Nortonlifelock Inc.

Symantec Corporation

Extreme Networks, Inc.

Gen Digital Inc.

Venkadesan Marimuthu

Keith Newstadt

Ilya Sokolov

Iskander Sanchez Rola

SriHarsha Angara

Mahesh Kamsala

Rahuraman Kaliyaperumal

ARamachandra Reddy

Aditya Subhash Sumant

Arun Ganesan

The disclosed computer-implemented method for protecting against credential theft by impersonator applications may include (i) identifying an ownership relationship between each of a group of applications and a group of websites, (ii) generating a preliminary list containing the applications identified as having the ownership relationship with the websites, (iii) determining missing ownership relationships for the applications and the websites in the preliminary list, (iv) updating the preliminary list with the missing ownership relationships to create a trusted list of applications and websites, and (v) performing a security action that protects against a credential theft attack by referencing the trusted list to detect potential impersonator applications attempting to steal user credentials. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for protecting against credential theft by impersonator applications

Protecting PII submitted through a browser. In some embodiments, a method may include detecting multiple PII of a user submitted to multiple organization websites through a browser. The method may also include encrypting each of the PII. The method may further include storing each of the encrypted PII along with an identifier of the organization website to which the PII was submitted. The method may also include receiving a request to view the PII along with an indicator of the organization website to which the PII was submitted. The method may further include retrieving each of the encrypted PII along with the identifier of the organization website to which the PII was submitted. The method may also include decrypting each of the encrypted PII. The method may further include displaying each of the PII along with the indicator of the organization website to which the PII was submitted.

Protecting personally identifiable information submitted through a browser

The disclosed computer-implemented method for identifying cybersecurity status based on an ontology of vault items may include (i) identifying, at a computing device, the ontology of a plurality of vault items and (ii) performing a security action including (A) calculating, based on the ontology, a respective impact score for each vault item in the plurality of vault items and (B) calculating a master score of a plurality of passwords from (I) a respective password strength of each password in the plurality of passwords and (II) the respective impact score for each vault item associated with each password in the plurality of passwords. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for identifying cybersecurity status based on an ontology of vault items

Thwarting one-time password (OTP) theft. In one embodiment, a method may include receiving, at a messaging application executing on the mobile device, a text message from a website that includes an original OTP. The method may also include encrypting, by the messaging application, the original OTP included in the text message to thwart theft of the original OTP from the text message.

Thwarting one-time password theft

Thwarting potentially malicious online activity. In one embodiment, a method may include logging legitimate online user activities performed at a browser. The method may also include receiving a suspicious online activity that was performed at a website. The method may further include comparing the suspicious online activity to the logged legitimate online user activities to determine whether the suspicious online activity matches any of the logged legitimate online user activities. The method may also include, in response to determining that the suspicious online activity does not match any of the logged legitimate online user activities, determining that the suspicious online activity is a potentially malicious online activity, and thwarting the potentially malicious online activity by performing a remedial action at the website to protect the website from the potentially malicious online activity.

Thwarting potentially malicious online activity

A method for detecting and preventing phishing phone calls through verified attribute analysis is described. The method may comprise receiving, by a receiving device, a phone call from a sending device and receiving identification data in parallel with the phone call, the identification data describing context of the phone call. The method may then identify an attribute assertion from the identification data. The attribute assertion may comprise a signed attribute of the phone call and may be signed by a trusted authority. The method may comprise determining content of the phone call, analyzing the content of the phone call against the signed attribute, and performing a defined operation based on a result of the analysis of the content against the signed attribute.

Detecting and preventing phishing phone calls through verified attribute analysis

Systems and methods for dynamic guided obfuscation pattern generation for preventing smudge attacks on touch screen devices are provided. One method may include receiving a user access pattern associated with a matrix displayed on the user interface; wherein, the system generates an obfuscation pattern based upon the user access pattern. For example, the system may generate edges of the obfuscation pattern by determining potential lines that may be drawn from the first and last points of the user access pattern, which are non-repeating and non-overlapping with any edges of the user access pattern and any edges of the obfuscation pattern. The system may iteratively generate edges until a predetermined number of edges are generated or no more edges can be drawn meeting the requirement. Further, the system may display the obfuscation pattern in a point by point or edge by edge fashion on the user interface, enabling the user to draw the new pattern that disguises the user's original access pattern.

Systems and methods of dynamic obfuscation pattern generation for preventing smudge attacks on touch screen devices

Detecting a fraudulent subscriber identity module (SIM) swap may be performed by a mobile app executing on a mobile computing device. A network connectivity state is determined for the mobile computing device to a mobile telephony network provided by a mobile network operator. The mobile computing device is associated with a SIM which is associated with the mobile network operator. A signal strength is determined at the mobile computing device of the mobile telephony network provided by the mobile network operator. A likelihood is determined that a SIM swap has taken place involving the SIM based on the signal strength and the network connectivity state. In some embodiments, a probe request is transmitted to a remote server, requesting that the remote server programmatically call the telephone number associated with the SIM to confirm whether the SIM swap has taken place.

Fraudulent subscriber identity module (SIM) swap detection

A method for phishing detection, performed by a mobile device, is provided. The method includes receiving a first OTP (one-time password), from a remote caller purporting to be from a trusted organization, into the mobile device. The method includes generating a second OTP, using an OTP generation system provided by the trusted organization, and comparing, in the mobile device, the first OTP and the second OTP, wherein the first OTP matching the second OTP indicates legitimacy of the remote caller, and the first OTP mismatching the second OTP indicates illegitimacy of the remote caller. A mobile device and a computer readable media are also provided.

Method and system for detecting phishing calls using one-time password

A method comprising detecting an problem with a software product, capturing debugging information corresponding to the detected problem, searching for the detected problem in a repository of a set of known issues corresponding to the software product to identify a root cause of the detected problem. If the detected problem is a known issue in the set of known issues corresponding to the software product, automatically applying a corresponding solution to the detected problem. If the detected problem is not a known issue in the set of known issues corresponding to the software product, analyzing the user input describing an occurrence of the problem with the software product, as well as the captured debugging information. Based on the analysis, the repository of the set of known issues is updated to include the detected problem as a new known issue and a corresponding solution to the detected problem.

Growing community of inventors

Chennai, India

Venkadesan Marimuthu