专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10931691B1 Methods for detecting and mitigating brute force credential stuffing attacks and devices thereof 有权
公开(公告)号：US10931691B1
公开(公告)日：2021-02-23
申请号：US16147326
申请日：2018-09-28
申请人： F5 Networks, Inc.
发明人： Michael Kapelevich , Tomer Zait , Maxim Zavodchik , Ron Talmor
IPC分类号： H04L29/06 , G06N7/00 , G06F16/22
摘要： Methods, non-transitory computer readable media, network traffic management apparatuses, and network traffic management systems that obtain a dictionary comprising a plurality of credentials and populate a probabilistic data structure based on the dictionary. A login request is received from a client and one or more credentials are extracted from the received login request. A determination of when the probabilistic data structure indicates that the extracted credentials are included in the dictionary is made. A mitigation action is initiated with respect to the client, when the determination indicates that the probabilistic data structure indicates that the extracted credentials are included in the dictionary. This technology more efficiently and effectively detects and mitigates brute force credential stuffing attacks advantageously using a reduced amount of resources.

2. 发明授权

US11122067B2 Methods for detecting and mitigating malicious network behavior and devices thereof 有权
公开(公告)号：US11122067B2
公开(公告)日：2021-09-14
申请号：US16534126
申请日：2019-08-07
申请人： F5 Networks, Inc.
发明人： Shlomo Yona , Ron Talmor , Itsik Mantin , Yaniv Shemesh
IPC分类号： H04L29/06
摘要： Methods, non-transitory computer readable media, anomaly detection apparatuses, and network traffic management systems that generate, based on the application of one or more models and for a first flow associated with a received first set of network traffic, one or more likelihood scores and at least one flow score based on the likelihood scores. One or more of the one or more models are associated with one or more browsing patterns for a web application to which the first set of network traffic is directed. A determination is made when the flow score exceeds a threshold. A mitigation action is initiated, based on a stored policy, with respect to the first set of network traffic, when the determining indicates that the flow score exceeds the established threshold.

3. 发明授权

US10834110B1 Methods for preventing DDoS attack based on adaptive self learning of session and transport layers and devices thereof 有权
公开(公告)号：US10834110B1
公开(公告)日：2020-11-10
申请号：US15382668
申请日：2016-12-18
申请人： F5 Networks, Inc.
发明人： Sergei Edelstein , Michael Kapelevich , Shlomo Yona , Ron Talmor
IPC分类号： H04L29/06
摘要： A method, non-transitory computer readable medium, and device includes monitoring a session layer and transport layer network traffic data received from a plurality of client computing devices and plurality of servers. A plurality of network traffic anomaly threshold values and a plurality of server health anomaly threshold values for the monitored session layer and the transport layer network traffic data are estimated. Whether a plurality of current network traffic anomaly values and a plurality of current server health anomaly values for the monitored network traffic data exceeds each of the corresponding estimated plurality of network traffic anomaly threshold values and the estimated plurality of server health anomaly threshold values, and whether the current plurality of network traffic anomaly values and the current plurality of server health anomaly values are not a false anomaly is determined. A mitigation action is initiated based on the determination.

4. 发明申请

US20180295151A1 METHODS FOR MITIGATING NETWORK ATTACKS THROUGH CLIENT PARTITIONING AND DEVICES THEREOF 审中-公开
公开(公告)号：US20180295151A1
公开(公告)日：2018-10-11
申请号：US15484790
申请日：2017-04-11
申请人： F5 Networks, Inc.
发明人： Saxon Amdahl , Peter Finkelshtein , Maxim Zavodchik , Ron Talmor
IPC分类号： H04L29/06
摘要： Methods, non-transitory computer readable media, application security management apparatuses, and network traffic management systems that obtain a reputation score for a client. A server is selected based on the reputation score and a session is established with the server. Interaction(s) with an application hosted by the server are monitored. The reputation score for the client is updated based on the interaction(s). A remote fingerprint database and client-side scripts and cookies can be used to obtain reputation scores generated in different domain(s). With this technology, reputations scores are used to direct sessions for relatively benign clients and relatively malicious clients to different server devices so that if the relatively malicious clients conduct a successful attack, only a subset of the servers will be unavailable, and the relatively benign clients will still have access to application(s) hosted by another subset of servers unaffected by the attack.

5. 发明申请

US20160014033A1 DELAYED PROXY ACTION 有权
标题翻译：延迟代理行动
公开(公告)号：US20160014033A1
公开(公告)日：2016-01-14
申请号：US14329743
申请日：2014-07-11
申请人： F5 Networks, Inc.
发明人： Gennady Dosovitsky , Dmitry Rovniaguin , Sumandra Majee , Ron Talmor
IPC分类号： H04L12/813 , H04L12/721
CPC分类号： H04L47/20 , H04L45/38
摘要： Embodiments are directed towards managing communication over a network with a packet traffic management device that performs delayed proxy action. The PTMD includes a buffer for buffering network traffic. Also, the PTMD includes proxy data paths and standard data paths. Network policies associated with the network flows may be determined using the buffered data. If a determined network policy includes proxy policy rules it is a proxy network, policy. Then the network flows are associated with a proxy data path. If the buffer is exhausted, the network flow is associated with a standard data path before a policy is determined. Otherwise, if the network policy includes only standard policy rules, the network flows are moved to a standard data path. After the network flow is associated with a data path, the network traffic may be communicated until it is closed or otherwise terminated.
摘要翻译：实施例旨在通过执行延迟代理动作的分组业务管理设备来管理网络上的通信。 PTMD包括缓冲网络流量的缓冲区。此外，PTMD还包括代理数据路径和标准数据路径。可以使用缓冲的数据来确定与网络流相关联的网络策略。如果确定的网络策略包括代理策略规则，则它是代理网络策略。然后网络流与代理数据路径相关联。如果缓冲区用尽，则在确定策略之前，网络流量与标准数据路径相关联。否则，如果网络策略仅包括标准策略规则，则将网络流量移动到标准数据路径。在网络流与数据路径相关联之后，网络流量可以被通信，直到其被关闭或以其他方式终止。

6. 发明授权

US09985976B1 Methods for identifying network traffic characteristics to correlate and manage one or more subsequent flows and devices thereof 有权
公开(公告)号：US09985976B1
公开(公告)日：2018-05-29
申请号：US15012458
申请日：2016-02-01
申请人： F5 Networks Inc.
发明人： Dmitry Rovniaguin , Ephraim Dan , Ron Talmor
IPC分类号： G06F21/00 , H04L29/06 , H04L29/08
CPC分类号： H04L63/1408 , H04L63/1433 , H04L63/20 , H04L67/02 , H04L67/22 , H04L67/2819 , H04L67/42 , H04L2463/121
摘要： A method, non-transitory computer readable medium, and device that identifies network traffic characteristics to correlate and manage one or more subsequent flows includes transmitting a monitoring request comprising one or more attributes extracted from an HTTP request received from a client computing device and a timestamp to a monitoring server to correlate one or more subsequent flows associated with the HTTP request. The HTTP request is transmitted to an application server after receiving an acknowledgement response to the monitoring request from the monitoring server. An HTTP response to the HTTP request is received from the application server. An operation with respect to the HTTP response is performed.

7. 发明授权

US09906452B1 Assisting application classification using predicted subscriber behavior 有权
公开(公告)号：US09906452B1
公开(公告)日：2018-02-27
申请号：US14290458
申请日：2014-05-29
申请人： F5 NETWORKS, INC.
发明人： Gennady Dosovitsky , Dmitry Rovniaguin , Amir Harush , Ron Talmor , Dan Eliezer Karpati , Assaf Jacob Mendelson
IPC分类号： H04L12/26 , H04L29/08 , H04L9/08 , G06F15/16 , G06F9/445 , G06F15/177 , G06F9/46 , G06F9/54 , H04L12/801 , H04L12/24 , H04L12/859 , H04L12/851 , H04L12/813 , G06F15/78 , G06F9/50
CPC分类号： H04L47/127 , G06F9/44505 , G06F9/5066 , G06F15/7871 , H04L41/0893 , H04L41/0896 , H04L41/147 , H04L47/20 , H04L47/2441 , H04L47/2475 , H04L47/2483
摘要： Embodiments are directed towards managing communication over a network assist application classification using predicted subscriber behavior. Subscriber information associated with a network flow may be determined. Prediction information that includes application identifiers may be generated based on the subscriber information. A classification engine may determine the applications associated with the network flow based on the prediction information and the network flow using a plurality of application classifiers that correspond to the applications.If an application identifier included in the prediction information is correspondent to an application classifier, the application may be determined based on the correspondent application classifier; otherwise the application is determined based on the remainder of the application classifiers. A policy for managing the network flow may be determined based on the determined application. Then the network traffic associated with the network flow may be communicated based on the at least one determined policy.

8. 发明授权

US11895138B1 Methods for improving web scanner accuracy and devices thereof 有权
公开(公告)号：US11895138B1
公开(公告)日：2024-02-06
申请号：US15013167
申请日：2016-02-02
申请人： F5 Networks, Inc.
发明人： Ron Talmor , Ido Breger , Barak Amar , Guy Nir
IPC分类号： G06F12/14 , H04L9/40
CPC分类号： H04L63/1433
摘要： A method, non-transitory computer readable medium, and device that assists with improving web scanner accuracy includes receiving a sitemap document associated with a webpage from an application security manager apparatus. The received sitemap document associated with the webpage is scanned. Next, one or more vulnerabilities are identified in the scanned sitemap associated with the webpage. A report including the identified one or more vulnerabilities is provided.

9. 发明授权

US11757946B1 Methods for analyzing network traffic and enforcing network policies and devices thereof 有权
公开(公告)号：US11757946B1
公开(公告)日：2023-09-12
申请号：US15388705
申请日：2016-12-22
申请人： F5 Networks, Inc.
发明人： Yaniv Shemesh , Ron Talmor , Ranjeet Sonone
IPC分类号： H04L29/06 , H04L9/40 , H04L43/0876
CPC分类号： H04L63/205 , H04L43/0876 , H04L63/1425 , H04L63/1458
摘要： A method, non-transitory computer readable medium, and device for analyzing network traffic and enforcing network policies includes analyzing network traffic data based on one or more network traffic rules. An attack on the network such as a current or predicted attack is determined based on the analysis. Next, one or more policy changes to a plurality of existing network policies are identified when the current or predicted attack on the network is determined to be present. The identified one or more policy changes are enforced on one or more client computing devices causing the determined current or the predicted attack on the network.

10. 发明授权

US11108815B1 Methods and system for returning requests with javascript for clients before passing a request to a server 有权
公开(公告)号：US11108815B1
公开(公告)日：2021-08-31
申请号：US16720364
申请日：2019-12-19
申请人： F5 Networks, Inc.
发明人： Ron Talmor , Nir Shahaf , Orna Zackaria
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16 , G08B23/00 , H04L29/06 , H04L29/08
摘要： Identifying potential network attacks on servers and protecting the servers from those potential attacks until the associated client requests can be confirmed as either legitimate or an actual attack is disclosed. Client requests for server resources are received by a network traffic management device (NTMD). The NTMD initially responds to the client requests on behalf of the associated servers. The initial responses include client side language scripts for execution by the clients. Executing the scripts causes the clients to resend their initial requests identified as a potential attack by the NTMD along with information indicating the client's legitimacy, such as the result of a computational JavaScript challenge. The NTMD receives the resent initial request, determines it was sent from a legitimate requestor and is therefore not an attack, and forwards it to the associated server.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式