System and method for mitigation of malicious network node activity
    1.
    发明授权
    System and method for mitigation of malicious network node activity 失效
    减轻恶意网络节点活动的系统和方法

    公开(公告)号:US07640338B2

    公开(公告)日:2009-12-29

    申请号:US11039758

    申请日:2005-01-18

    IPC分类号: G06F15/173

    摘要: Malicious network node activity and, in particular, denial of service attacks, may be mitigated by one or more practical mitigation mechanisms and mitigation mechanism combinations. Suitable protocol messages may be challenged with a challenge probe. A response to the challenge probe may be utilized to determine if received protocol messages are illegitimate, that is, originated by a malicious network node. Received protocol messages may be classified as questionable protocol messages. For efficiency, protocol message challenges may be limited to protocol message classified as questionable. A sequence number limit may be calculated as a function of receive window size. Transmission control protocol messages may be determined to be illegitimate by comparing the acknowledgement number field with the calculated sequence number limit. Randomized selection of source port numbers for transmission control protocol connections may also mitigate malicious network node activity by resulting in legitimate protocol message field values that are less predictable.

    摘要翻译: 恶意网络节点活动,特别是拒绝服务攻击可以通过一个或多个实际的缓解机制和缓解机制组合来缓解。 挑战探针可能会挑战合适的协议消息。 可以利用对挑战探测器的响应来确定接收到的协议消息是否是非法的,即由恶意网络节点发起。 接收到的协议消息可以被分类为可疑协议消息。 为了效率,协议消息挑战可能被限制为被分类为有问题的协议消息。 序列号限制可以作为接收窗口大小的函数来计算。 可以通过将确认号码字段与所计算的序列号限制进行比较来确定发送控制协议消息是不合法的。 用于传输控制协议连接的源端口号的随机选择还可以通过导致较不可预测的合法协议消息字段值来减轻恶意网络节点活动。

    Fair and dynamic disk input/output bandwidth distribution
    6.
    发明授权
    Fair and dynamic disk input/output bandwidth distribution 有权
    公平和动态的磁盘输入/输出带宽分配

    公开(公告)号:US08090903B2

    公开(公告)日:2012-01-03

    申请号:US12016901

    申请日:2008-01-18

    IPC分类号: G06F12/00

    摘要: Embodiments that facilitate the fair and dynamic distribution of disk input/output (IO) bandwidth are disclosed. In accordance with one embodiment, the method includes organizing one or more disk IO time intervals into one or more queues. The method further includes allocating a disk IO time interval to each queue. The allocation of a disk IO time interval to each queue is accomplished by equally distributing a disk IO cycle based on the number of queues. The one or more disk IO requests are then processed during the corresponding disk IO time interval.

    摘要翻译: 公开了有助于磁盘输入/输出(IO)带宽的公平和​​动态分配的实施例。 根据一个实施例,该方法包括将一个或多个磁盘IO时间间隔组织到一个或多个队列中。 该方法还包括为每个队列分配磁盘IO时间间隔。 通过基于队列数均等地分配磁盘IO周期来实现对每个队列的磁盘IO时间间隔的分配。 然后在相应的磁盘IO时间间隔期间处理一个或多个磁盘IO请求。

    Group based allocation of network bandwidth
    9.
    发明授权
    Group based allocation of network bandwidth 有权
    基于组的网络带宽分配

    公开(公告)号:US08102865B2

    公开(公告)日:2012-01-24

    申请号:US12122475

    申请日:2008-05-16

    IPC分类号: H04L12/28 G06F15/173

    摘要: The present invention extends to methods, systems, and computer program products for group based allocation of terminal server network bandwidth. Output packets are classified into groups based on classification criteria. Output packets for each group are queue into a corresponding queue. During a queue flush cycle each queue containing data is flushed for an essentially equal amount of time. Flushing each queue essentially equally reduces the negative impact that can otherwise result when a subset of sessions (or even a single session) request(s) a disproportional share of terminal server network bandwidth. Responsiveness can be further increased by distributing the essentially equal amount for each queue across the queue flush cycle.

    摘要翻译: 本发明扩展到用于基于组的终端服务器网络带宽分配的方法,系统和计算机程序产品。 输出数据包根据分类标准分为组。 每个组的输出数据包都被排队到相应的队列中。 在队列刷新循环期间,每个包含数据的队列刷新基本相等的时间量。 刷新每个队列基本上同样地减少了当会话(或甚至单个会话)的子集要求终端服务器网络带宽的不成比例的共享时可能导致的负面影响。 通过在队列刷新循环中为每个队列分配基本上相等的量来进一步提高响应性。

    REMOTE PRESENTATION OVER LOSSY TRANSPORT WITH FORWARD ERROR CORRECTION
    10.
    发明申请
    REMOTE PRESENTATION OVER LOSSY TRANSPORT WITH FORWARD ERROR CORRECTION 有权
    远程传输损失远程传输,具有前向纠错

    公开(公告)号:US20110219287A1

    公开(公告)日:2011-09-08

    申请号:US12718537

    申请日:2010-03-05

    IPC分类号: H03M13/07 G06F11/10

    CPC分类号: G06F11/10 H03M13/07

    摘要: In various embodiments, methods and systems are disclosed for integrating a remote presentation protocol with a datagram based transport. In one embodiment, an integrated protocol is configured to support lossless or reduced loss transport based on Retransmission (ARQ) combined with Forward Error Correction (FEC). The protocol involves encoding and decoding of data packets including feedback headers and FEC packets, continuous measurement of RTT, RTO and packet delay, dynamically evaluating loss probability to determine and adjust the ratio of FEC, congestion management based on dynamically detecting increase in packet delay, and fast data transmission rate ramp-up based on detecting a decrease in packet delay.

    摘要翻译: 在各种实施例中,公开了用于将远程呈现协议与基于数据报的传输集成的方法和系统。 在一个实施例中,集成协议被配置为支持基于与前向纠错(FEC)组合的重发(ARQ)的无损或减少的丢失传输。 该协议涉及数据包的编码和解码,包括反向报头和FEC分组,RTT连续测量,RTO和分组延迟,动态评估丢失概率,以确定和调整FEC的比例,基于动态检测分组延迟增加的拥塞管理, 并且基于检测到分组延迟的减少,快速数据传输速率上升。