Efficient endpoint matching using a header-to-bit conversion table
    12.
    发明申请
    Efficient endpoint matching using a header-to-bit conversion table 有权
    使用头对比转换表进行有效的端点匹配

    公开(公告)号:US20070078997A1

    公开(公告)日:2007-04-05

    申请号:US11244669

    申请日:2005-10-05

    申请人: Aaron Stern

    发明人: Aaron Stern

    IPC分类号: G06F15/16

    摘要: A header-to-bit conversion table is provided that includes a list of address headers for registered endpoints. Assigned to each address header within the list is a bit placement within a string of bits. As messages are received, select headers within a message are compared with the address headers within the list. Each intersection or match for headers sets a bit true within a bit array for the message corresponding to the bit assignment for the header within the header-to-bit conversion table. Such array may then be compared with bit masks for each endpoint, wherein those bits set true within the bit masks represent those headers needed to satisfy the criteria for a particular endpoint. If a match is found, the message (or portion(s) thereof) may be sent to the particular endpoint for processing.

    摘要翻译: 提供了一个头对位转换表,其中包括一个注册端点的地址头列表。 分配给列表中的每个地址头是位列中的位置。 当接收到消息时,将消息中的标题与列表中的地址头进行比较。 标头的每个交集或匹配在位阵列内对于与头到位转换表中的头的位分配相对应的消息设置一个真实的。 然后可以将这样的阵列与每个端点的位掩码进行比较,其中在位掩码内设置为真的位表示满足特定端点的标准所需的那些标头。 如果找到匹配,则可将消息(或其部分)发送到特定端点进行处理。

    Safe mode for inverse query evaluations
    13.
    发明申请
    Safe mode for inverse query evaluations 有权
    反向查询评估的安全模式

    公开(公告)号:US20070078829A1

    公开(公告)日:2007-04-05

    申请号:US11245322

    申请日:2005-10-05

    IPC分类号: G06F17/30

    CPC分类号: G06F17/30938 G06F21/52

    摘要: Embodiments herein prevent or mitigate attacks on inverse query engines by providing safe mode routines that allow for the acceptance of third party messages and/or query expressions, as well as prevent trusted sources from accidental attacks. The mitigations fall into two categories: compile-time and runtime. Compile-time mitigations prevent query expressions from being accepted and compiled that are susceptible to known attacks. For example, the complexity of query expressions may be limited to functions with linear runtimes; constant memory usage; or ones that do not create large strings. Further, language constructs for the criteria in the query expression may not allow for nested predicates complexities. Runtime mitigations, on the other hand, monitor the data size and processing lengths of messages against the various query expressions. If these runtime quotas are exceeded, an exception or other violation indication may be thrown (e.g., abort), deeming the evaluation as under attack.

    摘要翻译: 这里的实施例通过提供允许接受第三方消息和/或查询表达式的安全模式例程,以及防止可信源来自意外攻击来防止或减轻对反向查询引擎的攻击。 缓解分为两类:编译时和运行时。 编译时缓解阻止查询表达式受到已知攻击的接受和编译。 例如,查询表达式的复杂性可能限于具有线性运行时的函数; 不断的内存使用; 或者不创建大字符串的那些。 此外,查询表达式中的条件的语言结构可能不允许嵌套谓词的复杂性。 另一方面,运行缓解则根据各种查询表达式监视消息的数据大小和处理长度。 如果超出这些运行时配额,可能会抛出异常或其他违规指示(例如,中止),将评估视为受到攻击。

    Method and system for use of subsets in serialized documents
    14.
    发明申请
    Method and system for use of subsets in serialized documents 审中-公开
    在序列化文件中使用子集的方法和系统

    公开(公告)号:US20060167912A1

    公开(公告)日:2006-07-27

    申请号:US11042524

    申请日:2005-01-25

    IPC分类号: G06F17/00

    CPC分类号: G06F17/2247

    摘要: A method for processing XML documents in a computer-based system includes providing a XML document associated with a XML information set that includes one or more information items, and serializing the XML document into a serialized format. The serialized format includes at least one subset that includes a subset node. The subset node indicates that the at least one subset can be de-serialized independently of a remainder of the XML document. A computer readable medium is encoded with a program that, when executed, can perform the method for processing XML documents.

    摘要翻译: 在基于计算机的系统中处理XML文档的方法包括提供与包括一个或多个信息项的XML信息集相关联的XML文档,以及将XML文档序列化为串行化格式。 序列化格式包括至少一个包括子集节点的子集。 子集节点指示可以独立于XML文档的其余部分将至少一个子集解除序列化。 计算机可读介质用程序编码,该程序在执行时可以执行处理XML文档的方法。