Nortonlifelock Inc.

Gen Digital Inc.

Iskander Sanchez

Leylya Yumer

David Luz Silva

Matteo DellAmico

Mitigating website privacy issues by automatically identifying cookie sharing risks in a cookie ecosystem. In some embodiments, a method may include generating, by the computing device, a cookie tree representing cookies created on a web browser while browsing a website. The cookie tree may include nodes representing organizations. The cookie tree may further include hierarchical edges between the nodes representing creation chains of the nodes. The method may also include determining, by the computing device, a creator, a sender, and a receiver of each of the cookies. The method may further include mitigating, by the computing device, website privacy issues based on the creator, sender, and receiver of each of the cookies.

Mitigating website privacy issues by automatically identifying cookie sharing risks in a cookie ecosystem

The disclosed computer-implemented method for protecting user data privacy against web tracking during browsing sessions may include (i) detecting a user request, including a private domain, for a website in a web browser address bar during a browsing session, (ii) separating, utilizing a browser container, a user browsing state associated with the private domain from other domains during the browsing session, (iii) routing the user website request to one or more servers in a random order to run the browsing session, (iv) performing a browsing state security action that protects against cross-website tracking by discarding user browsing state data collected during the browsing session, and (v) performing a web isolation security action that protects against use of browser fingerprint data for conducting malicious attacks based on the routing of the user website request to the servers in the random order. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for protecting user data privacy against web tracking during browsing sessions

The disclosed computer-implemented method for protecting against misleading clicks on websites may include (i) detecting a user click event on a uniform resource locator (URL) for navigating to a website during a web browsing session, (ii) analyzing the user click event to identify expected domain behavior associated with navigating to the website based on the URL, (iii) determining, based on the analysis, that the user click event deviates from the expected domain behavior associated with navigating to the website based on the URL, and (iv) performing a security action that protects against potentially malicious activity caused by the user click event deviating from the expected domain behavior associated with navigating to the website based on the URL. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for protecting against misleading clicks on websites

The disclosed computer-implemented method for protecting user privacy may include (i) detecting that a website indicates a user account identifier, (ii) detecting whether a third-party script has access to the user account identifier, and (iii) performing, based at least in part on detecting that the third-party script has access to the user account identifier, a security action to protect user privacy such that the security action facilitates an attempt to prevent the third-party script from actually accessing the user account identifier. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for protecting user privacy

Analyzing and mitigating website privacy issues by automatically classifying cookies. In some embodiments, a method may include identifying a cookie for a website, obtaining a cookie generation flow related to generation of the cookie, obtaining a cookie sharing flow related to sharing of the cookie, extracting features related to the cookie generation flow and the cookie sharing flow, determining flow patterns in the cookie generation flow and the cookie sharing flow, automatically creating a stratified classification for the cookie based on the features and the flow patterns that explains how the cookie interacts with a website and with third-party resources loaded on the website, determining whether the stratified classification for the cookie exceeds a weighted suspiciousness threshold value, and in response to determining that the stratified classification for the cookie exceeds the weighted suspiciousness threshold value, determining that the cookie is suspicious and initiating a security action on the cookie.

Analyzing and mitigating website privacy issues by automatically classifying cookies

Analyzing and mitigating privacy issues on a computing device using cookie generation flows. The method includes initiating a headless web browser, monitoring a request made of a website accessed by the headless web browser, monitoring scripts created on the website, instrumenting a function used to create a cookie on the computing device, tracing an initial generation of a call used to create the cookie on the computing device, obtaining a cookie generation flow related to the creation of the cookie, and initiating a security action based on obtaining the cookie generation flow.

Growing community of inventors

Antibes, France

Iskander Sanchez