Content security by network switch
OwnerAmir Pelesinventor
Life of this patent
Estimating the term…
Abstract
A security switch detects whether requested content is either trusted content or non-trusted content. In case of network content being trusted content, network traffic bypasses the inspection gateway and goes directly to the user. If network content is non-trusted content, network traffic passes through to the inspection gateways for inspection. Additionally, when the security switch receives a reply for “trusted” content requests, it parses the reply information to verify that the content-type of the file is indeed “trusted”. If the file doesn't prove to be “trusted”, the security switch drops the connection and stops the suspected content from reaching the client.
Claims35
A method for implementing a network security level via a security switch, said security switch storing a modifiable list of trusted file extensions, said method as implemented in said network switch comprising the steps of:
- (a) receiving a request from a client to a server;
- (b) parsing and identifying a file extension associated with said received request;
- (c) comparing said identified file extension with said pre-stored list of trusted file extensions;
- and
- (d) forwarding the received request to an inspection gateway a upon not finding a successful match.
An article of manufacture comprising a computer usable medium having computer readable program code embodied therein implementing a network security level via a modifiable list of trusted file extensions, said medium comprising:
- (a) computer readable program code aiding in receiving a request from a client to a server;
- (b) computer readable program code parsing and identifying a file extension associated with a received request;
- (c) computer readable program code comparing an identified file extension with said pre-stored list of trusted file extensions;
- and
- (d) computer readable program code aiding in forwarding the received request to an inspection gateway.
A method for implementing a network security level via a security switch, said security switch storing a modifiable list of trusted file extensions and a modifiable list of trusted content-types, said method as implemented in said network switch comprising the steps of:
- (a) receiving a request from a client to a server;
- (b) parsing and identifying a file extension associated with said received request;
- (c) comparing said identified file extension with said pre-stored list of trusted file extensions;
- and
- (d) forwarding said received request to an inspection gateway upon not finding a successful match.
A system implementing network security for content exchanged between a client and a server over a network, said system comprising:
- (a) a security switch storing a modifiable list of trusted file extensions, said security switch:
- receives and parses requests to identify a file extension associated with a received request;
- compares said identified file extension with said pre-stored list of trusted file extensions;
- and
- upon finding a successful match, forwards said received request to said server and receives a reply from said server;
- and
- (b) an inspection gateway working in conjunction with said security switch and receiving forwarded requests when a file extension of a request fails to match trusted file extensions in said pre-stored list, said inspection gateway communicating with said server and retrieving, inspecting, and verifying an object related to said received request, and based upon successful verification, forwarding a reply to said security switch.
An article of manufacture comprising a computer usable medium having computer readable program code embodied therein implementing a network security level via a modifiable list of trusted file extensions and a modifiable list of trusted content-types, said medium comprising:
- (a) computer readable program code aiding in receiving a request from a client to a server;
- (b) computer readable program code parsing and identifying a file extension associated with a received request;
- (c) computer readable program code comparing an identified file extension with said pre-stored list of trusted file extensions;
- and
- (d) computer readable program code aiding in forwarding said received request to an inspection gateway upon finding a successful match,
A method for implementing a network security level via a security switch, said method as implemented in said network switch comprising the steps of:
- (a) receiving a request from a client to a server;
- (b) parsing and identifying a file extension associated with said received request;
- (c) verifying said identified file extension as a trusted file extension;
- and
- (d) upon not verifying said identified file extension, forwarding the received request to an inspection gateway;
- else forwarding said received request to said server.
A method for implementing a network security level via a security switch, said method as implemented in said network switch comprising the steps of:
- (a) receiving a request from a client to a server;
- (b) verifying said received request as a trusted request;
- and
- (c) upon not verifying said received request, forwarding said received request to an inspection gateway;
- else forwarding said received request to said server.
Dependencies are inferred from the claim text.