Packet level data centric protection enforcement
AssigneeOracle International Corporation
InventorsKourosh Lashgari, Prashanth Adhikari, Matias Brutti, Robert Graham Clark
Life of this patent
Estimating the term…
Loading patent…
AssigneeOracle International Corporation
InventorsKourosh Lashgari, Prashanth Adhikari, Matias Brutti, Robert Graham Clark
Estimating the term…
Techniques are described for performing packet level data centric protection enforcement. Instead of being restricted to perimeter-based security and defining and creating rules that are difficult to maintain, techniques described herein allow users to create data-centric, intent-based policies that are enforced at different enforcement points within one or more networks. In some examples, a method comprises receiving a packet at an enforcement point (EP) within one or more networks that include a plurality of enforcement points (EPs); accessing enforcement data that indicates allowed communications between the EP and one or more other EPs, wherein the data are generated from a policy that specifies how traffic flows the one or more networks and a determination of possible data movements between at least two of EPs in the plurality of EPs; and enforcing the flow of the packet at the EP based on the data.
A method to perform packet level data centric protection enforcement in one or more networks, the method comprising:
A system, comprising:
A computer-readable medium comprising instructions that when executed, cause one or more processors to perform operations including:
Dependencies are inferred from the claim text.