Methods for Internet Communication Security

A product for securing communications of a plurality of networked computing devices, the product comprising a non-transitory computer-readable storage medium having computer-readable program code embodied therein, the computer-readable program code executable by a processor to perform communication management operations, the communication management operations comprising:

• i) intercepting a first network packet at a hypervisor to obtain a first payload with a higher-than-OSI layer three portion and a destination port number, the destination port number assigned to a destination port on one of the plurality of networked computing devices;
• ii) decrypting, with a single-use cryptographic key, at least a portion of the first higher-than-OSI layer three portion of the first payload to obtain one or more first packet parameters;
• iii) confirming at the hypervisor that the first payload conforms to at least one of a data model pre-assigned to the destination port number based on a comparison of the one or more first packet parameters with one or more first expected values;
• iv) after confirmation that the first payload conforms to the data model for the destination port, forming a second network packet comprising a second payload and at least one of a local program identification code or a data model identification code;
• and
• v) executing at least one instruction to send the second network packet to network security software on the destination port on the one of the plurality of networked computing devices via a zero-trust network access (ZTNA).