Client fingerprinting for information system security
Assigneesalesforce.com, inc.
InventorsJohn Brooke ALTHOUSE, Jeffrey S. ATKINSON, Joshua ATKINS
Life of this patent
Estimating the term…
Loading patent…
Assigneesalesforce.com, inc.
InventorsJohn Brooke ALTHOUSE, Jeffrey S. ATKINSON, Joshua ATKINS
Estimating the term…
Client fingerprints can be used to detect and defend against malware and hacking into information systems more effectively than using IP addresses. A unique client fingerprint can be based on data found in the client's SSL client hello packet. SSL version, cipher suites, and other fields of the packet can be utilized, preferably utilizing individual field values in the order in which they appear in the packet. The ordered values are converted to decimal values, separated by delimiters, and concatenated to form an identifier string. The identifier string may be mapped, preferably by a hash function, to form the client fingerprint. The client fingerprint may be logged, and whitelists and blacklists may be formed using client fingerprints so formed.
A computer-implemented method for a database system, comprising:
A non-transitory, computer readable medium storing instructions executable by a processor to cause the processor to realize a client fingerprinting component, including carrying out the steps of:
A system comprising:
Dependencies are inferred from the claim text.