The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Aug. 13, 2024

Filed:

Oct. 06, 2020
Applicant:

Crowdstrike, Inc., Sunnyvale, CA (US);

Inventors:

Marina Simakov, Ashdod, IL;

Sagi Sheinfeld, Tel Aviv, IL;

Assignee:

CrowdStrike, Inc., Sunnyvale, CA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 9/40 (2022.01); G06Q 30/018 (2023.01); H04L 9/32 (2006.01);
U.S. Cl.
CPC ...
H04L 63/108 (2013.01); G06Q 30/0185 (2013.01); H04L 9/3236 (2013.01); H04L 63/0807 (2013.01); H04L 2463/082 (2013.01);
Abstract

Methods and systems for detecting forged Kerberos protocol tickets are presented. In one embodiment, a method is presented that includes receiving and decrypting an authentication request including a ticket. A validity start time and a validity end time may then be extracted from the ticket and a validity period may be calculated based on the validity start time and the validity end time. The method may then include retrieving a domain validity period from a domain controller and comparing the validity period to the domain validity period. If the validity period differs from the domain validity period, the authentication request may be blocked.


Find Patent Forward Citations

Loading…