NETWORK ADAPTER FIREWALL SYSTEM AND METHOD

• US 20120192262A1
• Filed: 03/29/2012
• Published: 07/26/2012
• Est. Priority Date: 12/20/2001
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Jagger, Luke D., Rothwell, Anton C., Dennis, William R.
• Granted Patent: US 8,627,443 B2
• Time in Patent Office: Days
• US Class Current: 726/11
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL

Abstract

A network adapter system and associated method are provided. Included is a network adapter having a plurality of designated trusted and untrusted ports. The network adapter includes a processor coupled to a computer. Such processor is further coupled to a network via the ports. In use, the processor is configured for conditionally preventing network traffic from accessing the computer from the network via the untrusted ports and/or preventing unauthorized software from accessing the network in an untrusted manner from the computer.

Claims

1-31. -31. (canceled)

32. A network adapter, comprising:

at least one designated trusted port;

at least one designated untrusted port; and

a processor provisioned in the network adapter, configured for providing firewall capabilities, and coupled within a computer, the network adapter coupled to a network via the ports, wherein network traffic from the at least one trusted port bypasses the processor, wherein the network adapter processor is configured for;

assembling the network traffic into packets;

performing an initial determination whether certain assembled incoming packets are of interest for screening activities based on determining at least one of a timing of the certain assembled incoming packets and content within the certain assembled incoming packets;

determining whether the certain assembled incoming packets of interest violate a plurality of predetermined rules for packet transmissions; and

denying access to certain areas of the computer based on a violation of the predetermined rules.

33. The network adapter of claim 32, wherein a subset of the packets greater than a threshold for a maximum size of packets are stored in random access memory of the computer.

34. The network adapter of claim 32, wherein the initial determination of whether the certain assembled incoming packets are of interest for screening activities is further based on a source of the certain assembled incoming packets and a protocol of the certain assembled incoming packets.

35. The network adapter of claim 32, wherein the violation is associated with remote access to the computer using an authentication certificate.

36. The network adapter of claim 32, further comprising granting access to the certain areas of the computer if no violation occurs.

37. The network adapter of claim 32, further comprising communicating an alert that signals the violation.

38. The network adapter of claim 37, wherein the alert is provided using an indicator on the network adapter.

39. The network adapter of claim 37, wherein the alert includes a plurality of options for addressing the violation.

40. The network adapter of claim 32, wherein the processor is capable of being user-configured locally.

41. The network adapter of claim 32, wherein the trusted and untrusted ports include physical ports coupled to the network adapter for receiving plugs therein.

42. The network adapter of claim 41, wherein the trusted ports are visually differentiated from the untrusted ports.

43. The network adapter of claim 42, wherein the trusted ports are visually differentiated from the untrusted ports utilizing color.

44. The network adapter of claim 32, wherein received packets are of interest based on an associated protocol.

45. The network adapter of claim 32, wherein the processor is further configured to pass received packets that are not of interest.

46. The network adapter of claim 32, wherein the network adapter includes at least one of a Peripheral Component Interconnect (PCI) card, an Industry Standard Architecture (ISA) card, an Integrated Services Digital Network (ISDN) adapter, a cable modem adapter, and a broadband adapter.

47. The network adapter of claim 32, wherein the network adapter includes an adapter circuit that is coupled to the network.

48. The network adapter of claim 47, wherein the adapter circuit is coupled to the computer.

49. The network adapter of claim 32, wherein non-volatile solid state memory is protected by configuring a bios of the network adapter with a password.

50. The network adapter of claim 32, further comprising a packet assembler module configured to utilize header information associated with packets for assembling data fields of received packets.

51. The network adapter of claim 32, further comprising a packet assembler module configured to assemble a predetermined amount of received packets based on an associated protocol.

52. A method for screening network traffic by a processor of a network adapter configured for providing firewall capabilities, the network adapter being coupled to a computer and further coupled to a network via at least one designated trusted port and at least one designated untrusted port, wherein network traffic from the at least one trusted port bypasses the processor, the method comprising:

assembling the network traffic into packets;

performing an initial determination whether certain assembled incoming packets are of interest for screening activities based on determining at least one of a timing of the certain assembled incoming packets and content within the certain assembled incoming packets;

determining whether the certain assembled incoming packets of interest violate a plurality of predetermined rules for packet transmissions; and

denying access to certain areas of the computer based on a violation of the predetermined rules.