SYSTEM AND METHOD OF ANALYZING THE CONTENT OF ENCRYPTED NETWORK TRAFFIC

Systems and methods for analyzing content of encrypted traffic between processes are disclosed herein. In one example, a method comprises rerouting traffic between a first process executing on a first computing device and a second process, to a server, to determine that there is a protected connecti...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: MAKAROV, Alexander N, RODIONOV, Denis V, TOTMAKOV, Alexey S, KOLMAKOV, Petr Y, KOGAN, Sergey V
Format: Patent
Sprache:eng ; fre ; ger
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:Systems and methods for analyzing content of encrypted traffic between processes are disclosed herein. In one example, a method comprises rerouting traffic between a first process executing on a first computing device and a second process, to a server, to determine that there is a protected connection established between the first process and the second process, determining information related to an application pertaining to the first process, obtaining a session key for the protected connection by calling a function, wherein the information comprises an address of the function to call to obtain the session key, decrypting and analyzing the rerouted traffic on the server between the first process and the second process using the session key to determine whether the traffic contains malicious objects and in response to determining the traffic contains malicious objects, counteracting the malicious objects by blocking or rerouting the traffic.