Network security layer
AssigneePerygee Inc.
InventorMollie Breen
Life of this patent
Estimating the term…
Abstract
A method performed by a server for protecting a network infrastructure can include: receiving, from an inline hardware appliance associated with an asset, traffic associated with the asset; analyzing the traffic based on a behavioral fingerprint associated with the asset to determine if the traffic is normal or abnormal, wherein the behavioral fingerprint can be stored on the server; and in response to determining that the traffic is normal, forwarding the traffic to the asset.
Claims20
A method performed by a server for protecting a network infrastructure comprising:
- receiving, from an inline hardware appliance that proxies traffic associated with an asset, traffic associated with the asset;
- analyzing the traffic based on a behavioral fingerprint associated with the asset to determine if the traffic is normal or abnormal, wherein the behavioral fingerprint is stored on the server;
- and
- in response to determining that the traffic is normal, forwarding the traffic to the asset.
A method performed by a server for protecting a network infrastructure comprising:
- receiving identification information for a plurality of assets on a network;
- and
- for each asset:
- connecting the asset through an inline hardware appliance that proxies traffic, wherein the inline hardware appliance is configured to route traffic associated with the asset to the server;
- generating a behavioral fingerprint for the asset;
- storing the behavioral fingerprint on the server;
- and
- using the behavioral fingerprint to control traffic associated with the asset.
A system for protecting a network infrastructure comprising:
- a network;
- a plurality of assets connected to the network;
- and
- a server connected to the network, the server comprising a plurality of proxies, wherein the server is configured to, for each asset on the network:
- connect a proxy to the asset;
- generate a behavioral fingerprint for the asset;
- store the behavioral fingerprint on the server;
- and
- use the behavioral fingerprint to control traffic associated with the asset;
- wherein each proxy of the plurality of proxies is configured to route traffic associated with a connected asset to the server.
Dependencies are inferred from the claim text.