Cisco Technology, Inc.

Other

Proofpoint, Inc.

Adobe, Inc.

Opshub, Inc.

Web Ex Communications, Inc.

David Robert Knight

Angelo Starink

Min Zhu

Sandeep Jain

Lei Zhu

Weidong Chen

Matthew Sheppard

Chris Kangas

Zheng Yuan

Steffen Matt

Edward K Wong

Rohit Deep

Manish Kumar

Elaine Montgomery

Jitendra Chawla

Anand Ramanathan

Jason Q Zhang

Paul Allan Knight

Bryan Burns

Arthur Zavalkovsky

Sihai Xiao

Pruthvish Shankarappa

Linda Wu

Walter Luh

Shawn Farshchi

Eric Montoya

Ilan Kasan

David A Belcher

Leslie M O'Farrell

Christopher Anthony Iezzoni

Chris Daniels

Steffan Matt

Doron Asher Elgressy

Christopher Daniels

Joanne Knight

Edward Wong

The subject disclosure relates to methods for assessing cyber-security risks, and in particular for calculating a risk-index for multiple users of a computer network. In some implementations, a process of the disclosed technology includes steps for determining a privileged index for each of a plurality of network users, determining a vulnerability index for each of the plurality of network users, calculating a threat score for one or more cyber-security attacks directed at each of the plurality of network users, and calculating a risk-index for at least one network user from among the plurality of network users, wherein the risk-index is based on the privileged index, the vulnerability index, and the threat score associated with each of the network users. Systems and machine-readable media are also provided.

People-centric threat scoring

Systems, apparatuses, and methods for more effectively preparing for and responding to cybersecurity threats directed at people or at groups of people. A segmentation process is described that evaluates multiple characteristics of a person that may make them a potential target or that may make a cybersecurity attack on that person more likely to be successful. Based on the segmentation, a security analyst can apply an appropriate risk reduction or security protocol to each person or group of similarly situated people to reduce the likelihood of an attack and/or the likelihood of a successful attack.

System and methods for reducing an organization's cybersecurity risk based on modeling and segmentation of employees

Methods and systems for malicious message detection and processing are provided. An example method includes detecting, via an intermediary node, a link included in a message, the link being associated with an unknown resource or a known malicious resource. The intermediary node may have a processor and a memory for storing executable instructions to perform the method. The example method further includes hashing a unique identifier for each recipient of the message; coupling each of the hashed unique identifiers with the link to create an unique updated link for each recipient; and for each recipient, replacing the link in the message with their corresponding unique updated link. The method may include causing forwarding of the updated message with the corresponding unique updated link to each recipient. If the resource is a malicious resource, the unique update link may be to a block webpage associated with a trusted resource.

Methods and systems for malicious message detection and processing

Methods and corresponding systems for malicious message detection and processing are provided herein. According to example embodiments, a method includes detecting, via an intermediary node, a link included in a message, the link being associated with an unknown resource. The intermediary node may have a processor and a memory for storing executable instructions to perform the method. The example method further includes hashing a unique identifier for a recipient of the message; coupling the hashed identifier with the link to create an updated link, and replacing the link in the message with the updated link. The method may include causing forwarding of the updated message to a recipient. Clicking on or otherwise selecting the updated link by the one or more recipients of the message may be tracked. The method may include mapping the hashed identifier to the unique identifier of each of the one or more recipients.

Systems and methods for malicious message detection and processing are provided herein. According to various embodiments, a method includes detecting, via an intermediary node, a link included in a message, the link being associated with an unknown resource, hashing a unique identifier for a recipient of the message, coupling the hashed identifier with the link, creating an updated link, and forwarding an updated message, including the updated link, to the recipient.

Malicious message detection and processing

Malicious message detection and processing systems and methods are provided herein. According to various embodiments, a method includes detecting, via an intermediary node, a link included in a message, the link being associated with an unknown resource, hashing a unique identifier for a recipient of the message, coupling the hashed identifier with the link, creating an updated link and updated message, and forwarding the updated message to the recipient.

Techniques are provided for tracking and analyzing defect density by source file or module. Defect density is the number of distinct defects which required changes to be made (to fix the defect) to a particular file or module in a given period of time. This metric is very useful for identifying the most critical areas of weakness of the system and hence the areas where additional investment/action may be taken. For example, this metric can be used to prioritize the area in which unit tests should be written, for which additional automated system tests should be written or which a project should be undertaken to re-write the error prone file or module to improve its quality and maintainability.

Calculating defect density by file and source module

Malicious message detection and processing systems and methods are provided herein. According to some embodiments, the messages are emails and the method for processing emails may be facilitated by way of an intermediary node which may be cloud-based. The intermediary node may be communicatively couplable with an email client and an email server. The intermediary node may execute a method that includes analyzing a link included in an email to determine if the link is associated with a potentially malicious resource, and replacing the link with an alternate link to a trusted resource if the link is associated with a potentially malicious resource.

In one embodiment, the methods and apparatuses detect a plurality of targets; select one of the plurality of targets as a selected target; detect a profile associated with the selected target; and display information associated with the selected target, wherein the information is referenced in the profile associated with the selected target.

Methods and apparatuses for presenting information associated with a target to a user

Techniques are provided for capturing the ID of a work item, and the corresponding effort level information, as a part of the actual check-in process of the artifacts into the underlying change management system. This effort information can then be propagated to an external system for subsequent reporting and analysis. In one embodiment, tasks (or similar items such as issues or bugs) are entered into a common task or issue tracking system. As part of this process each task is assigned a unique identifier. A 'call-out' is added to the source control management system which captures the effort level and task ID associated with the proposed change. The data entered is validated to ensure that the task ID is valid and that the effort entered is within a valid range. If the data entered is valid, the change to the underlying artifact is allowed to proceed and the effort and task information is stored for later analysis. If the data is not valid, the proposed change is rejected and an appropriate error message is returned to the user.

Capturing effort level by task upon check-in to source control management system

A set of tools and other mechanisms automatically enforce software development change policies by providing a way to map physical source control system codelines to projects and by providing a way to maintain current project and codeline state information. The set of tools and other mechanisms also provide ways to define change management rules and policies, as well as, ways to evaluate and allow or deny each proposed change against the defined change policy.

Method for enforcing change policy based on project state

In one embodiment, the methods and apparatuses display a list configured to represent a plurality of virtual rooms; identify a selected participant device associated with a selected virtual room from the plurality of virtual rooms wherein the selected participant device is a member of the selected virtual room; selectively display content associated with the selected virtual room to the selected participant device; and notify the selected participant device of a change to the content associated with the selected virtual room.

Methods and apparatuses for managing resources within a virtual room

In one embodiment, a client device may send one or more sub-session requests to one or more corresponding session controllers through a computer network to obtain one or more corresponding sub-session tokens that indicate in which sub-sessions of an online collaborative computing session the client device is permitted to participate. The client device may then receive particular sub-session tokens (e.g., based on certain permissions), which may then be sent to a collaboration server to establish one or more permitted sub-sessions of the online collaborative computing session with the client device as indicated by the received sub-session tokens.

Token-based control of permitted sub-sessions for online collaborative computing sessions

In one embodiment, the methods and apparatuses request an installation of an application; detect a user requesting the application; detect a profile associated with the user; and grant permission to install the application based on an installation permission.

Growing community of inventors

Los Altos, CA, United States of America

David Robert Knight