Use of application signature to identify trusted traffic
AssigneeIntel Corporation
InventorsNehal Desai, Patrick Chauvin, Jac Noel
Life of this patent
Estimating the term…
Abstract
Provided are a techniques for monitoring communication packets. A communication packet is received. A communication packet signature of the communication packet is determined. The communication packet signature is compared to one or more site-specific application signatures. In response to determining that the communication packet signature matches at least of the one or more site-specific application signatures, it is determined that the communication packet is to be trusted.
Claims32
A method for monitoring communication packets, comprising:
- receiving a communication packet;
- determining a communication packet signature of the communication packet;
- comparing the communication packet signature to one or more site-specific application signatures;
- and
- in response to determining that the communication packet signature matches at least of the one or more site-specific application signatures, determining that the communication packet is to be trusted.
A system for monitoring communication packets on a network, comprising:
- one or more application signatures data stores coupled to the network;
- a processor;
- and
- a computer readable medium including code capable of being executed by the processor to perform operations comprising:
- receiving a communication packet;
- determining a communication packet signature of the communication packet;
- comparing the communication packet signature to one or more site-specific application signatures in the one or more application signatures data stores;
- and
- in response to determining that the communication packet signature matches at least of the one or more site-specific application, signatures, determining that the communication packet is to be trusted.
An article of manufacture for monitoring communication packets, wherein the article of manufacture comprises a computer readable medium storing instructions, and wherein the article of manufacture is operable to:
- receive a communication packet;
- determine a communication packet signature of the communication packet,
- compare the communication packet signature to one or more site-specific application signatures;
- and
- in response to determining that the communication packet signature matches at least of the one or more site-specific application signatures, determine that the communication packet is to be trusted.
A apparatus for monitoring communication packets on a network, comprising:
- one or more application signatures data stores coupled to the network;
- and
- an application signatures engine coupled to the network and capable of accessing the one or more application signatures data stores;
- wherein the application signatures engine receives a communication packet;
- wherein the application signatures engine determines a communication packet signature of the communication packet;
- wherein the application signatures engine compares the communication packet signature to one or more site-specific application signatures in the one or more application signatures data stores;
- and
- wherein the application signatures engine, in response to determining that the communication packet signature matches at least of the one or more site-specific application signatures, determines that the communication packet is to be trusted.
Dependencies are inferred from the claim text.