×

Evaluating a questionable network communication

  • US 9,912,677 B2
  • Filed: 02/03/2016
  • Issued: 03/06/2018
  • Est. Priority Date: 09/06/2005
  • Status: Active Grant
First Claim
Patent Images

1. A method in a computing system for controlling communication, comprising:

  • in a computing system, evaluating a network communication that is transported at least in part by network packets each having a header section and a payload section, by;

    receiving one or more indications of allowable communication properties;

    receiving an indication that a listening port has been opened on the computing system;

    receiving an indication that the network communication has been established via the listening port; and

    determining a first communication property that is associated with the network communication;

    determining a second communication property that is one of the one or more allowable communication properties;

    determining whether the network communication is allowable based on whether the first communication property is encompassed by the second communication property, including one or more of;

    a property of a program that is using the listening port, including the identity of the program and/or whether the program is an interactive program, a batch program, or a system service;

    a first IP address and/or port associated with the network communication;

    a geographic location associated with the first IP address;

    a connection limit based on the first IP address or the geographic location, the first IP address being a source or destination IP address;

    a time of day; and

    a network interface that is associated with the network communication; and

    in response to determining that the network communication is not allowable, setting an indicator that the network communication is not allowed.

View all claims
  • 0 Assignments
Timeline View
Assignment View
    ×
    ×