Method, system, and storage medium for adaptive monitoring and filtering traffic to and from social networking sites

Patent metadata

Field	Value
Publication number	US-9537877-B2
Application number	US-201313942558-A
Country	US
Kind code	B2
Filing date	Jul 15, 2013
Priority date	Sep 17, 2008
Publication date	Jan 3, 2017
Grant date	Jan 3, 2017

Abstract

Embodiments disclosed herein provide a system, method, and computer readable storage medium storing computer instructions for implementing a Socialware architecture encompassing a suite of applications for continuously and adaptively monitoring and filtering traffic to and from social networking sites, particularly useful in an enterprise computing environment. In some embodiments, an appliance may be coupled to a proxy server for providing a plurality of Socialware services, including analyzing, logging, and reporting on traffic to and from social networking sites. Some embodiments may allow a user to report, identify, and prevent malicious and potentially malicious content and/or activity by another user. Some embodiments may encrypt outgoing traffic to and decrypt incoming traffic from social networking sites. Some embodiments may provide an enterprise user to define and restrict certain social networking activities outside of the enterprise computing environment.

First claim

What is claimed is:

1. A method for adaptively filtering network traffic to and from social networking sites, comprising:
generating a test message by a data center computer residing at a data center, the test message including message content;
sending the test message from the data center computer to a social networking site computer, wherein the social networking site computer, responsive to the test message sent from the data center computer, returns a response to the data center computer utilizing an application-level dynamic protocol;
the data center computer parsing the response from the social networking site computer utilizing a first filter, the first filter comprising a piece of code translatable by a processor of the data center computer to:
recognize, in the network traffic, a particular portion of the application-level dynamic protocol utilized by the social networking site computer in communicating the response to the data center computer; and
generate an output based on a message payload in the response in the particular portion of the application-level dynamic protocol utilized by the social networking site computer and recognized by the first filter;
the data center computer comparing the output from the first filter with the message content of the test message to determine whether the first filter is able to parse the response from the social networking site computer correctly; and
the data center computer updating the first filter or creating a second filter to parse the response from the social networking site computer correctly when the first filter is unable to parse the response from the social networking site computer correctly; and
the data center notifying a software module running on one or more machines in a computing environment that the first filter is broken, if the first filter is unable to parse the response from the social networking site computer correctly.

2. The method according to claim 1 , further comprising:
providing the updated first filter or the second filter to a software module running on one or more machines in a computing environment, wherein the software module is configured for monitoring network traffic between the computing environment and the social networking site computer.

3. The method according to claim 2 , wherein the providing is performed in association with the updating.

4. The method according to claim 2 , wherein the providing is performed in response to a pulling request from the software module.

5. The method according to claim 2 , wherein the data center, the social networking site computer, and the computing environment are independently controlled.

6. The method according to claim 2 , further comprising:
replacing a version of the first filter stored on one or more computer readable storage media residing in the computing environment with the updated first filter or the second filter.

7. A computer program product comprising at least one non-transitory computer-readable storage medium storing computer instructions translatable by a data center computer residing at a data center to perform:
generating a test message, the test message including message content;
sending the test message from the data center computer to a social networking site computer, wherein the social networking site computer, responsive to the test message sent from the data center computer, returns a response to the data center computer utilizing an application-level dynamic protocol;
the data center computer parsing the response from the social networking site computer utilizing a first filter, the first filter comprising a piece of code translatable by a processor of the data center computer to:
recognize a particular portion of the application-level dynamic protocol utilized by the social networking site computer in communicating the response to the data center computer; and
generate an output based on a message payload in the response in the particular portion of the application-level dynamic protocol utilized by the social networking site computer and recognized by the first filter;
the data center computer comparing the output from the first filter with the test message to determine whether the first filter is able to parse the response from the social networking site computer correctly; and
the data center computer updating the first filter or creating a second filter to parse the response from the social networking site computer correctly when the first filter is unable to parse the response from the social networking site computer correctly; and
the data center notifying a software module running on one or more machines in a computing environment that the first filter is broken, if the first filter is unable to parse the response from the social networking site computer correctly.

8. The computer program product of claim 7 , wherein the computer instructions are further translatable by the data center computer to perform:
providing the updated first filter or the second filter to a software module running on one or more machines in a computing environment, wherein the software module is configured for monitoring network traffic between the computing environment and the social networking site computer.

9. The computer program product of claim 8 , wherein the providing is performed in association with the updating.

10. The computer program product of claim 8 , wherein the providing is performed in response to a pulling request from the software module.

11. The computer program product of claim 8 , wherein the computer instructions are further translatable by the data center computer to perform:
replacing a version of the first filter stored on one or more computer readable storage media residing in the computing environment with the updated first filter or the second filter.

12. A system for adaptively filtering network traffic to and from social networking sites, comprising:
a data center computer residing at a data center; and
at least one non-transitory computer-readable storage medium storing computer instructions translatable by the data center computer to perform:
generating a test message, the test message including message content;
sending the test message from the data center computer to a social networking site computer, wherein the social networking site computer, responsive to the test message sent from the data center computer, returns a response to the data center computer utilizing an application-level dynamic protocol;
the data center computer parsing the response from the social networking site computer utilizing a first filter, the first filter comprising a piece of code translatable by a processor of the data center computer to:
recognize, in the network traffic, a particular portion of the application-level dynamic protocol utilized by the social networking site computer in communicating the response to the data center computer; and
generate an output based on a message payload in the response in the particular portion of the application-level dynamic protocol utilized by the social networking site computer and recognized by the first filter;
the data center computer comparing the output from the first filter with the test message to determine whether the first filter is able to parse the response from the social networking site computer correctly; and
the data center computer updating the first filter or creating a second filter to parse the response from the social networking site computer correctly when the first filter is unable to parse the response from the social networking site computer correctly; and
the data center notifying a software module running on one or more machines

Assignees

• Socialware Inc
• Proofpoint Inc

Inventors

• Cooper Cameron Blair
• Richter Christopher Lee

Classifications

• G06Q10/40

  Business processes related to social networking or social networking services · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L43/14

  using software, i.e. software packages (network security related monitoring H04L63/1408) · CPC title

• H04L67/30

  Profiles · CPC title

• H04L63/0281

  Proxies · CPC title