Secured Group Query Obfuscation for Simulated Phishing Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security awareness training programs for organizations face challenges in effectively determining the appropriate level of security to apply to different groups of employees before displaying user data, particularly in simulated phishing campaigns, which can lead to insufficient protection against malicious attacks.
Innovation Solution
The use of secured groups for simulated phishing campaigns to obfuscate data based on protected criteria classes, where groups are established based on user criteria, identified as secured groups, and information is obfuscated according to specific criteria classes, ensuring appropriate security levels are applied.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user data is displayed without obfuscation in security awareness training, then training effectiveness is improved through clear visibility of user information, but security protection against malicious attacks is weakened
Solution Approach 1:
The patent applies local quality by differentiating the treatment of user data based on protected criteria classes. Different levels of obfuscation are applied to different user data fields depending on their sensitivity and the criteria they meet. For example, highly sensitive criteria receive full obfuscation while less sensitive criteria receive partial or no obfuscation, allowing the system to maintain security where needed while preserving visibility where appropriate.
Solution Approach 2:
The patent implements dynamics through dynamic obfuscation levels that adjust based on the criteria classes of user data. The system evaluates the protected criteria classes and dynamically determines the appropriate obfuscation level for each data field, allowing the visibility and protection levels to change based on the specific characteristics and sensitivity of the user data being displayed.
2Reliability
If secured groups with obfuscation are used for simulated phishing campaigns, then security protection is improved, but system complexity increases due to multiple criteria classes and obfuscation levels
Solution Approach 1:
The patent applies segmentation by dividing user data into distinct criteria classes with different protection levels. The system segments user data based on protected criteria classes, allowing each segment to be handled according to its specific security requirements. This segmentation enables the system to manage complexity by processing different data types through standardized but differentiated pathways.
Solution Approach 2:
The patent utilizes parameter changes by varying the obfuscation parameters based on the protected criteria classes. The system changes obfuscation parameters such as the degree of masking, data replacement, or visibility levels according to the sensitivity and characteristics of each criteria class, allowing flexible security control without requiring a completely different system architecture.
3Reliability
If dynamic adjustment of user data display is implemented, then security effectiveness is improved through adaptive protection, but processing time increases due to real-time evaluation of criteria classes
Solution Approach 1:
The patent applies preliminary action by pre-evaluating and categorizing user data into protected criteria classes before the actual display operation. The system performs preliminary classification and obfuscation level determination in advance, so that when data needs to be displayed, the appropriate obfuscation level is already determined and applied, reducing the processing time during the actual display operation.
Solution Approach 2:
The patent implements feedback mechanisms that allow the system to learn from and adapt to previous evaluations of user data criteria classes. By using feedback from prior processing, the system can optimize its criteria evaluation and obfuscation application, reducing processing time through improved efficiency and avoiding redundant evaluations in subsequent operations.
Data Source
Figure 1A
Figure 1B
Figure 1C
AI summary
A method comprising: identifying, by the one or more servers, a query statement for running a query on users to determine one or more users that meet one or more criteria of a group, wherein at least one criteria of the one or more criteria comprising a time frame criterion; determining, by the one or more servers, that the at least one criteria of the one or more criteria of the query statement require at least a portion of data resulting from the query statement to be protected; executing, by the one or more servers, the query to identify one or more users of a plurality of users as members of the group based at least on the one or more users matching the at least one criteria of the one or more criteria the group; and obfuscating, by the one or more servers, for display, at least a portion of information of the one or more users.