申请号：US15658290
申请日：2017-07-24
申请人： CyberArk Software Ltd.
发明人： Dima Barboi , Boris Spivak , Yair Sade
IPC分类号： H04L29/06 , H04W12/06
摘要： The disclosed embodiments include systems and methods for dynamically managing privileged access for non-privileged accounts. Operations may include receiving a request from a computer device associated with a network account to access a privileged resource, wherein the network account lacks any privileged account membership enabling the network account to access the privileged resource. Operations may include authenticating the network account, and assigning, based on the authentication, privileged on-demand membership for the network account, wherein the privileged on-demand membership enables the network account to access the privileged resource. Operations may also include identifying that the network account should no longer have access to the privileged resource, and removing, based on the identification, the privileged on-demand membership for the network account.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式