The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Dec. 03, 2024

Filed:

Oct. 10, 2022
Applicant:

Appcensus, Inc., El Cerrito, CA (US);

Inventors:

Daren Childers, Santa Maria, CA (US);

Narseo Vallina-Rodriguez, Madrid, ES;

Abhinav Saxena, Calgary, CA;

Joel Reardon, Calgary, CA;

Robert Richter, Paris, FR;

Pietro Francesco Tirenna, Turin, IT;

Nathaniel Good, Albany, CA (US);

Serge Egelman, Berkeley, CA (US);

Assignee:

AppCensus, Inc., Albany, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/40 (2022.01); H04L 61/4511 (2022.01);
U.S. Cl.
CPC ...
H04L 63/0272 (2013.01); H04L 61/4511 (2022.05); H04L 63/0236 (2013.01);
Abstract

A method performed by a computing device for implementing a dynamic outbound firewall. The method includes creating a localhost virtual private network (VPN) service, intercepting, using the localhost VPN service, outbound network traffic originated by the computing device, and responsive to detecting a first domain name service (DNS) query in the intercepted outbound network traffic, converting the DNS query to a first secure DNS query and sending the first secure DNS query to a trusted external DNS recursive resolver using a secure DNS protocol, receiving a first secure DNS response that includes a first DNS resolution result, adding an entry for the first DNS resolution result to a cache, and dropping a first outbound packet detected in the intercepted outbound network traffic based on a determination that the destination of the first outbound packet does not match an entry in the cache.


Find Patent Forward Citations

Loading…