Effective policies and policy enforcement using characterization of flow content and content-independent flow information
    31.
    发明授权
    Effective policies and policy enforcement using characterization of flow content and content-independent flow information 有权
    有效的政策和政策执行使用流量内容和与内容无关的流量信息的表征

    公开(公告)号:US07756997B2

    公开(公告)日:2010-07-13

    申请号:US11523764

    申请日:2006-09-19

    IPC分类号: G06F15/16

    CPC分类号: H04L47/10 H04L47/20

    摘要: Flexible network policies might be enforced by (a) obtaining a flow of network packets, (b) determining a content characteristic by characterizing content of the flow using bit-stream level statistics, (c) determining content-independent flow characteristics, port-independent flow characteristics, and/or application header-independent flow characteristics, and (d) enforcing a policy on the flow using both (1) the determined content characteristic and the (2) determined content-independent flow characteristics, port-independent flow characteristics, and/or application header-independent flow characteristics.

    摘要翻译: 灵活的网络策略可以通过(a)获得网络数据包流,(b)通过使用比特流级别统计来表征流的内容来确定内容特征,(c)确定与内容无关的流特性,端口独立 流量特性和/或应用头独立流量特性,以及(d)使用(1)所确定的内容特征和(2)确定的独立于内容的流特性,与端口无关的流特性, 和/或应用程序头独立的流程特性。

    Reassembling fragmented files or documents in a fragment order-independent manner
    32.
    发明授权
    Reassembling fragmented files or documents in a fragment order-independent manner 有权
    以片段顺序独立的方式重新组装碎片文件或文档

    公开(公告)号:US07756899B2

    公开(公告)日:2010-07-13

    申请号:US11523728

    申请日:2006-09-19

    IPC分类号: G06F7/00 G06F17/30

    CPC分类号: G06F21/00

    摘要: Files can be reassembled from fragments by (a) accepting adjacency scores for each pair of fragments from a set of fragments, (b) identifying header fragments from the set of fragments, and (c) for each of the header fragments, (i) setting a current fragment to the identified header fragment, (ii) selecting, from any of the fragments not identified as a header fragment, a fragment with a best adjacency score with the current fragment, (iii) determining if the selected fragment has a better adjacency score with any of the other fragments not identified as a header than with the current fragment, (iv) if so, then (A) selecting another fragment, from any of the fragments not identified as a header fragment, a fragment with a next best adjacency score with the current fragment, and continuing, and otherwise (A) adding the selected fragment to a reassembly path started with the identified header fragment, and (B) setting the current fragment to the selected fragment, and continuing until the file is reconstructed.

    摘要翻译: 可以通过以下方式来重新组合文件:(a)从一组片段中接收每对片段的邻接得分,(b)识别该片段集合中的标题片段,以及(c)对于每个标题片段,(i) 将当前片段设置为所识别的标题片段,(ii)从未被标识为标题片段的任何片段中选择具有与当前片段的最佳邻接得分的片段,(iii)确定所选片段是否具有更好的 (iv)如果是,则(A)从未被标识为标题片段的任何片段中选择另一个片段,具有下一个片段的片段 (A)将所选择的片段添加到由所识别的标题片段开始的重组路径中,以及(B)将当前片段设置为所选择的片段,并且继续到第 e文件被重建。

    Facilitating storage and querying of payload attribution information
    33.
    发明申请
    Facilitating storage and querying of payload attribution information 失效
    促进有效载荷归属信息的存储和查询

    公开(公告)号:US20060072582A1

    公开(公告)日:2006-04-06

    申请号:US11236309

    申请日:2005-09-27

    IPC分类号: H04L12/56

    摘要: A hierarchical data structure of digested payload information (e.g., information within a payload, or information spanning two or more payloads) allows a payload excerpt to be attributed to earlier network flow information. These compact data structures permit data storage reduction, while permitting efficient query processing with a low level of false positives. One example of such a compact data structure is a hierarchical Bloom filter. Different layers of the hierarchy may correspond to different block sizes.

    摘要翻译: 消化的有效载荷信息(例如,有效载荷内的信息或跨越两个或多个有效载荷的信息)的分层数据结构允许有效载荷摘录归因于较早的网络流信息。 这些紧凑的数据结构允许减少数据存储,同时允许以低水平的误报进行有效的查询处理。 这种紧凑数据结构的一个例子是分层布隆过滤器。 层次结构的不同层可以对应于不同的块大小。