SYSTEM AND METHOD OF ANALYZING CONTENT OF ENCRYPTED NETWORK TRAFFIC Russian patent published in 2019 - IPC G06F21/00 

FIELD: information technology.

SUBSTANCE: present invention is intended to obtain access to encrypted data within a secure network connection between processes. A method of analyzing content of encrypted traffic between processes, according to which: storing a list of function addresses, which is characterized by that it returns a session encryption key generated when establishing a secure connection between processes; addresses of said function correspond to different applications and versions thereof; process is an application; introducing a program module into the address space of one process using an agent; redirecting traffic between processes through a proxy server using an agent; detecting, using a proxy server, a secure connection between processes; using a software module embedded in the address space of the process, obtaining a session encryption key by calling a function at an address corresponding to the version of the application from said list; antivirus protection means analyze traffic between processes decrypted by means of said session encryption key.

EFFECT: wider range of means for realizing the purpose of the claimed invention.

10 cl, 3 dwg