SYSTEMS AND METHODS FOR PREVENTING INTRUSION AT A WEB HOST

• US 20080222727A1
• Filed: 05/13/2008
• Published: 09/11/2008
• Est. Priority Date: 11/08/2002
• Status: Active Grant

• Current Assignee: Palo Alto Networks Incorporated
• Original Assignee: Federal Network Systems LLC (Jacobs Solutions, Inc.)
• Inventors: SAMPLE, Char
• Granted Patent: US 8,001,239 B2
• Time in Patent Office: Days
• US Class Current: 726/23
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00

Abstract

A web host intrusion prevention system includes a filter engine [302] and comparison tables [303]. The comparison tables [303] are populated with the set of valid commands that are to be received at a server. The filter engine [302] looks up received commands in the comparison tables [303]. Received commands that are not in the comparison table are rejected.

Claims

1. A method for processing commands, comprising:

intercepting commands directed for a web server;

comparing the intercepted commands to a pre-designated set of commands that are known to be valid commands for the web server; and

dropping ones of the intercepted commands when the comparison of the intercepted commands does not generate a match to the pre-designated set of commands.

2-30. -30. (canceled)