Methods and systems for controlling the exchange of files between an enterprise and a network
View Patent ↗Computerized methods and systems receive password-protected data from a network at an entity coupled to the network. The password-protected data is intended for receipt by a user of an endpoint coupled to the network, and a password is assigned to the password-protected data which allows access to the password-protected data. The entity attempts to access the password-protected data by applying a set of rules and policies to the password-protected data. The entity requests the assigned password from a user of the endpoint, based on the outcome of the rules and policies, to determine whether the password-protected data includes potentially malicious components.
1. A method for determining whether data received over
a network includes potentially malicious components, the method comprising:
receiving data from the network, at an entity coupled to the network, wherein the entity includes a gateway;
determining whether the data is password-protected data by inspecting file header information of the data, the password-protected data intended for receipt by a user of an endpoint coupled to the network, and having an assigned password allowing access to the password-protected data;
applying a set of rules and policies to the password-protected data while not reaching a threshold criterion of system resources consumed in attempt to access the password-protected data, the threshold criterion selected from a group consisting of a maximum number of CPU resources, a maximum amount of disk space, a maximum execution time, or combinations thereof, based on one of the following:
(1) the outcome of the applied rules and policies and
(2) reaching of said threshold criterion, requesting the assigned password from a user of the endpoint to access the password-protected data and determining whether the password-protected data includes potentially malicious components;
taking at least one protective action to protect the endpoint, in the absence of receiving the assigned password, in response to the requesting, from the user of the endpoint; and
accessing the data if the assigned password is received.
2. The method of claim 1 , further comprising: receiving the assigned password, in response to the requesting, from the user of the endpoint.
3. The method of claim 2 , further comprising: adding the received assigned password to a listing of potential passwords.
4. The method of claim 2 , further comprising: applying the received assigned password to the password-protected data; and accessing the password-protected data.
5. The method of claim 4 , further comprising analyzing the accessed password-protected data to determine whether the password-protected data includes malicious components.
6. The method of claim 1 , wherein the gateway receives the password-protected data from a mail server installed between the endpoint and the network.
7. The method of claim 1 , wherein the gateway receives the password-protected data from a secure data transmission system having at least one component installed between the endpoint and the network.
8. The method of claim 1 , wherein the password-protected data is encrypted.
9. The method of claim 1 , wherein the applying the set of rules and policies includes applying a series of potential passwords to the password-protected data.
10. A gateway for determining whether data received data over a network includes potentially malicious components, the gateway comprising:
a memory for storing computer components; and
a computerized hardware processor for executing the computer components comprising:
a computer module configured for;
receiving data from the network,
determining whether the data is password-protected data by inspecting file header information of the data, the password-protected data intended for receipt by a user of an endpoint coupled to the network and the gateway, and having an assigned password allowing access to the password-protected data;
applying a set of rules and policies to the password-protected data while not reaching a threshold criterion of system resources consumed in attempt to access the password-protected data, the threshold criterion selected from a group consisting of a maximum number of CPU resources, a maximum amount of disk space, a maximum execution time, or combinations thereof, based on one of the following:
(1) the outcome of the applied rules and policies and
(2) reaching of said threshold criterion, requesting the assigned password from a user of the endpoint to access the password-protected data and determining whether the password-protected data includes potentially malicious components;
taking at least one protective action to protect the endpoint, in the absence of receiving the assigned password, in response to the requesting, from the user of the endpoint; and
accessing the data if the assigned password is received.
11. The gateway of claim 10 , wherein the password-protected data is received from a mail server installed between the endpoint and the network.
12. The gateway of claim 10 , wherein the password-protected data is received from a secure data transmission system having at least one component installed between the endpoint and the network.
13. The gateway of claim 10 , wherein the gateway is deployed in a sandboxed environment isolating the password-protected data, when accessed, from the endpoint.