50 results about "Web proxy" patented technology

To provide a Software Bill of Materials (SBOM) management method, an SBOM management apparatus, and a non-transitory computer readable medium.SOLUTION: In an SBOM management system, an SBOM proxy (SBOM management apparatus) includes a web proxy, a container executer, a container monitor, an SBOM generator, and an SBOM sender. The web proxy intercepts a container download request from machines. The container executor checks running condition of a container and executes it for a certain period of time. The container monitor monitors components that are executed or read during the operation. The SBOM generator accesses package managers of the container and estimates the packages of the monitored components. The SBOM sender sends active SBOM and potential SBOM to a manager.SELECTED DRAWING: Figure 2

A computer-implemented method for management of an application on an enterprise network which accesses external networks via a web proxy. The method comprises obtaining enriched metadata concerning an application executed on the enterprise network, the enriched metadata including at least source code information and ownership information, identifying application traffic on the enterprise network based on proxy log data, source IP and destination URL, generating an access control list (ACL) based on the enriched metadata and identified application traffic, the ACL including a source address of the application and a list of allowed destination addresses, converting the ACL into a proxy policy that can be processed by a web proxy to permit access by the application to the destination addresses in the ACL, and establishing data communication between the application and an external network based on the proxy policy.

The invention relates to the technical field of APP detection data processing, and discloses a deep detection method for an effective core domain name of a harmful APP, which comprises the following steps: firstly, constructing a sandbox environment, constructing a network proxy service in the sandbox environment, comprehensively acquiring communication flow information of the APP, and accessing the Internet after connecting a gateway in a TUN mode in a sandbox test environment; performing internal operation of the automatic operation APP, wherein the internal operation comprises login, registration and refreshing operation; and carrying out operation analysis, and limiting network bandwidth, delay and packet loss rate parameters. Carrying out core domain name analysis, wherein the core domain name analysis specifically comprises carrying out deep detection on a traffic log; and training the model according to the traffic log, analyzing the traffic log through the model, performing model analysis by using a machine learning decision tree algorithm or a data analysis method, and confirming and analyzing effective condition data of the APP. According to the method, an APP communication log analysis model is constructed based on a decision tree algorithm, and suspected core domain names are identified based on dimensions such as communication behaviors and communication contents.

The invention relates to a container cross-network communication method and device based on VRF. The method comprises the following steps: creating an agent component dispatcher for a network 1 and a network 2 which are isolated from each other; the method comprises the following steps of: calling CNI by Multi to respectively carry out initialized dispatcher network configuration on a network 1 and a network 2; respectively creating a routing table 1, a routing table 2 and corresponding VRF1 equipment and VRF2 equipment for the network 1 and the network 2, and associating the routing tables with the corresponding VRF1 equipment; and the agent component dispatcher is bound with a VRF interface, and queries different routing tables associated with the VRF equipment during flow forwarding, so that data forwarding between the network 1 and the network 2 is realized. According to the method, different networks are isolated through the VRF equipment, the proxy component is bound with the VRF interface, and different routing tables associated with the VRF equipment are queried when the traffic is forwarded, so that the requirement on network planning is reduced, and interference is effectively avoided.

The invention discloses an Android system transparent proxy method based on Root authority, and relates to the technical field of network proxy of mobile equipment. According to the method, transparent interception and forwarding of TCP and UDP traffic are realized by acquiring Root permission of an Android system and combining proxy service and a traffic management tool, and dependence on VPNService API is avoided, so that VPN detection is bypassed. According to the method, proxy configuration and rules are dynamically managed through an interface or a script, a filtering condition is set based on an application UID to achieve local proxy, a specific flow bypassing strategy is configured, and a user-defined chain is constructed through iptables to process flows of different sources. Meanwhile, the method supports transparent redirection of DNS requests to control domain name resolution. Compared with the prior art, the method has the advantages of no VPN (Virtual Private Network), flexible configuration, high detection resistance and the like, and is suitable for network control and privacy protection scenes of the Android equipment.

The application discloses an SSL VPN tunnel transmission method for an IP layer, and relates to the technical field of network communication.The method constructs an IP virtual tunnel outside an SSL session, and directly encapsulates and transmits complete IP messages, thereby completely breaking through the limitation that a traditional SSL VPN only supports a Web proxy, and transparently passing through the tunnel for TCP services, UDP streaming media, ICMP network diagnostic messages, and the like, so that the method realizes remote access of the IP layer in a true sense, and a server adopts a south-north decoupling design, a virtual network port is used as a southward interface to communicate with a client tunnel, and the northward directly interacts with an intranet physical network card through a system routing table, without analyzing transport layer content, without maintaining a TCP connection state, and only performing IP layer transparent forwarding, so that the processing cost is greatly reduced, and the throughput performance is obviously improved.

The invention provides a network agent implementation method and device based on a plug-in architecture and a storage medium, and is applied to the field of computer networks. The method comprises the steps that a network agent is started and operated, processing requests of services are received based on the network agent, and the network agent can receive the processing requests of different types of services; whether plug-in development exists in the service is judged based on the configuration file of the service, if yes, plug-in configuration detection is carried out in the execution process of the processing request of the service, and a node with plug-in configuration is determined as a pause node; stopping executing the processing request of the service at the pause node, executing plug-in logic corresponding to plug-in configuration, and continuing to execute the processing request of the service on the basis of the pause node of the processing request of the service after the plug-in logic is executed; and if not, executing the processing request of the service based on the execution flow of the processing request of the service and the network agent. According to the method, the technical effect of improving the business processing efficiency is achieved.

The application provides a network proxy system and method divided by regions, the method divides a server into multiple VPS, acquires proxy server IP of different regions, and stores to a database, further provides an interface, when a calling party accesses a site across regions, through fixed interface parameters, acquires the region number of the calling party accessing the site across regions, extracts any one proxy IP corresponding to the region number of the calling party accessing the site across regions from the database as a forwarding server IP, and assigns the forwarding server to the calling party, so that the calling party forwards messages through the forwarding IP. The system and method support the calling party to report invalid proxy IP to trigger a dialing mechanism, can acquire a new proxy IP, well guarantees the operation stability of the calling party, and can bind a fixed proxy IP for the calling party, so that the calling party can reduce the database query when acquiring the forwarding server again, and reduces the occupation of system resources.

A system comprises a user communication device, a content management server, and a friction free download (FFD) proxy server. The user communication device is configured to send identification information of the user communication device; receive web content in a first web application; send an FFD installation request to the FFD proxy server; download the second web application; and install the second web application during an active session of the first web application. The content management server is configured to send the web content. The FFD proxy server is configured to register the content management server and the user communication device; receive the FFD installation request; authenticate the user communication device during the application session of the first web application; send the second proxy routing information; and send notification information indicating a status of the FFD installation of the second web application.

The invention discloses an intelligent network proxy access system, which comprises a proxy resource layer used for constructing various types of proxy IP pools, storing IP resources in the corresponding proxy IP pools in a classified manner, and performing quality rating processing on the IP resources at the same time; the intelligent scheduling layer is used for synchronizing tasks with an intelligent marketing multi-dimensional model operation platform and a global data acquisition and analysis system in real time and realizing task linkage scheduling; the compliance control layer is used for simulating and avoiding platform rule risks according to the multi-platform agent compliance library in combination with human behaviors; the adaptive docking layer is used for providing a multi-type standardized interface to be docked with the intelligent marketing multi-dimensional model operation platform and the global data acquisition and analysis system; and the monitoring operation and maintenance layer is used for providing a multi-dimensional monitoring board and intelligent alarm and supporting full-link operation and maintenance management. The method has the advantages of high adaptability, high stability, high concurrent support, high compliance, service value increment and the like.

Examples described herein relate to network layer 7 (L7) offload to an infrastructure processing unit (IPU) for a service mesh. An apparatus described herein includes an IPU comprising an IPU memory to store a routing table for a service mesh, the routing table to map shared memory address spaces of the IPU and a host device executing one or more microservices, wherein the service mesh provides an infrastructure layer for the one or more microservices executing on the host device; and one or more IPU cores communicably coupled to the IPU memory, the one or more IPU cores to: host a network L7 proxy endpoint for the service mesh, and communicate messages between the network L7 proxy endpoint and an L7 interface device of the one or more microservices by copying data between the shared memory address spaces of the IPU and the host device based on the routing table.

The invention relates to the technical field of computer software testing, in particular to an automatic testing method and device based on dynamic identifier injection, and aims to solve the problems that in the prior art, interface elements are difficult to position, and automatic testing scripts are fragile and high in maintenance cost. The method comprises the following steps: firstly, before webpage source code data returned by a server side is sent to a client side for rendering, obtaining the webpage source code data through a network proxy service or server side middleware; secondly, processing the webpage source code data, adding a unique calibration identifier for a target interface element, establishing a mapping relationship between the calibration identifier and the business logic description of the target interface element, and storing the mapping relationship in a preset calibration standard library; and finally, when an automatic test is executed, obtaining the calibration identifier by querying the mapping relationship, and accurately positioning the target interface element in the interface rendered by the client by using the identifier so as to execute a test operation.

Components of a distributed database may operate faster by maintaining connections to multiple other components. These components may be hosted on various physical computing devices. An application layer communication system comprising a network proxy on each computing device involved in the distributed database may decrease the overall number of connections that are to be established and maintained during operation of the distributed database. The network proxies at sending devices may reduce traffic across the connections by combining packets directed from a particular device to another.

The invention discloses a network proxy method, which is applied to network proxy of an application program in a cloud computing scene. In the method, an application program is operated on a central processing unit (CPU), a network agent component of the application program is operated on a data processing unit (DPU), and the DPU and the CPU are deployed on the same node. Moreover, the data packet sent by the application program can be forwarded to the network proxy component on the DPU for processing, so that network proxy service is provided for the application program. Due to the fact that the DPU has hardware support for data packet processing acceleration, the network proxy component is unloaded from the CPU to the DPU on the same node, the processing pressure of the CPU can be relieved, the performance of network proxy service can be improved, it is guaranteed that more resources can be provided on the CPU to deploy application programs, and meanwhile the hardware processing capacity of the DPU is effectively utilized.

The invention discloses a network access method and system based on a set top box, and the method comprises the steps: a device side generates a target website access instruction, and transmits the target website access instruction to a server side browser through a preset control link; the server browser analyzes the target website access instruction to obtain a target website connection instruction, and sends the target website connection instruction to the device end through a preset network proxy link; the device side establishes connection with a target website according to the target website connection instruction, obtains target website data, and sends the target website data to a server side browser through a preset network proxy link; the server browser extracts target demand data in the target website data according to the target website connection instruction, and sends the target demand data to the device end through a preset control link; and the device side visually displays the target demand data. According to the invention, by constructing the control link and the network agent link, the response speed of the set top box when entering a large website can be effectively improved.

Some aspects of the present technology relate to technologies for performing client testing using network footprint comparison. In accordance with some configurations, a network proxy initiates a client-side network testing process associated with a network and an application where the network proxy intercepts outbound network requests from the application via the network. A network signature of the application is then generated using the outbound network requests and this network signature is compared to a baseline network signature. In accordance with some configurations, comparing the network signature comprises identifying variances in application-requested-inputs associated with the one or more outbound network requests. Based on this comparison, a client-side network test result is generated that can be used to identify variances in the application relative to the baseline network signature.

The present application discloses a method, apparatus, and system for establishing a network interface, which are used to solve the problems of complex component deployment, high coupling between components, and inability to be independently upgraded. By logically partitioning each function executed by the original VNF network element, the functions related to network connection originally executed by the VNF are deployed on the network proxy. In the VNF network element of the present application, only the functions related to the service need to be executed, and the functions related to network connection are executed by the network proxy. Thus, the functions related to the service and the functions related to network connection can be independently upgraded and developed. Furthermore, the coupling between components is reduced, and the deployment complexity is reduced.

The invention discloses a DMZ-based unified network proxy service external data access method. The data access method comprises the following steps: determining demand and environment configuration; performing function development and process design; the proxy service is deployed to a corresponding server according to needs, and the service is tested; and entering a system operation stage. The unified network agent mode architecture design improves operation and maintenance monitoring; the security of the system is improved through unified authority and security control; the three-layer network architecture design is better in network isolation.

In one embodiment, a remote access manager receives an access request from a client to remotely access a device on a local network. The remote access manager generates a universally unique identifier for the access request. The remote access manager sends a response to the client having a one-time use domain name system name that is based on the universally unique identifier. The remote access manager communicates with a web proxy to authorize the client to remotely access the device.

The invention relates to a system (1) for controlling a field device (2), wherein the system (1) comprises a server pool (6) comprising servers for operating instances of a virtual control application; the system (1) comprises a network proxy device (23), configured to receive a status update message from the field device (2), comprising status data, and to send replicated status update messages comprising the status data to each instance of the virtual control application assigned to the field device (2); the network proxy device (23) is configured to receive respective control response messages of each of the instances of the virtual control application and to perform a consensus-based decision making procedure to evaluate consensus control data based on the control data provided by the instances of the virtual control application and to send a control response message comprising the consensus control data to the field device (2).

A system, device, and method for implementing secure control over audio visual (AV) equipment connected to an AV gateway is disclosed. The solution implements secure and remote control over audio visual (AV) equipment included in an AV network by enabling a web browser running on a user device to utilize a web proxy shuttle to communicate control commands to an AV gateway that controls the AV equipment.

In one embodiment, a remote access manager receives an access request from a client to remotely access a device on a local network. The remote access manager generates a universally unique identifier for the access request. The remote access manager sends a response to the client having a one-time use domain name system name that is based on the universally unique identifier. The remote access manager communicates with a web proxy to authorize the client to remotely access the device.

Approaches to providing endpoint client authentication and application access control in a zero-trust network access (ZTNA) environment are described. A secure session is generated with a secure web proxy based on a request from a browser, wherein the request corresponds to a user and requests access to a server. A secure tunnel is established between the secure web proxy and the browser. A web proxy address corresponding to the user is generated. The user is identified based on a handshake procedure with the secure web proxy. A temporary passcode is generated for the user to be used for access to the server. The temporary passcode is sent to an email address associated with the user. The server is caused to authenticate the user utilizing the temporary passcode to allow the user access to the server if the temporary passcode is approved.

The invention discloses a cross-virtual routing forwarding proxy control method and device and a storage medium, and relates to the technical field of network virtualization and proxy services, and the method comprises the steps: expanding proxy binding instruction grammar of network proxy software according to a preset virtual routing forwarding name parameter, and obtaining a target proxy binding instruction; according to the target agent binding instruction, a structural body of the network agent software is expanded, and an expanded structural body is generated; after a virtual route forwarding name corresponding to the target agent binding instruction is extracted, the virtual route forwarding name is stored in an extended local upstream configuration structural body, and a target local upstream configuration structural body is obtained; and after establishing a function creation socket, binding the socket with a target virtual routing forwarding name instance in the target local upstream configuration structural body to realize a cross-virtual routing forwarding proxy. Through the cross-virtual routing forwarding agent, the problem of poor efficiency of the cross-virtual routing agent is solved, and the implementation process of the cross-virtual routing forwarding agent is optimized.

This application discloses a network proxy method and system with switchable egress IP addresses, including: setting up a VPN server and a VPN client on a user end and a cloud server end, respectively, wherein the VPN server is set up locally on the user end, and the VPN client is deployed on the cloud server end, and the VPN server and the VPN client communicate and connect; the VPN client actively connects back to the VPN server end to determine the VPN client's fixed IP address; and the user uses the network proxy service on the cloud server through the VPN client's fixed IP address. The user connects to the cloud server using the fixed internal IP address assigned to the VPN client by the VPN server end, and can then connect to the network proxy service built on each cloud service through the VPN channel, without having to maintain and frequently change the cloud server's external public network IP address to connect to the network proxy service of each cloud server.

The invention provides a network proxy method and system, and the method comprises the steps that a client obtains a first user token from a server based on a login request, and transmits a starting proxy request comprising the first user token and a first user identifier to target proxy service equipment; and the target proxy service equipment obtains the query identifier of the first user from the server based on the first user token, and compares the query identifier with the first user identifier, so that verification passing information is sent to the server under the condition that the query identifier and the first user identifier are consistent, and a network proxy starting service is provided for the first user. And a dynamic identity verification mechanism for the user can be realized. Therefore, a safer, more reliable and more efficient network security solution is provided for enterprises.

A kind of MAC identification and protocol detection-based Internet of Things equipment unified management method and system, it is related to the field of digital information transmission, in the method, the IP and MAC address of equipment are collected, the supported management protocol and port are detected, and based on MAC address, vendor information is parsed, data is structured into database to generate equipment list;Virtual display service is deployed in server to configure remote desktop instance, graphical browser is called to access equipment management page in the environment without physical display card, and access port is converted through Web proxy;In response to the login instruction of user, remote connection is established through Web port to show management page, and the account and password of matching are automatically extracted and filled, to complete the automatic login of equipment.The present application is used to improve the coherence and overall operation efficiency of unified scheduling of multi-vendor equipment.

The application relates to the technical field of APP detection data processing, and discloses a harmful APP effective core domain name deep detection method, which comprises the following steps: firstly, a sandbox environment is constructed, a network proxy service is constructed in the sandbox environment, and communication traffic information of an APP is comprehensively acquired; then, the APP accesses the Internet through a TUN mode connection gateway in the sandbox test environment; internal operations of the APP are automatically operated, including login, registration and refreshing operations; running analysis is carried out by limiting network bandwidth, delay and packet loss rate parameters; core domain name analysis is carried out, specifically including deep detection of traffic logs; a training model is established according to the traffic logs, the traffic logs are analyzed through the model, a machine learning decision tree algorithm or a data analysis method is used for model analysis, and effective situation data of the APP is confirmed and analyzed. The application constructs an APP communication log analysis model based on a decision tree algorithm, and identifies suspected core domain names based on dimensions such as communication behavior and communication content.

Components of a distributed database may operate faster by maintaining connections to multiple other components. These components may be hosted on various physical computing devices. An application layer communication system comprising a network proxy on each computing device involved in the distributed database may decrease the overall number of connections that are to be established and maintained during operation of the distributed database. The network proxies at sending devices may reduce traffic across the connections by combining packets directed from a particular device to another.