Patent SG-11201804315T-A (SG)
Title: Monitoring traffic in a computer network ‎
Inventor: KAPLAN HAELION EREZ
IPC: G06F21/55
Filed: 2016-12-26
Abstract: International Patent Classification: HO4L 9/32 (2006.01) GOOF 21/55 (2013.01) (21) International Application Number: PCT/IL2016/051381 (22) International Filing Date: (25) Filing Language: (26) Publication Language: (30) Priority Data: 62/273,530 31 December 2015 (31.12.2015) US (71) Applicant: CYBER 2.0 (2015) LTD. [IL/IL]; 19 Agmon St., 8150019 Yavne (IL). (72) Inventor: KAPLAN HAELION, Erez; 1 Neve Alon, 7645501 Rehovot (IL). (74) Agent: GLAZBERG, Ziv; \"Rogovin Tidhar\" Tower, 18th Floor, 11 Begin Rd., 5268104 Ramat Gan (IL). 26 December 2016 (26.12.2016) English English (81) Designated States (unless otherwise indicated, for every kind of national protection available): AE, AG, AL, AM, AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, CA, CH, CL, CN, CO, CR, CU, CZ, DE, DJ, DK, DM, DO, DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, HN, HR, HU, ID, IL, IN, IR, IS, JP, KE, KG, KII, KN, KP, KR, KW, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, OM, PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, ZA, ZM, ZW. (84) Designated States (unless otherwise indicated, for every kind of regional protection available): ARIPO (BW, GH, GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, UG, ZM, ZW), Eurasian (AM, AZ, BY, KG, KZ, RU, TJ, TM), European (AL, AT, BE, BG, CH, CY, CZ, DE, DK, EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, KM, ML, MR, NE, SN, TD, TG). [Continued on next page] (12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) (19) World Intellectual Property Organization International Bureau 111111111111111111111111111111111111111111111111111131111111111111111111R111111111111111 (10) International Publication Number WO 2017/115356 Al WIPO I PCT (43) International Publication Date 6 July 2017 (06.07.2017) (54) Title: MONITORING TRAFFIC IN A COMPUTER NETWORK (57) : A computer-implemented method, computerized apparatus and computer program product for monitoring traffic in a computer network. The computer network comprises a plurality of devices configured to apply a transformation function on a tar- get port identifier of a requested transmission by an application program executing thereon and direct the transmission to a differ- ent target port per the scrambled identifier thereby obtained. The transfoiination function depends on at least one parameter shared among the plurality of devices and applying thereof is conditioned 320 on the application program requesting transmission being listed in NO a list of authorized application programs. Attempts to access inval- id ports as defined by the transformation function are identified and an action for mitigating a security threat ascribed thereto is provided. ( START i I F S RECEIVE TRANSMISSION REQUEST TO PORT P 310 FROM APPLICATION PROGRAM REQUESTING PROGRAM IS AUTHORIZED? 330 340 YES OBTAIN SCRAMBLED PORT NUMBER P' = F(P, SECRET KEY(S)) DIRECT TRANSMISSION TO PORT P' W O 20 17 / 115 35 6 Al END ) FIG. 3A WO 2017/115356 Al IMIOHO11111 1E1111OIDEOM11111E111101111111111111110110111111 Published: — with international search report (Art. 21(3))