Patent ID: 11882136
Assignee: SOPHOS LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 18:
19. A system for network access control based on traffic monitoring and vulnerability detection using process related information, the system including a processor and a memory, the system comprising:
a process interceptor executing on a host coupled to an enterprise network and configured to determine process information for a process executing on the host and configured to allow or block a connection request from the process based on an authorization decision received from a remote resource;
an intrusion preventor coupled to the enterprise network, the intrusion preventor configured to, in response to the connection request, identify the process based on the process information, and to detect activity associated with a known vulnerability of the process; and
a pattern matcher coupled to the enterprise network, the pattern matcher configured to transmit an authorization decision to the process interceptor regarding allowing or blocking of the connection request from the process executing on the host in response to the intrusion preventor detecting the activity associated with the known vulnerability of the process.