SYSTEMS AND METHODS FOR ENFORCING POLICIES FOR PROXY WEBSITE DETECTION USING ADVERTISING ACCOUNT ID

• US 20100205665A1
• Filed: 02/11/2009
• Published: 08/12/2010
• Est. Priority Date: 02/11/2009
• Status: Active Grant

• Current Assignee: Sophos Limited (Sophos Group Ltd.)
• Original Assignee: Sophos Limited (Sophos Group Ltd.)
• Inventors: Komili, Onur, Zeeuwen, Kyle J.
• Granted Patent: US 8,695,091 B2
• Time in Patent Office: Days
• US Class Current: 726/12
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data

Abstract

In embodiments of the present invention improved capabilities are described for systems and methods that enforce policies with respect to proxy communications.

Claims

1. A computer program product embodied in a computer readable medium that, when executing on one or more computers, performs the steps of:

intercepting a website connection request;

analyzing a requested website associated with the website connection request for operator identification information;

associating the operator information with an entity that operates a known website; and

categorizing the requested website as a same category as the known website.

2. The computer program product of claim 1, further comprising:

blocking the requested website.

3. The computer program product of claim 1, further comprising:

allowing connection to the requested website.

4. The computer program product of claim 1, further comprising:

sending an alert and allowing connection to the requested website.

5. A computer program product embodied in a computer readable medium that, when executing on one or more computers, performs the steps of:

intercepting a website connection request;

analyzing a website associated with the website connection request for operator identification information; and

associating the operator information with an entity that operates a known proxy website.

6. The computer program product of claim 5, further comprising:

in response to associating the operator information with the entity that operates the known proxy website, blocking the website connection request.

7. The computer program product of claim 5, further comprising:

in response to associating the operator information with the entity that operates the known proxy website, allow connection to the website content and send an alert that the website content may be a proxy website interaction.

8. The computer program product of claim 5, further comprising:

in response to associating the operator information with the entity that operates the known proxy website, identifying the website content as a proxy website.

9. A computer program product embodied in a computer readable medium that, when executing on one or more computers, blocks a proxy website interaction by performing the steps of:

intercepting a website connection request;

analyzing a website associated with the website connection request for customer advertisement identification information;

associating the customer advertisement identification information with an entity that operates a known proxy website; and

blocking the website connection request.

10. The computer program product of claim 9, further comprising:

identifying to a requester of the website connection request that the request was blocked based on a suspicion that the request was for a proxy site.