Symantec Corporation

Nortonlifelock Inc.

Gen Digital Inc.

Daniel Marino

Daniel Kats

Petros Efstathopoulos

Acar Tamersoy

Kevin Alejandro Roundy

David Luz Silva

Iskander Sanchez Rola

Leylya Yumer

Sandeep B Bhatkar

Saurabh Shintre

Qing Li

Christopher Gates

Susanta Kumar Nanda

Ronald A Frederick

Johann Roturier

Brian T Witten

Yuqiong Sun

Bruce McCorkendale

Fanglu Guo

Yun Shen

Sanjay Sawhney

Darren Shou

Brian Schlatter

Mingwei Zhang

Bruce Mccorkendale

A computer-implemented method for preventing social media harassment may include (i) intercepting a message sent by a sender to a user via a social media service, (ii) performing topic modeling on content of the message, where the topic modeling is customized based on at least one harassment topic relevant to the user, (iii) calculating, based at least in part on the topic modeling, a probability that the message is harassment targeted at the user, and (iv) blocking the message in response to determining that the probability that the message is harassment meets a threshold for harassment probability. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for preventing social media harassment

The disclosed computer-implemented method for verifying social media accounts to prevent identity-based attacks on social media platforms may include (i) detecting identity data for an owner of a set of auxiliary social media accounts on a group of client devices, (ii) verifying, a core social media account, based at least in part on the detected identity data, (iii) linking the auxiliary social media accounts to the core social media account, (iv) signing a social media post originating from a linked auxiliary social media account by storing a unique identification of the social media post as a record on a publicly readable permissioned ledger (e.g., a blockchain), and (v) performing a security action that prevents an identity-based attack against third parties accessing the social media post by confirming that the social media post is legitimate based on the record. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for verifying social media accounts to prevent identity-based attacks on social media platforms

Distinguishing between functional tracking domains and nonfunctional tracking domains on a host web page. In particular, a list of known tracking domains that load content into host web pages may be received. This list of tracking domains may include tracking domains that are functional and tracking domains that are nonfunctional. The tracking domains that are functional may be determined by evaluating various behaviors and characteristics of the tracking domains. Once functional tracking domains have been determined, these functional tracking domains may be allowed, and other tracking domains may be blocked from loading content onto host web pages thereby preserving the functionality of the web pages.

Distinguishing between functional tracking domains and nonfunctional tracking domains on a host web page

Location-based anomaly detection based on geotagged digital photographs. In some embodiments, a method may include identifying a completed transaction associated with a user. The method may also include determining a transaction geographic location associated with the completed transaction. The method may further include identifying a mobile device associated with the user. The method may also include identifying one or more geotagged digital photographs taken by the mobile device. The method may further include extracting one or more photograph geographic locations from the one or more geotagged digital photographs. The method may also include, in response to determining that the transaction geographic location is not within a threshold distance of any of the one or more photograph geographic locations, identifying the completed transaction as a suspicious transaction and performing a remedial action.

Location-based anomaly detection based on geotagged digital photographs

The disclosed computer-implemented method for protecting user privacy may include (i) receiving an indication to protect a photo with privacy-protecting blurring, (ii) generating a blurred version of the photo, (iii) generating, based on the blurred version of the photo, a video that progressively de-blurs the photo, (iv) linking through metadata the blurred version of the photo and the video that progressively de-blurs the photo as a combined motion-photo-object, and (v) storing the combined motion-photo-object in a configured location such that a photo display program uses the blurred version of the photo as a preview of the motion-photo-object when browsing but plays the video that progressively de-blurs the photo in response to additional user input selecting the preview. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for protecting user privacy

Systems and methods for identifying and removing a tracking capability from an external domain that performs a tracking activity on a host web page. Tracking capabilities of an external domain may be removed by altering web requests and/or responses to API calls. Once these tracking capabilities of the external domain have been removed, the altered web requests and/or altered responses to API calls may be transmitted to a web browser and/or entity making the API call thereby protecting user privacy while allowing the external domain to interact with the host web page.

Identifying and removing a tracking capability from an external domain that performs a tracking activity on a host web page

Identifying and removing a tracking capability from an external domain that performs a tracking activity on a host web page. Tracking capabilities of an external domain may be removed by altering web requests and/or responses to API calls. Once these tracking capabilities of the external domain have been removed, the altered web requests and/or altered responses to API calls may be transmitted to a web browser and/or entity making the API call thereby protecting user privacy while allowing the external domain to interact with the host web page.

The disclosed computer-implemented method for authenticating digital media content may include (i) receiving digital media content that has been captured by a capturing device and digitally signed through a cryptoprocessor embedded within the capturing device to provide an assurance of authenticity regarding how the capturing device captured the digital media content, and (ii) encoding an identifier of the received digital media content and a digital signature to an encrypted distributed ledger, the digital signature including at least one of a digital signature of the digital media content by the capturing device or a digital signature of the digital media content by an entity encoding the received digital media content such that the encoding becomes available for subsequent verification through the encrypted distributed ledger. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for authenticating digital media content

A method for optimizing network decision nodes is described. In one embodiment, the method includes generating an initial network of decision nodes constructed according to one or more rules, rearranging one or more decision nodes of the initial network based at least in part on a conversion of the one or more rules to a disjunctive normal form, analyzing the rearranged network of decision nodes in an upstream direction, and optimizing the rearranged network by merging two or more decision nodes of the rearranged network based at least in part on the analysis of the rearranged network. In some cases, the decision nodes include one or more levels of parent nodes and child nodes, each level of child nodes being connected to respective parent nodes. In some cases, the upstream direction is in a direction from the child nodes to the parent nodes.

Optimizing networks of decision nodes

Adaptive security filtering on a client device. A method may include applying a data filter to a client device to obtain a first set of data associated with the client device, determining a risk level of a datum of the first set of data, determining a resource level associated with obtaining the first set of data, adjusting the data filter to an adjusted filter based on the determined risk level of the datum and the determined resource level, and applying the adjusted filter to the client device.

Adaptive security filtering on a client device

The disclosed method for assuring authenticity of electronic sensor data may include (i) capturing, using a sensor within a device, electronic sensor data, and (ii) digitally signing, using a cryptoprocessor embedded within the device, the electronic sensor data to create a digital signature that verifies that the signed electronic sensor data has not been modified since the electronic sensor data was captured by the sensor. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for assuring authenticity of electronic sensor data

The disclosed computer-implemented method for controlling uploading of potentially sensitive information to the Internet may include (i) loading, at the computing device, at least a portion of a webpage and (ii) performing a security action including (A) converting, at the computing device, components of the webpage from an online status to an offline status, (B) receiving a sensitive information input to a respective offline component of the webpage, (C) converting, based on a stored user preference and in response to receiving the sensitive information input, the respective offline component to the online status, (D) buffering an outgoing network request comprising the sensitive information input, (E) receiving an approval input indicating approval to transmit the potentially sensitive information to the Internet, and (F) releasing the outgoing network request in response to receiving the approval input. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for controlling uploading of potentially sensitive information to the internet

A method for improving memory efficiency of production rule systems is described. In one embodiment, the method includes identifying a rule associated with production rule systems, constructing a production rule network based at least in part on the rule, identifying a positional constraint associated with the rule, and implementing an alpha memory gate in the production rule network based at least in part on the positional constraint. In some cases, the alpha memory gate is one of a plurality of nodes of the production rule network.

Memory efficiency of production rule systems

The disclosed computer-implemented method for establishing restricted interfaces for database applications may include analyzing, by a computing device, query behavior of an application for query requests from the application to a remote database in a computer system and identifying, based on the analysis, an expected query behavior for the application. The method may include establishing, between the application and the remote database, a restricted interface. The method may include receiving, at the restricted interface, a query request from the application to the remote database and limiting, by the restricted interface, the query request from the application to the remote database based on the expected query behavior. The method may include determining, by checking the query request against the expected query behavior, that the query request is anomalous query behavior and performing a security action with respect to the computer system. Various other methods, systems, and computer-readable media are also disclosed.

Growing community of inventors

Los Angeles, CA, United States of America

Daniel Marino