Check Point Software Technologies Ltd.

Cybertoka Ltd.

Alon Kantor

Uri Bialik

Yoav Kirsch

Sofia Belikovetsky

Tamir Zegman

Ofer Raz

Oded Gonda

Michael Volfman

Moty Zaltzman

Micha Kalfon

Shimi Gersner

Liran Antebi

Reut Roich

Roi Leibovich

Tomer Noy

Computerized methods and systems locate a first device connected to a first network. One or more logs, each generated at a corresponding second device connected to the first network, are received via a second network linked to the first network. Each log has network data having network information associated with the corresponding second device, and location data having location information indicative of a location of the corresponding second device. The network data is analyzed to identify network information in at least one log that matches received network information associated with the first device. Location information in the location data of the at least one log is used to determine a location associated with the first device. In some implementations, the network data in the at least one log and timestamps associated with the network data in the at least one log are used in order to classify the determined location.

Methods and systems for identifying and classifying locations of networked devices

Systems and methods are provided for modifying transmissions made by security cameras so as to allow access to the surveyed locations without the knowledge of the operator of the cameras.

Method and system for discreetly accessing security camera systems

Methods and systems for protecting components of a linked vehicle from cyber-attack are disclosed. These methods and systems comprise elements of hardware and software for receiving a packet; tunneling the packet to a terrestrial-based security service, analyzing whether the packet is harmful to a component in the vehicle, and at least one action to protect at least one component.

Protection of communication on a vehicular network via a remote security service

Methods and systems for mitigating cyber attacks on components of an automotive communication system are disclosed. These methods and systems comprise elements of hardware and software for receiving a frame; determining whether the frame potentially affects correct operation of an automotive component; and, taking protective action.

Method for protection of automotive components in intravehicle communication system

Disclosed are methods, media, and vault servers for providing a secure messaging system using vault servers in conjunction with client-side restricted-execution vault-mail environments. Methods include the steps of upon activating a vault-mail message containing sensitive content, removing the content from the vault-mail message; placing the content on a vault server; creating a link in the vault-mail message to the content on the vault server; sending the vault-mail message to a designated recipient; and upon activating the link, allowing the content to be only viewed in a restricted-execution session of a client application, wherein the restricted-execution session does not allow the content to be altered, copied, stored, printed, forwarded, or otherwise executed. Preferably, the activation of the vault-mail message is performed by a network-security gateway, and can be performed on a per-message basis. Preferably, the activation of the link requires user authentication which may be designated during activation of the vault-mail message on a per-message basis based on said content. Preferably, the restricted-execution session enforces a security policy.

Methods and systems for using a vault server in conjunction with a client-side restricted-execution vault-mail environment

The present invention discloses methods for document-to-template matching for data-leak prevention (DLP), the methods including the steps of: providing a document as a stream of characters; splitting the stream into a plurality of serialized data lines; calculating a hash value for each serialized data line; checking for each hash value in a hash map of a template set; determining a similarity match to a particular template based on a predefined threshold of template hash values, of the template set, being found in the stream; and based on the similarity match, executing a DLP security policy for the document. Preferably, the template set is extracted from documents manually prepared by a security administrator. Preferably, each template in the template set is deduced automatically from a plurality of documents.

Methods for document-to-template matching for data-leak prevention

Disclosed are methods for automatic categorization of internal and external communication, the method including the steps of: defining groups of entities that transmit data; monitoring data flow of the groups; extracting the data, from the data flow, for learning traffic-flow characteristics of the groups; classifying the data into group flows; upon the data being transmitted, checking the data to determine whether the data is designated as group-internal; and blocking data traffic for data that is group-internal. Preferably, the step of monitoring includes assigning data weights to the data using Bayesian methods. Most preferably, the step of classifying includes classifying the data using Bayesian methods for evaluating the data weights. Preferably, the step of blocking includes blocking data traffic between members of two or more groups. Preferably, the method further includes the step of: enabling an authorized entity to unblock the data traffic.

Growing community of inventors

Tel Aviv, Israel

Alon Kantor