-
1.发明申请公开(公告)号：US20090241190A1
公开(公告)日：2009-09-24
申请号：US12079013
申请日：2008-03-24
IPC分类号： G06F21/00
CPC分类号： H04L63/1416 , G06F21/53 , G06F21/552 , G06F21/564 , G06F21/566 , G06F21/577 , G06F2221/2101 , H04L63/1441 , H04L63/1491
摘要： A method of securing a network from vulnerability exploits, including the steps of a traffic analysis engine receiving a plurality of packets destined for an internal operating system; the traffic analysis engine selectively forwarding the packets to at least one virtual machine emulating the internal operating system; the virtual machine processing each forwarded packet; a rapid analysis engine identifying a malicious packet from the processed packets; and the rapid analysis engine creating a new signature to identify the malicious packet.
摘要翻译： 一种保护网络免受漏洞利用的方法，包括接收目的地为内部操作系统的多个分组的流量分析引擎的步骤; 流量分析引擎选择性地将分组转发到模拟内部操作系统的至少一个虚拟机; 虚拟机处理每个转发的数据包; 快速分析引擎，从处理的分组识别恶意分组; 和快速分析引擎创建新的签名来识别恶意数据包。
-
2.发明授权Methods and systems for managing network traffic within a virtual network system 有权用于管理虚拟网络系统内的网络流量的方法和系统公开(公告)号：US08130641B2
公开(公告)日：2012-03-06
申请号：US12403466
申请日：2009-03-13
IPC分类号： H04L12/26
CPC分类号： H04L41/00
摘要： Methods, systems and computer readable mediums storing computer executable programs for managing network traffic within a virtual network system. A virtual network system defined within a physical network device is identified. A first virtual network device defined within the virtual network system is identified. A virtual network appliance within the physical network device is defined. The virtual network appliance is communicatively coupled to the first virtual network device. The virtual network appliance is communicatively coupled to the virtual network system. The virtual network appliance is operable to manage network traffic associated with the first virtual network device.
摘要翻译： 存储用于管理虚拟网络系统内的网络流量的计算机可执行程序的方法，系统和计算机可读介质。 识别在物理网络设备内定义的虚拟网络系统。 识别在虚拟网络系统内定义的第一虚拟网络设备。 定义物理网络设备内的虚拟网络设备。 虚拟网络设备通信地耦合到第一虚拟网络设备。 虚拟网络设备通信地耦合到虚拟网络系统。 虚拟网络设备可操作以管理与第一虚拟网络设备相关联的网络流量。
-
公开(公告)号：US09264441B2
公开(公告)日：2016-02-16
申请号：US12079013
申请日：2008-03-24
CPC分类号： H04L63/1416 , G06F21/53 , G06F21/552 , G06F21/564 , G06F21/566 , G06F21/577 , G06F2221/2101 , H04L63/1441 , H04L63/1491
摘要： A method of securing a network from vulnerability exploits, including the steps of a traffic analysis engine receiving a plurality of packets destined for an internal operating system; the traffic analysis engine selectively forwarding the packets to at least one virtual machine emulating the internal operating system; the virtual machine processing each forwarded packet; a rapid analysis engine identifying a malicious packet from the processed packets; and the rapid analysis engine creating a new signature to identify the malicious packet.
-
4.发明申请Methods And Systems For Managing Network Traffic Within A Virtual Network System 有权在虚拟网络系统中管理网络流量的方法和系统公开(公告)号：US20100232290A1
公开(公告)日：2010-09-16
申请号：US12403466
申请日：2009-03-13
CPC分类号： H04L41/00
摘要： Methods, systems and computer readable mediums storing computer executable programs for managing network traffic within a virtual network system. A virtual network system defined within a physical network device is identified. A first virtual network device defined within the virtual network system is identified. A virtual network appliance within the physical network device is defined. The virtual network appliance is communicatively coupled to the first virtual network device. The virtual network appliance is communicatively coupled to the virtual network system. The virtual network appliance is operable to manage network traffic associated with the first virtual network device.
摘要翻译： 存储用于管理虚拟网络系统内的网络流量的计算机可执行程序的方法，系统和计算机可读介质。 识别在物理网络设备内定义的虚拟网络系统。 识别在虚拟网络系统内定义的第一虚拟网络设备。 定义物理网络设备内的虚拟网络设备。 虚拟网络设备通信地耦合到第一虚拟网络设备。 虚拟网络设备通信地耦合到虚拟网络系统。 虚拟网络设备可操作以管理与第一虚拟网络设备相关联的网络流量。
-
公开(公告)号：US20120113841A1
公开(公告)日：2012-05-10
申请号：US13260162
申请日：2009-10-28
IPC分类号： H04L12/26
CPC分类号： H04L61/2514 , H04L29/12367 , H04L43/18 , H04L63/1416
摘要： A method for detection of a network address translation (NAT) device in a network is described herein. An edge network device detects a first packet at an edge port of the edge network device. A second packet is detected at the edge port of the edge network device. It is determined whether a time to live (TTL) value associated with the first packet is different from a TTL value associated with the second packet. Where the TTL value associated with the first packet is different from a TTL value associated with the second packet, it is determined that a NAT device is connected to the edge port. Where the TTL value associated with the first packet is the same as a TTL value associated with the second packet, it is determined that a NAT device is not connected to the edge port.
摘要翻译： 本文描述了一种网络中的网络地址转换（NAT）设备的检测方法。 边缘网络设备在边缘网络设备的边缘端口处检测第一分组。 在边缘网络设备的边缘端口处检测到第二个分组。 确定与第一分组相关联的生存时间（TTL）值是否与与第二分组相关联的TTL值不同。 在与第一分组相关联的TTL值不同于与第二分组相关联的TTL值的情况下，确定NAT设备连接到边缘端口。 在与第一分组相关联的TTL值与第二分组相关联的TTL值相同的情况下，确定NAT设备未连接到边缘端口。
-
公开(公告)号：US20110107422A1
公开(公告)日：2011-05-05
申请号：US12609490
申请日：2009-10-30
IPC分类号： G06F11/00
CPC分类号： H04L63/145
摘要： Embodiments of the invention provide a network device for detecting email worms having a port for receiving packets and a processing engine configured to inspect packets received on the port, wherein if a predetermined number of packets sent from a client represent DNS queries, the client is identified as being infected.
摘要翻译： 本发明的实施例提供了一种用于检测具有用于接收分组的端口的电子邮件蠕虫的网络设备和被配置为检查在该端口上接收的分组的处理引擎，其中如果从客户端发送的预定数量的分组表示DNS查询，则识别该客户端 被感染。
-
公开(公告)号：US08917616B2
公开(公告)日：2014-12-23
申请号：US13260162
申请日：2009-10-28
CPC分类号： H04L61/2514 , H04L29/12367 , H04L43/18 , H04L63/1416
摘要： A method for detection of a network address translation (NAT) device in a network is described herein. An edge network device detects a first packet at an edge port of the edge network device. A second packet is detected at the edge port of the edge network device. It is determined whether a time to live (TTL) value associated with the first packet is different from a TTL value associated with the second packet. Where the TTL value associated with the first packet is different from a TTL value associated with the second packet, it is determined that a NAT device is connected to the edge port. Where the TTL value associated with the first packet is the same as a TTL value associated with the second packet, it is determined that a NAT device is not connected to the edge port.
摘要翻译： 本文描述了一种网络中的网络地址转换（NAT）设备的检测方法。 边缘网络设备在边缘网络设备的边缘端口处检测第一分组。 在边缘网络设备的边缘端口处检测到第二个分组。 确定与第一分组相关联的生存时间（TTL）值是否与与第二分组相关联的TTL值不同。 在与第一分组相关联的TTL值不同于与第二分组相关联的TTL值的情况下，确定NAT设备连接到边缘端口。 在与第一分组相关联的TTL值与第二分组相关联的TTL值相同的情况下，确定NAT设备未连接到边缘端口。
-
-
-
-
-
-
搜索结果
7 条记录 (耗时 0.025 秒)