Managing session secrets for continuous packet capture systems

    公开(公告)号:US10476673B2

    公开(公告)日:2019-11-12

    申请号:US15466248

    申请日:2017-03-22

    IPC分类号: H04L9/08 H04L29/06 G06F16/951

    摘要: Embodiments are direct to monitoring communication between computers may be using network monitoring computers (NMCs). Network packets that are communicated between the computers may be captured and stored in a data store. If the NMCs identify a secure communication session established between two computers, the NMCs may obtain key information that corresponds to the secure communication session that includes a session key that may be provided by a key provider. Correlation information associated with the secure communication session may be captured by the NMCs. The correlation information may include tuple information associated with the secure communication session. And, the key information and the correlation information may be stored in a key escrow. The key information may be indexed in the key escrow using the correlation information.

    MANAGING SESSION SECRETS FOR CONTINUOUS PACKET CAPTURE SYSTEMS

    公开(公告)号:US20200076597A1

    公开(公告)日:2020-03-05

    申请号:US16679055

    申请日:2019-11-08

    摘要: Embodiments are direct to monitoring communication between computers may be using network monitoring computers (NMCs). Network packets that are communicated between the computers may be captured and stored in a data store. If the NMCs identify a secure communication session established between two computers, the NMCs may obtain key information that corresponds to the secure communication session that includes a session key that may be provided by a key provider. Correlation information associated with the secure communication session may be captured by the NMCs. The correlation information may include tuple information associated with the secure communication session. And, the key information and the correlation information may be stored in a key escrow. The key information may be indexed in the key escrow using the correlation information.

    Managing session secrets for continuous packet capture systems

    公开(公告)号:US11546153B2

    公开(公告)日:2023-01-03

    申请号:US16679055

    申请日:2019-11-08

    摘要: Embodiments are direct to monitoring communication between computers may be using network monitoring computers (NMCs). Network packets that are communicated between the computers may be captured and stored in a data store. If the NMCs identify a secure communication session established between two computers, the NMCs may obtain key information that corresponds to the secure communication session that includes a session key that may be provided by a key provider. Correlation information associated with the secure communication session may be captured by the NMCs. The correlation information may include tuple information associated with the secure communication session. And, the key information and the correlation information may be stored in a key escrow. The key information may be indexed in the key escrow using the correlation information.

    MANAGING SESSION SECRETS FOR CONTINUOUS PACKET CAPTURE SYSTEMS

    公开(公告)号:US20180278419A1

    公开(公告)日:2018-09-27

    申请号:US15466248

    申请日:2017-03-22

    摘要: Embodiments are direct to monitoring communication between computers may be using network monitoring computers (NMCs). Network packets that are communicated between the computers may be captured and stored in a data store. If the NMCs identify a secure communication session established between two computers, the NMCs may obtain key information that corresponds to the secure communication session that includes a session key that may be provided by a key provider. Correlation information associated with the secure communication session may be captured by the NMCs. The correlation information may include tuple information associated with the secure communication session. And, the key information and the correlation information may be stored in a key escrow. The key information may be indexed in the key escrow using the correlation information.