Intercepting worthless requests at the network edge using machine learning
AssigneePing Identity International, Inc.
InventorsWayne Anthony MORRISON, Guillaume Rene SAUTHIER, Raminder KALER, Joachim ANDRES
Life of this patent
Estimating the term…
Loading patent…
AssigneePing Identity International, Inc.
InventorsWayne Anthony MORRISON, Guillaume Rene SAUTHIER, Raminder KALER, Joachim ANDRES
Estimating the term…
The technology screens malicious and probing requests to establish an authorized session, collectively worthless requests, directed to a protected application, by using an identity gateway (IG) positioned as a network edge component on a network. Screening occurs before starting an authentication or authorization journey or other resource consuming interaction with a protected application. The screening setup involves provisioning a ML classifier at an edge server accessible by the IG. When the request to establish an authorized session is received by the IG, screening involves the ML classifier accepting features and outputting a score predicting whether the request is worthless. The IG compares the score to a threshold. Based on the score, the IG may determine to limit the worthless request at the network edge so that the request does not invoke the authorization journey or perform the resource consuming interaction.
A method of screening malicious and probing requests to establish an authorized session, collectively worthless requests, directed to a protected application, using an identity gateway (IG) positioned as a network edge component on a network, the screening being invoked before starting an authentication or authorization journey or other resource consuming interaction with the protected application, the method comprising:
A non-transitory computer readable storage medium impressed with computer program instructions to screen malicious and probing requests to establish an authorized session, collectively worthless requests, directed to a protected application, using an identity gateway (IG) positioned as a network edge component on a network, the screening being invoked before starting an authentication or authorization journey or other resource consuming interaction with the protected application, the instructions, when executed on a processor, implement a method comprising:
Dependencies are inferred from the claim text.