Avoiding information disclosure about user actions on configuration data submissions in multi-tenant network management interfaces

Abstract

Techniques are provided for thwarting attackers in a computing system which uses network management interfaces (NMIs). Before submitting NMI form data, a user computing device queries a server using a user id to obtain a signature which defines a shuffling map and random data such as a random key. The NMI form data is divided into portions and the random data is appended to each portion to provide respective data units, or buckets of data. The data units are then shuffled according to the shuffling map before being transmitted to a server, with the signature or an identifier of the signature included in a header. At the server, the data units are unshuffled to recover the data units, and the random data is removed to recover the form data portions. The instructions of the form data can then be executed.

Dependencies are inferred from the claim text.