Back to results
US 9,432,403 B2Granted
Method, system and computer program product for tagging content on uncontrolled web application
AssigneeProofpoint, Inc.
InventorCameron Blair Cooper
Life of this patent
Estimating the term…
Abstract
Communications by a device in a private network to a site operating outside of the network can be programmatically inspected. Unstructured data, including messages and application content, originating from outside of the network may be disassembled, analyzed, and categorized into source specific application element types (AETs). A monitoring layer may allow a user of the device in the network to switch between different modes of interaction with the site operating outside of the network. Interactions and activities in different modes can be monitored and processed differently according to internal policies and/or business rules.
Claims39
A method for controlling access to a web site, comprising:
- performing, by a server computer in a network:
- monitoring, during a first mode of user interaction with a site, access to the site by a multi-mode Web application on a device within the network, the site operating outside of the network and not controlled by the network, wherein the multi-mode Web application, during the first mode of user interaction with the site, appears and functions substantially same as a Web application controlled by the site which is accessed by the multi-mode Web application;
- detecting, via the multi-mode Web application on the device, a switch from the first mode of user interaction with the site to a second mode of user interaction with the site operating outside of the network;
- based on access by the device in the network to the site operating outside of the network, receiving unstructured data from outside of the network and responsive to the detection of a switch from the first mode of user interaction with the site to the second mode of user interaction with the site, dynamically converting at least part of the unstructured data to structured data utilizing application element types, wherein the application element types are parsed from the unstructured data utilizing one or more filters specific to the site operating outside of the network, wherein the unstructured data comprises source code data for the Web application controlled by the site operating outside the network, and wherein the structured data comprises a controlled version of the Web application;
- and
- applying a policy to the structured data, wherein the policy is internal to the network.
3 more elements
A computer program product comprising at least one non-transitory computer readable medium storing instructions translatable by at least one processor, the instructions when translated causing a computer in a network to perform:
- monitoring, during a first mode of user interaction with a site, access to the site by a multi-mode Web application on a device within the network, the site operating outside of the network and not controlled by the network, wherein the multi-mode Web application, during the first mode of user interaction with the site, appears and functions substantially same as a Web application controlled by the site which is accessed by the multi-mode Web applicatior;
- detecting, via the multi-mode Web application on the device, a switch from the first mode of user interaction with the site to a second mode of user interaction with the site operating outside of the network;
- based on access by the device in the network to the site operating outside of the network, receiving unstructured data from outside of the network and responsive to the detection of a switch from the first mode of user interaction with the site to the second mode of user interaction with the site, dynamically converting at least part of the unstructured data to structured data utilizing application element types, wherein the application element types are parsed from the unstructured data utilizing one or more filters specific to the site operating outside of the network, wherein the unstructured data comprises source code data for the Web application controlled by the site operating outside the network, and wherein the structured data comprises a controlled version of the Web application;
- and
- applying a policy to the structured data, wherein the policy is internal to the network.
2 more elements
A system comprising:
- at least one processor;
- and
- at least one non-transitory computer readable medium storing instructions translatable by the at least one processor, the instructions when translated causing a computer in a network to perform:
- monitoring, during a first mode of user interaction with a site, access to the site by a multi-mode Web application on a device within the network, the site operating outside of the network and not controlled by the network, wherein the multi-mode Web application, during the first mode of user interaction with the site, appears and functions substantially same as a Web application controlled by the site which is accessed by the multi-mode Web application;
- detecting, via the multi-mode Web application on the device, a switch from the first mode of user interaction with the site to a second mode of user interaction with the site operating outside of the network;
- based on access by the device in the network to the site operating outside of the network, receiving unstructured data from outside of the network and responsive to the detection of a switch from the first mode of user interaction with the site to the second mode of user interaction with the site, dynamically converting at least part of the unstructured data to structured data utilizing application element types, wherein the application element types are parsed from the unstructured data utilizing one or more filters specific to the site operating outside of the network, wherein the unstructured data comprises source code data for the Web application controlled by the site operating outside the network, and wherein the structured data comprises a controlled version of the Web application;
- and
- applying a policy to the structured data, wherein the policy is internal to the network.
5 more elements
Dependencies are inferred from the claim text.