Systems and methods for geoprocessing-based computing network security
AssigneeFortress Cyber Security, LLC
InventorDejan Nenov
Life of this patent
Estimating the term…
Abstract
The present disclosure describes systems and methods for geoprocessing-based packet processing and network security. Filter parameters, such as Internet Protocol (IP) addresses or other such information, may be used to define one or more minimum bounding rectangles (MBR). Parameters of an incoming packet may be compared to the MBR data using spatial algorithms, such as a coordinate search within an R-tree data structure. The identified MBRs within the tree may be used to apply corresponding filtering and/or forwarding rules to the packet. This may significantly accelerate rule searching and matching algorithms, reducing delays and computing resource requirements and accelerating network security processing.
Claims20
A method for geoprocessing-based computing network security, comprising:
- receiving, by a network interface of a security device deployed as an intermediary between a plurality of computing devices, a packet from a first computing device of the plurality of computing devices directed to a second computing device of the plurality of computing devices;
- extracting, by a packet processing engine of the security device, a plurality of identifiers of the packet;
- identifying, by a filter analyzer of the security device, a position within a spatial map corresponding to a value of the extracted plurality of identifiers, the spatial map comprising at least one predefined region, each predefined region corresponding to a filter condition and result;
- determining, by the filter analyzer, that the identified position is within a first predefined region of the at least one predefined regions;
- and
- responsive to the determination, filtering the packet, by the packet processing engine, according to the filter result corresponding to the first predefined region.
A system for geoprocessing-based computing network security, comprising:
- a security device deployed as an intermediary between a plurality of computing devices comprising a network interface, a memory device, and a processor executing a packet processing engine and a filter analyzer;
- wherein the network interface is configured to receive a packet from a first computing device of the plurality of computing devices directed to a second computing device of the plurality of computing devices;
- wherein the packet processing engine of the security device is configured to extract a plurality of identifiers of the packet;
- wherein the filter analyzer of the security device is configured to:
- identify a position within a spatial map stored in the memory device corresponding to a value of the extracted plurality of identifiers, the spatial map comprising at least one predefined region, each predefined region corresponding to a filter condition and result, and
- determine that the identified position is within a first predefined region of the at least one predefined regions;
- and
- wherein the packet processing engine is further configured to filter the packet, responsive to the determination, according to the filter result corresponding to the first predefined region.
Dependencies are inferred from the claim text.