Symantec Corporation

Nortonlifelock Inc.

Justin Harmon

Bruce McCorkendale

Ramakrishnan Meenakshi Sundaram

Srini Chillappa

The disclosed computer-implemented method for securing Universal Plug and Play connections may include (1) detecting, by a network device within a local network, an attempt by a remote device to establish a connection with a client device within the local network via a UPnP protocol, (2) identifying a forwarding rule applied by the network device on the client device based at least in part on an identity of the client device, (3) determining at least one restriction placed on UPnP connections between the client device and remote devices by the forwarding rule, and then in response to determining the restriction placed on UPnP connections between the client device and remote devices by the forwarding rule, (4) enforcing the restriction on the connection attempted by the remote device with the client device via the UPnP protocol. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for securing universal plug and play connections

The disclosed computer-implemented method for enforcing access-control policies may include (1) detecting, at a network device capable of configuring networks according to access-control policies, an attempt to connect a client to an access-controlled network, (2) identifying an access-control policy that applies to the access-controlled network, (3) configuring the access-controlled network according to the access-control policy, and (4) notifying the client that the access-controlled network is available. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for enforcing access-control policies

The disclosed computer-implemented method for managing wireless-network deauthentication attacks may include (1) detecting, at the wireless access point, a deauthentication signal, transmitted over a wireless network that is managed at least in part by the wireless access point, that prompts a target computing device to disconnect from the wireless network, (2) determining both that the deauthentication signal is directed to the target computing device and that the deauthentication signal was not initiated by the wireless access point, (3) determining, based at least in part on the determination that the deauthentication signal was not initiated by the wireless access point, that the deauthentication signal represents an illegitimate deauthentication signal, and (4) performing, in response to determining that the deauthentication signal represents an illegitimate deauthentication signal, a security action to mitigate effects of the illegitimate deauthentication signal on the target computing device. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for managing wireless-network deauthentication attacks

The disclosed computer-implemented method for updating network devices may include (1) determining, by monitoring at least one endpoint device connected to a network device that provides a network connection for the endpoint device, periodic time intervals in which a user of the endpoint device is unlikely to access the network connection via the network device, (2) detecting that a system update is available for the network device that will impair the ability of the network device to provide the network connection for the endpoint device while being applied to the network device, (3) identifying, based on the periodic time intervals in which the user is unlikely to access the network connection, an optimal time at which to apply the available system update to the network device, then (4) applying the available system update to the network device at the optimal time.

Systems and methods for updating network devices

The disclosed computer-implemented method for detecting potentially illegitimate wireless access points may include (1) detecting an attempt by the computing device to automatically connect to a wireless access point that resembles a known wireless access point whose geographic location is stored by the computing device, (2) identifying a current geographic location of the computing device, (3) determining that the current geographic location of the computing device is beyond a certain distance from the geographic location of the known wireless access point, and then (4) determining, based at least in part on the determination that the current geographic location of the computing device is beyond the certain distance from the geographic location of the known wireless access point, that the wireless access point is potentially illegitimate. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for detecting potentially illegitimate wireless access points

The disclosed computer-implemented method for detecting potentially illegitimate wireless access points may include (1) detecting, at a current point in time, an attempt by a computing device to automatically connect to a target wireless access point that resembles a known wireless access point with which the computing device has established a previous connection at a previous point in time, (2) detecting at least one suspicious discrepancy between the target wireless access point and the known wireless access point, and then (3) determining, based at least in part on the suspicious discrepancy, that the target wireless access point is potentially illegitimate. Various other methods, systems, and computer-readable media are also disclosed.

Growing community of inventors

Knoxville, TN, United States of America

Justin Harmon