MOBILE NETWORK INFORMATION SHARING VIA EBPF FOR ZERO TRUST SECURITY

Techniques for mobile network information sharing via extended Berkeley Packet Filter (eBPF) for zero trust security are disclosed. In some embodiments, a system/process/computer program product for mobile network information sharing via eBPF for zero trust security includes monitoring network traff...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Rappard, Mitchell, O'Brien, Keith Edmund, McDowall, John Edward
Format: Patent
Sprache:eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:Techniques for mobile network information sharing via extended Berkeley Packet Filter (eBPF) for zero trust security are disclosed. In some embodiments, a system/process/computer program product for mobile network information sharing via eBPF for zero trust security includes monitoring network traffic in a core mobile network using an agent executed on a network element in the core mobile network to identify a session associated with a User Equipment (UE) that attached to the core mobile network for mobile network communications; extracting meta information associated with the session using the agent executed on a network element in the core mobile network; sending the extracted meta information to a security platform located outside of the core mobile network; and enforcing a security policy on the session at the security platform based on the extracted meta information to apply granular-based security in the core mobile network based on a security policy.