F5, Inc.

Maxim Zavodchik

Ido Breger

Tomer Zait

Michael Kapelevich

Technology related to a network application firewall is disclosed. In one example, a method includes intercepting a response from a network application and destined for a client. The response can be associated with a user identifier. A modified response can be forwarded to the client. The modified response can include a honeytrap embedded within the intercepted response. Engagement with the honeytrap can be detected in a subsequent request to the network application. In response to detecting the engagement with the honeytrap, an indication that the user identifier is malicious can be stored.

Growing community of inventors

Kfar Yona, Israel

Maxim Zavodchik