公开(公告)号：US10250634B2

公开(公告)日：2019-04-02

申请号：US15349157

申请日：2016-11-11

Applicant: Juniper Networks, Inc.

Inventor： Ravindranath C. Kanakarajan ,  Venkanna Thadishetty

IPC: G06F17/30 ,  H04L29/06 ,  H04J3/06

Abstract: The disclosed apparatus may include (1) a storage device that stores a set of cookies that facilitate authenticating packets received from a node within a network and (2) a processing unit communicatively coupled to the storage device, wherein the processing unit (A) receives at least one packet from the node, (B) identifies a cookie included in the packet received from the node, (C) searches the set of cookies stored in the storage device for the cookie included in the packet received from the node, (D) identifies, during the search of the set of cookies, the cookie included in the packet and (E) protects against a DoS attack by authenticating the legitimacy of the packet based at least in part on the cookie included in the packet being identified in the set of cookies stored in the storage device. Various other apparatuses, systems, and methods are also disclosed.

公开(公告)号：US10013584B2

公开(公告)日：2018-07-03

申请号：US15470534

申请日：2017-03-27

Applicant: Juniper Networks, Inc.

Inventor： Ravindranath C. Kanakarajan ,  Venkanna Thadishetty

IPC: G06F21/88 ,  G08B13/14 ,  H04L12/24 ,  H04W12/12 ,  H04L29/06

CPC classification number: G06F21/88 ,  G06F2221/2111 ,  G06F2221/2149 ,  G08B13/1418 ,  H04L41/12 ,  H04L41/28 ,  H04L63/107 ,  H04W12/12 ,  H04W12/1206

Abstract: The disclosed apparatus may include a secure storage device that securely stores an initial geographic location of a network device that facilitates network traffic within a network. This apparatus may also include a processing unit communicatively coupled to the secure storage device. The processing unit may determine a current geographic location of the network device. The policy-enforcement unit may then detect evidence of theft of the network device by (1) comparing the current geographic location of the network device with the initial geographic location of the network device and (2) determining, based at least in part on the comparison, that the current geographic location of the network device does not match the initial geographic location of the network device. Finally, the processing unit may perform at least one security action in response to detecting the evidence of theft of the network device.

公开(公告)号：US20180139228A1

公开(公告)日：2018-05-17

申请号：US15349157

申请日：2016-11-11

Applicant: Juniper Networks, Inc.

Inventor： Ravindranath C. Kanakarajan ,  Venkanna Thadishetty

IPC: H04L29/06

CPC classification number: H04L63/1458 ,  H04J3/0667 ,  H04L63/0236 ,  H04L63/061 ,  H04L63/08 ,  H04L63/0838 ,  H04L63/12 ,  H04L63/123 ,  H04L63/18

Abstract: The disclosed apparatus may include (1) a storage device that stores a set of cookies that facilitate authenticating packets received from a node within a network and (2) a processing unit communicatively coupled to the storage device, wherein the processing unit (A) receives at least one packet from the node, (B) identifies a cookie included in the packet received from the node, (C) searches the set of cookies stored in the storage device for the cookie included in the packet received from the node, (D) identifies, during the search of the set of cookies, the cookie included in the packet and (E) protects against a DoS attack by authenticating the legitimacy of the packet based at least in part on the cookie included in the packet being identified in the set of cookies stored in the storage device. Various other apparatuses, systems, and methods are also disclosed.

公开(公告)号：US09779271B2

公开(公告)日：2017-10-03

申请号：US14733399

申请日：2015-06-08

Applicant: Juniper Networks, Inc.

Inventor： Ravindranath C. Kanakarajan ,  Venkanna Thadishetty

IPC: G06F21/88 ,  G08B13/14 ,  H04L12/24 ,  H04W12/12 ,  H04L29/06

CPC classification number: G06F21/88 ,  G06F2221/2111 ,  G06F2221/2149 ,  G08B13/1418 ,  H04L41/12 ,  H04L41/28 ,  H04L63/107 ,  H04W12/12

Abstract: The disclosed apparatus may include a secure storage device that securely stores an initial geographic location of a network device that facilitates network traffic within a network. This apparatus may also include a processing unit communicatively coupled to the secure storage device. The processing unit may determine a current geographic location of the network device. The policy-enforcement unit may then detect evidence of theft of the network device by (1) comparing the current geographic location of the network device with the initial geographic location of the network device and (2) determining, based at least in part on the comparison, that the current geographic location of the network device does not match the initial geographic location of the network device. Finally, the processing unit may perform at least one security action in response to detecting the evidence of theft of the network device.

公开(公告)号：US20170200026A1

公开(公告)日：2017-07-13

申请号：US15470534

申请日：2017-03-27

Applicant: Juniper Networks, Inc.

Inventor： Ravindranath C. Kanakarajan ,  Venkanna Thadishetty

IPC: G06F21/88 ,  G08B13/14 ,  H04L12/24

CPC classification number: G06F21/88 ,  G06F2221/2111 ,  G06F2221/2149 ,  G08B13/1418 ,  H04L41/12 ,  H04L41/28 ,  H04L63/107 ,  H04W12/12

Abstract: The disclosed apparatus may include a secure storage device that securely stores an initial geographic location of a network device that facilitates network traffic within a network. This apparatus may also include a processing unit communicatively coupled to the secure storage device. The processing unit may determine a current geographic location of the network device. The policy-enforcement unit may then detect evidence of theft of the network device by (1) comparing the current geographic location of the network device with the initial geographic location of the network device and (2) determining, based at least in part on the comparison, that the current geographic location of the network device does not match the initial geographic location of the network device. Finally, the processing unit may perform at least one security action in response to detecting the evidence of theft of the network device.

公开(公告)号：US20160357994A1

公开(公告)日：2016-12-08

申请号：US14733399

申请日：2015-06-08

Applicant: Juniper Networks, Inc.

Inventor： Ravindranath C. Kanakarajan ,  Venkanna Thadishetty

IPC: G06F21/88

CPC classification number: G06F21/88 ,  G06F2221/2111 ,  G06F2221/2149 ,  G08B13/1418 ,  H04L41/12 ,  H04L41/28 ,  H04L63/107 ,  H04W12/12

Abstract: The disclosed apparatus may include a secure storage device that securely stores an initial geographic location of a network device that facilitates network traffic within a network. This apparatus may also include a processing unit communicatively coupled to the secure storage device. The processing unit may determine a current geographic location of the network device. The policy-enforcement unit may then detect evidence of theft of the network device by (1) comparing the current geographic location of the network device with the initial geographic location of the network device and (2) determining, based at least in part on the comparison, that the current geographic location of the network device does not match the initial geographic location of the network device. Finally, the processing unit may perform at least one security action in response to detecting the evidence of theft of the network device.

Abstract translation: 所公开的设备可以包括安全存储设备，其安全地存储有助于网络内的网络流量的网络设备的初始地理位置。 该设备还可以包括通信地耦合到安全存储设备的处理单元。 处理单元可以确定网络设备的当前地理位置。 然后，策略执行单元可以通过（1）将网络设备的当前地理位置与网络设备的初始地理位置进行比较来检测网络设备被盗窃的证据，以及（2）至少部分基于 比较网络设备的当前地理位置与网络设备的初始地理位置不匹配。 最后，处理单元可以响应于检测到网络设备被盗窃的证据而执行至少一个安全动作。