System and method for detecting and blocking malicious attacks on a network
AssigneeSecuring Sam Ltd.
InventorsOmri MALLIS, Ellon Lotem, Dima Krasner
Life of this patent
Estimating the term…
Abstract
Systems and method of detecting and blocking malicious attacks on a computer network, including: receiving, by a memory constrained gateway in communication with the computer network, a communication request from at least one device, identifying the type of the at least one device based on the received communication request, verifying that the device is of an allowed type from a predetermined list of allowed device types, checking at least one signature of the received communication request of the allowed device to detect malicious signatures, and blocking communication requests from devices with at least one malicious signature.
Claims20
A method of detecting and blocking malicious attacks on a computer network, the method comprising:
- receiving, by a memory constrained gateway in communication with the computer network, a communication request from at least one device;
- identifying, by the gateway, a type of the at least one device based on the received communication request;
- verifying, by the gateway, that the device is of an allowed type from a predetermined list of allowed device types;
- checking, by the gateway, at least one signature of the received communication request of the allowed device to detect malicious signatures;
- and
- blocking, by the gateway, communication requests from devices with at least one malicious signature,
- wherein the at least one signature is determined as malicious when the at least one signature appears in a malicious signature database coupled to the gateway, and wherein the predetermined list comprises device types that are allowed to communicate with the computer network.
A system for detection of malicious attacks on a computer network, the system comprising:
- a memory constrained gateway in communication with the computer network;
- and
- a malicious signature database coupled to the gateway,
- wherein the gateway is configured to:
- receive a communication request from at least one device;
- identify a type of the at least one device based on the received communication request;
- verify that the device is of an allowed type from a predetermined list of allowed device types;
- check at least one signature of the received communication request of the allowed device to detect malicious signatures, wherein the at least one signature is determined as malicious when the at least one signature appears in the malicious signature database;
- and
- block communication requests from devices with at least one malicious signature,
- wherein the predetermined list comprises device types that are allowed to communicate with the computer network.
Dependencies are inferred from the claim text.