SYSTEM AND METHOD FOR RULES-BASED SELECTION OF NETWORK TRANSMISSION INTERCEPTION MEANS

• US 20160242037A1
• Filed: 04/27/2016
• Published: 08/18/2016
• Est. Priority Date: 12/19/2014
• Status: Active Grant

• Current Assignee: Lab A.O. Kaspersky
• Original Assignee: Lab A.O. Kaspersky
• Inventors: Filatov, Konstantin M., Eliseev, Evgeny Y., Yablokov, Victor V.
• Granted Patent: US 10,172,004 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/306 intercepting packet switched data communications, e.g. Web, Internet or IMS communications
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/088 using filters or firewalls

Abstract

Disclosed are systems and methods for selecting means for intercepting network transmissions. An exemplary method includes determining one or more rules associated with transmission of data by a device; determining one or more network transmission intercepting means that satisfy the one or more determined rules; selecting a network transmission intercepting means based on the determined one or more network transmission intercepting means; and causing transmissions by the device to be processed by the selected network transmission intercepting means.

Claims

1. A method for selecting a means for intercepting network transmissions for a device, the method comprising:

determining one or more rules associated with transmission of data by the device;

determining one or more network transmission intercepting means that satisfy the one or more determined rules;

selecting a network transmission intercepting means based on the determined one or more network transmission intercepting means; and

causing transmissions by the device to be processed by the selected network transmission intercepting means.

2. The method of claim 1, further comprising:

installing the selected network transmission intercepting means.

3. The method of claim 1, further comprising:

updating the selected network transmission intercepting means.

4. The method of claim 1, further comprising:

determining information that is associated with at least one of the device or the transmission of data by the device,

wherein the selection of the network transmission intercepting means is further based on the determined information.

5. The method of claim 4, wherein the information comprises at least one of a type of data transmission network, a type of transmission data, or a type of data transmission protocol.

6. The method of claim 4, wherein the information comprises at least one of access rights to resources of an operating system of the device or presence of resources of the operating system on the device.

7. The method of claim 1, wherein the one or more rules include a rule associated with at least one of a security level of data transmitted by the device, an ability to process a source of intercepted data, an ability to process data transmitted by hypertext transfer protocol (HTTP), or an ability to be installed on the device.

8. The method of claim 7, wherein the rule associated with the security level specifies the security level based on at least one of how data is manipulated or conditions under which data manipulation is permitted.

9. A system for selecting a means for intercepting network transmissions for a device, the system comprising:

a processor configured to;

determine one or more rules associated with transmission of data by the device;

determine one or more network transmission intercepting means that satisfy the one or more determined rules;

select a network transmission intercepting means based on the determined one or more network transmission intercepting means; and

causing transmissions by the device to be processed by the selected network transmission intercepting means.

10. The system of claim 9, wherein the processor further configured to install the selected network transmission intercepting means.

11. The system of claim 9, wherein the processor further configured to update the selected network transmission intercepting means.

12. The system of claim 9, wherein the processor further configured to determine information that is associated with at least one of the device or the transmission of data by the device, wherein the selection of the network transmission intercepting means is further based on the determined information.

13. The system of claim 12, wherein the information comprises at least one of a type of data transmission network, a type of transmission data, or a type of data transmission protocol.

14. The system of claim 12, wherein the information comprises at least one of access rights to resources of an operating system of the device or presence of resources of the operating system on the device.

15. The system of claim 9, wherein the one or more rules include a rule associated with at least one of a security level of data transmitted by the device, an ability to process a source of intercepted data, an ability to process data transmitted by hypertext transfer protocol (HTTP), or an ability to be installed on the device.

16. The system of claim 15, wherein the rule associated with the security level specifies the security level based on at least one of how data is manipulated or conditions under which data manipulation is permitted.

17. A non-transitory, computer-readable medium storing computer-executable instructions for selecting a means for intercepting network transmission, including instructions for:

determining one or more rules associated with transmission of data by the device;

determining one or more network transmission intercepting means that satisfy the one or more determined rules;

selecting a network transmission intercepting means based on the determined one or more network transmission intercepting means; and

causing transmissions by the device to be processed by the selected network transmission intercepting means.

18. The computer-readable medium of claim 17, wherein the selection of the network transmission intercepting means is further based on at least one or more of a type of data transmission network, a type of transmission data, a type of data transmission protocol, access rights to resources of an operating system of the device, and presence of resources of the operating system on the device.

19. The computer-readable medium of claim 17, wherein the one or more rules include a rule associated with at least one of a security level of data transmitted by the device, an ability to process a source of intercepted data, an ability to process data transmitted by hypertext transfer protocol (HTTP), or an ability to be installed on the device.

20. The computer-readable medium of claim 19, wherein the rule associated with the security level specifies the security level based on at least one of how data is manipulated or conditions under which data manipulation is permitted.