Human user verification of high-risk network access

Abstract

Systems and methods for performing a human user test when a high-risk network access is captured by an intermediary security device are provided. According to one embodiment, when an intermediary security device identifies a high-risk network access that is potentially initiated by a human user or a piece of software running on the device of the human user, a human user test message is sent to the human user to verify that the high-risk network access was indeed initiated by the human user. After a response to the human user test message is received by the intermediary security device, it is determined if the response is a correct response to the human user test. The security device allows the high risk network access if the response is correct.

Description

COPYRIGHT NOTICE[0001]Contained herein is material that is subject to copyright protection. The copyright owner has no objection to the facsimile reproduction of the patent disclosure by any person as it appears in the Patent and Trademark Office patent files or records, but otherwise reserves all rights to the copyright whatsoever. Copyright © 2013, Fortinet, Inc.BACKGROUND[0002]1. Field[0003]Embodiments of the present invention generally relate to the field of network security techniques. In particular, various embodiments relate to human user verification of high risk network access performed on an intermediary security device.[0004]2. Description of the Related Art[0005]Malware includes software that may be loaded onto a computer for performing operations against an interest or intension of a user. Malware commonly perform automated network access without notification to or awareness by the user. Such network accesses include downloading malware via drive-by-download. In this ca...

AI Technical Summary

Benefits of technology

The patent describes a system that can verify if a user has approved high-risk network access. If a security device detects a potential risk, it will send a message to the user to verify if they initiated the access. The user responds to the message and the system checks if their response is correct. If the response is correct, the access will be allowed. The technical effect of this system is to ensure that only authorized users can access high-risk networks, which increases security and protects against unauthorized access.

Problems solved by technology

Some malware actively scan or attack other computers on the Internet or a local network to which the infected computer is attached.

Images