Patent ID: 11882136
Assignee: SOPHOS LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A method for network access control based on traffic monitoring and vulnerability detection using process related information, the method comprising:
detecting at a pattern matching unit a connection request to a network device from a process executing on a host;
receiving at the pattern matching unit, from a process intercepting unit executing on the host, process information for the process executing on the host;
determining connection information for the connection request and network packet information for a packet associated with the connection request;
detecting activity associated with a vulnerability specific to the process based on the process information, the connection information, and the network packet information; and
in response to detecting the activity associated with the vulnerability specific to the process, transmitting an authorization decision to the process intercepting unit on the host to block the connection request.