Techniques for mitigating forgotten password attacks
AssigneeSymantec Corporation
InventorWilliam Gauvin
Life of this patent
Estimating the term…
Abstract
Techniques for mitigating forgotten password attacks are disclosed. In one particular exemplary embodiment, the techniques may be realized as a method for mitigating forgotten password attacks comprising receiving an indication of a forgotten password communication for a user, identifying verification information associated with the forgotten password communication, determining a level of difficulty of inferring the verification information based on public information associated with the user, and calculating a level of risk associated with the verification information.
Claims18
A method for mitigating forgotten password attacks comprising:
- collecting public data associated with a user;
- analyzing inferences available from the public data;
- receiving an indication of a forgotten password communication for the user;
- identifying, using at least one computer processor, verification information associated with the forgotten password communication;
- determining a level of difficulty of inferring the verification information based on public information associated with the user;
- and
- calculating a level of risk associated with the verification information;
- wherein the public data associated with the user is collected and inferences are analyzed prior to receiving an indication of a forgotten password communication for the user.
An article of manufacture for mitigating forgotten password attacks, the article of manufacture comprising:
- at least one non-transitory processor readable storage medium;
- and
- instructions stored on the at least one medium;
- wherein the instructions are configured to be readable from the at least one medium by at least one processor and thereby cause the at least one processor to operate so as to:
- collect public data associated with a user;
- analyze inferences available from the public data;
- receive an indication of a forgotten password communication for the user;
- identify verification information associated with the forgotten password communication;
- determine a level of difficulty of inferring the verification information based on public information associated with the user;
- and
- calculate a level of risk associated with the verification information;
- wherein the public data associated with the user is collected and inferences are analyzed prior to receiving an indication of a forgotten password communication for the user.
A system for mitigating forgotten password attacks comprising:
- one or more processors communicatively coupled to a network;
- wherein the one or more processors are configured to:
- collect public data associated with a user;
- analyze inferences available from the public data;
- receive an indication of a forgotten password communication for the user;
- identify verification information associated with the forgotten password communication;
- determine a level of difficulty of inferring the verification information based on public information associated with the user;
- and
- calculate a level of risk associated with the verification information;
- wherein the public data associated with the user is collected and inferences are analyzed prior to receiving an indication of a forgotten password communication for the user.
Dependencies are inferred from the claim text.