Patent ID: 8356335
Filing Date: 2013-01-15
Classification: H04L

Abstract:
1. A machine-implemented method, comprising: detecting a network connection request made by a requesting resource; overriding a network connection accept operation that attempts to establish a connection with the requesting resource, the requesting resource is not permitted to fully process the network connection accept operation by the overriding the network connection accept operation; acquiring a full network path and a process name for an executable of the requesting resource; accessing a signature library to obtain a first signature for the process name, the first signature is generated during a first connection request made by the requesting resource and acquired from a digital signature service; comparing the obtained first signature to a second signature that is generated for the executable, and the second signature generated from a binary of executable for the requesting resource; authenticating the network connection request and processing the network connection accept operation to make the connection when the first signature equals the second signature, the requesting resource is unaware of any authentication occurring at all the authentication occurs without the requesting resource supplying any information; denying the network connection request when the first signature does not equal the second signature; and logging an Internet Protocol (IP) address associated with the requesting resource for subsequent reporting and denial of future connection requests attempted by the requesting resource.