Cybertoka Ltd.

Interwise Ltd.

Inierwise Ltd.

Sofia Belikovetsky

Ofer HaCohen

Alon Kantor

Baruch Weizman

Steven Lauderdale

Ofer Hacohen

Yuval Solodnik

Guy Zana

Yossi Ben-Hagai

Moty Zaltzman

Micha Kalfon

Shimi Gersner

Roi Leibovich

Michael Volfman

Reut Roich

Moty Zaltsman

Concepts and technologies directed to agentless personal firewall security in virtualized datacenters are disclosed herein. Embodiments can include a computer system that can host a hypervisor via a memory and a processor. Upon execution, the processor can cause the computer system to perform operations. The operations can include receiving an inbound communication request to a virtual machine associated with the hypervisor. The operations also can include identifying a virtual port associated with the virtual machine based on the inbound communication request. The operations can include determining that the inbound communication request lacks an identity of a virtual application process that executes on the virtual machine. The operation also can include building a virtual machine memory map. The operation also can include forcing exposure of the virtual application process based on the virtual machine memory map.

Agentless personal network firewall in virtualized datacenters

Computerized methods and systems locate a first device connected to a first network. One or more logs, each generated at a corresponding second device connected to the first network, are received via a second network linked to the first network. Each log has network data having network information associated with the corresponding second device, and location data having location information indicative of a location of the corresponding second device. The network data is analyzed to identify network information in at least one log that matches received network information associated with the first device. Location information in the location data of the at least one log is used to determine a location associated with the first device. In some implementations, the network data in the at least one log and timestamps associated with the network data in the at least one log are used in order to classify the determined location.

Methods and systems for identifying and classifying locations of networked devices

Multiple deception techniques utilized to mislead malicious entities that attempt to gather information associated with a computing device are implemented by changing a single result. In one aspect, requests for screen captures are intercepted and it is determined whether the requests are triggered due to user interaction (e.g., pressing a button and/or key) and/or received from an authorized application/device. If determined that the requests are not triggered due to user interaction and/or are received from an unauthorized application/device, a response comprising one of several pre-prepared or dynamically generated screen captures that are embedded (and/or appended) with misleading information (e.g., fake credentials, fake documents marked as important/hidden, etc.) is generated. Applications that attempt to utilize the misleading information can be flagged as malware.

Deception using screen capture

Systems and methods are provided for modifying transmissions made by security cameras so as to allow access to the surveyed locations without the knowledge of the operator of the cameras.

Method and system for discreetly accessing security camera systems

Systems and methods are provided for efficiently identifying software bugs in computer programs and the inputs to trigger the bugs using fuzz-testing.

System and method for identifying inputs to trigger software bugs

Systems and methods are provided for the discovery and classification of Internet of Things (IoT) devices on networks.

Method and system for detecting and classifying networked devices

Systems and methods are provided for the reconstruction of a video and audio recording of stored or transmitted media streams, using a proprietary file format or protocol.

Method and system for reconstructing media streams

A method includes receiving, at a network control system, a message that includes content and a header. The header identifies a propagation mode for sending the content via a network. The method includes, based on at least the propagation mode, obtaining location data regarding a plurality of devices connected to the network. The method also includes, based on at least the location data, identifying an intended recipient from the plurality of devices. The method includes transmitting the content to the intended recipient.

Growing community of inventors

Petah Tikva, Israel

Sofia Belikovetsky