Methods and apparatus for controlling internet access
AssigneeTrend Micro Incorporated
InventorsBharath Kumar Chandrasekhar, Narasimham Kodukula
Life of this patent
Estimating the term…
Abstract
Apparatus and methods for controlling access by a browser to one or more Internet servers are disclosed. Access control is performed by ascertaining an IP address of an internet server that the user is trying to access and performing lookup of the IP address in an IP address rating database. If the lookup reveals that the IP address to be suspicious and data received from the internet server is encrypted, block the access to the internet server. Alternatively, if the lookup reveals the IP address to be suspicious, block the access to the first internet server by the browser without first performing content analysis on the data from the internet server.
Claims12
A computer-implemented method for controlling access by a browser on a client device via a network device to one or more Internet servers, comprising:
- using said network device to monitor browser-destined traffic, said browser-destined traffic being destined for said browser, said network device being external to said client device and being connected to said client device;
- determining, using said network device, whether said browser-destined traffic contains one or more HTTP 302 Moved messages;
- when said browser-destined traffic contains an HTTP 302 Moved message, parsing said HTTP 302 Moved message to identify at least an embedded website address, and blocking access when a website associated with said embedded website address is a prohibited website;
- ascertaining an IP address of a first internet server of said one or more internet servers;
- performing lookup of said IP address in an IP address rating database;
- and
- when said performing said lookup reveals said IP address to be suspicious and data received from said first internet server is encrypted, blocking access to said first internet server by said browser,
- wherein said blocking is performed without first performing content analysis on said data from said first internet server, and
- wherein said blocking is performed when said first internet server is ascertained to be an anonymizing server.
An article of manufacture comprising a non-transitory program storage medium having computer readable code embodied therein, said computer readable code being configured for controlling access by a browser to one or more Internet servers, comprising:
- computer readable code for using said network device to monitor browser-destined traffic, said browser-destined traffic being destined for said browser, said network device being external to said client device and being connected to said client device;
- computer readable code for determining, using said network device, whether said browser-destined traffic contains one or more HTTP 302 Moved messages;
- computer readable code for, when said browser-destined traffic contains an HTTP 302 Moved message, parsing said HTTP 302 Moved message to identify at least an embedded website address, and blocking access when a website associated with said embedded website address is a prohibited website;
- computer readable code for ascertaining an IP address of a first internet server of said one or more internet servers;
- computer readable code for performing lookup of said IP address in an IP address rating database;
- computer readable code for blocking access to said first internet server by said browser when said performing said lookup reveals said IP address to be suspicious and data received from said first internet server is encrypted, wherein said blocking is performed without first performing content analysis on said data from said first internet server, and wherein said blocking is performed when said first internet server is ascertained to be an anonymizing server.
Dependencies are inferred from the claim text.