发明名称 Protection against network-based malicious activity utilizing transparent proxy services
摘要 Transparent proxy services are provided reliably. A TCP/IP input stream is received that includes data and control packets directed to a destination address that is different from a network address of the proxy. Incoming TCP data packets and control packets are intercepted. Intercepted data packets are processed asynchronously with respect to reception of other TCP data packets. At the start of the processing, an indicator is set to represent an active state of the processing; at the conclusion of the processing an output of the processing is sent to a determined destination for the first TCP data packet, and the indicator is set to represent a non-active state of the processing. In response to the state of the indicator representing the active state of the processing, control packets are delayed by the proxy.
申请公布号 US9009332(B1) 申请公布日期 2015.04.14
申请号 US201414335221 申请日期 2014.07.18
申请人 Kaspersky Lab ZAO 发明人 Remizov Boris Y.
分类号 G06F15/16;H04L29/06;H04L12/931 主分类号 G06F15/16
代理机构 Patterson Thuente Pedersen, P.A. 代理人 Patterson Thuente Pedersen, P.A.
主权项 1. In a computing system, that includes a processor, data storage, input/output devices including a network interface device, and an operating system, a method for providing transparent proxy services, the method comprising: receiving, by the computing system, a TCP/IP input stream that includes data and control packets directed to a destination address that is different from a network address of the computing system; in response to the receiving, intercepting, by the computing system, TCP data packets; in response to the intercepting of a first TCP data packet, processing, by the computing system, the first TCP data packet asynchronously with respect to handling of received TCP data packets; in response to a start of the processing, setting, by the computing system, an indicator to represent an active state of the processing; in response to a conclusion of the processing, sending, by the computing system, an output of the processing to a determined destination for the first TCP data packet, and setting, by the computing system, the indicator to represent a non-active state of the processing; in response to the receiving, intercepting, by the computing system, TCP control packets; in response to intercepting a first TCP control packet, checking, by the computing system, a state of the indicator; in response to the state of the indicator representing the active state of the processing, delaying, by the computing system, any sending of the first control packet; and in response to the state of the indicator representing the non-active state of the processing, sending, by the computing system, the first control packet to a determined destination for the first control packet.
地址 Moscow RU