Abstract: Software developers previously dealt with each security threat by incorporating a corresponding set of code lines into individual web applications, which required significant amount of time and code lines for each security threat and the resulting code was hard to maintain or modify. One aspect of the present invention addresses common security concerns in a standardized and centralized approach. All user requests for web applications are centralized to a single input and validated by a Web Security Filter. Selected layers of validation filters (e.g., ESAPI and AntiSamy) could be sequentially applied to the user requests, and those filters can be individually maintained/modified as discrete modules. Not only is this centralized, holistic approach to application security effective against a majority of malicious attacks, it is also saves a lot of time and costs in code development and maintenance.

Abstract: Embodiments of the present invention provides a data protection solution which can efficiently tokenize sensitive data submitted by a user device to a public cloud and de-tokenize any tokenized response from the cloud. A small, in-memory token map may be looked up to facilitate the two-way conversions between sensitive data and tokenized data. The token map can be flexibly configured, it may be generated and/or changed on the fly, and its design could preserve data format and provide multilingual support. The innovative tokenization process is fast, secure, scalable through cloud-native design but less costly as compared to prior approaches.

Abstract: Embodiments of the present invention provides a data protection solution for data extraction, masking, and transfer from production data sources to a non-production environment. With the disclosed techniques, sensitive data may be securely and randomly masked while the format of the masked data, referential integrity of records, and/or data validation rules are preserved for purposes of application or system testing.

Abstract: Embodiments of the present invention provide a method and system for de-anonymization of online user identity, user tracking techniques, user behavior and preference analysis, customization of user interfaces, and combinations thereof. Fingerprinting attributes may be collected from a client device during anonymous browsing to identify the user, and based on tracked activities from the browsing session, a user profile for that user may be created and/or updated. When a user using the client device with the same fingerprinting attributes initiates a login session, the information from the stored user profile may be used to create a customized user interface.

Abstract: Embodiments of the present invention provides a data protection solution for data extraction, masking, and transfer from production data sources to a non-production environment. With the disclosed techniques, sensitive data may be securely and randomly masked while the format of the masked data, referential integrity of records, and/or data validation rules are preserved for purposes of application or system testing.

Abstract: Embodiments of the present invention provide a method and system for de-anonymization of online user identity, user tracking techniques, user behavior and preference analysis, customization of user interfaces, and combinations thereof. Fingerprinting attributes may be collected from a client device during anonymous browsing to identify the user, and based on tracked activities from the browsing session, a user profile for that user may be created and/or updated. When a user using the client device with the same fingerprinting attributes initiates a login session, the information from the stored user profile may be used to create a customized user interface.