Embodiments provide methods of protecting computing devices from malicious activity. A
processor of a networking device may monitor network traffic flows of network computing …

A computer-implemented method for modifying file backups in response to detecting
potential ransomware may include (1) detecting, during a file backup process, an anomaly …

A method for operation of a deception management server, for detecting and hindering
attackers who target containerized clusters of a network, including learning the network …

Systems and methods of the present disclosure provide comprehensive risk assessment in a
heterogeneous dynamic network. The framework enables “view” and “analyses” of complete …

A network surveillance system, including a management server within a network of
resources in which users access the resources in the network based on credentials …

A system for network surveillance to detect attackers, including a deception management
server within a network of resources, including a deployment module managing and …

In one embodiment, a device in a network constructs a graph based on Domain Name
System (DNS) traffic in which vertices of the graph correspond to client addresses from the …

The technology disclosed includes a system to group secu rity alerts generated in a
computer network and prioritize grouped security alerts for analysis. The system includes …

A system for detecting malicious activity in networks, including a deception manager having
administrative credentials for a network, planting deceptions within network hosts, and …

Aspects of an abuse detection system for a web service include an abuse detection engine
executing on a server. The abuse detection engine includes a pre-processing module for …