Shape Security, Inc.

Cisco Technology, Inc.

Other

Daniel Gilbert Moen

Bryan D Hanks

Carl Schroeder

Ali Golshan

Venkataraman Natham

Devendra Mohan Badhani

Weiguo Liang

Zhipu Jin

Xingang Wang

Gautam Agrawal

Techniques are provided for detecting compromised credentials in a credential stuffing attack. A set model is trained based on a first set of spilled credentials. The set model does not comprise any credential of the first set of spilled credentials. A first request is received from a client computer with a first candidate credential to login to a server computer. The first candidate credential is tested for membership in the first set of spilled credentials using the set model. In response to determining the first set of spilled credentials includes the first candidate credential using the set model, one or more negative actions is performed.

Detecting compromised credentials in a credential stuffing attack

Techniques are provided for secure detection and management of compromised credentials. A first candidate credential is received, comprising a first username and a first password, wherein the first candidate credential was sent in a first request from a first client computer to log in to a first server computer. A first salt associated with the first username in a salt database is obtained. A first hashed credential is generated based on the first password and the first salt. The first hashed credential is transmitted to a set model server computer, wherein the set model server computer is configured to maintain a set model that represents a set of spilled credentials, determine whether the first hashed credential is represented in the set model, and in response to determining that the first hashed credential is represented in the set model, performing additional processing on the first hashed credential.

Secure detection and management of compromised credentials using a salt and a set model

A computer-implemented method includes serving, from a computer server system and to a plurality of different computing devices remote from the computer server system, web code and code for reporting status of the computing devices; receiving from one or more of the computing devices, first data that indicates a parameter of the one or more computing devices, the first data in a compressed format; receiving from one or more others of the computing devices, second data that indicates the parameter of the one or more others of the computing devices, the second data in an uncompressed format; and compressing the second data and comparing the compressed second data to the first data to correlate the first data to the second data. The code for reporting status of the computing devices can include code for allowing the computing devices to determine whether to send the first or second data.

Blind hash compression

A system for virtual internet protocol (VIP) address migration. The system comprises serving one or more clients connected via a switch router over a network to one or more network gateways. The switch router forwards packets to the VIP address of a first network gateway. If the first network gateway determines a VIP address migration criteria has been reached, the first network gateway may migrate any new traffic associated with a packet flow over to a second network gateway for more efficient processing by inserting a default flow code into the header of the VIP address of the packet. Older packets continue to process on the first network gateway, however new packets are forwarded and processed on the second network gateway. Once the packets being processed on the first network gateway completes, the second network gateway becomes the default network gateway for processing existing and new packets.

Virtual internet protocol migration and load balancing

Methods and apparatus for providing an extended socket API are disclosed. A method for providing a socket API according to an implementation of the invention may include: receiving data at a first network socket; opening a second network socket; associating the first network socket and the second network socket using a socket file descriptor of a client-side connection; and directing the data from the first network socket to the second network socket. When an application service utilizes the socket API, the method may further include processing the data, i.e., performing a service.

Method and apparatus for providing an extended socket API for application services

A method and device thereof for managing messages received at a bridging device. A bridging device receives a first message comprising a first contact information and a first distance vector representing a first number of hops the first message has traversed. The first distance vector is compared to a stored second distance vector corresponding to a stored second contact information for the remote electronic device, wherein the second contact information and second distance vector are provided by a second message. The second distance vector represents a second number of hops the second message has traversed. Provided the first number of hops is greater than the second number of hops, the first message is discarded. Alternatively, provided the first number of hops is not greater than the second number of hops, the second contact information and second distance vector are discarded and the first contact information and first distance vector are stored on a computer- readable memory of the bridging device. The present invention provides a method and device thereof for filtering out repeat traffic at a bridging device without requiring additional messaging.

Growing community of inventors

Sunnyvale, CA, United States of America

Daniel Gilbert Moen