Citrix Systems, Inc.

Other

Manbinder Pal Singh

Georgy Momchilov

Daniel George Wing

Jacob Jared Summers

Rachelle Tobkes

Harsh Shah

Ian Pratt

Leo C Singleton, Iv

Jian Ding

Daowen Wei

Hengbo Wang

Feng Tao

Imtiaz Mohammad

Christopher M Fleck

Aikaterini Kalou

Maanusri Balasubramanian

Asterios Stergioudis

Devyash Sanghai

Santosh Gummunur Chiranjeevi Sampath

Mathew Varghese

Chris Fleck

Pratik Shah

Tejus Adiga M

Christopher Fleck

Amy Haworth

Sabarish Nadarajan

A computer system configured to determine safety of a suspected website is provided. The computer system includes a memory and at least one processor coupled to the memory. The at least one processor is configured to receive a request to visit the suspected website; send an incorrect password to the suspected website; receive a reply from the suspected website; and determine, based on the reply to the incorrect password, whether to execute a precautionary operation. The system may proceed with the request responsive to the reply including an error notification, as identified based on one or more of: a Document Object Model (DOM) tag; a re-appearance of a sign-in control; or an Application Programming Interface (API) call. Alternatively, the system may abandon the request responsive to the reply being affirmative, for example including a prompt or input field for a one-time password.

Anti-phishing based on wrong flow detection

A method comprising: detecting a first event with use of a sensor, the first event to occur while audio data is output on a computing device, the audio data including speech; identifying a first location in a transcript of the speech from the audio data based on a signal from the sensor that detected an occurrence of the first event; identifying a portion of the transcript that includes the first location based on one or more timestamps that define the portion of the transcript relative to the first location; generating a link to audio that is associated with the extracted portion of the transcript; and providing the extracted portion of the transcript and the link to an application.

Method and apparatus for generating text from audio

Methods and systems for providing notifications in an extended reality (XR) environment are described herein. A computing device may provide, to a user and via an XR device, an XR environment. The computing device may detect one or more first locations of one or more display devices. At least one first display device of the one or more display devices may be in a physical environment around the XR device. The computing device may retrieve one or more notifications for display in the XR environment and determine, based on the one or more first locations of the one or more display devices, one or more second locations for the one or more notifications. The computing device may then provide, in the XR environment and at the one or more second locations, the one or more notifications.

Notifications in extended reality environments

A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory and configured to identify a first domain name associated with a website that served a login form to a web browser. The at least one processor is further configured to identify a one-time password (OTP) entry request served from the website in response to transmitting user credentials to the website. The at least one processor is further configured to identify a second domain name associated with an OTP server that provided an OTP. The at least one processor is further configured to perform a security action in response to determining that the first domain name differs from the second domain name. The security action may include blocking a response to the OTP request from the website, providing a warning, and/or obtaining confirmation for the response to the OTP entry request.

Preventing phishing attempts of one-time passwords

A computer implemented method is provided. The method includes detecting a message specifying a request to authorize an application to access a resource; reading an identifier from the message; determining whether the identifier is associated with a safe application or an unsafe application; and processing the message based on whether the identifier is associated with a safe application or an unsafe application.

Secure authorization

Described embodiments provide systems and methods for protecting access to a server. A device intermediary to a client and a server may identify a capability of the client to protect access to the server via an application. The device may determine that an element of a user interface provided by the application to the client is to be modified based at least on the capability. The device may modify, responsive to the determination, the element of the user interface to further protect access to the server in accordance with the capability. The device may provide the modified element to the client for the user interface of the application.

Control of client access to server-hosted resources

A computer system configured to protect user credentials is provided. The computer system includes a memory and at least one processor coupled to the memory. The at least one processor is configured to select a number N of non-sequential positions in a password according to a selection strategy; sample the number N of characters from the password corresponding to the selected non-sequential positions; store the selected positions; store the sampled characters separately from the selected positions; detect entry of the sampled characters in the N non-sequential positions in a protected location; and perform a security action in response to the entry of the sampled characters in the protected location.

Detecting sharing of passwords

A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory and configured to evaluate a risk associated with an email attachment based on application of security policies to properties of the attachment and to the context associated with receipt of the email. The at least one processor is further configured to detect an attempt by a user to open the email attachment. The at least one processor is further configured to prevent the opening of the attachment based on the evaluated risk. The at least one processor is further configured to redirect the attachment to a secure browser, hosted on a remote server, based on the evaluated risk.

Redirection of attachments based on risk and context

Techniques performed by a computing device are provided. A method includes (a) locating, by the computing device, a portion of a digital image that depicts fields of a paper form, the fields including markings; (b) identifying, by the computing device, a marking within one of the fields of the paper form as being contrary to a set of rules; and (c) modifying, by the computing device, the digital image to remove the identified marking from the digital image, so that the portion of the digital image depicts the one field of the paper form as being unmarked. An apparatus and computer program product for performing a similar method are also provided.

Techniques for modifying markings on a digitized document

In one aspect, an illustrative methodology implementing the disclosed techniques includes, by a computing device, determining that an application process includes use of a first image and a second image, one of the first and second images being generated as part of the application process, and detecting a difference in content of the first image or the second image based on a comparison of the first and second images. The method also includes, by the computing device, revoking access to a file that includes at least one of the first and second images based on the detection of the difference in content of one of the first and second images.

Image steganography detection

A computing device includes a display, and a browser to access applications for display in a browser window. Each application is associated with a respective browser tab within the browser window. A processor is coupled to the display to display content from an application associated with a selected browser tab, and to classify the selected browser tab. The processor enables app protection to selectively block screenshots of the displayed content based on the classification of the selected browser tab.

Contextual tab aware app protection

In some embodiments, a method includes: receiving, by a computing device, shortcut commands from a plurality of applications, the shortcut commands provide access to features of different applications of the plurality, and the plurality including both active and inactive applications in execution; generating, by the computing device, a list of shortcut commands in response to a transition of a first application of the plurality from a state of inactive use to a state of active use, the list including a shortcut command from at least one inactive application of the plurality; and causing, by the computing device, display of a user interface that includes the list to enable access to a feature of an inactive application in response to selection of at least one shortcut command of the list.

Shortcut commands for applications

A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory and configured to provide phishing attack protection based on identity provider verification. The at least one processor is further configured to capture an image of a browser web page to which the user has navigated and identify the domain name associated with the browser web page. The at least one processor is further configured to determine that the captured image matches an image of a known identity provider web page. The at least one processor is further configured to detect a phishing attempt in response to the determination that the images match and that the domain name associated with the browser web page differs from the domain name associated with the identity provider web page.

Systems and methods for phishing attack protection based on identity provider verification

A method, a system, and a computer program product for managing multimedia streams of user devices. A reproduction of one or more multimedia streams on a first computing device is determined. A location of a second computing device being positioned in an area enclosed by one or more boundaries in a plurality of boundaries is detected. Each boundary in the plurality of boundaries is associated with a predetermined type of a multimedia stream in one or more multimedia streams. At least one of a pausing and an unpausing of the reproduction of one or more multimedia streams on the first computing device based on the detected location of the second computing device is executed.

Proximity and context based stream playback control

A method may include receiving, by a computing system and from a first device, first data. The first data may be based at least in part on a first output from a first instance of a model processed by the first device. The method may further include receiving, by the computing system and from the first device, second data that was processed by the first instance of the model to produce the first output. The method may also include processing, by the computing system, the second data with at least a portion of a second instance of the model to produce a second output. The method may additionally include determining, by the computing system, third data based at least in part on the second output. Further, the method may include determining, by the computing system, that the third data is consistent with the first data.

Growing community of inventors

Coral Springs, FL, United States of America

Manbinder Pal Singh