-
1.发明授权Automated disambiguation of fixed-serverport-based applications from ephemeral applications 有权从临时应用程序自动消除基于固定服务器端口的应用程序公开(公告)号：US07975044B1
公开(公告)日：2011-07-05
申请号：US11317256
申请日：2005-12-27
IPC分类号： G06F15/173
CPC分类号： G06F9/54 , H04L43/00 , H04L43/026 , H04L69/326
摘要： Provided are methods for partitioning communication data in a network and disambiguating fixed or non-ephemeral communication data from ephemeral communication data and services. In one example, kmeans data clustering is used to partition or cluster server ports based on a location of the server ports in a 2-dimensional space. The location of the server ports may be based on a number of connections per server port and the number of servers using that port.
摘要翻译： 提供了用于分割网络中的通信数据并且从短暂通信数据和服务中消除固定或非短暂通信数据的方法。 在一个示例中，kmeans数据集群用于基于二维空间中的服务器端口的位置对服务器端口进行分区或集群。 服务器端口的位置可以基于每个服务器端口的多个连接以及使用该端口的服务器数量。
-
公开(公告)号：US08453227B2
公开(公告)日：2013-05-28
申请号：US11616325
申请日：2006-12-27
申请人： William A. Aiello , Charles Robert Kalmanek, Jr. , William J. Leighton, III , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus E. Van Der Merwe
发明人： William A. Aiello , Charles Robert Kalmanek, Jr. , William J. Leighton, III , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus E. Van Der Merwe
IPC分类号： H04L29/06
CPC分类号： H04W28/00 , H04L43/16 , H04L63/0236 , H04L63/0254 , H04L63/0263 , H04L63/029
摘要： An application provisioning device may be used to manage a profile of a host and provide data corresponding to a selected application for installation at a host. A reverse firewall may use the profile of the host to determine whether to allow or block particular network communication from an application running on the host. An indication of a selected application may be received at the application provisioning device. Configuration information may also be received at the application provisioning device. The application provisioning server may request an update to the profile of a host and transmit such a request. The profile may be updated to reflect the configuration information and/or information of the selected application. Data corresponding to the selected application may be updated and transmitted to a host computer, where it may be installed. Therefore, the installed application running on the host may operate without being prematurely blocked by the reverse firewall.
摘要翻译： 应用配置设备可以用于管理主机的配置文件，并且提供与所选择的应用相对应的数据以在主机上安装。 反向防火墙可以使用主机的简档来确定是否允许或阻止来自在主机上运行的应用的特定网络通信。 可以在应用供应设备处接收所选择的应用的指示。 还可以在应用配置设备处接收配置信息。 应用供应服务器可以请求对主机的配置文件的更新并传送这样的请求。 可以更新配置文件以反映所选择的应用的配置信息和/或信息。 与所选择的应用相对应的数据可以被更新并发送到可以安装在其上的主计算机。 因此，主机上运行的已安装应用程序可能会运行，而不会被反向防火墙过早阻止。
-
公开(公告)号：US20120281586A1
公开(公告)日：2012-11-08
申请号：US13553220
申请日：2012-07-19
申请人： Christopher J. Chase , Nicholas G. Duffield , Albert G. Greenberg , Oliver Spatscheck , Jacobus E. Van der Merwe , Neal Shackleton
发明人： Christopher J. Chase , Nicholas G. Duffield , Albert G. Greenberg , Oliver Spatscheck , Jacobus E. Van der Merwe , Neal Shackleton
IPC分类号： H04L12/26
CPC分类号： H04L43/08 , H04L41/06 , H04L41/0631 , H04L41/0681 , H04L43/0876 , H04L43/12 , H04L43/14 , H04L43/16 , H04L45/02 , H04L45/42 , H04L45/50
摘要： Certain exemplary embodiments comprise a method comprising: for selected traffic that enters a backbone network via a predetermined ingress point and is addressed to a predetermined destination, via a dynamic tunnel, automatically diverting the selected traffic from the predetermined ingress point to a processing complex; and automatically forwarding the selected traffic from the processing complex toward the predetermined destination.
摘要翻译： 某些示例性实施例包括一种方法，其包括：对于经由预定入口点进入骨干网络并且经由动态隧道寻址到预定目的地的所选业务，将所选择的业务量从所述预定入口点自动转移到处理复合体; 并且将所选择的流量自动地从处理复合体转发到预定目的地。
-
公开(公告)号：US08228818B2
公开(公告)日：2012-07-24
申请号：US11237553
申请日：2005-09-28
申请人： Christopher J. Chase , Nicholas G. Duffield , Albert G. Greenberg , Oliver Spatscheck , Jacobus E. Van der Merwe , Neal Shackleton
发明人： Christopher J. Chase , Nicholas G. Duffield , Albert G. Greenberg , Oliver Spatscheck , Jacobus E. Van der Merwe , Neal Shackleton
IPC分类号： G01R31/08 , G06F11/00 , G08C15/00 , H04J1/16 , H04J3/14 , H04L1/00 , H04L12/26 , H04L12/28 , H04L12/56
CPC分类号： H04L43/08 , H04L41/06 , H04L41/0631 , H04L41/0681 , H04L43/0876 , H04L43/12 , H04L43/14 , H04L43/16 , H04L45/02 , H04L45/42 , H04L45/50
摘要： Certain exemplary embodiments comprise a method comprising: for selected traffic that enters a backbone network via a predetermined ingress point and is addressed to a predetermined destination, via a dynamic tunnel, automatically diverting the selected traffic from the predetermined ingress point to a processing complex; and automatically forwarding the selected traffic from the processing complex toward the predetermined destination.
摘要翻译： 某些示例性实施例包括一种方法，其包括：对于经由预定入口点进入骨干网络并且经由动态隧道寻址到预定目的地的所选业务，将所选择的业务量从所述预定入口点自动转移到处理复合体; 并且将所选择的流量自动地从处理复合体转发到预定目的地。
-
公开(公告)号：US08730807B2
公开(公告)日：2014-05-20
申请号：US13553220
申请日：2012-07-19
申请人： Christopher J. Chase , Nicholas G. Duffield , Albert G. Greenberg , Oliver Spatscheck , Jacobus E. Van der Merwe , Neal Shackleton
发明人： Christopher J. Chase , Nicholas G. Duffield , Albert G. Greenberg , Oliver Spatscheck , Jacobus E. Van der Merwe , Neal Shackleton
CPC分类号： H04L43/08 , H04L41/06 , H04L41/0631 , H04L41/0681 , H04L43/0876 , H04L43/12 , H04L43/14 , H04L43/16 , H04L45/02 , H04L45/42 , H04L45/50
摘要： Certain exemplary embodiments comprise a method comprising: for selected traffic that enters a backbone network via a predetermined ingress point and is addressed to a predetermined destination, via a dynamic tunnel, automatically diverting the selected traffic from the predetermined ingress point to a processing complex; and automatically forwarding the selected traffic from the processing complex toward the predetermined destination.
摘要翻译： 某些示例性实施例包括一种方法，其包括：对于经由预定入口点进入骨干网络并且经由动态隧道寻址到预定目的地的所选业务，将所选择的业务量从所述预定入口点自动转移到处理复合体; 并且将所选择的流量自动地从处理复合体转发到预定目的地。
-
公开(公告)号：US08346960B2
公开(公告)日：2013-01-01
申请号：US11234433
申请日：2005-09-23
IPC分类号： G06F15/16 , G06F15/173 , G06F12/14 , H04L29/06
CPC分类号： H04L63/1416 , H04L63/1441 , H04L63/1458 , H04L2463/141
摘要： Certain exemplary embodiments comprise a method comprising: within a backbone network: for backbone network traffic addressed to a particular target and comprising attack traffic and non-attack traffic, the attack traffic simultaneously carried by the backbone network with the non-attack traffic: redirecting at least a portion of the attack traffic to a scrubbing complex; and allowing at least a portion of the non-attack traffic to continue to the particular target without redirection to the scrubbing complex.
-
公开(公告)号：US20060190998A1
公开(公告)日：2006-08-24
申请号：US11290976
申请日：2005-11-30
申请人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
发明人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
IPC分类号： G06F15/16
CPC分类号： H04W28/00 , H04L43/16 , H04L63/0236 , H04L63/0254 , H04L63/0263 , H04L63/029
摘要： A reverse firewall for removing undesirable traffic from a computing network, such as a virtual private network (VPN), is disclosed. The reverse firewall uses firewall rules that may be determined and maintained within the enterprise network to control communication sent between computers in the computing network. The reverse firewall rules may be used to identify the communications between computers in the network that are undesirable and/or intrusive. For example, a computer in a network that is infected with a worm or that is surreptitiously hosting a denial-of-service attack may be identified by the reverse firewall and quarantined. The reverse firewall may be implemented in hardware and/or software.
摘要翻译： 公开了用于从诸如虚拟专用网（VPN）的计算网络去除不期望的业务的反向防火墙。 反向防火墙使用可以在企业网络内确定和维护的防火墙规则来控制计算网络中计算机之间发送的通信。 反向防火墙规则可用于识别网络中不希望的和/或侵入的计算机之间的通信。 例如，网络中受感染蠕虫或暗中托管拒绝服务攻击的计算机可能由反向防火墙识别，并被隔离。 反向防火墙可以在硬件和/或软件中实现。
-
公开(公告)号：US20070204338A1
公开(公告)日：2007-08-30
申请号：US11616325
申请日：2006-12-27
申请人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
发明人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
IPC分类号： G06F15/16
CPC分类号： H04W28/00 , H04L43/16 , H04L63/0236 , H04L63/0254 , H04L63/0263 , H04L63/029
摘要： An application provisioning device may be used to manage a profile of a host and provide data corresponding to a selected application for installation at a host. A reverse firewall may use the profile of the host to determine whether to allow or block particular network communication from an application running on the host. An indication of a selected application may be received at the application provisioning device. Configuration information may also be received at the application provisioning device. The application provisioning server may request an update to the profile of a host and transmit such a request. The profile may be updated to reflect the configuration information and/or information of the selected application. Data corresponding to the selected application may be updated and transmitted to a host computer, where it may be installed. Therefore, the installed application running on the host may operate without being prematurely blocked by the reverse firewall.
摘要翻译： 应用配置设备可以用于管理主机的配置文件，并且提供与所选择的应用相对应的数据以在主机上安装。 反向防火墙可以使用主机的简档来确定是否允许或阻止来自在主机上运行的应用的特定网络通信。 可以在应用供应设备处接收所选择的应用的指示。 还可以在应用配置设备处接收配置信息。 应用供应服务器可以请求对主机的配置文件的更新并传送这样的请求。 可以更新配置文件以反映所选择的应用的配置信息和/或信息。 与所选择的应用相对应的数据可以被更新并发送到可以安装在其上的主计算机。 因此，主机上运行的已安装应用程序可能会运行，而不会被反向防火墙过早阻止。
-
9.发明授权System and method to guide active participation in peer-to-peer systems with passive monitoring environment 有权指导主动参与点对点系统与被动监控环境的系统和方法公开(公告)号：US08959243B2
公开(公告)日：2015-02-17
申请号：US12325703
申请日：2008-12-01
CPC分类号： H04L12/66
摘要： A method includes identifying shared content by inspecting a peer-to-peer traffic flow and identifying source peers providing the shared content, and requesting the shared content from the source peers. The method further includes receiving requests for the shared content from requesting peers, identifying requesting peers based on the requests for the shared content, and providing the shared content to a local subset of the requesting peers.
摘要翻译： 一种方法包括通过检查对等业务流和识别提供共享内容的源对等体以及从源对等体请求共享内容来识别共享内容。 该方法还包括从请求对等体接收对共享内容的请求，基于对共享内容的请求来识别请求对等体，以及将共享内容提供给请求对等体的本地子集。
-
公开(公告)号：US08880614B1
公开(公告)日：2014-11-04
申请号：US11598582
申请日：2006-11-13
IPC分类号： H04L12/58
CPC分类号： H04L51/12
摘要： A method and apparatus for providing protection for mail servers in networks such as the packet networks are disclosed. For example, the present method detects a mail server is reaching its processing limit. The method then selectively limits connections to the mail server from a plurality of source nodes based on a spam index associated with each of the source nodes.
摘要翻译： 公开了一种在诸如分组网络的网络中为邮件服务器提供保护的方法和装置。 例如，本方法检测到邮件服务器正在达到其处理限制。 该方法然后基于与每个源节点相关联的垃圾邮件索引来选择性地限制来自多个源节点的到邮件服务器的连接。
-
-
-
-
-
-
-
-
-
搜索结果
161 条记录 (耗时 0.022 秒)
