Network security processing
AssigneeInternational Business Machines Corporation
InventorIan Robertson
Life of this patent
Estimating the term…
Abstract
A method, and associated system, for security processing of a request for a resource in a network security system. The request for the resource and a duplicate of request for the resource are forwarded to a first proxy server and a second proxy server, respectively. A first output including the received request, and a second output including the duplicate of the received request, are received from first proxy server and the second proxy server, respectively. A determination is made that the first output and the second output differ and in response, a first alarm is generated and transmission to the web server of the received request and the duplicate of the received request is blocked.
Claims20
A method for security processing of a request for a resource in a network security system that includes a computer system containing one or more processors, said method comprising:
- forwarding, by the one or more processors:
- (i) the request for the resource directly to a first proxy server, wherein the request for the resource was previously received from a client device, and (ii) a duplicate of the received request directly to a second proxy server;
- after said forwarding, receiving, by the one or more processors, a first output from the first proxy server and a second output from the second proxy server, said first output and said second output including the received request and the duplicate of the received request, respectively;
- and
- determining, by one or more processors, that the first output and the second output differ from each other and in response, generating, by the one or more processors, a first alarm and blocking, by the one or more processors, transmission to the web server of the received request and the duplicate of the received request.
A computer program product, comprising one or more computer readable hardware storage devices having computer readable program code stored therein, said program code containing instructions executable by one or more processors of a computer system to implement a method for security processing of a request for a resource in a network security system that includes a computer system containing the one or more processors, said method comprising:
- forwarding, by the one or more processors:
- (i) the request for the resource directly to a first proxy server, wherein the request for the resource was previously received from a client device, and (ii) a duplicate of the received request directly to a second proxy server;
- after said forwarding, receiving, by the one or more processors, a first output from the first proxy server and a second output from the second proxy server, said first output and said second output including the received request and the duplicate of the received request, respectively;
- and
- determining, by one or more processors, that the first output and the second output differ from each other and in response, generating, by the one or more processors, a first alarm and blocking, by the one or more processors, transmission to the web server of the received request and the duplicate of the received request.
A computer system, comprising one or more processors, one or more memories, and one or more computer readable hardware storage devices, said one or more hardware storage device containing program code executable by the one or more processors via the one or more memories to implement a method for security processing of a request for a resource in a network security system that includes the computer system, said method comprising:
- forwarding, by the one or more processors:
- (i) the request for the resource directly to a first proxy server, wherein the request for the resource was previously received from a client device, and (ii) a duplicate of the received request directly to a second proxy server;
- after said forwarding, receiving, by the one or more processors, a first output from the first proxy server and a second output from the second proxy server, said first output and said second output including the received request and the duplicate of the received request, respectively;
- and
- determining, by one or more processors, that the first output and the second output differ from each other and in response, generating, by the one or more processors, a first alarm and blocking, by the one or more processors, transmission to the web server of the received request and the duplicate of the received request.
Dependencies are inferred from the claim text.