利索-全球专利检索

  1. Login
  2. Sign Up

Search Results

128 records (took 0.031 seconds)

    Detection of threats based on responses to name resolution requests
    111.
    发明授权
    Detection of threats based on responses to name resolution requests 有权

    公开(公告)号：US11792151B2

    公开(公告)日：2023-10-17

    申请号：US17507548

    申请日：2021-10-21

    Applicant: VMware, Inc.

    Inventor： Tejas Sanjeev Panse ,  Aditi Vutukuri ,  Arnold Koon-Chee Poon ,  Rajiv Mordani ,  Margaret Petrus

    IPC: H04L61/10 ,  H04L61/2521 ,  H04L61/5053 ,  H04L61/256

    CPC classification number: H04L61/10 ,  H04L61/2521 ,  H04L61/2571 ,  H04L61/5053

    Abstract: Some embodiments provide a method for identifying security threats to a datacenter. The method receives flow attribute sets for multiple flows from multiple host computers in the datacenter on which data compute nodes (DCNs) execute. Each flow attribute set indicates at least a source DCN for the flow. The method identifies flow attribute sets that correspond to DCNs responding to name resolution requests. For each DCN of a set of DCNs executing on the host computers, the method determines whether the DCN has sent responses to name resolution requests in a manner that deviates from a historical baseline for the DCN based on the identified flow attribute sets. When a particular DCN has sent responses to name resolution requests in a manner that deviates from a historical baseline for the particular DCN, the method identifies the particular DCN as a security threat to the datacenter.

    Auto discovery and configuration of data center components
    112.
    发明授权
    Auto discovery and configuration of data center components 有权

    公开(公告)号：US11757712B1

    公开(公告)日：2023-09-12

    申请号：US18057196

    申请日：2022-11-18

    Applicant: Hewlett Packard Enterprise Development LP

    Inventor： Ramakrishnan Thanabalan

    IPC: G06F15/173 ,  H04L41/0806 ,  H04L61/10

    CPC classification number: H04L41/0806 ,  H04L61/10

    Abstract: Techniques are provided for configuring management IP addresses to network devices in a data center that have management capabilities. Based on a received request to configure a managed network device in a network, a first connection is established between a management station and a managed switch to which the managed network device is connected. A network identifier of the managed network device is retrieved from the managed switch using the established first connection. Using the retrieved network identifier, a link-local address of the managed network device is derived. A second connection is established between the management station and the managed network device based on the derived link-local address. The management IP addresses of the managed network device are configured using the second connection.

    Decentralized system for securely resolving domain names
    113.
    发明授权
    Decentralized system for securely resolving domain names 有权

    公开(公告)号：US11757652B2

    公开(公告)日：2023-09-12

    申请号：US17032157

    申请日：2020-09-25

    Applicant: Wickr Inc.

    Inventor： Joël Alwen ,  Thomas Michael Leavy ,  Christopher A. Howell

    IPC: H04L29/06 ,  H04L9/32 ,  H04L9/30 ,  H04L61/10 ,  H04L61/3015 ,  H04L9/08

    CPC classification number: H04L9/3247 ,  H04L9/088 ,  H04L9/30 ,  H04L61/10 ,  H04L61/3025

    Abstract: A decentralized system for securely registering, updating, and/or resolving domain names in a distributed ledger is disclosed. The distributed ledger may comprise a smart contract that includes a look-up table that maps network names to network addresses and/or one or more keys. The smart contract may verify whether any updates and/or changes made to an entry in the look-up table are cryptographically authorized. Additionally, the smart contract may enforce any additional policies implemented by a domain administrator for authenticating changes and/or updates to a domain name entry. The unique combination of storing domain information in a decentralized ledger and validating changes and/or updates to the domain information provides a decentralized root of trust that allows for secure queries of network names (e.g., domain name) for secure cross-entity communications.

    DIFFERENTIATED NETWORK SERVICES USING MAP-T TRANSLATION TECHNOLOGY
    114.
    发明公开
    DIFFERENTIATED NETWORK SERVICES USING MAP-T TRANSLATION TECHNOLOGY 审中-公开

    公开(公告)号：US20230275867A1

    公开(公告)日：2023-08-31

    申请号：US17682542

    申请日：2022-02-28

    Applicant: Charter Communications Operating, LLC

    Inventor： Luca Martini ,  Erez Jordan Gottlieb

    IPC: H04L61/2503 ,  H04L61/10 ,  H04L101/659 ,  H04L9/40 ,  H04L69/22

    CPC classification number: H04L61/2503 ,  H04L61/10 ,  H04L61/6059 ,  H04L63/0892 ,  H04L69/22

    Abstract: Methods and systems for providing differentiated network services using Mapping of Address and Port using translation (MAP-T) technology are described. A method includes provisioning a service specific IPv6 network prefix and a service specific basic mapping rule to an access device, the service specific IPv6 network prefix associated with a differentiated network service level, provisioning a service specific mapping rule to a border relay, identifying by the access device service packets associated with the differentiated network service level, translating by the access device the identified service packets to the service specific IPv6 network prefix using the service specific basic mapping rule to generate service specific packets, forwarding the service specific packets to the border relay via a service provider network, translating return packets to service specific return packets using the service specific mapping rule, and forwarding the service specific return packets to the access device.

    Client controlled domain name service (DNS) resolution
    117.
    发明授权
    Client controlled domain name service (DNS) resolution 有权

    公开(公告)号：US11700230B1

    公开(公告)日：2023-07-11

    申请号：US17220666

    申请日：2021-04-01

    Applicant: VERISIGN, INC.

    Inventor： Eric Osterweil ,  Ashvatth Lakshmanan

    IPC: H04L61/4511 ,  H04L61/10 ,  H04L61/30

    CPC classification number: H04L61/4511 ,  H04L61/10 ,  H04L61/30

    Abstract: In one embodiment, a domain name system (DNS) server processes a DNS query based on a policy statement that is attached to the DNS query. Upon receiving the DNS query, the DNS server executes one or more commands specified in the policy statement to generate a query state. The query state controls DNS resolution behavior that the DNS server implements as part of processing the DNS query. The DNS server then performs one or more DNS resolution operations based on DNS query and the query state to generate a response. Advantageously, because the semantics of the policy statement are encapsulated within the policy statement, the policy statement enables a client to unambiguously control DNS resolution behavior. By contrast, conventional DNS resolution guidance mechanisms that rely on DNS servers to infer policies based on client data may not reflect the preferences of the clients.

Patent Agency Ranking