Cyberark Software Ltd.

Gil Makmel

Or Gamliel

Dima Barboi

Tal Kandel

Amir Levy

Noa Moyal

Kobi Ben Naim

Guy Ben Arie

Rotem Elias

Ariel Beck

Disclosed embodiments relate to systems and methods for discovering and remediating hidden secrets in code files. Techniques include accessing an element of source code for analysis, performing a static analysis of the element of source code, and generating a control flow representation that identifies a plurality of functions and a sequence of functions associated with the element of the source code. The techniques may further include determining a probability of a hidden secret being included in the element of source code and performing a security action of at least one of: generating an alert, displaying a visual indication of the probability, generating a report associated with the hidden secret, sending data associated with the probability to a machine learning system for training the machine learning system, or a remediating action associated with the hidden secret.

Discovering and remediating hidden secrets in code files

Techniques include analyzing risk data for a plurality of network-based identities and generating interactive graphical user interfaces to allow for visualization of the risk data. Operations may include identifying a plurality of network-based identities that have been deployed in a network environment; identifying a scope of permissions associated with the plurality of network-based identities; determining a scope of activity of at least one of: use of the permissions, non-use of the permissions, or activity associated with the permissions for the plurality of network-based identities; developing risk statuses for the plurality of network-based identities; and generating a graphical user interface representing the risk statuses, the graphical user interface comprising a first graphical element having a size and a color, the size and the color being determined based on the risk statuses associated with a first platform within the network environment.

Monitoring and controlling risk compliance in network environments

Disclosed embodiments relate to decentralized and scalable trust among a plurality of decentralized applications. Techniques include receiving, at a first decentralized application, a signature associated with a first public key, receiving data representing one or more permissions specified by a trusted root application and signed by the trusted root application, signing a second public key associated with a second decentralized application, signing data representing one or more permissions specified by the first decentralized application, and providing the signature associated with the second public key and the signed data representing one or more permissions specified by the first decentralized application, in order to thereby provide trust between the first decentralized application and the second decentralized application.

Secretless secure data distribution and recovery process

Disclosed embodiments relate to systems and methods for secure distributed authentication data. Techniques include identifying asserted authentication data associated with the request, generating an encryption key based on the asserted authentication data, generating a non-restorable digital representation of the asserted authentication data, retrieving an encrypted non-restorable digital representation of authentication data associated with the client identity, decrypting the retrieved encrypted non-restorable digital representation of authentication data using the encryption key, comparing the decrypted non-restorable digital representation of authentication data to the non-restorable digital representation of asserted authentication data; and providing a token for use in an authentication process for the client identity upon determining, based on a match between the stored non-restorable digital representation of authentication data and the non-restorable digital representation of version of the asserted authentication data.

Secure distributed authentication data

Techniques include receiving, at a sensor, a request for authentication of an identity; determining, based on a distributed ledger, a dynamic credibility score for the identity; determining whether the dynamic credibility score for the identity can be validated by consensus by at least a subset of distributed verification services, based on whether the dynamic credibility score for the identity is within a range of variance from one or more credibility scores for the identity determined by the subset of the plurality of distributed verification services; and determining, based on whether the dynamic credibility score for the identity can be validated by consensus, whether to authorize the identity to perform the action in the blockchain network.

Growing community of inventors

Petach-Tikva, Israel

Gil Makmel