Network security systems and methods

Abstract

A security system provides a defense from known and unknown viruses, worms, spyware, hackers, and unwanted or unknown software. The system can implement centralized policies that allow an administrator to approve, block, quarantine, or log file activities. The system maintains file meta-information in the hosts and in the server. A host detects file operations which can cause changes to file content or file name, and updates the host and / or server meta-information as a result. Changes in server meta-information are made available to hosts.

Description

Background technique [0001] Large enterprises have large information technology (IT) security budgets and layered IT security systems, but network compromise, damage from viruses and worms, and spyware issues are common. Current IT security technologies are expensive to maintain and do not provide protection against new or unknown threats, which are being distributed, detected and reported at an increasing rate. [0002] Security solutions located at the network perimeter, such as firewalls, have visibility limited to network traffic directly passing through them. Input vectors such as email viruses, web browser exploits, wireless access, VPNs, instant messaging, and file sharing create increasingly permeable perimeters that bypass these technologies. It is difficult to define perimeters in modern networks that provide sufficient control and visibility. Many attacks generate network traffic only after they have compromised a machine or network. For example, by the time a vi...

AI Technical Summary

Problems solved by technology

In order to transparently add this content-based authorization to the operating system in the background, the delay must typically be less than a minute, otherwise the file system will time out and a spurious access blocking error will occur

Images