Rapid7, Inc.

Emc Corporation

Matthew Robert Hathaway

Bryan Knauss

Samuel Adams

Jeff Myers

Dana Elizabeth Wolf

Yedidya Dotan

Roy Donald Hodgman

Chad Loder

Richard Perkett

Steven Torance

Skye Spear

Sam Adams

Hd Moore

Edward J Ciramella

Raanan Lidji

Jonathan Kelly

Dana E Wolf

Systems and methods of managing the security of a networked environment by deploying virtual appliances and using a central monitoring console to manage the feedback from these virtual appliances and view it alongside other activity on the network environment. In one embodiment a system is provided that includes a control module; and one or more virtual appliances each configured to, upon deployment in the network, automatically communicably link to the control module and report state information about the virtual appliance.

Preconfigured honey net

Systems and methods of managing the security of a networked environment based on activity associated with deployed pseudo-accounts are presented. In one embodiment, a plurality of pseudo-accounts are deployed in one or more networks, domains, or virtual machines and activity associated with the pseudo-accounts is collected to identify security risks to facilitate remediation and mitigation.

Honey user

Systems and methods of correlating accounts among a plurality of network assets using account lateral movement data is presented in the context of network security. In one embodiment a plurality of authentication audit logs are received from a plurality of assets; the plurality of authentication audit logs are correlated; and a notification is generated based on a comparison of correlation results and a database of permitted account associations.

Lateral account mapping

A security assessment tool can determine computer assets in a network and provide an overall security score for the network. The overall security score can represent an objective measure of the security of the network that considers potential security threats to the computer assets, counter measures deployed in the network to address the potential security threats, and the effectiveness of the counter measures. Based on the overall security assessment, the security assessment tool can provide recommendations for improving the security of the network.

Systems and methods for assessing security for a network of assets and providing recommendations

Systems and methods for determining an objective security assessment for a network of assets

A technique manages consumer authentication. The technique involves communicating with an institutional entity to perform an authentication operation regarding a consumer. The technique further involves conveying a query to the consumer in response to the authentication operation. The query prompts the consumer to indicate whether the consumer participated in the authentication operation. The technique further involves obtaining a response to the query indicating whether the consumer participated in the authentication operation. The authentication operation is legitimate when the response indicates that the consumer participated in the authentication operation. The authentication operation is fraudulent when the response indicates that the consumer did not participate in the authentication operation. In some arrangements, the authentication operation involves knowledge-based authentication (KBA) activity. In some arrangements, the query is conveyed to the consumer through an identity protection entity which is different than the institutional entity.

Managing authentication based on contacting a consumer as soon as the consumer has performed an authentication operation

A method is used in authenticating using organization based information. Organization based information is analyzed for information that is suitable for use in authenticating a user. The organization based information includes employee-used information. A question is derived from the organization based information. Based on the question, a process used to authenticate a user is executed.

Authenticating using organization based information

A payment card comprises a processor, a trigger source coupled to the processor, and a display for outputting at least a portion of a dynamic account number under control of the processor responsive to the trigger source. The dynamic account number is determined based at least in part on a seed stored in the payment card and an output of the trigger source. In an illustrative embodiment, the dynamic account number is generated utilizing a time-based or event-based one-time password algorithm. For example, in a time-based embodiment, the trigger source may comprise a time of day clock, with the dynamic account number being determined based at least in part on the seed and a current value of the time of day clock. In an event-based embodiment, the trigger source may comprise an event counter, with the dynamic account number being determined based at least in part on the seed and a current value of the event counter.

Growing community of inventors

Newton, MA, United States of America

Matthew Robert Hathaway