Back to results
US 2017/0322902 A1Published application
Systems and methods for enforcing policies in the discovery of anonymizing proxy communications
AssigneeSophos Limited
InventorsRichard J. Baldry, Ross G. Thomas
Life of this patent
Estimating the term…
Abstract
In embodiments of the present invention improved capabilities are described for systems and methods that enforce policies with respect to proxy communications.
Claims21
1-18. (canceled)
A method for enforcing a policy for anonymizer proxy communications, the method comprising the steps of:
- analyzing, at a web gateway for an enterprise network, website content that is retrieved based on a website request from an endpoint within the enterprise network by looking for patterns within the website content that are similar to patterns found in other website content from a known non-proxy website;
- in response to finding a similar pattern in content between the requested website and the known non-proxy website, comparing a website identifier in the website request with a second website identifier associated with the known non-proxy website;
- when the website content retrieved at the web gateway is similar to the content from the known non-proxy website and the website identifier in the website request does not match the second website identifier associated with the known non-proxy, categorizing the website identifier as associated with an anonymizer proxy used to indirectly access network content outside the enterprise network while obscuring a sender or receiver of information;
- and
- controlling access by the endpoint to content available at the website identifier according to the policy for anonymizer proxy communications.
2 more elements
A computer program product for enforcing a policy for anonymizer proxy communications, the computer program product comprising computer-executable code embodied in a non-transitory computer readable medium that, when executing on one or more computers, performs the steps of:
- analyzing, at a web gateway for an enterprise network, website content that is retrieved based on a website request from an endpoint within the enterprise network by looking for patterns within the website content that are similar to patterns found in other website content from a known non-proxy website;
- in response to finding a similar pattern in content between the requested website and the known non-proxy website, comparing a website identifier in the website request with a second website identifier associated with the known non-proxy website;
- when the website content retrieved at the web gateway is similar to the content from the known non-proxy website and the website identifier in the website request does not match the second website identifier associated with the known non-proxy, categorizing the website identifier as associated with an anonymizer proxy used to indirectly access network content outside the enterprise network while obscuring a sender or receiver of information;
- and
- controlling access by the endpoint to content available at the website identifier according to the policy for anonymizer proxy communications.
2 more elements
A system comprising:
- an endpoint associated with an enterprise network, the endpoint including a computing device comprising a memory and a processor;
- and
- a web gateway for the enterprise network, the web gateway coupled in a communicating relationship with the endpoint, and the web gateway configured to look for patterns of website content retrieved based on a website request from the endpoint that are similar to patterns found in other website content from a known non-proxy website, in response to finding a similar pattern in content between the requested website and the known non-proxy website, when the website content retrieved at the web gateway is similar to the content from the known non-proxy website and a website identifier in the website request does not match a second website identifier associated with the known non-proxy, categorizing the website identifier as associated with an anonymizer proxy, and controlling access by the endpoint to content available at the website identifier according to a policy for anonymizer proxy communications.
Dependencies are inferred from the claim text.