Patent ID: 9064121
Filing Date: 2015-06-23
Classification: G06F,H04L

Abstract:
1. A method for analyzing data transmitted through a virtual network, the method comprising: under control of a virtual network comprising a substrate network associated with a plurality of physical computing nodes that are configured to at least partially simulate operation of the virtual network, receiving a DLP policy that includes (i) context criteria and (ii) content criteria, the context criteria comprising information about organizational structure or services of a user of the virtual network; associating the information about the organizational structure or services of the virtual network user with at least one of the virtual network or the substrate network; analyzing, based at least in part on the DLP policy, a network flow transmitted via the virtual network; detecting a subset of the network flow that includes a match to at least one of the context criteria of the DLP policy or a match to at least one of the content criteria of the DLP policy; and performing an action on at least a portion of the detected subset of the network flow based at least in part on the DLP policy.