Cyberark Software Ltd.

Nice Ltd

Roy Adar

Yair Sade

Andrey Dulkin

Shai Shermister

Motti Nisani

Yossi Dantes

Tzippi Yitzhack

Methods and systems are disclosed for detecting unauthorized actions associated with network resources, the actions including access to the resource and activity associated with the resource. The unauthorized actions are detected by analyzing action data of a client action associated with the network resource against credential retrieval data including records of authorized actions and/or procedures for performing an action associated with the network resource.

Method and system for detecting unauthorized access to and use of network resources

An apparatus, system and method for multimedia capturing, logging and retrieval are disclosed. The apparatus provides time synchronized voice and data interactions capturing and logging, secured playback and retrieval functionality for dispute resolution, for detecting negative and positive conduct, for business analysis and performance, and for quality management. The apparatus provides for synchronization and association of multi-media interactions for financial transactions in order to provide for the retrieval, playback, and review of the transaction-specific events in their temporally correct and integrated sequence.

Apparatus, system and method for dispute resolution, regulation compliance and quality management in financial institutions

A method of credential provisioning on a target service utilizes three credential sets: authentication credentials, privileged credentials and provisioned credentials. An intermediate element receives a request from a user client to establish a session with a target service. The request includes authentication credentials. The intermediate element creates provisioned credentials using privileged credentials which are authorized for creating provisioned credentials for accessing the target service. Once provisioned credentials have been created, a dual session communication channel is established between the user client and the target service. The session between the user client and intermediate element is established using the authentication credentials and the session between the intermediate element and the target service is established using the provisioned credentials. Optionally, user authorization to establish a session with the target service is determined prior to creating the provisioned credentials.

User provisioning

The present invention discloses methods, media, and systems for handling hard-coded credentials, the system including: an interception module configured for: intercepting credential usage upon receiving an application request for application credentials in order to provide access to a host application; a configuration/settings module configured for reading system configurations and settings for handling the application credentials; a credential-mapping module configured for: applying appropriate credential-mapping logic based on the system configurations and settings; and upon determining that the application credentials need to be replaced, obtaining appropriate credentials from a secured storage. Preferably, the interception module is further configured for: prior to the intercepting, hooking a connection API of the host application upon access of a credential location in which the application credentials are stored; and wherein the credential-mapping module is further configured for: subsequent to the hooking, using the appropriate credentials to connect the host application with the connection API.

Growing community of inventors

Kiryat Ono, Israel

Roy Adar