Systems and methods for detecting man-in-the-middle cybersecurity threats
AssigneeSeraphic Algorithms Ltd.
InventorAvihay Cohen
Life of this patent
Estimating the term…
Abstract
Systems, methods, and computer readable medium are disclosed for performance of cybersecurity operations for detecting a communication discrepancy. Performance of cybersecurity operations for detecting a communication discrepancy includes transmitting at least one first request to an endpoint device; determining a first response time based on the transmitted at least one first request; transmitting at least one second request to the endpoint device; determining a second response time based on the transmitted at least one second request; determining a difference between the first response time and the second response time; and based on the determined difference between the first response time and the second response time, determining whether to implement a remedial action.
Claims16
A non-transitory computer readable medium containing instructions that when executed by at least one processor cause the at least one processor to perform cybersecurity operations for detecting a communication discrepancy, the operations comprising:
- transmitting at least one first request to an endpoint device;
- determining a first response time based on the transmitted at least one first request;
- transmitting at least one second request to the endpoint device;
- determining a second response time based on the transmitted at least one second request;
- determining a difference between the first response time and the second response time;
- and
- based on the determined difference between the first response time and the second response time, determining whether to implement a remedial action, including determining to implement the remedial action when the difference between the first response time and the second response time exceeds a predetermined threshold, wherein the predetermined threshold is uncorrelated with a payload size associated with at least one of the at least one first request or the at least one second request.
A cybersecurity method for detecting a communication discrepancy, the method comprising:
- transmitting at least one first request to an endpoint device;
- determining a first response time based on the transmitted at least one first request;
- transmitting at least one second request to the endpoint device;
- determining a second response time based on the transmitted at least one second request;
- determining a difference between the first response time and the second response time;
- and
- based on the determined difference between the first response time and the second response time, determining whether to implement a remedial action, including determining to implement the remedial action when the difference between the first response time and the second response time exceeds a predetermined threshold, wherein the predetermined threshold is uncorrelated with a payload size associated with at least one of the at least one first request or the at least one second request.
A cybersecurity system for detecting a communication discrepancy between two communication parties, the system comprising:
- at least one processor configured to:
- transmit at least one first request to an endpoint device;
- determine a first response time based on the transmitted at least one first request;
- transmit at least one second request to the endpoint device;
- determine a second response time based on the transmitted at least one second request;
- determine a difference between the first response time and the second response time;
- and
- based on the determined difference between the first response time and the second response time, determine whether to implement a remedial action, including determining to implement a remedial action when the difference between the first response time and the second response time exceeds a predetermined threshold, wherein the predetermined threshold is uncorrelated with a payload size associated with at least one of the at least one first request or the at least one second request.
Dependencies are inferred from the claim text.