Mcafee, Inc.

Salesforce, Inc.

Skyhigh Security LLC

Anil Abraham

Manikandan A Kenyan

Shelendra Sharma

Systems, methods, and devices are disclosed herein that provide distribution of policies for computing platforms. A computing platform may be implemented using a server system, and the computing platform is configurable to cause receiving a policy data object at a first domain of the computing platform, the policy object identifying one or more security policies associated with the first domain, and determining if the policy data object should be implemented at the first domain based, at least in part, on a second domain identified by the policy data object. The computing platform is also configurable to cause determining if one or more changes should be made to the policy data object based, at least in part, on one or more properties of the first domain, and implementing the policy data object at the first domain by translating the policy data object from a generic syntax to a domain-specific syntax.

Systems, methods, and devices for improved security policy distribution in a cloud-computing environment

An example apparatus disclosed herein is to select a first network security platform based on a first value associated with a first message associated a client and a second value associated with a second message associated with a server, the first message and the second message associated with establishment of an encrypted network traffic flow between the client and the server. The disclosed example apparatus is also to cause a cryptographic session key associated with the encrypted network traffic flow to be sent to the first network security platform.

Sharing cryptographic session keys among a cluster of network security platforms monitoring network traffic flows

A first example network security platform disclosed herein is to store a cryptographic session key from a server, the cryptographic session key associated with an encrypted network traffic flow between the server and a client different from the first network security platform. This disclosed first example network security platform is also to access a query from a second network security platform requesting the cryptographic session key, and generate a response including the cryptographic session key to send to the second network security platform.

A network security platform (NSP) device and interaction method are disclosed. The interaction method provides network packet analysis for secure transmission protocols using ephemeral keys or keys that are negotiated dynamically. The NSP may be part of an Intrusion Protection System, or firewall. The disclosed approach does not use man-in-the-middle proxy. Instead, it includes monitoring connections ends: client and/or server, to intercept the required data or negotiated (or changed) encryption keys. Decrypted data may be sent to an NSP sensor in a secure manner for analysis. Alternatively, intercepted keys used for the encrypt/decrypt operations may be sent to an NSP sensor in a secure manner every time they are changed. The NSP sensor may then use the obtained keys to decrypt traffic prior to providing it to the inspection engines. Embodiments focused on inbound traffic to a web server may coordinate between a web server and an NSP.

Decrypting transport layer security traffic without Man-in-the-Middle proxy

A first example network security platform disclosed herein includes a platform selector to determine a platform selection value based on a first parameter value in a first message from a client and a second parameter value in a second message from a server, the first and second messages associated with establishment of an encrypted network traffic flow between the client and the server. The example first network security platform also includes a key retriever to obtain a cryptographic session key associated with the encrypted network traffic flow from a selected one of a cluster of network security platforms based on the platform selection value, the first network security platform included in the cluster of network security platforms. The example first network security platform further includes a traffic analyzer to analyze network traffic associated with the encrypted network traffic flow based on the cryptographic session key.

Growing community of inventors

Bengaluru, India

Anil Abraham