US 12,192,173 B2
Network traffic inspection
Pablo German Sole, Woodside, CA (US); Jose Luis Ferras Pereira, San Mateo, CA (US); Sinan Eren, Woodside, CA (US); and Luisa Marina Moya Praca de Araujo Lima, Oporto (PT)
Assigned to Barracuda Networks, Inc., Campbell, CA (US)
Filed by Barracuda Networks, Inc., Campbell, CA (US)
Filed on Mar. 4, 2024, as Appl. No. 18/595,155.
Application 18/595,155 is a continuation of application No. 17/407,523, filed on Aug. 20, 2021, granted, now 11,949,656.
Application 17/407,523 is a continuation of application No. 16/788,205, filed on Feb. 11, 2020, granted, now 11,134,058, issued on Sep. 28, 2021.
Application 16/788,205 is a continuation in part of application No. 15/727,488, filed on Oct. 6, 2017, granted, now 10,574,676, issued on Feb. 25, 2020.
Claims priority of provisional application 62/804,645, filed on Feb. 12, 2019.
Prior Publication US 2024/0214350 A1, Jun. 27, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/0236 (2013.01) [H04L 63/0272 (2013.01); H04L 63/10 (2013.01); H04L 63/20 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A client device, comprising:
a processor with an operating system running on the client device; and
a memory coupled to the processor and configured to provide the processor with instructions,
wherein the processor is configured to:
install a security application as an operating system extension on the client device, wherein the security application accesses network traffic of a system while executing in a non-privileged sandboxed process controlled by the operating system;
wherein an application running on the client device initiates a Domain Name System (DNS) packet request for a remote computer external to the client device,
wherein the security application running on the client device is configured to:
intercept the DNS packet request;
create a first internet protocol (IP) stack between the application running on the client device and the security application;
create a second IP stack between the security application and the remote computer;
analyze a plurality of packets of the network traffic and determine whether at least one or more packets of the plurality of packets pose a security threat; and
responsive to determining that the at least one or more packets of the plurality of packets pose a security threat, prevent the at least one or more packets of the plurality of packets from being transmitted.