Mitigating against malicious login attempts
AssigneeT-Mobile USA, Inc.
InventorBrett C. Peppe
Life of this patent
Estimating the term…
Abstract
Techniques are disclosed for mitigating against malicious login attempts. In some examples, a computer system receives a plurality of login attempts to the system, the plurality of login attempts being originated from an Internet Protocol (IP) subnet. The computer system determines a ratio of successful login attempts to unsuccessful login attempts of the plurality of login attempts. Then, in response to determining that the ratio of a number of successful login attempts to total login attempts is below a predetermined threshold, the computer system denies a future login attempt to the system that is associated with the IP subnet for a first time period.
Claims14
A method, comprising:
- receiving, at a front-end server, a plurality of login attempts to a computer system;
- segmenting collectively the plurality of login attempts into a plurality of segmentation types of login attempts, including segmenting one login attempt of the plurality of login attempts into more than one segmentation type of the plurality of segmentation types, one of the more than one segmentation type including a known IP address, wherein the plurality of segmentation types are associated with respective levels of access permission to access system resources, the levels ranging from lowest level to highest level corresponding to least right to access the system resources to greatest right to access the system resources;
- determining the lowest level of access permission for the one login attempt of the respective access permissions associated with the segmentation types into which the one login attempt is segmented;
- and
- implementing, at the front-end server, processing of the one login attempt according to a blacklist, whitelist, or greylist in accordance with its determined level of access permission.
One or more non-transitory computer-readable media bearing instructions that are executable to perform operations comprising:
- receiving, at a front-end server, a plurality of login attempts to a computer system;
- segmenting collectively the plurality of login attempts into a plurality of segmentation types of alternate classifiers, including segmenting one login attempt of the plurality of login attempts into more than one segmentation type of the plurality of segmentation types, one of the more than one segmentation type including a known IP address, wherein the plurality of segmentation types are associated with respective levels of access permission to access system resources, the levels ranging from lowest level to highest level corresponding to least right to access the system resources to greatest right to access the system resources;
- determining lowest level of access permission of the respective access permissions associated with the segmentation types into which the one login attempt is segmented;
- and
- implementing, at the front-end server, processing of the one login attempt according to a blacklist, whitelist, or greylist in accordance with its determined level of access permission.
Dependencies are inferred from the claim text.