The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jul. 13, 2021

Filed:

Jul. 03, 2019
Applicant:

Karamba Security Ltd., Hod Hasharon, IL;

Inventors:

Tal Efraim Ben David, Hogla, IL;

Assaf Harel, Ramat Hasharon, IL;

Amiram Dotan, Birmingham, MI (US);

David Barzilai, Hod Hasharon, IL;

Assignee:

KARAMBA SECURITY LTD., Hod Hasharon, IL;

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 21/00 (2013.01); G06F 21/55 (2013.01); G06F 21/56 (2013.01); H04W 12/128 (2021.01); H04W 4/40 (2018.01); H04W 4/02 (2018.01);
U.S. Cl.
CPC ...
H04L 63/1416 (2013.01); G06F 21/552 (2013.01); G06F 21/56 (2013.01); G06F 21/566 (2013.01); H04L 63/145 (2013.01); H04L 63/1425 (2013.01); H04L 63/20 (2013.01); H04W 4/02 (2013.01); H04W 4/40 (2018.02); H04W 12/128 (2021.01); H04L 2209/84 (2013.01);
Abstract

In one implementation, a method for providing security on externally connected controllers includes receiving, at a reporting agent that is part of a security middleware layer operating on a controller, an indication that a process has been blocked; obtaining, by the reporting agent, trace information for the blocked process; determining, by the reporting agent, a code portion in an operating system of the controller that served as an exploit for the blocked process; obtaining, by the reporting agent, a copy of malware that was to be executed by the blocked process; generating, by the reporting agent, an alert for the blocked process that includes (i) the trace information, (ii) information identifying the code portion, and (iii) the copy of the malware; and providing, by the reporting agent, the alert to a network interface on the controller for immediate transmission to a backend computer system.


Find Patent Forward Citations

Loading…