Cisco Technology, Inc.

Gajendar Pandey

Suresh Gopathy

Pradyumna Paralikar

Techniques are described herein for detecting an authorization status for an email based on content included in that email. In embodiments, such techniques may comprise receiving an electronic communication associated with an origination address, identifying, within the electronic communication, information indicating a claimed source entity, determining, based on the information, a claimed source entity, determining a number of authorized addresses associated with the claimed source entity, determining whether the electronic communication is authorized by the claimed source entity based on whether the origination address is included within the number of authorized addresses, updating the electronic communication to include an indication of whether the electronic communication is authorized by the claimed source entity, and transmitting the electronic communication to its intended recipient.

Techniques for detecting and mitigating spoofed email communications

Techniques for an email-security detection system to analyze incoming emails for Business Email Comprise (BEC) attacks of targeted new email users in an enterprise based on peer models of email recipients in an enterprise and the conversation history of recipients. A method is disclosed that includes analyzing an incoming email and identifying one or more recipients of the incoming email in an enterprise network; analyzing contextual information in the incoming email for the email intent, and associating the email with a target recipient; applying a relational model associated with peers of the target recipient for detecting whether the incoming email is a business email compromise (BEC) attack directed to the target recipient; applying a relationship model of other recipients of the incoming email for detecting whether the BEC attack is associated with the target recipient; and determining, whether the incoming email is a BEC attack.

Method to detect and prevent business email compromise (BEC) attacks associated with new employees

This disclosure describes techniques for preventing network attacks within messages. For instance, electronic device(s) may receive a message, such as an email, from a first electronic device. The message may include a first code with a first embedded address to a first network resource, such as a malicious network resource. As such, the electronic device(s) may analyze the message to identify the first code. The electronic device(s) may then generate a second address associated with a second network resource, such as a secure proxy, a remote browser, a click-time protection service, and/or the like. Next, the electronic device(s) may embed the second address in a second code and replace the first code within the message with the second code. After replacing the first code, the electronic device(s) may send the message to a second electronic device of the second user.

Growing community of inventors

Delhi, India

Gajendar Pandey