Blue Coat Systems, Inc.

Symantec Corporation

Andrew Leonard Sandoval

Shrikrishna Karandikar

Yariv Kaplan

Wei Lu

Jose Luis Flores

Roy Israel Shamir

Application programming interface (API) hooks are injected into an application program executing at a client during run-time. Responsive to these hooks, data intended for encryption prior to transmission from the client is diverted, for example for content filtering, compression, etc., prior to being encrypted. In the case of encrypted data received at the client, the data is decrypted but before being passed to the application it is diverted, under control of the API hooks, for content filtering, decompression, etc.

Methods and systems for filtering encrypted traffic

A DLL that includes an API hook is injected into the address space of a target computer process called by an application program. Upon termination of the application program, computer-readable instructions describing a process for filtering exceptions returned from the target computer process are stored in memory locations accessible to the target computer process and the DLL is ejected from the address space.

Method for implementing ejection-safe API interception

A method and system for protecting an application's operational data are described. According to one aspect of the invention, an administrator interacts with a policy distribution server to generate an operational data protection policy. Next, the policy distribution server generates a data protection application embodying the policy. Various computing devices download and execute the data protection application. The data protection application controls how various applications access data storage objects and data interfaces, based on the operational data protection policy.

Growing community of inventors

Leander, TX, United States of America

Andrew Leonard Sandoval