The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Dec. 07, 2010

Filed:

Apr. 30, 2007
Applicants:

Eric Bloch, San Mateo, CA (US);

Shalabh Mohan, Mountain View, CA (US);

Rajendraprasad R. Pagaku, Foster City, CA (US);

Doug Moore, Houston, TX (US);

Mark Krentel, Houston, TX (US);

Bruce Thompson, So. San Francisco, CA (US);

Julian R. Elischer, El Cerrito, CA (US);

Brandon L. Golm, San Francisco, CA (US);

Inventors:

Eric Bloch, San Mateo, CA (US);

Shalabh Mohan, Mountain View, CA (US);

Rajendraprasad R. Pagaku, Foster City, CA (US);

Doug Moore, Houston, TX (US);

Mark Krentel, Houston, TX (US);

Bruce Thompson, So. San Francisco, CA (US);

Julian R. Elischer, El Cerrito, CA (US);

Brandon L. Golm, San Francisco, CA (US);

Assignee:

Ironport Systems, Inc., San Bruno, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 11/00 (2006.01);
U.S. Cl.
CPC ...
Abstract

A data processing apparatus can perform HTTP traffic monitoring and filtering of HTTP requests from clients and responses from servers. Example apparatus comprises a processor; a first network interface to a protected network; a second network interface to an external network; a core hypertext transfer protocol (HTTP) proxy coupled to the processor and coupled to a content cache, wherein the HTTP proxy is configured to receive an HTTP request from a client computer in the protected network, send the request to a network resource in the external network on behalf of the client, and receive an HTTP response from the network resource on behalf of the client computer; and a plurality of spyware scanning engines (SSEs), wherein each of the SSEs is coupled to stored content signatures, and wherein each of the SSEs is configured to detect a particular kind of malicious software in an HTTP response.


Find Patent Forward Citations

Loading…