Patents by Inventor Ohad Korkus
Ohad Korkus has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 10296596Abstract: A method for characterizing data elements in an enterprise including ascertaining at least one of an access metric and a data identifier for each of a plurality of data elements and employing the at least one of an access metric and a data identifier to automatically apply a metatag to ones of the plurality of data elements.Type: GrantFiled: May 26, 2011Date of Patent: May 21, 2019Assignee: VARONIS SYSTEMS, INC.Inventors: Yakov Faitelson, Ohad Korkus, Ophir Kretzer-Katzir, David Bass
-
Patent number: 10242110Abstract: A method for filtering-out results of a search, comprising obtaining representations of objects of a computerized system identified in the computerized system in a search conducted in the a computerized system by a party, and responsive to the search, applying by the computerized system an at least one condition constructed in the computerized system and related to access of the party with respect to the objects, thereby filtering-out the representations of the objects that correspondingly comply with the at least one condition, and an apparatus configured to carry out the method.Type: GrantFiled: February 1, 2016Date of Patent: March 26, 2019Assignee: VARONIS SYSTEMS, LTDInventors: Yakov Faitelson, Ohad Korkus, Ophir Kretzer-Katzir
-
Patent number: 10229191Abstract: A system for identifying data of interest from among a multiplicity of data elements residing on multiple platforms in an enterprise, the system including background data characterization functionality characterizing the data of interest at least by at least one content characteristic thereof and at least one access metric thereof, the at least one access metric being selected from data access permissions and actual data access history and near real time data matching functionality selecting the data of interest by considering only data elements which have the at least one content characteristic thereof and the at least one access metric thereof from among the multiplicity of data elements.Type: GrantFiled: March 7, 2012Date of Patent: March 12, 2019Assignee: VARONIS SYSTEMS LTD.Inventors: Yakov Faitelson, Ohad Korkus, David Bass, Ophir Kretzer-Katzir
-
Patent number: 10181046Abstract: An enterprise level data element review system including a data access event collection subsystem operative to collect data access event notifications relating to ones of a multiplicity of data elements, a data element metadata modification subassembly receiving an output from the data access event collection subsystem and providing a script indicating which data elements have had a metadata modification over a given period of time, and a data element dancer operative to collect at least one of metadata and access permissions for a plurality of data elements which is substantially less than the multiplicity of data elements and is selected on the basis of the script.Type: GrantFiled: December 10, 2013Date of Patent: January 15, 2019Assignee: VARONIS SYSTEMS, INC.Inventors: Yakov Faitelson, Ohad Korkus, David Bass, Yzhar Kaysar, Ophir Kretzer-Katzir
-
Patent number: 10176185Abstract: A system for identifying data of interest from among a multiplicity of data elements residing on multiple platforms in an enterprise, the system including background data characterization functionality characterizing the data of interest at least by at least one content characteristic thereof and at least one access metric thereof, the at least one access metric being selected from data access permissions and actual data access history and near real time data matching functionality selecting the data of interest by considering only data elements which have the at least one content characteristic thereof and the at least one access metric thereof from among the multiplicity of data elements.Type: GrantFiled: December 19, 2017Date of Patent: January 8, 2019Assignee: VARONIS SYSTEMS, INC.Inventors: Ohad Korkus, Yakov Faitelson, Ophir Kretzer-Katzir, David Bass
-
Publication number: 20190007413Abstract: An access permissions management system including a hierarchical access permissions repository including access permissions relating to data elements arranged in a data element hierarchy, wherein some of the data elements have only access permissions which are inherited from ancestral data elements, some of the multiplicity of data elements are prevented from having inherited access permissions and thus have only unique access permissions which are not inherited and some of the data elements are not prevented from having inherited access permissions and have not only inherited access permissions but also unique access permissions which are not inherited, some of which unique access permissions possibly being redundant with inherited access permissions, and an access permissions redundancy prevention engine operative to ascertain which of the unique access permissions are redundant with inherited access permissions and not to store the unique access permissions which are redundant with inherited access permissType: ApplicationFiled: September 7, 2018Publication date: January 3, 2019Inventors: Yakov FAITELSON, Ohad KORKUS, Ophir KRETZER-KATZIR, Yzhar KEYSAR
-
Publication number: 20180373762Abstract: A method for managing data in an enterprise by identifying data of interest from among a multiplicity of data elements in an enterprise, the method including characterizing data of interest at least by at least one non-content based data identifier thereof and at least one access metric thereof, the at least one access metric being selected from data access permissions and actual data access history and selecting data of interest by considering only data elements from among the multiplicity of data elements which have the at least one non-content based data identifier thereof and the at least one access metric thereof.Type: ApplicationFiled: July 3, 2018Publication date: December 27, 2018Inventors: Yakov FAITELSON, Ohad KORKUS, Ophir KRETZER-KATZIR, David BASS
-
Patent number: 10152606Abstract: An enterprise level data element review system including a data access event collection subsystem operative to collect data access event notifications relating to ones of a multiplicity of data elements, a data element metadata modification subassembly receiving an output from the data access event collection subsystem and providing a script indicating which data elements have had a metadata modification over a given period of time, and a data element dancer operative to collect at least one of metadata and access permissions for a plurality of data elements which is substantially less than the multiplicity of data elements and is selected on the basis of the script.Type: GrantFiled: February 7, 2017Date of Patent: December 11, 2018Assignee: VARONIS SYSTEMS, INC.Inventors: Yakov Faitelson, Ohad Korkus, David Bass, Yzhar Kaysar, Ophir Kretzer-Katzir
-
Patent number: 10152528Abstract: A method for enabling querying independently of a computerized system about objects thereof, comprising providing a computer linked to the computerized system with replications of entries of an index of the computerized system that comprise data derived from contents of the objects, where said entries correspond to a subset of objects that are identified as related objects, thereby enabling the computer, based on the provided replications, to query locally and independently of the computerized system about the related objects according to contents thereof, and an apparatus for performing the same.Type: GrantFiled: February 25, 2018Date of Patent: December 11, 2018Assignee: VARONIS SYSTEMS, LTD.Inventors: Yakov Faitelson, Ohad Korkus, Ophir Kretzer-Katzir
-
Patent number: 10148661Abstract: Queries regarding access permissions of users and rights to directories in a complex enterprise are executed in near real-time, using lookups to tables that form a condensed database maintained for each file server. User information is condensed by arranging users in user groups having common data access rights. Directory permissions storage is condensed by showing only distinctive permissions to a directory in a table entry, and referencing inherited permissions of parent directories. The tables indicate recursive and ancestral relationships among the user groups and directories. They are developed and updated in advance of any queries. A consolidated view of the query results is presented on a single display screen. Using the tables results can be obtained without exhaustive searches of large file system tables.Type: GrantFiled: January 9, 2018Date of Patent: December 4, 2018Assignee: Varonis Systems Inc.Inventors: Yakov Faitelson, Ohad Korkus, Ophir Kretzer
-
Patent number: 10146562Abstract: A computerized method for modifying an icon image, comprising retrieving an original icon image of an operating system, combining the original icon image with sub-images thus forming a combined icon image, and replacing the original icon image with the combined icon image, wherein the method is performed on an at least one computerized apparatus configured to perform the method.Type: GrantFiled: September 30, 2014Date of Patent: December 4, 2018Assignee: VARONIS SYSTEMS, LTD.Inventors: Ohad Korkus, Saar Benodiz
-
Publication number: 20180329979Abstract: A computerized method for pooling objects in a computerized system having a storage for objects, comprising identifying in the computerized system objects having an at least one common metadata entity associated with the objects, and including the identified objects in a pool of objects, and a apparatus for performing the same.Type: ApplicationFiled: July 25, 2018Publication date: November 15, 2018Inventors: Yakov FAITELSON, Ohad Korkus, Ophir Kretzer-Katzir
-
Patent number: 10102389Abstract: An access permissions management system including a hierarchical access permissions repository including access permissions relating to data elements arranged in a data element hierarchy, wherein some of the data elements have only access permissions which are inherited from ancestral data elements, some of the multiplicity of data elements are prevented from having inherited access permissions and thus have only unique access permissions which are not inherited and some of the data elements are not prevented from having inherited access permissions and have not only inherited access permissions but also unique access permissions which are not inherited, some of which unique access permissions possibly being redundant with inherited access permissions, and an access permissions redundancy prevention engine operative to ascertain which of the unique access permissions are redundant with inherited access permissions and not to store the unique access permissions which are redundant with inherited access permissType: GrantFiled: December 16, 2016Date of Patent: October 16, 2018Assignee: VARONIS SYSTEMS, INC.Inventors: Yakov Faitelson, Ohad Korkus, Ophir Kretzer-Katzir, Yzhar Keysar
-
Patent number: 10061836Abstract: A computerized method for pooling objects in a computerized system having a storage for objects, comprising identifying in the computerized system objects having an at least one common metadata entity associated with the objects, and including the identified objects in a pool of objects, and an apparatus for performing the same.Type: GrantFiled: June 4, 2013Date of Patent: August 28, 2018Assignee: VARONIS SYSTEMS, LTD.Inventors: Yakov Faitelson, Ohad Korkus, Ophir Kretzer-Katzir
-
Patent number: 10037358Abstract: A method for managing data in an enterprise by identifying data of interest from among a multiplicity of data elements in an enterprise, the method including characterizing data of interest at least by at least one non-content based data identifier thereof and at least one access metric thereof, the at least one access metric being selected from data access permissions and actual data access history and selecting data of interest by considering only data elements from among the multiplicity of data elements which have the at least one non-content based data identifier thereof and the at least one access metric thereof.Type: GrantFiled: May 26, 2011Date of Patent: July 31, 2018Assignee: VARONIS SYSTEMS, INC.Inventors: Yakov Faitelson, Ohad Korkus, Ophir Kretzer-Katzir, David Bass
-
Publication number: 20180198793Abstract: Queries regarding access permissions of users and rights to directories in a complex enterprise are executed in near real-time, using lookups to tables that form a condensed database maintained for each file server. User information is condensed by arranging users in user groups having common data access rights. Directory permissions storage is condensed by showing only distinctive permissions to a directory in a table entry, and referencing inherited permissions of parent directories. The tables indicate recursive and ancestral relationships among the user groups and directories. They are developed and updated in advance of any queries. A consolidated view of the query results is presented on a single display screen. Using the tables results can be obtained without exhaustive searches of large file system tables.Type: ApplicationFiled: January 9, 2018Publication date: July 12, 2018Inventors: Yakov Faitelson, Ohad Korkus, Ophir Kretzer
-
Publication number: 20180181635Abstract: A method for enabling querying independently of a computerized system about objects thereof, comprising providing a computer linked to the computerized system with replications of entries of an index of the computerized system that comprise data derived from contents of the objects, where said entries correspond to a subset of objects that are identified as related objects, thereby enabling the computer, based on the provided replications, to query locally and independently of the computerized system about the related objects according to contents thereof, and an apparatus for performing the same.Type: ApplicationFiled: February 25, 2018Publication date: June 28, 2018Inventors: Yakov FAITELSON, Ohad Korkus, Ophir Kretzer-Katzir
-
Publication number: 20180157861Abstract: A system for automatically replacing a user security group-based computer security policy by a computer security policy based at least partially on actual access, including a learned access permissions subsystem operative to learn current access permissions of users to network objects in an enterprise computer environment and to provide an indication of which users are members of which user security groups having access permissions to which network objects, a learned actual access subsystem operative to learn actual access history of users in the enterprise to the network objects and to provide indications of which users have had actual access to which network objects, and a computer security policy administration subsystem, receiving indications from the learned access permission subsystem and the learned actual access subsystem and being operative to automatically replace pre-selected user-security group-based access permissions with at least partially actual access-based access permissions without disruptiType: ApplicationFiled: December 19, 2017Publication date: June 7, 2018Inventors: Yakov FAITELSON, Ohad KORKUS, Ophir KRETZER-KATZIR, David BASS
-
Publication number: 20180157672Abstract: A system for identifying data of interest from among a multiplicity of data elements residing on multiple platforms in an enterprise, the system including background data characterization functionality characterizing the data of interest at least by at least one content characteristic thereof and at least one access metric thereof, the at least one access metric being selected from data access permissions and actual data access history and near real time data matching functionality selecting the data of interest by considering only data elements which have the at least one content characteristic thereof and the at least one access metric thereof from among the multiplicity of data elements.Type: ApplicationFiled: December 19, 2017Publication date: June 7, 2018Inventors: Ohad KORKUS, Yakov FAITELSON, Ophir KRETZER-KATZIR, David BASS
-
Patent number: 9984240Abstract: Queries regarding access permissions of users and rights to directories in a complex enterprise are executed in near real-time, using lookups to tables that form a condensed database maintained for each file server. User information is condensed by arranging users in user groups having common data access rights. Directory permissions storage is condensed by showing only distinctive permissions to a directory in a table entry, and referencing inherited permissions of parent directories. The tables indicate recursive and ancestral relationships among the user groups and directories. They are developed and updated in advance of any queries. A consolidated view of the query results is presented on a single display screen. Using the tables results can be obtained without exhaustive searches of large file system tables.Type: GrantFiled: October 20, 2014Date of Patent: May 29, 2018Assignee: Varonis Systems Inc.Inventors: Yakov Faitelson, Ohad Korkus, Ophir Kretzer