SYSTEM AND METHODS FOR DECRYPTING NETWORK TRAFFIC IN A VIRTUALIZED ENVIRONMENT Russian patent published in 2020 - IPC G06F21/56 

FIELD: computer equipment.

SUBSTANCE: computer system for executing a virtual machine, wherein the virtual machine is configured to conduct a communication session with the remote side, the communication session including a communication acknowledgment message with a subsequent encrypted payload, wherein the communication acknowledgment message comprises an encryption parameter, used by computer system to obtain encryption key, and encrypted payload is encrypted by said encryption key, and the self-diagnostics module is configured to be executed outside the virtual machine and configured to identify in memory of the memory page in accordance with whether the content of the memory page has changed between the first communication session event and the second session event, and in response to transmission of content of destination page of memory to decryption module, configured to decrypt encrypted payload in accordance with content.

EFFECT: technical result consists in provision of early detection of malicious software agents and disabling them.

21 cl, 10 dwg