Patent ID: 8407784
Filing Date: 2013-03-26
Classification: G06F,H04L

Abstract:
1. A computer-implemented method for reducing exposure to a dictionary attack on an organizational password file comprising a plurality of passwords, the plurality of passwords configured for use by users to access sensitive resources, while verifying whether data transmitted over a computer network is one of the plurality of passwords, the method comprising: performing, using an electronic processor, a first encoding, of the plurality of passwords with a Bloom filter; searching, using an electronic processor, outgoing traffic from at least one computerized device within an organizational perimeter to a site outside the organizational perimeter, by performing a second encoding of the outgoing traffic with the Bloom filter; performing, using an electronic processor, a weak validation based on a result of the first encoding and a result of the second encoding; determining, using an electronic processor, the existence of one of the plurality of passwords in the outgoing traffic based only on the weak validation; determining, using an electronic processor, whether to block, alert, or quarantine the outgoing traffic based at least in part on the existence of one of the plurality of passwords in the outgoing traffic; and enforcing, using an electronic processor, the determination of whether to block, alert, or quarantine the outgoing traffic.