Back to results
US 12,744,761 B2Granted
Adaptive rate limiter based on transactional heuristics and artificial intelligence
AssigneePalo Alto Networks, Inc.
InventorsManish Pathak, Krishna Murthy Pokuri, Parush Gera, Sankar muthu Paramasivam
Life of this patent
Estimating the term…
Abstract
A system, method, and device for adaptively limiting web requests is disclosed. The method includes (i) receiving a request at a proxy for an authentication service, (ii) determining whether the request is trusted based at least in part on a classification obtained from a classifier, and (iii) handling the request according to a determination of whether the request is trusted.
Claims25
A system for adaptively limiting web requests, comprising:
- one or more processors configured to:
- receive a request at a proxy that mediates traffic between client systems and an authentication service;
- determine whether the request is trusted based at least in part on a classification obtained from a classifier, wherein the classifier generates the classification based at least in part on whether credentials are returned by the requesting entity in response to an authentication challenge issued by the authentication service;
- and
- handle the request according to a determination of whether the request is trusted, wherein handling the request includes adaptively adjusting a rate at which authentication requests for the authentication service are processed by (i) rate-limiting requests classified as untrusted and (ii) prioritizing processing of requests classified as trusted, the adjusting being performed based at least in part on the classification that reflects the credential-return observation;
- and
- a memory coupled to the one or more processors and configured to provide the one or more processors with instructions.
4 more elements
A method for adaptively limiting web requests, comprising:
- receiving a request at a proxy that mediates traffic between client systems and an authentication service;
- determining whether the request is trusted based at least in part on a classification obtained from a classifier, wherein the classifier generates the classification based at least in part on whether credentials are returned by the requesting entity in response to an authentication challenge issued by the authentication service;
- and
- handling the request according to a determination of whether the request is trusted, wherein handling the request includes adaptively adjusting a rate at which authentication requests for the authentication service are processed by (i) rate-limiting requests classified as untrusted and (ii) prioritizing processing of requests classified as trusted, the adjusting being performed based at least in part on the classification that reflects the credential-return observation.
1 more element
A computer program product embodied in a non-transitory computer readable medium for adaptively limiting web requests, and the computer program product comprising computer instructions for:
- receiving a request at a proxy that mediates traffic between client systems and an authentication service;
- determining whether the request is trusted based at least in part on a classification obtained from a classifier, wherein the classifier generates the classification based at least in part on whether credentials are returned by the requesting entity in response to an authentication challenge issued by the authentication service;
- and
- handling the request according to a determination of whether the request is trusted, wherein handling the request includes adaptively adjusting a rate at which authentication requests for the authentication service are processed by (i) rate-limiting requests classified as untrusted and (ii) prioritizing processing of requests classified as trusted, the adjusting being performed based at least in part on the classification that reflects the credential-return observation.
1 more element
A system for training a classifier for adaptively limiting web requests, comprising:
- one or more processors configured to:
- obtain a set of requests at a proxy for an authentication service;
- train a classifier based at least in part on the set of requests, wherein the classifier is configured to identify legitimate requests to the proxy for the authentication service;
- and
- deploy the classifier in connection with adaptively limiting requests to the proxy for the authentication service based on one or more classifications predicted by the classifier;
- wherein:
- the classifier generates a particular classification based at least in part on whether credentials are returned in response to an authentication challenge for a particular request;
- and
- the adaptively limiting comprises adjusting a rate at which authentication requests are processed based at least in part on the one or more classifications predicted by the classifier;
- and
- a memory coupled to the one or more processors and configured to provide the one or more processors with instructions.
8 more elements
Dependencies are inferred from the claim text.