Data stream optimizer utilizing difference coding between a current
state buffer and a next state buffer
    1.
    发明授权
    Data stream optimizer utilizing difference coding between a current state buffer and a next state buffer 失效
    利用当前状态缓冲器和下一状态缓冲器之间的差分编码的数据流优化器

    公开(公告)号:US5367674A

    公开(公告)日:1994-11-22

    申请号:US806687

    申请日:1991-12-13

    IPC分类号: G06F3/14 G06F13/00

    CPC分类号: G06F3/14 G06F3/1415

    摘要: The disclosed data stream optimization process is containing two logical entities, the first being the pre-comparison optimizer component and the second being the comparison component. The pre-comparison optimizer component performs two discrete tasks. First, the input data stream is written into a next state buffer. Second, the elimination of redundancies involves detecting and removing redundant screen attributes, since the terminal's execution time for processing a screen attribute is more than that required for a data character. The comparison component contains three distinct sub-components. First, non-data constructs such as commands and orders are optimized and placed in the outgoing data stream. Second, the screen image that is represented by the data stream is compared to the existing screen image to further reduce the outgoing data stream. This reduced version is further reduced when repeated characters and fields are replaced with repeat orders which take up less space within the outgoing data stream. Lastly, the reduced outgoing data stream is operated on by a post-optimizer sub-component. The post-optimizer sub-component will first determine whether repeated characters existing at the end of the outgoing data stream can be replaced a single repeat order. Then, the sub-component proceeds to remove any unnecessary cursor control orders. Upon completion, the fully optimized data stream is routed to the terminal or conversion facility.

    摘要翻译: 公开的数据流优化过程包含两个逻辑实体,第一个是预比较优化器组件,第二个是比较组件。 预比较优化器组件执行两个离散任务。 首先,将输入数据流写入下一个状态缓冲器。 第二,消除冗余涉及检测和去除冗余屏幕属性,因为终端处理屏幕属性的执行时间大于数据字符所需的执行时间。 比较组件包含三个不同的子组件。 首先,诸如命令和订单之类的非数据结构被优化并放置在输出数据流中。 第二,将由数据流表示的屏幕图像与现有屏幕图像进行比较,以进一步减少输出数据流。 当重复的字符和字段被替换为在输出数据流中占用更少空间的重复命令时,该缩减版本进一步减少。 最后,减少的输出数据流由后优化器子组件操作。 后优化器子组件将首先确定在输出数据流的末尾存在的重复字符是否可以被替换为单个重复顺序。 然后,子部件继续去除任何不必要的光标控制命令。 完成后,完全优化的数据流被路由到终端或转换设施。

    Variable Dynamic Throttling of Network Traffic for Intrusion Prevention
    3.
    发明申请
    Variable Dynamic Throttling of Network Traffic for Intrusion Prevention 有权
    用于入侵防御的网络流量的可变动态调节

    公开(公告)号:US20080291934A1

    公开(公告)日:2008-11-27

    申请号:US11752972

    申请日:2007-05-24

    IPC分类号: H04L12/56

    CPC分类号: H04L47/10 H04L47/22 H04L47/28

    摘要: Methods, apparatus, and computer program products for variable dynamic throttling of network traffic for intrusion prevention are disclosed that include initializing, as throttling parameters, a predefined time interval, a packet count, a packet count threshold, a throttle rate, a keepers count, and a discards count; starting a timer, the timer remaining on no longer than the predefined time interval; maintaining, while the timer is on, statistics including the packet count, the keepers count, and the discards count; for each data communications packet received by the network host, determining, in dependence upon the statistics and the throttle rate, whether to discard the packet and determining whether the packet count exceeds the packet count threshold; and if the packet count exceeds the packet count threshold: resetting the statistics, incrementing the throttle rate, and restarting the timer.

    摘要翻译: 公开了用于入侵防御的网络流量的可变动态调节的方法,装置和计算机程序产品,其包括作为调节参数初始化预定义的时间间隔,分组计数,分组计数阈值,节流率,保持者计数, 和丢弃计数; 启动定时器,计时器保持不超过预定义的时间间隔; 维持定时器打开时,包括数据包计数,保持者计数和丢弃计数的统计信息; 对于由网络主机接收的每个数据通信分组,根据统计信息和节流速率确定是否丢弃分组并确定分组计数是否超过分组计数阈值; 如果报文计数超过报文计数阈值,则重置统计信息,增加油门速率,重新启动定时器。

    Variable dynamic throttling of network traffic for intrusion prevention
    5.
    发明授权
    Variable dynamic throttling of network traffic for intrusion prevention 有权
    用于入侵防御的网络流量的可变动态调节

    公开(公告)号:US07719976B2

    公开(公告)日:2010-05-18

    申请号:US11752972

    申请日:2007-05-24

    CPC分类号: H04L47/10 H04L47/22 H04L47/28

    摘要: Methods, apparatus, and computer program products for variable dynamic throttling of network traffic for intrusion prevention are disclosed that include initializing, as throttling parameters, a predefined time interval, a packet count, a packet count threshold, a throttle rate, a keepers count, and a discards count; starting a timer, the timer remaining on no longer than the predefined time interval; maintaining, while the timer is on, statistics including the packet count, the keepers count, and the discards count; for each data communications packet received by the network host, determining, in dependence upon the statistics and the throttle rate, whether to discard the packet and determining whether the packet count exceeds the packet count threshold; and if the packet count exceeds the packet count threshold: resetting the statistics, incrementing the throttle rate, and restarting the timer.

    摘要翻译: 公开了用于入侵防御的网络流量的可变动态调节的方法,装置和计算机程序产品,其包括作为调节参数初始化预定义的时间间隔,分组计数,分组计数阈值,节流率,保持者计数, 和丢弃计数; 启动定时器,计时器保持不超过预定义的时间间隔; 维持定时器打开时,包括数据包计数,保持者计数和丢弃计数的统计信息; 对于由网络主机接收的每个数据通信分组,根据统计信息和节流速率确定是否丢弃分组并确定分组计数是否超过分组计数阈值; 如果报文计数超过报文计数阈值,则重置统计信息,增加油门速率,重新启动定时器。

    Preventing False Positive Detections in an Intrusion Detection System
    6.
    发明申请
    Preventing False Positive Detections in an Intrusion Detection System 审中-公开
    防止入侵检测系统中的错误检测

    公开(公告)号:US20080184368A1

    公开(公告)日:2008-07-31

    申请号:US11669575

    申请日:2007-01-31

    IPC分类号: G06F21/00 G06F11/30

    CPC分类号: H04L63/1416 G06F21/552

    摘要: Methods, systems, and products are disclosed for preventing false positive detections in an intrusion detection system that include: establishing one or more activity profiles for an intrusion detection system, each activity profile specifying system activity for detection by the intrusion detection system; receiving, in the intrusion detection system, an exception notification for a specific activity profile, the exception notification specifying that the specific activity profile represents authorized system activity; determining, by the intrusion detection system, whether current system activity matches the specific activity profile; and administering, by the intrusion detection system, the current system activity if current system activity matches the specific activity profile.

    摘要翻译: 公开了用于防止入侵检测系统中的假阳性检测的方法,系统和产品,包括:为入侵检测系统建立一个或多个活动简档,每个活动简档指定入侵检测系统检测的系统活动; 在入侵检测系统中接收特定活动简档的例外通知,该异常通知指定特定活动简档表示授权的系统活动; 通过入侵检测系统确定当前系统活动是否与特定活动简档匹配; 以及如果当前系统活动与特定活动简档匹配,则由入侵检测系统管理当前系统活动。