Phillip Tsukerman

Title: The Innovations of Phillip Tsukerman

Introduction

Phillip Tsukerman is a notable inventor based in Tel Aviv, Israel. He has made significant contributions to the field of cybersecurity, particularly in the detection of pass-the-hash attacks. His innovative approach has garnered attention in the tech community, showcasing his expertise and dedication to enhancing security measures.

Latest Patents

Phillip Tsukerman holds a patent for a method and mechanism for the detection of pass-the-hash attacks. This patent outlines a method of generating a baseline of expected behavior on a single machine or endpoint. By accurately fingerprinting the native behavior of the NTLM protocol on that particular endpoint, the method limits the scope of the baseline to expected behaviors, including supported hash functions, version strings, and various feature flags. Deviations from these behaviors are considered evidence of a redundant implementation of NTLM utilized by an attacker, indicating an attempted PTH attack. This innovative method allows for the accurate detection of PTH attacks originating from publicly known non-standard implementations of NTLM, existing in tools such as Impacket, Metasploit, and Invoke-TheHash.

Career Highlights

Phillip Tsukerman is currently employed at Cybereason Inc., where he continues to develop and refine his innovative security solutions. His work at Cybereason has positioned him as a key player in the cybersecurity landscape, contributing to the company's mission of providing advanced threat detection and response capabilities.

Conclusion

Phillip Tsukerman's contributions to the field of cybersecurity, particularly through his patent for detecting pass-the-hash attacks, highlight his innovative spirit and commitment to enhancing security measures. His work at Cybereason Inc. further underscores his role as a significant figure in the tech industry.