专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08616443B2 Systems and methods employing delimiter searches to identify sensitive information in data 有权
标题翻译：使用定界符搜索的系统和方法来识别数据中的敏感信息
公开(公告)号：US08616443B2
公开(公告)日：2013-12-31
申请号：US13149566
申请日：2011-05-31
申请人： Alan B. Butt , Nathan K. Stocks
发明人： Alan B. Butt , Nathan K. Stocks
IPC分类号： G06K5/00 , G06F17/30
CPC分类号： G06F17/30985 , G06Q20/4016
摘要： A data string that includes potentially sensitive information, such as an account number for a payment card, may be evaluated using a delimiter search to provide an increased level of confidence that the data string encodes the sensitive information of interest. A delimiter search may include an evaluation of the bytes adjacent to the beginning and end of the data to determine whether or not those bytes have values that correspond to the values of known delimiters. A data string that is not surrounded by known delimiters may be disregarded (i.e., considered not to comprise sensitive information of interest), while a data string that is surrounded by known delimiters may warrant further evaluation.
摘要翻译：可以使用定界符搜索来评估包括潜在敏感信息（例如支付卡的帐号）的数据串，以提供数据串对感兴趣的敏感信息进行编码的增强的置信度。定界符搜索可以包括与数据的开始和结束相邻的字节的评估，以确定这些字节是否具有与已知分隔符的值相对应的值。未被已知分隔符包围的数据串可能被忽略（即，被认为不包括感兴趣的敏感信息），而被已知分隔符包围的数据串可能需要进一步评估。

2. 发明申请

US20120016896A1 SYSTEMS AND METHODS EMPLOYING SEARCHES FOR KNOWN IDENTIFIERS OF SENSITIVE INFORMATION TO IDENTIFY SENSITIVE INFORMATION IN DATA 审中-公开
标题翻译：系统和方法为已知的敏感信息标识符进行搜索以识别数据中的敏感信息
公开(公告)号：US20120016896A1
公开(公告)日：2012-01-19
申请号：US13149579
申请日：2011-05-31
申请人： Alan B. Butt
发明人： Alan B. Butt
IPC分类号： G06F17/30
摘要： A data string that includes potentially sensitive information, such as an account number for a payment card, may be evaluated to determine whether or not any portion of the data string encodes a known identifier of sensitive information, such as a known bank identification number (BIN). A fixed number of bytes of the data string may be analyzed using a trie algorithm, in which the value of a first byte is compared with the value of a corresponding first character of the known identifier. A second byte is then compared with a set of values of corresponding second characters, which accompany the first character of the known identifier. Then the value of a third byte of the data string is compared with a set of values of corresponding third values, which accompany the first and second characters of the known identifier. The use of a trie algorithm decreases the length of the search process by several orders of magnitude.
摘要翻译：可以评估包括潜在敏感信息（例如支付卡的帐号）的数据串，以确定数据串的任何部分是否编码已知的敏感信息标识符，例如已知的银行识别号码（BIN ）。可以使用特里法算法分析数据串的固定数量的字节，其中将第一字节的值与已知标识符的对应的第一个字符的值进行比较。然后将第二字节与伴随着已知标识符的第一个字符的相应第二个字符的一组值进行比较。然后将数据串的第三个字节的值与伴随已知标识符的第一个和第二个字符的对应的第三个值的值进行比较。使用trie算法将搜索过程的长度减少几个数量级。

3. 发明公开

US20230328083A1 NETWORK VULNERABILITY ASSESSMENT 审中-公开
公开(公告)号：US20230328083A1
公开(公告)日：2023-10-12
申请号：US17658598
申请日：2022-04-08
申请人： SecurityMetrics, Inc.
发明人： Trent Gundersen
IPC分类号： H04L9/40
CPC分类号： H04L63/1425 , H04L63/1416 , H04L63/20 , H04L63/1466 , H04L63/1433
摘要： A method may include obtaining first network information from a network scan of a computer network that describes network vulnerabilities of a computer network and second network information that describes network traffic of the computer network. The method may include identifying an interaction with the computer network based on the network traffic included in the second network information. The method may include correlating the first network information and the identified interaction to determine a network security issue for the computer network. Correlating the first network information and the identified interaction may include determining a correspondence between the interaction with the computer network and the network vulnerabilities described by the first network information. A network alert may be generated based on the potential network security issue.

4. 发明授权

US11500979B2 Webpage integrity monitoring 有权
公开(公告)号：US11500979B2
公开(公告)日：2022-11-15
申请号：US16408890
申请日：2019-05-10
申请人： SecurityMetrics, Inc.
发明人： Aaron Willis
IPC分类号： G06F21/51 , G06F21/64 , H04L9/40 , H04L9/32 , H04L67/02 , G06F21/55
摘要： A method to monitor integrity of webpages. The method includes obtaining rendered code generated using source code of a webpage from a server that hosts the webpage and using remotely called code referenced in the source code, the rendered code used to display the webpage. The method also includes determining a difference between the rendered code and previous rendered code of the webpage. The previous rendered code may be generated before obtaining the rendered code. The method further includes analyzing the difference between the rendered code and the previous rendered code to determine a change in integrity of security of the webpage and in response to a change in the integrity of security of the webpage, generating an alert regarding the integrity of security of the webpage that may indicate the integrity of the webpage may have changed.

5. 发明授权

US11012464B2 Network vulnerability assessment 有权
公开(公告)号：US11012464B2
公开(公告)日：2021-05-18
申请号：US16376936
申请日：2019-04-05
申请人： SecurityMetrics, Inc.
发明人： Brad Caldwell , Ken Lawrence , R. Trent Gundersen
IPC分类号： H04L29/06 , H04W12/08
摘要： A method to assess network vulnerabilities of devices may include accessing, by a relay device, a network that includes a firewall to separate the network from external networks such that the relay device is coupled to the network from behind the firewall attached to the network. The method may further include establishing a communication channel over a secondary network between the relay device and a monitor system. The method may further include detecting one or more devices behind the firewall attached to the network by the relay device. The method may also include after establishing the communication channel and detecting the one or more devices and while the relay device is coupled to the network from behind the firewall attached to the network, performing, by the monitor system, one or more network vulnerability assessments on the one or more devices via network communications that pass through the relay device.

6. 发明授权

US10298611B1 Network vulnerability assessment 有权
公开(公告)号：US10298611B1
公开(公告)日：2019-05-21
申请号：US16215300
申请日：2018-12-10
申请人： SecurityMetrics, Inc.
发明人： Brad Caldwell , Ken Lawrence , R. Trent Gundersen
IPC分类号： H04L29/06 , H04W12/08
摘要： A method to assess network vulnerabilities of devices may include accessing, by a relay device, a network that includes a firewall to separate the network from external networks such that the relay device is coupled to the network from behind the firewall attached to the network. The method may further include establishing a communication channel over a secondary network between the relay device and a monitor system. The method may further include detecting one or more devices behind the firewall attached to the network by the relay device. The method may also include after establishing the communication channel and detecting the one or more devices and while the relay device is coupled to the network from behind the firewall attached to the network, performing, by the monitor system, one or more network vulnerability assessments on the one or more devices via network communications that pass through the relay device.

7. 发明授权

US11934463B2 Identification of potentially sensitive information in data strings 有权
公开(公告)号：US11934463B2
公开(公告)日：2024-03-19
申请号：US17522809
申请日：2021-11-09
申请人： SecurityMetrics, Inc.
发明人： Bradley R. Caldwell , Alan B. Butt
IPC分类号： G06F21/00 , G06F16/903 , G06F21/62 , G06Q20/32 , G06Q20/40 , G06F9/448
CPC分类号： G06F16/90344 , G06F21/6245 , G06Q20/3224 , G06Q20/4012 , G06Q20/4016 , G06F9/4493
摘要： Methods for identifying potentially sensitive information and protecting such potentially sensitive information include scanning systems that collect and/or disseminate such information. Without limitation, systems collect and/or disseminate personal identification numbers (e.g., personal identification numbers, tax identification numbers, etc.), such as merchant systems, bank systems, healthcare systems, and the like, that collect, use, or disseminate sensitive information may be scanned to identify sequences of data that are likely to be sensitive, and may take actions to protect such sequences of data. Scanning and protection systems are also disclosed.

8. 发明公开

US20240022586A1 WEBPAGE INTEGRITY MONITORING 审中-公开
公开(公告)号：US20240022586A1
公开(公告)日：2024-01-18
申请号：US18355634
申请日：2023-07-20
申请人： SecurityMetrics, Inc.
发明人： Aaron Willis
IPC分类号： H04L9/40 , G06F21/64 , G06F21/51 , H04L9/32
CPC分类号： H04L63/1425 , G06F21/64 , H04L63/12 , G06F21/51 , H04L9/321 , G06F2221/2119
摘要： A method to monitor integrity of webpages. The method may include obtaining a destination of outgoing network traffic resulting from rendered code of a webpage. The rendered code may be generated using source code of the webpage that is obtained in response to a request to a webserver that hosts the webpage. The method may also include obtaining a previous destination of previous outgoing network traffic resulting from previous rendered code of the webpage. The previous rendered code may be generated before the request is sent to the webserver for the source code used to generate the rendered code. The method may also include comparing the destination and the previous destination to determine a change in integrity of security of the webpage. In response to the change in the integrity of security of the webpage, an alert regarding the integrity of security of the webpage may be generated.

9. 发明申请

US20230080601A1 WEBPAGE INTEGRITY MONITORING 有权
公开(公告)号：US20230080601A1
公开(公告)日：2023-03-16
申请号：US18051316
申请日：2022-10-31
申请人： SecurityMetrics, Inc.
发明人： Aaron Willis
IPC分类号： G06F21/51 , G06F21/64 , H04L9/40 , H04L9/32 , H04L67/02 , G06F21/55
摘要： A method to monitor integrity of webpages. The method includes obtaining rendered code generated using source code of a webpage from a server that hosts the webpage and using remotely called code referenced in the source code, the rendered code used to display the webpage. The method also includes determining a difference between the rendered code and previous rendered code of the webpage. The previous rendered code may be generated before obtaining the rendered code. The method further includes analyzing the difference between the rendered code and the previous rendered code to determine a change in integrity of security of the webpage and in response to a change in the integrity of security of the webpage, generating an alert regarding the integrity of security of the webpage that may indicate the integrity of the webpage may have changed.

10. 发明授权

US10417283B2 Identification of potentially sensitive information in data strings 有权
公开(公告)号：US10417283B2
公开(公告)日：2019-09-17
申请号：US15650575
申请日：2017-07-14
申请人： SecurityMetrics, Inc.
发明人： Bradley R. Caldwell , Alan B. Butt
IPC分类号： G06F21/00 , G06F16/903 , G06F21/62 , G06Q20/40 , G06F9/448
摘要： Methods for identifying potentially sensitive information and protecting such potentially sensitive information include scanning systems that collect and/or disseminate such information. Without limitation, systems collect and/or disseminate personal identification numbers (e.g., personal identification numbers, tax identification numbers, etc.), such as merchant systems, bank systems, healthcare systems, and the like, that collect, use, or disseminate sensitive information may be scanned to identify sequences of data that are likely to be sensitive, and may take actions to protect such sequences of data. Scanning and protection systems are also disclosed.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式