Obtaining suspect objects based on detecting suspicious activity
AssigneeJuniper Networks, Inc.
InventorsJacob Asher Langton, Daniel J. Quinlan, Kyle Adams, Zhenxin Zhan
Life of this patent
Estimating the term…
Abstract
A device may detect a suspicious activity. The device may automatically obtain a suspect object from a client device that is associated with the suspicious activity and based on detecting the suspicious activity. The suspect object may be an object that is possibly associated with the suspicious activity. The device may determine that the suspect object is malicious. The device may perform an action based on determining that the suspect object is malicious.
Claims21
1-20. (canceled)
A method, comprising:
- detecting, by a device, a suspicious activity related to a first client device;
- obtaining, by the device, a suspect object based on detecting the suspicious activity;
- determining, by the device, that the suspect object is malicious;
- and
- causing, by the device, a second client device to perform an action based on determining that the suspect object is malicious,
- the second client device being different than the first client device.
A non-transitory computer-readable medium storing instructions, the instructions comprising:
- one or more instructions that, when executed by one or more processors of a device, cause the one or more processors to:
- detect a suspicious activity related to a first client device;
- obtain a suspect object based on detecting the suspicious activity;
- determine that the suspect object is malicious;
- and
- cause a second client device to perform an action based on determining that the suspect object is malicious,
- the second client device being different than the first client device.
A device, comprising:
- one or more memories;
- and
- one or more processors, communicatively coupled to the one or more memories, to:
- detect a suspicious activity related to a first client device;
- obtain a suspect object based on detecting the suspicious activity;
- determine that the suspect object is malicious;
- and
- cause a second client device to perform an action based on determining that the suspect object is malicious,
- the second client device being different than the first client device.
Dependencies are inferred from the claim text.