Patents by Inventor Gal Kaplan

Gal Kaplan has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Correlating network traffic to their OS processes using packet capture libraries and kernel monitoring mechanisms
    Patent number: 11245602
    Abstract: A method of monitoring and reporting of packets including their attribution to their origin processes from a user space application without installing proprietary drivers, rather using only infrastructures and capabilities supplied by the operating system (OS). The method relies on correlation between packets received from a packet capture library and a kernel monitoring mechanism that supplies an event with the process ID which is executed on the same time frame for transmitting or receiving of that traffic. The attribution between the event and the packet is based on the 4-tuple (or other exemplar) that exists on both the event and the packet where the “4-tuple” is a set of: source address, source port, destination address, destination port.
    Type: Grant
    Filed: September 23, 2019
    Date of Patent: February 8, 2022
    Assignee: Cybereason Inc.
    Inventor: Gal Kaplan
  • Correlating network traffic to their OS processes using packet capture libraries and kernel monitoring mechanisms
    Publication number: 20200099600
    Abstract: A method of monitoring and reporting of packets including their attribution to their origin processes from a user space application without installing proprietary drivers, rather using only infrastructures and capabilities supplied by the operating system (OS). The method relies on correlation between packets received from a packet capture library and a kernel monitoring mechanism that supplies an event with the process ID which is executed on the same time frame for transmitting or receiving of that traffic. The attribution between the event and the packet is based on the 4-tuple (or other exemplar) that exists on both the event and the packet where the “4-tuple” is a set of: source address, source port, destination address, destination port.
    Type: Application
    Filed: September 23, 2019
    Publication date: March 26, 2020
    Applicant: Cybereason, Inc.
    Inventor: Gal Kaplan