Message processing
    1.
    发明授权

    公开(公告)号:US12132705B2

    公开(公告)日:2024-10-29

    申请号:US17275921

    申请日:2019-09-27

    Inventor: Xiaohong Zhang

    CPC classification number: H04L63/0254 H04L63/0236 H04L63/0263 H04L63/20

    Abstract: Disclosed are a packet processing method and apparatus applicable to a network device. The method comprises: receiving a first packet; determining the number of second packets received within a preset duration after the first packet passes basic detection successfully, wherein packet information of the second packet is identical to first packet information of the first packet; determining whether the number of the second packets received is greater than a preset number threshold; if so, removing a first table entry from a fast forwarding table, wherein the first table entry contains second packet information of the first packet; and performing attack detection on the first packet. With the application of the technical solution provided by an example of the present disclosure, the security risk in a network device is efficiently reduced.

    ADAPTIVE NETWORK SECURITY USING ZERO TRUST MICROSEGMENTATION

    公开(公告)号:US20240356981A1

    公开(公告)日:2024-10-24

    申请号:US18620711

    申请日:2024-03-28

    CPC classification number: H04L63/20 H04L63/0263 H04L63/1425

    Abstract: Zero trust and micro-segmentation techniques may be collectively used to enhance network security. To establish, refine, and enforce a zero-trust least-privileged policy, the network may be segmented to put each device of the network into a respective network of one, which forces all network traffic to pass through a zero-trust gatekeeper. The gatekeeper may then monitor and analyze the traffic to establish, refine, and enforce the zero-trust least-privileged policy, which reduces network access to only a limited set of network actions and/or paths. Using the gatekeeper, network traffic may be monitored to progressively establish the policy as well as to continually refine the policy. Recommended actions may be determined based on the analysis of the monitored network traffic and provided to the user to allow user feedback on the communication rules of zero-trust policy.

    Systems and methods for managing firewall rules and connections between different services

    公开(公告)号:US12081523B1

    公开(公告)日:2024-09-03

    申请号:US17592890

    申请日:2022-02-04

    CPC classification number: H04L63/0263 H04L63/20

    Abstract: A system for managing firewall rules between different services. In certain instances, the method includes receiving a discovery graph comprising a plurality of services and at least one application programming interface (API) dependency, wherein the plurality of services comprises a first service and a second service. In some instances, the method further includes determining whether the second service is permitted to receive an initial communication from the first service based upon the at least one API dependency included in the discovery graph. And, in response to determining the second service is permitted to receive the initial communication from the first service, the method can include establishing a first rule for a firewall between the first service and the second service, the first rule allowing the second service to receive the initial communication from the first service.

Patent Agency Ranking