Systems and methods for group-based
network access control systems are provided. The group-based
network access control system includes a
software process operating on a computer. The
software process is configured to communicate a packet through a group-based network
protocol stack to a
network interface card that includes an interface attribute. A table of network attributes, associated with a session filter module and a network filter module, compares the
network endpoint attribute with the interface attribute in the table of network attributes to determine whether the
software process can access the
network interface card. Each
network endpoint attribute comprises a primary
group identifier and a supplemental
group identifier list, and each interface attribute comprises a network group
list. The method includes the steps of operating a software process that includes a
network endpoint attribute. Next, packets are communicated through a network
protocol stack to a
network interface card, where the network interface card includes an interface attribute. Association between the network endpoint attribute and the interface attribute is established, and both the network endpoint attribute and the interface attribute are placed in a table. The network endpoint attribute is then compared with the interface attribute to determine whether the software process can access the network interface card. Each network endpoint attribute comprises a primary
group identifier and a supplemental group identifier
list, and each interface attribute comprises a network group list.