Patent ID: 8621604

Claim:
A method in a computing system for controlling communication, comprising: in a computing system communicating via a TCP/IP stack, evaluating a new network communication with a network resource by reference to a predefined white list of trusted network addresses that does not include addresses for any unauthenticated network nodes or anonymous proxy servers, by: receiving from the TCP/IP stack an internet protocol (IP) address and port number of a network address corresponding to the network resource; receiving a uniform resource locator (URL) associated with the network resource; determining a first name associated with the IP address, by querying the IP address received from the TCP/IP stack against an assignment database that associates owner names with IP addresses; determining a second name associated with the URL, by querying a domain name of the URL associated with the network resource against an assignment database that associates owner names with domain names; determining a security rating level of the network resource based on: determining whether the IP address and port number of the network address are included in the predefined white list of trusted network addresses; and determining whether the first name matches the second name; and setting an indicator that a communication operation is allowed or not allowed based on the determined security rating level of the network resource.