Patents Assigned to STRATUM SECURITY, INC.
  • Data exfiltration attack simulation technology
    Patent number: 8782796
    Abstract: Novel systems and methods for testing network security are disclosed. In one example, at least one specified data message and at least one specified access credential to at least one third-party web-based service is stored on a monitoring system. At least one software agent configured with the specified data message and the specified access credential to the third-party web-based service is installed on at least on system to be tested. The software agent is executed on the testing system to send the specified data message to the third-party web-based service using the specified access credential. A monitoring system which is independent of the network, access the third-party web-based service with the access credential. The monitoring system compares, if data on the third-party web-based service is equivalent to the specified data message sent by the software agent. In another example, the software agent is configured with a custom start-logging command.
    Type: Grant
    Filed: June 22, 2012
    Date of Patent: July 15, 2014
    Assignee: Stratum Security, Inc.
    Inventors: Trevor Tyler Hawthorn, Nathan Miller, Jeffrey LoSapio
  • DATA EXFILTRATION ATTACK SIMULATION TECHNOLOGY
    Publication number: 20130347085
    Abstract: Novel systems and methods for testing network security are disclosed. In one example, at least one specified data message and at least one specified access credential to at least one third-party web-based service is stored on a monitoring system. At least one software agent configured with the specified data message and the specified access credential to the third-party web-based service is installed on at least on system to be tested. The software agent is executed on the testing system to send the specified data message to the third-party web-based service using the specified access credential. A monitoring system which is independent of the network, access the third-party web-based service with the access credential. The monitoring system compares, if data on the third-party web-based service is equivalent to the specified data message sent by the software agent. In another example, the software agent is configured with a custom start-logging command.
    Type: Application
    Filed: June 22, 2012
    Publication date: December 26, 2013
    Applicant: STRATUM SECURITY, INC.
    Inventors: Trevor Tyler HAWTHORN, Nathan MILLER, Jeffrey LoSAPIO