Qomplx, Inc.

Farooq Israr Ahmed Shaikh

Jason Crabtree

Andrew Sellers

Richard Kelley

Randy Clayton

Luka Jurukovski

Angadbir Singh Salaria

A system and methods for detecting and mitigating SAML forgery and manipulation attacks against services is provided, comprising a policy manager configured to observe a new authentication object generated by an identity provider, and retrieve the new authentication object; and a hashing engine configured to create a unique identifier for each valid authentication session; wherein subsequent access requests accompanied by authentication objects are validated by checking for a valid unique identifier.

System and methods for detecting SAML forgery or manipulation attacks

A system and methods for detecting and mitigating golden SAML attacks against federated services is provided, comprising an authentication object inspector configured to observe a new authentication object generated by an identity provider, and retrieve the new authentication object; and a hashing engine configured to create a security cookie for each valid authentication session; wherein subsequent access requests accompanied by authentication objects are validated by checking for a valid security cookie.

System and methods for detecting and mitigating golden SAML attacks against federated services

Growing community of inventors

Reston, VA, United States of America

Farooq Israr Ahmed Shaikh