Patent ID: 7665136
Filing Date: 2010-02-16
Classification: G06F,H04L

Abstract:
1. A computer implemented method comprising: generating a gateway database on a gateway computer system connecting a first network to a second network, said gateway database including one or more gateway database entries, each of said one or more gateway database entries including an identifier, said identifier identifying a communication channel detected on said first network with an endpoint computer system; receiving an endpoint report, generated on said endpoint computer system, said endpoint report including one or more endpoint report entries, each of said one or more endpoint report entries including an identifier, said identifier identifying a communication channel detected on said endpoint computer system connected to said first network; selecting a gateway database entry in said gateway database; determining whether said identifier in said gateway database entry matches an identifier in one of said one or more endpoint report entries; and sending a notification identifying said communication channel identified by said identifier in said gateway database entry as a hidden communication channel on said endpoint computer system upon said determining finding said identifier in said gateway database entry does not match an identifier in one of said one or more endpoint report entries, and removing said gateway database entry from said gateway database following said sending; and removing said gateway database entry from said gateway database upon said determining finding said identifier in said gateway database entry matches an identifier in one of said one or more endpoint report entries so that said communication channel identified by said identifier in said gateway database entry is not a hidden communication channel.