Back to results
US 2020/0403983 A9Published application
Cyber Security System
AssigneeCyber 2.0 (2015) Ltd.
InventorErez Kaplan Haelion
Life of this patent
Estimating the term…
Abstract
System, product and method for connectivity-based scrambling is disclosed. Port scrambling mode is selected based on connectivity to a network. In one mode, ports of authorized outgoing communications are scrambled, while ports of unauthorized outgoing communications remain unscrambled. In another mode, ports of unauthorized outgoing communications are scrambled, while ports of authorized outgoing communications remain unscrambled. In some cases, under the first mode, ports of all incoming communications are descrambled, while in the second mode, ports of all incoming communications remain unscrambled.
Claims19
A computer program product comprising a non-transitory computer readable medium retaining program instructions, wherein said computer program product comprising:
- a connectivity module configured to determine connectivity of a computer executing the computer program product to a network managed by a server;
- a port scrambling mode selector configured to select a port scrambling mode based on connectivity determination by said connectivity module, wherein a first mode is selected in response being connected to the network, wherein a second mode is selected in response to being disconnected from the network;
- a port scrambler configured to compute a second port based on a first port, wherein the port scrambler utilizes a transformation function;
- an outgoing communication message handler configured to identify an outgoing packet transmitted by a program via the first port and selectively invoke said port scrambler to cause the outgoing packet to be transmitted via the second port,
- wherein in the first mode, said outgoing communication message handler is configured to invoke said port scrambler in response to the program being listed in a list of authorized programs, whereby, when the computer is connected to the network, outgoing communications issued by authorized programs are sent via scrambled ports and outgoing communications issued by non-authorized programs are sent via original ports;
- and
- wherein in the second mode, said outgoing communication message handler is configured to invoke said port scrambler in response to the program not being listed in the list of authorized programs, whereby, when the computer is not connected to the network, outgoing communications issued by authorized programs are sent via original ports and outgoing communications issued by non-authorized programs are sent via scrambled ports.
4 more elements
A computer program product comprising a non-transitory computer readable medium retaining program instructions, wherein said computer program product comprising:
- a connectivity module configured to determine connectivity of a computer executing the computer program product to a network managed by a server;
- a port scrambling mode selector configured to select a port scrambling mode based on connectivity determination by said connectivity module, wherein a first mode is selected in response being connected to the network, wherein a second mode is selected in response to being disconnected from the network;
- a port descrambler configured to compute a first port based on a second port, wherein the port descrambler utilizes an inverse transformation of a transformation function, wherein the transformation function is utilized by port scramblers invoked on computers connected to the network;
- an incoming communication message handler configured to identify an incoming packet received via the second port and selectively invoke said port descrambler, based on the port scrambling mode determined by said port scrambling mode selector, to cause the incoming packet to be handled via the first port,
- wherein said incoming communication message handler is configured to invoke said port descrambler in the first mode, whereby, when the computer is connected to the network, incoming communications are handled via descrambled ports;
- and
- wherein said incoming communication message handler is configured to avoid invocation of said port descrambler in the second mode, whereby, when the computer is disconnected from the network, incoming communications are handler via original ports.
4 more elements
A system comprising:
- a server managing a network;
- a plurality of devices that are connected to the network, wherein each of the plurality of devices comprise a port scrambling agent, wherein the port scrambling agent is configured to scramble ports of outgoing communications that are transmitted by authorized programs, wherein the port scrambling agent is configured to descramble ports of incoming communications;
- a computer that is selectively connectable to the network;
- wherein the computer comprising a mode-based port scrambling agent, wherein the mode-based port scrambling agent is configured to determine a port scrambling mode based on connectivity to the network, wherein said mode-based port scrambling agent is configured to determine a first mode when the computer is connected to the network, wherein said mode-based port scrambling agent is configured to determine a second mode when the computer is disconnected from the network;
- wherein in the first mode, the mode-based port scrambling agent is configured to:
- scramble ports of outgoing communications that are transmitted by authorized programs,
- allow transmission of outgoing communications by unauthorized programs via original ports, and
- descramble ports of incoming communications;
- and
- wherein in the second mode, the mode-based port scrambling agent is configured to:
- scramble ports of outgoing communications that are transmitted by unauthorized programs;
- allow transmission of outgoing communications by authorized programs via original ports;
- and
- avoid descrambling ports of incoming communications.
11 more elements
Dependencies are inferred from the claim text.