Abstract: Systems and methods for maintaining user privacy in reverse personal information searches are disclosed. A user seeking to search a network (such as the Internet) for instances of one or more digital assets belonging to the user uploads the digital assets to the server system where they are stored in a secure, encrypted storage. A threshold value defines how similar a located digital asset must be to an original digital asset in order to be considered a match. The server system assembles queries to search for unauthorized instances of the user's digital assets and performs the search. Located assets and their locations (URL, IP address, etc.) are stored for access and viewing by the authorized user. Uploaded digital assets and search results are encrypted so that the operator of the server system cannot view the original digital assets or the search results to further protect the authorized user's privacy.

Abstract: A third-party attempting to call a user is identified and authenticated by collecting multi-dimensional user data and user activity into a personalized large language model (LLM) residing on a user device. A general-purpose LLM generates third-party authentication questions based on an initial intent of the caller and the questions are provided to the personalized LLM with the answers from the personalized LLM ranked based on relevancy and accuracy. One or more of the highest ranked questions are prompted to the caller and the answers provided by the caller are compared to the answers provided by the personalized LLM to determine if the caller is a trusted contact or a likely malicious third-party.

Abstract: A computer user is authenticated by collecting user data from at least two dimensions of user activity into a local large language model (LLM) residing on a user device, and generating user authentication questions from at least those two dimensions of user activity using the large language model. Questions having intersecting time or location are discarded, and questions from two or more dimensions are presented to the user for response. The user is authenticated by comparing the user response to known correct answers to the questions.

Abstract: The disclosed computer-implemented method for protecting user data privacy against web tracking during browsing sessions may include (i) detecting a user request, including a private domain, for a website in a web browser address bar during a browsing session, (ii) separating, utilizing a browser container, a user browsing state associated with the private domain from other domains during the browsing session, (iii) routing the user website request to one or more servers in a random order to run the browsing session, (iv) performing a browsing state security action that protects against cross-website tracking by discarding user browsing state data collected during the browsing session, and (v) performing a web isolation security action that protects against use of browser fingerprint data for conducting malicious attacks based on the routing of the user website request to the servers in the random order. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Mitigating website privacy issues by automatically identifying cookie sharing risks in a cookie ecosystem. In some embodiments, a method may include generating, by the computing device, a cookie tree representing cookies created on a web browser while browsing a website. The cookie tree may include nodes representing organizations. The cookie tree may further include hierarchical edges between the nodes representing creation chains of the nodes. The method may also include determining, by the computing device, a creator, a sender, and a receiver of each of the cookies. The method may further include mitigating, by the computing device, website privacy issues based on the creator, sender, and receiver of each of the cookies.

Abstract: The disclosed computer-implemented method for protecting against misleading clicks on websites may include (i) detecting a user click event on a uniform resource locator (URL) for navigating to a website during a web browsing session, (ii) analyzing the user click event to identify expected domain behavior associated with navigating to the website based on the URL, (iii) determining, based on the analysis, that the user click event deviates from the expected domain behavior associated with navigating to the website based on the URL, and (iv) performing a security action that protects against potentially malicious activity caused by the user click event deviating from the expected domain behavior associated with navigating to the website based on the URL. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: The disclosed computer-implemented method for protecting user privacy may include (i) detecting that a website indicates a user account identifier, (ii) detecting whether a third-party script has access to the user account identifier, and (iii) performing, based at least in part on detecting that the third-party script has access to the user account identifier, a security action to protect user privacy such that the security action facilitates an attempt to prevent the third-party script from actually accessing the user account identifier. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Analyzing and mitigating website privacy issues by automatically classifying cookies.

Abstract: Analyzing and mitigating privacy issues on a computing device using cookie generation flows. The method includes initiating a headless web browser, monitoring a request made of a website accessed by the headless web browser, monitoring scripts created on the website, instrumenting a function used to create a cookie on the computing device, tracing an initial generation of a call used to create the cookie on the computing device, obtaining a cookie generation flow related to the creation of the cookie, and initiating a security action based on obtaining the cookie generation flow.

Abstract: The disclosed computer-implemented method for protecting against misleading clicks on websites may include (i) detecting a user click event on a uniform resource locator (URL) for navigating to a website during a web browsing session, (ii) analyzing the user click event to identify expected domain behavior associated with navigating to the website based on the URL, (iii) determining, based on the analysis, that the user click event deviates from the expected domain behavior associated with navigating to the website based on the URL, and (iv) performing a security action that protects against potentially malicious activity caused by the user click event deviating from the expected domain behavior associated with navigating to the website based on the URL. Various other methods, systems, and computer-readable media are also disclosed.