公开(公告)号：US08594131B1

公开(公告)日：2013-11-26

申请号：US13196454

申请日：2011-08-02

申请人： John E. Gmuender ,  Iosif Harutyunov ,  Manish Marthur ,  Ilya Minkin ,  Huy Minh Nguyen

发明人： John E. Gmuender ,  Iosif Harutyunov ,  Manish Marthur ,  Ilya Minkin ,  Huy Minh Nguyen

IPC分类号： H04L12/28

CPC分类号： G06F9/546 ,  G06F9/466 ,  G06F9/4881 ,  G06F9/5044 ,  H04L45/60

摘要： A method for packet processing on a multi-core processor. According to one embodiment of the invention, a first set of one or more processing cores are configured to include the capability to process packets belonging to a first set of one or more packet types, and a second set of one or more processing cores are configured to include the capability to process packets belonging to a second set of one or more packet types, where the second set of packet types is a subset of the first set of packet types. Packets belonging to the first set of packet types are processed at a processing core of either the first or second set of processing cores. Packets belonging to the second set of packet types are processed at a processing core of the first set of processing cores.

公开(公告)号：US07990974B1

公开(公告)日：2011-08-02

申请号：US12240892

申请日：2008-09-29

申请人： John E. Gmuender ,  Iosif Harutyunov ,  Manish Marthur ,  Ilya Minkin ,  Huy Minh Nguyen

发明人： John E. Gmuender ,  Iosif Harutyunov ,  Manish Marthur ,  Ilya Minkin ,  Huy Minh Nguyen

IPC分类号： H04L12/56

CPC分类号： G06F9/546 ,  G06F9/466 ,  G06F9/4881 ,  G06F9/5044 ,  H04L45/60

摘要： A method for packet processing on a multi-core processor. According to one embodiment of the invention, a first set of one or more processing cores are configured to include the capability to process packets belonging to a first set of one or more packet types, and a second set of one or more processing cores are configured to include the capability to process packets belonging to a second set of one or more packet types, where the second set of packet types is a subset of the first set of packet types. Packets belonging to the first set of packet types are processed at a processing core of either the first or second set of processing cores. Packets belonging to the second set of packet types are processed at a processing core of the first set of processing cores.

摘要翻译： 一种在多核处理器上进行数据包处理的方法。 根据本发明的一个实施例，第一组一个或多个处理核心被配置为包括处理属于一个或多个分组类型的第一组的分组的能力，并且配置一个或多个处理核心的第二组 以包括处理属于一个或多个分组类型的第二组的分组的能力，其中第二组分组类型是第一组分组类型的子集。 属于第一组分组类型的分组在第一或第二组处理核心的处理核心处被处理。 属于第二组分组类型的分组在第一组处理核心的处理核心处被处理。

公开(公告)号：US08813221B1

公开(公告)日：2014-08-19

申请号：US12238205

申请日：2008-09-25

申请人： Aleksandr Dubrovsky ,  John E. Gmuender ,  Huy Minh Nguyen ,  Ilya Minkin ,  Justin M. Brady ,  Boris Yanovsky

发明人： Aleksandr Dubrovsky ,  John E. Gmuender ,  Huy Minh Nguyen ,  Ilya Minkin ,  Justin M. Brady ,  Boris Yanovsky

IPC分类号： G06F11/00

CPC分类号： H04L63/1408

摘要： Some embodiments of reassembly-free deep packet inspection (DPI) on multi-core hardware have been presented. In one embodiment, a set of packets of one or more files is received at a networked device from one or more connections. Each packet is scanned using one of a set of processing cores in the networked device without buffering the one or more files in the networked device. Furthermore, the set of processing cores may scan the packets substantially concurrently.

摘要翻译： 已经提出了在多核硬件上重新组装的深度分组检测（DPI）的一些实施例。 在一个实施例中，一个或多个文件的一组分组在一个联网的设备上从一个或多个连接接收。 使用联网设备中的一组处理核心之一扫描每个数据包，而不会缓冲联网设备中的一个或多个文件。 此外，一组处理核心可以基本同时扫描分组。

公开(公告)号：US07752336B2

公开(公告)日：2010-07-06

申请号：US12143210

申请日：2008-06-20

申请人： John E. Gmuender ,  Huy Minh Nguyen ,  Joseph H. Levy ,  Michael B. Massing ,  Zhong Chen ,  David M. Telehowski

发明人： John E. Gmuender ,  Huy Minh Nguyen ,  Joseph H. Levy ,  Michael B. Massing ,  Zhong Chen ,  David M. Telehowski

IPC分类号： G06F15/16

CPC分类号： H04L63/0281 ,  H04L29/06 ,  H04L29/12009 ,  H04L29/12594 ,  H04L61/301 ,  H04L63/0428 ,  H04L63/168 ,  H04L67/02 ,  H04L67/2804 ,  H04L69/329

摘要： A method and apparatus for resource locator identifier rewrite have been presented. A security device receives from a resource host over a non-secure hypertext transfer protocol (HTTP) session a response to a request received from a client over a secure HTTP session. The response includes a uniform resource locator (URL) that is supposed to be for a resource host, but the URL does not designate a secure resource access protocol and the resource host requires the secure resource access protocol. The URL is located in the response and modified to designate the secure resource access protocol. After modification, the response is transmitted via the secure resource access protocol session to the client.

摘要翻译： 已经提出了用于资源定位器标识符重写的方法和装置。 安全设备通过非安全超文本传输​​协议（HTTP）会话从资源主机接收对通过安全HTTP会话从客户端接收的请求的响应。 该响应包括一个假定为资源主机的统一资源定位符（URL），但该URL不指定安全资源访问协议，资源主机需要安全资源访问协议。 URL位于响应中，并被修改为指定安全资源访问协议。 修改后，通过安全资源访问协议会话向客户端发送响应。

公开(公告)号：US20130227070A1

公开(公告)日：2013-08-29

申请号：US13850002

申请日：2013-03-25

申请人： John E. Gmuender ,  Huy Minh Nguyen ,  Joseph H. Levy ,  Michael B. Massing ,  Zhong Chen ,  David M. Telehowski

发明人： John E. Gmuender ,  Huy Minh Nguyen ,  Joseph H. Levy ,  Michael B. Massing ,  Zhong Chen ,  David M. Telehowski

IPC分类号： H04L29/08

CPC分类号： H04L63/0281 ,  H04L29/06 ,  H04L29/12009 ,  H04L29/12594 ,  H04L61/301 ,  H04L63/0428 ,  H04L63/168 ,  H04L67/02 ,  H04L67/2804 ,  H04L69/329

摘要： A method and apparatus for resource locator identifier rewrite have been presented. A security device receives from a resource host over a non-secure hypertext transfer protocol (HTTP) session a response to a request received from a client over a secure HTTP session. The response includes a uniform resource locator (URL) that is supposed to be for a resource host, but the URL does not designate a secure resource access protocol and the resource host requires the secure resource access protocol. The URL is located in the response and modified to designate the secure resource access protocol. After modification, the response is transmitted via the secure resource access protocol session to the client.

公开(公告)号：US07412539B2

公开(公告)日：2008-08-12

申请号：US10331806

申请日：2002-12-30

申请人： John E. Gmuender ,  Huy Minh Nguyen ,  Joseph H. Levy ,  Michael B. Massing ,  Zhong Chen ,  David M. Telehowski

发明人： John E. Gmuender ,  Huy Minh Nguyen ,  Joseph H. Levy ,  Michael B. Massing ,  Zhong Chen ,  David M. Telehowski

IPC分类号： G06F15/16

CPC分类号： H04L63/0281 ,  H04L29/06 ,  H04L29/12009 ,  H04L29/12594 ,  H04L61/301 ,  H04L63/0428 ,  H04L63/168 ,  H04L67/02 ,  H04L67/2804 ,  H04L69/329

摘要： A method for resource locator identifier rewrite in which a network security proxy insures that a resource locator identifier of a response indicates a resource access protocol that should govern a corresponding request. A security device receives from a resource host over a non-secure hypertext transfer protocol (HTTP) session a response to a request received from a client over a secure HTTP session. The response includes a uniform resource locator (URL) that is supposed to be for a resource host, but the URL does not designate a secure resource access protocol and the resource host requires the secure resource access protocol. The URL is located in the response and modified to designate the secure resource access protocol. After modification, the response is transmitted via the secure resource access protocol session to the client.

摘要翻译： 一种用于资源定位器标识符重写的方法，其中网络安全代理确保响应的资源定位符标识符指示应该管理相应请求的资源访问协议。 安全设备通过非安全超文本传输​​协议（HTTP）会话从资源主机接收对通过安全HTTP会话从客户端接收的请求的响应。 该响应包括一个假定为资源主机的统一资源定位符（URL），但该URL不指定安全资源访问协议，资源主机需要安全资源访问协议。 URL位于响应中，并被修改为指定安全资源访问协议。 修改后，通过安全资源访问协议会话向客户端发送响应。

公开(公告)号：US08429301B2

公开(公告)日：2013-04-23

申请号：US12785364

申请日：2010-05-21

申请人： John E. Gmuender ,  Huy Minh Nguyen ,  Joseph H. Levy ,  Michael B. Massing ,  Zhong Chen ,  David M. Telehowski

发明人： John E. Gmuender ,  Huy Minh Nguyen ,  Joseph H. Levy ,  Michael B. Massing ,  Zhong Chen ,  David M. Telehowski

IPC分类号： G06F15/16

CPC分类号： H04L63/0281 ,  H04L29/06 ,  H04L29/12009 ,  H04L29/12594 ,  H04L61/301 ,  H04L63/0428 ,  H04L63/168 ,  H04L67/02 ,  H04L67/2804 ,  H04L69/329

摘要： A method and apparatus for resource locator identifier rewrite have been presented. A security device receives from a resource host over a non-secure hypertext transfer protocol (HTTP) session a response to a request received from a client over a secure HTTP session. The response includes a uniform resource locator (URL) that is supposed to be for a resource host, but the URL does not designate a secure resource access protocol and the resource host requires the secure resource access protocol. The URL is located in the response and modified to designate the secure resource access protocol. After modification, the response is transmitted via the secure resource access protocol session to the client.

公开(公告)号：US20100235543A1

公开(公告)日：2010-09-16

申请号：US12785364

申请日：2010-05-21

申请人： John E. Gmuender ,  Huy Minh Nguyen ,  Joseph H. Levy ,  Michael B. Massing ,  Zhong Chen ,  David M. Telehowski

发明人： John E. Gmuender ,  Huy Minh Nguyen ,  Joseph H. Levy ,  Michael B. Massing ,  Zhong Chen ,  David M. Telehowski

IPC分类号： G06F15/16

CPC分类号： H04L63/0281 ,  H04L29/06 ,  H04L29/12009 ,  H04L29/12594 ,  H04L61/301 ,  H04L63/0428 ,  H04L63/168 ,  H04L67/02 ,  H04L67/2804 ,  H04L69/329

摘要： A method and apparatus for resource locator identifier rewrite have been presented. A security device receives from a resource host over a non-secure hypertext transfer protocol (HTTP) session a response to a request received from a client over a secure HTTP session. The response includes a uniform resource locator (URL) that is supposed to be for a resource host, but the URL does not designate a secure resource access protocol and the resource host requires the secure resource access protocol. The URL is located in the response and modified to designate the secure resource access protocol. After modification, the response is transmitted via the secure resource access protocol session to the client.

摘要翻译： 已经提出了用于资源定位器标识符重写的方法和装置。 安全设备通过非安全超文本传输​​协议（HTTP）会话从资源主机接收对通过安全HTTP会话从客户端接收的请求的响应。 该响应包括一个假定为资源主机的统一资源定位符（URL），但该URL不指定安全资源访问协议，资源主机需要安全资源访问协议。 URL位于响应中，并被修改为指定安全资源访问协议。 修改后，通过安全资源访问协议会话向客户端发送响应。

公开(公告)号：US20080256611A1

公开(公告)日：2008-10-16

申请号：US12143210

申请日：2008-06-20

申请人： John E. Gmuender ,  Huy Minh Nguyen ,  Joseph H. Levy ,  Michael B. Massing ,  Zhong Chen ,  David M. Telehowski

发明人： John E. Gmuender ,  Huy Minh Nguyen ,  Joseph H. Levy ,  Michael B. Massing ,  Zhong Chen ,  David M. Telehowski

IPC分类号： H04L9/00 ,  G06F15/16

CPC分类号： H04L63/0281 ,  H04L29/06 ,  H04L29/12009 ,  H04L29/12594 ,  H04L61/301 ,  H04L63/0428 ,  H04L63/168 ,  H04L67/02 ,  H04L67/2804 ,  H04L69/329

摘要： A method and apparatus for resource locator identifier rewrite have been presented. A security device receives from a resource host over a non-secure hypertext transfer protocol (HTTP) session a response to a request received from a client over a secure HTTP session. The response includes a uniform resource locator (URL) that is supposed to be for a resource host, but the URL does not designate a secure resource access protocol and the resource host requires the secure resource access protocol. The URL is located in the response and modified to designate the secure resource access protocol. After modification, the response is transmitted via the secure resource access protocol session to the client.

摘要翻译： 已经提出了用于资源定位器标识符重写的方法和装置。 安全设备通过非安全超文本传输​​协议（HTTP）会话从资源主机接收对通过安全HTTP会话从客户端接收的请求的响应。 该响应包括一个假定为资源主机的统一资源定位符（URL），但该URL不指定安全资源访问协议，资源主机需要安全资源访问协议。 URL位于响应中，并被修改为指定安全资源访问协议。 修改后，通过安全资源访问协议会话向客户端发送响应。

公开(公告)号：US08015169B1

公开(公告)日：2011-09-06

申请号：US10853557

申请日：2004-05-24

申请人： John E. Gmuender ,  Alex M. Dubrovsky ,  Nikolay V. Popov ,  Alexander Shor ,  Roman Yanovsky ,  Shunhui Zhu ,  Boris Yanovsky

发明人： John E. Gmuender ,  Alex M. Dubrovsky ,  Nikolay V. Popov ,  Alexander Shor ,  Roman Yanovsky ,  Shunhui Zhu ,  Boris Yanovsky

IPC分类号： G06F7/00 ,  G06F17/30

CPC分类号： H04L67/32 ,  G06F17/30861 ,  G06F17/30867 ,  H04L61/1511 ,  H04L63/0281 ,  H04L63/0428 ,  H04L67/02

摘要： A method and an apparatus request web pages and content rating information thereof have been disclosed. In one embodiment, the method includes receiving a request from a user for a web page, retrieving content rating of the web page in response to the request, and fetching the web page substantially simultaneously with the retrieving of the content rating in response to the request. Other embodiments have been claimed and described.

摘要翻译： 已经公开了一种方法和装置请求其网页和其内容评级信息。 在一个实施例中，该方法包括从网页接收针对网页的请求，响应于该请求检索网页的内容评级，以及响应于该请求，基本同时检索该内容评级，同时获取该网页 。 已经要求和描述了其它实施例。