Abstract: In illustrative embodiments, methods in accordance with the present invention utilize a thin kernel module operating in the kernel space of an operating system to redirect all TCP flows to user space for application analysis and processing. Redirected data is presented to the user space application as a data stream, allowing the processing of information contained within the data stream from the user space on a mobile device. This allows the user space application to inspect and take action on incoming data before allowing the data to continue to pass through the device. This enables parental controls, firewalls, real-time anti-virus scanning, tethering/hot-spot, bandwidth optimization, and similar programs to effectively operate across different mobile devices as user downloadable/actuatable applications.

Abstract: In illustrative embodiments, methods in accordance with the present invention utilize a thin kernel module operating in the kernel space of an operating system to redirect all TCP flows to user space for application analysis and processing. Redirected data is presented to the user space application as a data stream, allowing the processing of information contained within the data stream from the user space on a mobile device. This allows the user space application to inspect and take action on incoming data before allowing the data to continue to pass through the device. This enables parental controls, firewalls, real-time anti-virus scanning, tethering/hot-spot, bandwidth optimization, and similar programs to effectively operate across different mobile devices as user downloadable/actuatable applications.

Abstract: In illustrative embodiments, methods in accordance with the present invention utilize a thin kernel module operating in the kernel space of an operating system to redirect all TCP flows to user space for application analysis and processing. Redirected data is presented to the user space application as a data stream, allowing the processing of information contained within the data stream from the user space on a mobile device. This allows the user space application to inspect and take action on incoming data before allowing the data to continue to pass through the device. This enables parental controls, firewalls, real-time anti-virus scanning, tethering/hot-spot, bandwidth optimization, and similar programs to effectively operate across different mobile devices as user downloadable/actuatable applications.

Abstract: In illustrative embodiments, methods in accordance with the present invention utilize a thin kernel module operating in the kernel space of an operating system to redirect all TCP flows to user space for application analysis and processing. Redirected data is presented to the user space application as a data stream, allowing the processing of information contained within the data stream from the user space on a mobile device. This allows the user space application to inspect and take action on incoming data before allowing the data to continue to pass through the device. This enables parental controls, firewalls, real-time anti-virus scanning, tethering/hot-spot, bandwidth optimization, and similar programs to effectively operate across different mobile devices as user downloadable/actuatable applications.

Abstract: A system and method are provided of bridging proxy traffic in an electronic network. The method can include the operation of receiving a data stream from a client into a packet scanning device using a first socket. This data stream can be directed to an external communication network. The socket information for the first socket can be cached or stored in a cache in the packet scanning device using a cache ID. The first socket can then be connected to a user space process. A second socket can be generated by the user space process using the cache ID. The second socket can be modified using information retrieved from the cache based on the cache ID to make the second socket emulate the first socket. An additional operation is sending the data stream through the second socket to the external communication network.

Abstract: A system and method are provided of bridging proxy traffic in an electronic network. The method can include the operation of receiving a data stream from a client into a packet scanning device using a first socket. This data stream can be directed to an external communication network. The socket information for the first socket can be cached or stored in a cache in the packet scanning device using a cache ID. The first socket can then be connected to a user space process. A second socket can be generated by the user space process using the cache ID. The second socket can be modified using information retrieved from the cache based on the cache ID to make the second socket emulate the first socket. An additional operation is sending the data stream through the second socket to the external communication network.

Abstract: A system and method are provided for blocking anonymous proxy traffic. The method can include the operation of receiving a data stream from an electronic communication network. Another operation can be checking the data stream to determine whether the data stream is being sent over a defined port number. The data stream that is not being sent over the defined port number can be tested to determine whether the data stream is a connected data stream. A user can be blocked from receiving the connected data stream that is not being sent over the defined port number.