Methods and systems for efficient cybersecurity policy enforcement on network communications
US12335235B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Nov 11, 2024 |
| Grant date | Jun 17, 2025 |
| Priority date | — |
| Expiry date | Nov 11, 2044 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/1425
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
Methods, apparatuses, systems, and machine-readable media are disclosed for improving packet filtering efficiency by reducing processing time and/or by reducing memory usage. Any of various types of data structures, such as flat hash maps and/or ruletrees, may be used by a packet filtering appliance to search for cybersecurity policy packet filtering rules that should be applied to in-transit packets. The packet filtering appliance may search the index data structures for matches of search objects, in the form of values that the packet filtering appliance extracts from in-transit packets, to threat indicator matching criteria of the policy rules. Each of the index data structures may map rule identifiers (rule IDs) of policy rules to keys that are based on (or that comprise) the matching criteria of those rules.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.