Patent ID: 9185121
Filing Date: 2015-11-10
Classification: H04L

Abstract:
1. In association with a virtual private network (VPN) that may be used to access one or more resource servers, a computer implemented method comprising: determining that a specified client has accessed the VPN; responsive to determining that the VPN has been accessed by the specified client, selecting one or more IP addresses that can each be misused by an anomaly resulting from manipulation of a routing table used by the specified client; monitoring messages and responses comprising selected network traffic flowing to or from the specified client, wherein at least some of the traffic is associated with respective IP addresses, and is routed to or from the specified client through the VPN; acquiring specified information from monitored traffic; using the specified information acquired to determine whether a routing for traffic from the specified client to the VPN has been compromised; and responsive to a determination that the routing has not been compromised and after a predetermined wait time, identifying a new set of IP addresses, and monitoring the selected network traffic flowing to or from the specified client, wherein at least some of the traffic is associated with respective IP addresses, and is routed to or from the specified client through the VPN.