An endpoint in an enterprise network is monitored, and when a potential trigger for a
distributed denial of service (DDoS) attack is followed by an increase in network traffic from …

A gateway or other network device may be configured to monitor endpoint behavior, and to
request a verification of user presence at the endpoint under certain conditions suggesting …

In the context of network activity by an endpoint in an enterprise network, malware detection
is improved by using a combination of reputation information for a network address that is …

An enterprise security system is improved by instrumenting endpoints to explicitly label
network flows according to sources of network traffic. When a network message from an …

(57) ABSTRACT A technique for local proxy detection includes monitoring outbound traffic
from the endpoint with remote network addresses outside the enterprise network, detecting …

An endpoint in an enterprise network is monitored, and when a potential trigger for a
distributed denial of service (DDoS) attack is followed by an increase in network traffic from …

An electronic device is disclosed. The present electronic device comprises: a
communication unit; a memory for storing at least one command; and a processor for, by …

Securing a mobile device against malware may include an analysis of events executing on
the mobile device to detect and identify unexpected behaviors and events, and further …