Cyberark Software Ltd.

Dor Simca

Alex Gelman

Tal Kandel

Hadas Elkabir

Yaron Nisimov

Daniel Schwartzer

Shlomi Benita

Noam Zweig

Disclosed embodiments relate to context-based analysis of requested activities. Techniques include building dynamic context profiles for processes based on static parameters of the processes, dynamic parameters of the processes, and detected activity involving the processes; receiving an indication of current runtime activity involving at least one identity; matching the indication of current runtime activity to a dynamic context profile; determining a context-based probability that the current runtime activity is anomalous, suspicious, or non-valid with respect to the dynamic context profile; and performing a control action in association with either the current runtime activity or the process based on whether the current runtime activity is determined to be anomalous, suspicious, or non-valid.

Dynamic authorization of requested actions using adaptive context-based matching

Disclosed embodiments relate to decentralized and scalable trust among a plurality of decentralized applications. Techniques include receiving, at a first decentralized application, a signature associated with a first public key, receiving data representing one or more permissions specified by a trusted root application and signed by the trusted root application, signing a second public key associated with a second decentralized application, signing data representing one or more permissions specified by the first decentralized application, and providing the signature associated with the second public key and the signed data representing one or more permissions specified by the first decentralized application, in order to thereby provide trust between the first decentralized application and the second decentralized application.

Scalable authentication for decentralized applications

The disclosed embodiments include systems and methods for dynamically investigating a changing asset-to-asset cloud communication environment. The disclosed embodiments may involve creating a baseline context for a trusted server, the baseline context including categories of assets in the changing asset-to-asset cloud communication environment and corresponding access rights for the categories of assets, training the baseline context for the trusted server based on automatically discovered access rights, and operating the trained baseline context for the trusted server.

Dynamically learning and securing an asset-to-asset cloud communication environment

The disclosed embodiments include systems and methods for securing an asset-to-asset cloud communication environment. The disclosed embodiments may involve identifying an asset spun up in the cloud communication environment based on a notification identifying the spun up asset, determining that the spun up asset will require authorization to achieve at least some secure communication functionality with a different asset in the cloud communication environment, automatically authenticating the spun up asset based on authentication information from a trusted source to the spun up asset, automatically determining, based on the authenticating, whether the spun up asset is authorized to perform secure communication functionality with at least one different asset, and automatically performing a control action, based on the authenticating, to enable the spun up asset to perform the secure communication functionality with the at least one different asset.

Growing community of inventors

Oranit, Israel

Dor Simca