公开(公告)号：US12095793B2

公开(公告)日：2024-09-17

申请号：US17720216

申请日：2022-04-13

Applicant: Mellanox Technologies, Ltd.

Inventor： Chen Rozenbaum ,  Shauli Arazi ,  Bartley Richardson

IPC: H04L9/40 ,  G06N3/08

CPC classification number: H04L63/1425 ,  G06N3/08

Abstract: Apparatuses, systems, and techniques for detecting that a host device is subject to a malicious network attack using a machine learning (ML) detection system are described. A computing system includes a graphics processing unit (GPU) and an integrated circuit with a network interface, and a hardware acceleration engine. The integrated circuit hosts a hardware-accelerated security service to extract features from network data and metadata from the hardware acceleration engine and sends the extracted features to the GPU. Using the ML detection system, the GPU determines whether the host device is subject to a malicious network attack using the extracted features. The GPU can send an enforcement rule to the integrated circuit responsive to a determination that the host device is subject to the malicious network activity.

公开(公告)号：US20240250911A1

公开(公告)日：2024-07-25

申请号：US18589466

申请日：2024-02-28

Applicant: Mellanox Technologies, Ltd.

Inventor： Roni Bar Yanai ,  Jiawei Wang ,  Yossef Efraim ,  Chen Rozenbaum

IPC: H04L47/2483 ,  H04L45/748

CPC classification number: H04L47/2483 ,  H04L45/748

Abstract: A method includes providing a library of hardware-agnostic packet-processing functions. A functional hardware-agnostic specification of a packet-processing pipeline is received from a user. The specification is defined in terms of one or more of the packet-processing functions drawn from the library. A hardware-specific design of the packet-processing pipeline, which is suited to given hardware, is derived from the specification.

公开(公告)号：US20240086527A1

公开(公告)日：2024-03-14

申请号：US18120807

申请日：2023-03-13

Applicant: Mellanox Technologies, Ltd.

Inventor： Nir Rosen ,  Katya Egert-Berg ,  Rami Ailabouni ,  Ohad Peres ,  Elad Haimovich ,  Vadim Gechman ,  Haim Elisha ,  Adi Peled ,  Chen Rozenbaum ,  Ahmad Saleh ,  Shie Mannor

IPC: G06F21/55 ,  G06F21/52 ,  G06F21/56

CPC classification number: G06F21/554 ,  G06F21/52 ,  G06F21/566 ,  G06F2221/034

Abstract: Apparatuses, systems, and techniques of using one or more circuits (e.g., of a network interface) to obtain assembly code for one or more machine code segments loaded and/or injected into a process, and determine whether the assembly code is likely to perform at least one unauthorized task.

公开(公告)号：US20230139481A1

公开(公告)日：2023-05-04

申请号：US17955583

申请日：2022-09-29

Applicant: MELLANOX TECHNOLOGIES, LTD.

Inventor： Roni Bar Yanai ,  Jiawei Wang ,  Yossef Efraim ,  Chen Rozenbaum

IPC: H04L47/2483 ,  H04L45/748

Abstract: A method includes providing a library of hardware-agnostic packet-processing functions. A functional hardware-agnostic specification of a packet-processing pipeline, for use in a network device, is received from a user. The specification is defined in terms of one or more of the packet-processing functions draws from the library. A hardware-specific design of the packet-processing pipeline, which is suited to given hardware, is derived from the specification.