Filtering network traffic using protected filtering mechanisms

摘要

Concepts and technologies are disclosed herein for filtering network traffic using protected filtering mechanisms. An indication that traffic is to be filtered can be received, and a hash key, a signature representation, and an obfuscated signature can be identified or generated. The hash key and the signature representation can be provided to a first device without exposing the contents of the signature to the second device, and the obfuscated signature can be provided to a second device without exposing the contents of the signature to the second device. The first device and the second device can execute independent operations to collectively determine if the traffic is to be filtered.

主权项

1. A method comprising:
receiving, at a first device comprising a processor that executes a security service, an indication that traffic is to be filtered; identifying, by the first device, a hash key that is to be provided to a second device that is to filter the traffic; identifying, by the first device, a signature representation to be used by the second device, wherein the signature representation represents a signature that is accessible to the first device and inaccessible to the second device; generating, by the first device and using the hash key, an obfuscated signature that is to be used by a third device that is to filter the traffic, wherein the obfuscated signature comprises a hash value generated using the hash key; providing, by the first device, the hash key and the signature representation to the second device without exposing contents of the signature to the second device; and providing, by the first device, the obfuscated signature to the third device without exposing the contents of the signature to the third device.