Cujo LLC

James Mathews

Santeri Kangas

Matti Niemenmaa

Michael Przybilski

One or more features of a connected device are determined. A set of websites potentially accessed by the connected device are defined based on the one or more features. Reputation data for the set of websites is determined. The reputation data for the set of websites is stored into a cache. Network traffic between the connected device and an accessed website is intercepted. Reputation data for the accessed website is retrieved from the cache based on the network traffic. A cybersecurity operation related to the connected device is performed based on the reputation data for the accessed website.

Website reputation cache based on connected device features

Data communication of a user apparatus via a customer-premises equipment (CPE) is intercepted. The CPE implements a local area network for the data communication of the user apparatus. First network traffic related to a remote access software in the user apparatus is detected in the data communication. Second network traffic related to an online banking software in the user apparatus is detected in the data communication. The first network traffic and the second network traffic are determined to coincide. In response to determining that the first network traffic and the second network traffic coincide, the first network traffic related to the remote access software in the user apparatus is blocked via the CPE.

Technical support scam protection

After a data packet containing an active medium access control (MAC) address of a connected device enters a customer-premises equipment (CPE), the active MAC address of the connected device is replaced with an earlier MAC address of the connected device. Before the data packet with the earlier MAC address exits the CPE, the earlier MAC address of the connected device is replaced with the active MAC address of the connected device.

Growing community of inventors

Utrecht, Netherlands

James Mathews