Methods and apparatus for analyzing sequences of application programming interface traffic to identify potential malicious actions

US11263321B2 · kind B2 · utility

Assignee

• Ping Identity Corporation · US

Inventors

• Udayakumar Subbarayan · Bengaluru, IN
• Bernard Harguindeguy · Atherton, US
• Isidore Rosenblum · Pleasanton, US
• Yasar Kundottil · Kanchinakote, IN
• Aditya Gunuganti · Hyderabad, IN
• Amit Sharma · Bengaluru, IN
• Avinash Kumar Sahu · Kanchinakote, IN

Key dates

• Filing date: Jun 23, 2020
• Grant date: Mar 1, 2022
• Expiry date: Jun 23, 2040

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L63/1441
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

In some embodiments, a method includes receiving, at a processor of a server, a first application programming interface (API) call from a client device and providing an indication associated with the first API call as an input to a machine learning model such that the machine learning model identifies a set of parameters associated with a set of likely subsequent API calls. The method can further include receiving a second API call from the client device, identifying the second API call as an anomalous API call based on the second API call not meeting the set of parameters associated with the set of likely subsequent API calls, and sending a signal to perform a remedial action based on the identifying.