Loading patent…
AssigneeBarracuda Networks, Inc.
InventorSCOTT SOTKA
Estimating the term…
Detecting and thwarting browser-based network intrusion attacks for intellectual property misappropriation is provided by enabling a local machine to direct retrieval of resources using uniform resource identifiers to a browser operating within a virtual machine whose internet protocol address is within a range external to a trusted network sub-circuit. Such a virtual machine is constrained by not having access to the Active Director Server of the trusted network. Such a virtual machine is constrained by not having access to other resources of the trusted network. Such a virtual machine is constrained by a monitor application which terminates the virtual machine if characteristics of intrusion or network attack are observed within the virtual machine.
A system comprising a layered network of trusted and untrusted subnets isolated by a firewall from the Internet wherein the trusted subnet comprises at least one DHCP Server and a plurality of local machines whose IP addresses are registered with DHCP as participating in the Active Directory and on the trusted network, the local machines configured to operate virtual machine processes communicatively coupled to the Internet by a second IP address without access to the Active Director or to the trusted network.
An apparatus communicatively coupled to a network comprising a trusted subnet and coupled to an untrusted subnet managed by at least one Dynamic Host Configuration Protocol (DHCP) server, comprises
A method for operating a processor configured with a virtual machine process comprising requesting assignment of an IP address from the DHCP server and receiving an IP address which does not have access to the Active Director Server but does have access to the external public Internet.
A method for operating a processor configured to operate on a trusted subnet of a network by
Dependencies are inferred from the claim text.