Patent ID: 8631244
Filing Date: 2014-01-14
Classification: H04L

Abstract:
1. A system for preventing computer malware from exfiltrating data from a user computer in a network via an internet, comprising: a) a host-based network process monitor operably connected to the user computer configured to intercept network traffic information from said user computer and transmit a network request comprising user and application information including said network traffic information; b) an authorization server operably connected to said host-based network process monitor containing a database of users and applications, said authorization server configured to cooperate with said host-based network process monitor for i) verifying whether the user and process in said network request should have network access, and ii) cryptographically signing said intercepted network traffic information with an authorization server key, to authorize network access for said intercepted network traffic information, wherein said authorization server provides said cryptographic signing by a decision making technique, by the process of: c) a firewall system operably connected to said user computer and said authorization server, configured to inspect said intercepted network traffic information from said user computer and reject any traffic information not signed with said authorization server key.