公开(公告)号：US20210218759A1

公开(公告)日：2021-07-15

申请号：US16742406

申请日：2020-01-14

Applicant: Saudi Arabian Oil Company

Inventor： Urfan Ahmed

IPC: H04L29/06 ,  G06F11/07

Abstract: A cybersecurity solution that includes a system, method, or computer program for detecting and remediating malicious code in a communicating device on a computer network that connects to the Internet through a proxy server. The solution includes an operating system arranged to monitor all computing resource (CR) processes on an operating system kernel on the communicating device, determine process parameters for each CR process, determine whether each CR process is a connecting CR process by determining whether it is connecting to the proxy server, compare at least one of the process parameters for each connecting CR process with a whitelist, generate an event notification when at least one process parameter for a connecting CR process does not match the whitelist, and remediate the connecting CR process that has the at least one process parameter.