Identifying a distributed denial of service (DDoS) attack within a network and defending against such an attack
    21.
    发明申请
    Identifying a distributed denial of service (DDoS) attack within a network and defending against such an attack 失效
    识别网络中的分布式拒绝服务(DDoS)攻击并防范此类攻击

    公开(公告)号:US20080271146A1

    公开(公告)日:2008-10-30

    申请号:US12126976

    申请日:2008-05-26

    IPC分类号: G06F21/00

    摘要: The invention provides methods, apparatus and systems for detecting distributed denial of service (DDoS) attacks within the Internet by sampling packets at a point or points in Internet backbone connections to determine a packet metric parameter. The packet metric parameter which might comprise the volume of packets received is analysed over selected time intervals with respect to specified geographical locations in which the hosts transmitting the packets are located. The expected behaviour can be employed to identify traffic distortions revealing a DDoS attack. In a complementary aspect, the invention provides a method of authenticating packets at routers in order to elevate the QoS of authenticated packets. This method can be used to block or filter packets and can be used in conjunction with the DDoS attack detection system to defend against DDoS attacks within the Internet in a distributed manner.

    摘要翻译: 本发明提供了通过在因特网骨干连接点或点采样分组来检测因特网内的分布式拒绝服务(DDoS)攻击的方法,装置和系统,以确定分组度量参数。 可以根据发送分组的主机所在的指定地理位置的选定时间间隔分析可能包括接收到的分组量的分组度量参数。 可以使用预期的行为来识别暴露DDoS攻击的流量扭曲。 在互补的方面,本发明提供了一种在路由器上认证分组的方法,以便提高认证分组的QoS。 该方法可用于阻止或过滤报文,并可与DDoS攻击检测系统结合使用,以分布式的方式防范互联网内的DDoS攻击。

    METHOD AND APPARATUS FOR MESSAGE IDENTIFICATION
    22.
    发明申请
    METHOD AND APPARATUS FOR MESSAGE IDENTIFICATION 失效
    消息识别的方法和设备

    公开(公告)号:US20080102799A1

    公开(公告)日:2008-05-01

    申请号:US11930680

    申请日:2007-10-31

    IPC分类号: H04M3/436

    摘要: A method and apparatus for identifying an unwanted short message service (SMS) message from SMS messages received by a cellular mobile communication system, which comprises at least a history database (HB) for storing a set (H) of the messages received by the cellular mobile communication system. The method includes the steps of: measuring a difference in an information content between a SMS message (m) received by the cellular mobile communication system and the set (H) of messages stored in the history database (HB), and marking the SMS message (m) as being an unwanted SMS message if the difference that is measured is less than or equal to a predefined threshold value.

    摘要翻译: 一种用于从由蜂窝移动通信系统接收的SMS消息识别不想要的短消息服务(SMS)消息的方法和装置,其包括用于存储由蜂窝小区接收的消息的集合(H)的历史数据库(H) 移动通信系统。 该方法包括以下步骤:测量由蜂窝移动通信系统接收的SMS消息(m)和存储在历史数据库(HB)中的消息组(H)之间的信息内容的差异,并标记SMS消息 (m)作为不需要的SMS消息,如果所测量的差小于或等于预定义的阈值。

    Management of multiple software images with shared memory blocks
    23.
    发明授权
    Management of multiple software images with shared memory blocks 有权
    管理具有共享内存块的多个软件映像

    公开(公告)号:US09052918B2

    公开(公告)日:2015-06-09

    申请号:US13325310

    申请日:2011-12-14

    IPC分类号: G06F12/02 G06F9/44 G06F9/445

    摘要: A data processing entity that includes a mass memory with a plurality of memory locations for storing memory blocks. Each of a plurality of software images includes a plurality of memory blocks with corresponding image addresses within the software image. The memory blocks of software images stored in boot locations of a current software image are relocated. The boot blocks of the current software image are stored into the corresponding boot locations. The data processing entity is booted from the boot blocks of the current software image in the corresponding boot locations, thereby loading the access function. Each request to access a selected memory block of the current software image is served by the access function, with the access function accessing the selected memory block in the associated memory location provided by the control structure.

    摘要翻译: 一种数据处理实体,其包括具有用于存储存储块的多个存储单元的大容量存储器。 多个软件图像中的每一个包括在软件图像内具有相应图像地址的多个存储块。 存储在当前软件映像的引导位置的软件映像的存储块被重新定位。 当前软件映像的引导块存储到相应的引导位置。 数据处理实体从相应引导位置中的当前软件映像的引导块引导,从而加载访问功能。 访问当前软件映像的所选存储块的每个请求由访问功能服务,访问功能访问由控制结构提供的相关联的存储器位置中的所选择的存储器块。

    Auditable distribution of a data file

    公开(公告)号:US08782173B2

    公开(公告)日:2014-07-15

    申请号:US13070429

    申请日:2011-03-23

    IPC分类号: G06F15/16

    CPC分类号: H04L67/10 H04L67/06

    摘要: Auditable data distribution from a server to clients is achieved as follows. The server delivers chunks of a data file, and identifiers of the chunks, to the clients. For each chunk of the data file received by the clients, a digest is generated by the client that received the chunk, using at least a part of the chunk and further data of the client that received the chunk. The further data is known to the server. The client that received this chunk sends the digest to the server, which receives the digest. The server determines an identity of the clink that received the chunk in question, by comparing the digest to the chunks that the server has sent and to the further data known to the server. The server stores the identity of the client that received the chunk.

    Method, device, computer program and computer program product for determining a representation of a signal
    25.
    发明授权
    Method, device, computer program and computer program product for determining a representation of a signal 有权
    用于确定信号表示的方法,装置,计算机程序和计算机程序产品

    公开(公告)号:US08756045B2

    公开(公告)日:2014-06-17

    申请号:US13126546

    申请日:2009-10-29

    IPC分类号: G06F17/50

    CPC分类号: H03M7/30 G06K9/6249 H04N19/90

    摘要: A method for determining a representation (y) of a signal (s) comprise selecting a predetermined number (m) of row vectors (v1, . . . , vm) from a predetermined measurement matrix (M). The predetermined measurement matrix (M) is predetermined dependent on a product of a predetermined Hadamard matrix or generalized Hadamard matrix (H) and a predetermined representation matrix(B). The predetermined representation matrix (B) represents a predetermined basis for the signal(s). The method further comprises determining a respective inner product of the signal (s) and each of the predetermined number (m) of selected row vectors (v1, . . . , vm) resulting in a predetermined number (m) of measurements (y1, . . . , ym) forming the representation (y) of the signal (s).

    摘要翻译: 用于确定信号的表示(y)的方法包括从预定测量矩阵(M)中选择预定数量(m)的行向量(v1,...,vm)。 预定测量矩阵(M)根据预定的哈达玛矩阵或广义哈达玛矩阵(H)和预定表示矩阵(B)的乘积来预定。 预定表示矩阵(B)表示信号的预定基准。 该方法还包括确定信号的相应内积和预定数量(m)个所选择的行向量(v1,...,vm)中的每一个导致预定数量(m)的测量(y1, ...,ym)形成信号的表示(y)。

    FILE SYSTEM SUPPORT FOR INERT FILES
    26.
    发明申请
    FILE SYSTEM SUPPORT FOR INERT FILES 审中-公开
    文件系统支持文件

    公开(公告)号:US20120084272A1

    公开(公告)日:2012-04-05

    申请号:US13249276

    申请日:2011-09-30

    IPC分类号: G06F7/00 G06F17/00

    CPC分类号: G06F16/13

    摘要: A method for storing a file on a data storage device. The method includes: storing the file in one of a first and a second file system; calculating a hash value; and storing the hash value on a storage device if it is stored in the second file system. A data processing system includes a first file system and a second file system wherein the data processing system calculates and stores a hash value when the file is stored in the second file system. A method for reading a file from a file system including: receiving a read command; reading a first hash value from a storage device; reading the file from the storage device; calculating a second hash value; returning the file when the first hash value equals the second hash value and returning an error when it does not equal the second hash value.

    摘要翻译: 一种用于在数据存储设备上存储文件的方法。 该方法包括:将文件存储在第一和第二文件系统之一中; 计算哈希值; 以及如果将所述散列值存储在所述第二文件系统中,则将所述散列值存储在存储设备上。 数据处理系统包括第一文件系统和第二文件系统,其中当文件存储在第二文件系统中时,数据处理系统计算并存储哈希值。 一种从文件系统读取文件的方法,包括:接收读取命令; 从存储设备读取第一哈希值; 从存储设备读取文件; 计算第二散列值; 当第一个哈希值等于第二个哈希值时返回文件,并且当它不等于第二个哈希值时返回错误。

    Index server support to file sharing applications
    27.
    发明授权
    Index server support to file sharing applications 失效
    索引服务器支持文件共享应用程序

    公开(公告)号:US08140645B2

    公开(公告)日:2012-03-20

    申请号:US12166068

    申请日:2008-07-01

    申请人: John G. Rooney

    发明人: John G. Rooney

    IPC分类号: G06F15/16

    CPC分类号: G06F17/30206

    摘要: An index server support for file sharing applications is disclosed. A way of retrieving an index server includes sending a request for investigating a hierarchical structure of index servers in a network to a known index server, intercepting the investigation request by the first index server that becomes aware of the investigation request, notifying an originator of the investigation request of the intercepting index server identity, dropping the intercepted request is dropped by the intercepting index server. The originator of the investigation request then registers the intercepting index server as addressee for future file querying requests.

    摘要翻译: 公开了一种用于文件共享应用的索引服务器支持。 检索索引服务器的一种方法包括向网络中发送调查索引服务器的层次结构的请求到已知的索引服务器,由第一索引服务器拦截成为了解调查请求的调查请求,通知发起者 截取索引服务器身份的调查请求,截取索引服务器删除截获的请求。 调查请求的发起者随后将拦截索引服务器作为收件人注册,以供将来的文件查询请求使用。

    INDEX SERVER SUPPORT TO FILE SHARING APPLICATIONS
    28.
    发明申请
    INDEX SERVER SUPPORT TO FILE SHARING APPLICATIONS 失效
    索引服务器支持文件共享应用程序

    公开(公告)号:US20080275885A1

    公开(公告)日:2008-11-06

    申请号:US12166068

    申请日:2008-07-01

    申请人: John G. Rooney

    发明人: John G. Rooney

    IPC分类号: G06F15/16 G06F17/30

    CPC分类号: G06F17/30206

    摘要: An index server support for file sharing applications is disclosed. A way of retrieving an index server includes sending a request for investigating a hierarchical structure of index servers in a network to a known index server, intercepting the investigation request by the first index server that becomes aware of the investigation request, notifying an originator of the investigation request of the intercepting index server identity, dropping the intercepted request is dropped by the intercepting index server. The originator of the investigation request then registers the intercepting index server as addressee for future file querying requests.

    摘要翻译: 公开了对文件共享应用的索引服务器支持。 检索索引服务器的一种方法包括向网络中发送调查索引服务器的层次结构的请求到已知的索引服务器,由第一索引服务器拦截成为了解调查请求的调查请求,通知发起者 截取索引服务器身份的调查请求,截取索引服务器删除截获的请求。 调查请求的发起者随后将拦截索引服务器作为收件人注册,以供将来的文件查询请求使用。

    Management of multiple software images with relocation of boot blocks
    30.
    发明授权
    Management of multiple software images with relocation of boot blocks 失效
    管理多个软件映像,重新定位引导块

    公开(公告)号:US08527728B2

    公开(公告)日:2013-09-03

    申请号:US13325299

    申请日:2011-12-14

    IPC分类号: G06F12/00

    CPC分类号: G06F9/441

    摘要: A method, system and computer program product for managing multiple software images in a data processing entity. At least part of the memory blocks of each of the software images is stored into a corresponding image portion of a mass memory. A current software image stored in a current image is selected. The memory blocks stored in boot locations of the current software image are relocated to a relocation portion of the mass memory. The boot blocks of the current software image are copied into the corresponding boot location. The data processing entity is booted from the boot blocks of the current software image in the corresponding boot locations and each request to access a selected memory block of the current software image by the access function is served.

    摘要翻译: 一种用于在数据处理实体中管理多个软件图像的方法,系统和计算机程序产品。 每个软件图像的至少部分存储块被存储到大容量存储器的相应图像部分中。 选择存储在当前图像中的当前软件图像。 存储在当前软件映像的引导位置的存储器块被重定位到大容量存储器的重定位部分。 当前软件映像的引导块被复制到相应的引导位置。 数据处理实体从相应引导位置的当前软件映像的引导块引导,并且通过访问功能访问当前软件映像的所选存储块的每个请求被提供。