Patent ID: 6868450

Claim:
A process attribute based computer network filter system, comprising: a computing device having a network driver and a network interface card, the computing device further comprising: a software process including a process attribute; an application program interface (API) in communication with said software process and configured to communicate packets through the network driver to the network interface card, said network interface card including a network attribute; an operating system kernel in communication with said software process; a system call trap handler associated with said operating system kernel, said system call trap handler operative to determine said process attribute of said software process and said network attribute of said network interface card; a session filter driver in communication with said system call trap handler; a database associated with said session filter driver and said network filter driver, wherein said system call trap handler compares said process attribute with said network attribute to determine whether said software process is authorized access to said network interface card; and a network filter driver associated with said system call trap handler and operative, based on comparing the process attribute with the network attribute, to drop the communications packets if the system call trap handler determines that the software process is not authorized access to the network interface card, and to pass the communication packets if the system call trap handler determines that the software process is authorized access to the network interface card.