Patent ID: 8893253
Filing Date: 2014-11-18
Classification: H04L

Abstract:
1. A processor-implemented method for monitoring packets or frames of network traffic between a first device executing a software application and a second device coupled to the first device, the method comprising: (a) the processor analyzing, on a packet-by-packet or frame-by-frame basis, application-level data contained within traffic originating from and/or received by the first device, the application-level data including data provided to and/or provided by the software application; (b) based on the results of the analysis in step (a), and without obtaining any feedback or approval from a user, the processor creating and storing in a database one or more access rules, each access rule specifying at least (i) an aspect of application-level data, (ii) an operator or comparator, (iii) an allowable value or range of values for the aspect of application-level data, and (iv) an action to be taken if the aspect of application-level data in an access request contained in a received packet or frame satisfies the allowable value or range of values when the operator or comparator is applied; (c) the processor receiving a packet or frame containing a request from the second device to access the first device, the request including application-level data; (d) for one or more of the access rules, the processor determining whether the packet or frame containing the request received in step (c) complies with the access rule by determining whether the aspect of application-level data in the request satisfies the allowable value or range of values of the access rule when the operator or comparator of the access rule is applied; and (e) the processor initiating an instruction to perform the action in the access rule if the packet or frame containing the request received in step (c) complies with the access rule.