DETECTION OF A THREAT IN A COMMUNICATIONS NETWORK

摘要

Disclosed is a method for detecting a threat against a host computer coupled to the front-end computer. A communication connection is established between the host computer and a source computer with a handshake procedure through a front-end computer. Application data is received in the front-end computer from the source computer. The received application data is returned from the front-end computer to the source computer. It is monitored in the front-end computer if a predetermined message is received from the source computer in response to the return of the application data. If the predetermined message is received in the front-end computer, it is determined that the source computer is a trusted communication party, But if the predetermined message is not received, the source computer is determined as a threat. The invention relates also to computing device implementing the method and a computer program product.

主权项

1. A method for detecting, in a front-end computer, a threat against a host computer coupled to the front-end computer, the method comprising:
establishing a communication connection between the host computer and a source computer with a handshake procedure through a front-end computer, receiving, in the front-end computer, application data in a data packet from the source computer in response to a successful handshake procedure, the received data is intended to the host computer, acknowledging the receipt of the data packet by the front-end computer, returning the received application data from the front-end computer to the source computer, monitoring, in the front-end computer, if a predetermined message is received from the source computer in response to the return of the received application data to the source computer, and if the predetermined message from the source computer is received in the front-end computer, determining the source computer as a trusted communication party, if the predetermined message from the source computer is not received in the front-end computer, determining the source computer as a threat.