Header replay for endpoint-based security
AssigneeDope. Security Inc.
InventorKunal Agarwal
Life of this patent
Estimating the term…
Abstract
Apparatuses, methods, systems, and program products are disclosed for endpoint-based security. An apparatus includes a network module that is configured to receive, at an end user device, a request for content from a network source. An apparatus includes a policy module that is configured to compare a network source of requested content against a policy that is stored on an end user device prior to the content being allowed on the end user device. An apparatus includes an action module that is configured to replay at least one header of the request for content at a remote device where the requested content is further analyzed based on the comparison between the network source of the requested content and the policy.
Claims20
An apparatus, comprising:
- a network module configured to receive, at an end user device, a request for content from a network source;
- and
- an action module configured to:
- verify an identity of the content based on an identifying characteristic of the content;
- intercept the request for content at the end user device in response to the identity of the content being unknown;
- replay at least one header of the request for content at a remote device where the requested content is downloaded, in response to determining that the network source for the request is not in a cache, a full analysis of the content performed to determine a veracity of the content prior to making the content available on the end user device;
- notify an administrator that the content is malicious in response to failing to verify the veracity of the content;
- and
- update the cache in response to the determining that the network source for the request is not in a cache by checking the network source of the requested content against a remotely-stored master policy.
A method, comprising:
- receiving, at an end user device, a request for content from a network source;
- verifying an identity of the content based on an identifying characteristic of the content;
- intercepting the request for content at the end user device in response to the identity of the content being unknown;
- replaying at least one header of the request for content at a remote device where the requested content is downloaded, in response to determining that the network source for the request is not in a cache, a full analysis of the content performed to determine a veracity of the content prior to making the content available on the end user device;
- notifying an administrator that the content is malicious in response to failing to verify the veracity of the content;
- and
- updating the cache in response to the determining that the network source for the request is not in a cache by checking the network source of the requested content against a remotely-stored master policy.
An apparatus, comprising:
- means for receiving, at an end user device, a request for content from a network source;
- means for verifying an identity of the content based on an identifying characteristic of the content;
- means for intercepting the request for content at the end user device in response to the identity of the content being unknown;
- means for replaying at least one header of the request for content at a remote device where the requested content is downloaded, in response to determining that the network source for the request is not in a cache, a full analysis of the content performed to determine a veracity of the content prior to making the content available on the end user device;
- means for notifying an administrator that the content is malicious in response to failing to verify the veracity of the content;
- and
- means for updating the cache in response to the determining that the network source for the request is not in a cache by checking the network source of the requested content against a remotely-stored master policy.
Dependencies are inferred from the claim text.