Unified system for detecting policy enforcement issues in a cloud-based environment
AssigneeNetskope, Inc.
InventorsKand Ly, Amit Ganesh Datar, Kartik Subbanna
Life of this patent
Estimating the term…
Loading patent…
AssigneeNetskope, Inc.
InventorsKand Ly, Amit Ganesh Datar, Kartik Subbanna
Estimating the term…
Disclosed is a unified security system of cloud-based components configured for (a) packet-level and (b) protocol-level access control and traffic inspection, (c) threat detection and (d) activity contextualization. Packet-level inspects and classifies headers in requests or responses, sets a first restrictive state or passes the request or response. Protocol-level performs deep packet inspection for malicious signatures then sets a second state or passes. Threat detection, when the request or response is an HTTP/S stream, classifies as directed to a threat destination or not, then sets a third state or passes the request or response and activity contextualization, when the request is an HTTP/S stream seeking access to a cloud-based application, recognizes, processes and classifies content-containing activity as compromising or not, then sets a fourth state or passes. A restrictive state analyzer determines whether the first, second, third or fourth restrictive state has been set and takes restrictive steps in response.
A system for providing cloud-based network security, the system including:
A method for providing cloud-based network security, the method including the steps of:
A tangible non-transitory computer readable medium including program instructions that, when executed on one or more processors, cause the processors to implement a method, the method including actions of:
Dependencies are inferred from the claim text.