专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明授权

US08166534B2 Incorporating network connection security levels into firewall rules 有权
标题翻译：将网络连接安全级别纳入防火墙规则
公开(公告)号：US08166534B2
公开(公告)日：2012-04-24
申请号：US11804423
申请日：2007-05-18
申请人： Eran Yariv , Gerardo Diaz Cuellar , David Abzarian
发明人： Eran Yariv , Gerardo Diaz Cuellar , David Abzarian
IPC分类号： H04L29/06
CPC分类号： H04L63/0227 , H04L63/126
摘要： Embodiments of the present invention are directed to establishing and/or implementing firewall rules that may employ parameters based on connection security levels for a connection between devices. A firewall may thus provide greater granularity of security and integrate more closely with other security methods to provide better overall security with fewer conflicts.
摘要翻译：本发明的实施例涉及建立和/或实施防火墙规则，其可以基于用于设备之间的连接的连接安全级别来采用参数。因此，防火墙可以提供更大的安全性粒度，并与其他安全方法更紧密地集成，以更少的冲突提供更好的整体安全性。

22. 发明申请

US20080282313A1 MULTI-PROFILE INTERFACE SPECIFIC NETWORK SECURITY POLICIES 有权
标题翻译：多配置界面特定网络安全策略
公开(公告)号：US20080282313A1
公开(公告)日：2008-11-13
申请号：US11746478
申请日：2007-05-09
申请人： Gerardo Diaz-Cuellar , David Abzarian , Lokesh Srinivas Koppolu , Eran Yariv
发明人： Gerardo Diaz-Cuellar , David Abzarian , Lokesh Srinivas Koppolu , Eran Yariv
IPC分类号： H04L9/00
CPC分类号： H04L63/20 , H04L63/0428 , H04L63/08
摘要： Computer-readable medium having a data structure stored thereon for defining a schema for expressing a network security policy. The data structure includes a first data field including data defining a parameter to be applied based on the network security policy. The network security policy defines at least one of the following: a firewall rule and a connection security rule. The data structure also includes a second data field having data specifying restrictions of the parameter included in the first data field. The parameter in the first data field and the restrictions in the second data field form the schema for expressing the network security policy to be processed. The network security policy manages communications between a computing device and at least one other computing device.
摘要翻译：计算机可读介质，其上存储有用于定义表示网络安全策略的模式的数据结构。数据结构包括第一数据字段，包括基于网络安全策略定义要应用的参数的数据。网络安全策略定义以下至少一个：防火墙规则和连接安全规则。数据结构还包括具有指定包含在第一数据字段中的参数的限制的数据的第二数据字段。第一数据字段中的参数和第二数据字段中的限制形成用于表示要处理的网络安全策略的模式。网络安全策略管理计算设备与至少一个其他计算设备之间的通信。

23. 发明授权

US08776208B2 Incorporating network connection security levels into firewall rules 有权
标题翻译：将网络连接安全级别纳入防火墙规则
公开(公告)号：US08776208B2
公开(公告)日：2014-07-08
申请号：US13427436
申请日：2012-03-22
申请人： Eran Yariv , Gerardo Diaz-Cuellar , David Abzarian
发明人： Eran Yariv , Gerardo Diaz-Cuellar , David Abzarian
IPC分类号： H04L29/06
CPC分类号： H04L63/0227 , H04L63/126
摘要： Embodiments of the present invention are directed to establishing and/or implementing firewall rules that may employ parameters based on connection security levels for a connection between devices. A firewall may thus provide greater granularity of security and integrate more closely with other security methods to provide better overall security with fewer conflicts.
摘要翻译：本发明的实施例涉及建立和/或实施防火墙规则，其可以基于用于设备之间的连接的连接安全级别来采用参数。因此，防火墙可以提供更大的安全性粒度，并与其他安全方法更紧密地集成，以更少的冲突提供更好的整体安全性。

24. 发明授权

US08584227B2 Firewall with policy hints 有权
标题翻译：具有策略提示的防火墙
公开(公告)号：US08584227B2
公开(公告)日：2013-11-12
申请号：US11801211
申请日：2007-05-09
申请人： David Abzarian , Gerardo Diaz Cuellar , Satheesh S. Dabbiru
发明人： David Abzarian , Gerardo Diaz Cuellar , Satheesh S. Dabbiru
IPC分类号： H04L29/06
CPC分类号： H04L63/20
摘要： A firewall helps a user make a decision regarding network access for an application executing on a computing device by providing “hints” to the user about an appropriate network access policy. If at least one previously set firewall policy for the application exists in a context different from a current context, the user may be presented with information based on a previously set firewall policy. The information may be prioritized based on a source of the previously set firewall policy and other factors, to provide the user with a hint that facilitates making the decision appropriate in the current context. A programming interface to the firewall allows third party applications to specify a format in which hints are provided to the user.
摘要翻译：防火墙通过向用户提供关于适当的网络访问策略的“提示”，帮助用户做出关于在计算设备上执行的应用的网络访问的决定。如果在与当前上下文不同的上下文中存在用于应用的至少一个先前设置的防火墙策略，则可以基于先前设置的防火墙策略来呈现用户的信息。可以基于先前设置的防火墙策略的来源和其他因素对信息进行优先级，以向用户提供有助于使决策在当前上下文中适当的提示。防火墙的编程接口允许第三方应用程序指定向用户提供提示的格式。

25. 发明授权

US08443433B2 Determining a merged security policy for a computer system 有权
公开(公告)号：US08443433B2
公开(公告)日：2013-05-14
申请号：US11823837
申请日：2007-06-28
申请人： David Abzarian , Gerardo Diaz Cuellar , Mark Vayman , Eran Yariv
发明人： David Abzarian , Gerardo Diaz Cuellar , Mark Vayman , Eran Yariv
IPC分类号： H04L29/06
CPC分类号： H04L63/20 , G06F21/577 , H04L63/0263
摘要： Embodiments of the invention described herein are directed to a mechanism for determining whether at least one operation will be effective in view of at least one security policy. In exemplary implementations, determining whether at least one operation will be effective in view of at least one security policy may comprise determining a merged security policy for a computer system by merging security policies for the computer system from two or more sources. The security policies may be security policies set by a user and/or an administrator of the computer system, may be security policies of a computer network to which the computer system is connected, or may be security policies of one or more other computer systems that are above the computer system in a computer network hierarchy.

26. 发明申请

US20130061309A1 Per Process Networking Capabilities 有权
标题翻译：每过程网络功能
公开(公告)号：US20130061309A1
公开(公告)日：2013-03-07
申请号：US13226223
申请日：2011-09-06
申请人： Gerardo Diaz-Cuellar , Sermet Iskin , Jorge P. Coronel Mendoza , Scott B. Graham , Nicholas D. Wood
发明人： Gerardo Diaz-Cuellar , Sermet Iskin , Jorge P. Coronel Mendoza , Scott B. Graham , Nicholas D. Wood
IPC分类号： G06F21/00 , G06F15/16
CPC分类号： H04L63/102 , G06F21/335 , G06F21/51 , G06F21/52 , G06F2221/2121 , G06F2221/2141 , G06F2221/2145 , H04L63/20 , H04L67/34
摘要： Per process networking capability techniques are described. In one or more implementations, a determination is made as to whether access to a network capability is permitted for a process that is executed on the computing device based on a token that is associated with the process. The token has one or more security identifiers that reference one or more network capabilities described in a manifest. The access to the network capability is managed based on the determination.
摘要翻译：描述每个进程联网能力技术。在一个或多个实现中，确定是否允许基于与该过程相关联的令牌在计算设备上执行的进程对网络能力的访问。令牌具有引用清单中描述的一个或多个网络能力的一个或多个安全标识符。基于确定来管理对网络能力的访问。

27. 发明授权

US08370919B2 Host firewall integration with edge traversal technology 有权
公开(公告)号：US08370919B2
公开(公告)日：2013-02-05
申请号：US11821839
申请日：2007-06-26
申请人： David Abzarian , Michael R. Surkan , Salahuddin C. J. Khan , Amit A. Sehgal , Eran Yariv , Emanuel Paleologu , Gerardo Diaz Cuellar
发明人： David Abzarian , Michael R. Surkan , Salahuddin C. J. Khan , Amit A. Sehgal , Eran Yariv , Emanuel Paleologu , Gerardo Diaz Cuellar
IPC分类号： H04L29/06
CPC分类号： H04L63/029
摘要： A host firewall can determine and consider whether unsolicited traffic is inbound from beyond the edge of the network and allow or block such traffic based at least in part upon this characteristic. In one implementation, an edge traversal parameter can be set on a host firewall rule, which typically includes other parameters such as port, protocol, etc. If the unsolicited traffic received via an edge traversal interface matches a host firewall rule that has the edge traversal criterion, then the firewall does not block the traffic. On the other hand, if the unsolicited traffic received via an edge traversal interface fails to satisfy the edge traversal criterion on any firewall rule, then the firewall blocks the traffic.

28. 发明申请

US20090063584A1 Versioning management 有权
标题翻译：版本管理
公开(公告)号：US20090063584A1
公开(公告)日：2009-03-05
申请号：US11897890
申请日：2007-08-31
申请人： David Abzarian , Gerardo Diaz Cuellar
发明人： David Abzarian , Gerardo Diaz Cuellar
IPC分类号： G06F17/30
CPC分类号： H04L67/025 , G06F8/71 , G06F9/44536 , H04L67/34
摘要： Versioning management provides for efficient and effective handling of varying policy versions, client versions and client platform versions in one system. Software version negotiation provides for simplified, secure policy management in an environment supporting varying versions of the same software product. In conjunction with parameter stripping, which resolves differences among varying minor versions of a software policy, software version negotiation allows for management tools of one version to manage client software, clients and/or client platforms of another version. Policy schema translation, in conjunction with parameter stripping as needed, provides a mechanism for converting policies that normally would be impossible to interpret on varying clients and/or client platforms to policy versions that can be understood by these clients and/or client platforms. Version targeting allows an administrator to push a policy to specific clients and/or client platforms to, among other things, address identified security issues or to provide version specific application enablement or enhancement. Together, these various versioning management methodologies simplify administration of a system consisting of varying policy versions, client versions and/or client platform versions while enhancing the flexibility of the system to apply policy throughout the system or any portion thereof.
摘要翻译：版本管理提供了在一个系统中有效和有效地处理各种策略版本，客户端版本和客户端平台版本。软件版本协商在支持不同版本的相同软件产品的环境中提供简化，安全的策略管理。结合参数剥离，其解决了软件策略的不同次要版本之间的差异，软件版本协商允许一个版本的管理工具来管理另一版本的客户端软件，客户端和/或客户端平台。根据需要，策略模式转换与参数剥离一起提供了一种机制，用于将通常不可能将不同客户端和/或客户端平台解释的策略转换为这些客户端和/或客户端平台可以理解的策略版本。版本定位允许管理员将策略推送到特定客户端和/或客户端平台，以便特别处理已识别的安全问题或提供特定于版本的应用程序启用或增强。总而言之，这些各种版本管理方法简化了由不同策略版本，客户端版本和/或客户端平台版本组成的系统的管理，同时增强了系统在整个系统或其任何部分应用策略的灵活性。

29. 发明申请

US20090007251A1 Host firewall integration with edge traversal technology 有权
标题翻译：主机防火墙与边缘遍历技术集成
公开(公告)号：US20090007251A1
公开(公告)日：2009-01-01
申请号：US11821839
申请日：2007-06-26
申请人： David Abzarian , Michael R. Surkan , Salahuddin C.J. Khan , Amit A. Sehgal , Eran Yariv , Emanuel Paleologu , Gerardo Diaz Cuellar
发明人： David Abzarian , Michael R. Surkan , Salahuddin C.J. Khan , Amit A. Sehgal , Eran Yariv , Emanuel Paleologu , Gerardo Diaz Cuellar
IPC分类号： G06F9/00
CPC分类号： H04L63/029
摘要： A host firewall can determine and consider whether unsolicited traffic is inbound from beyond the edge of the network and allow or block such traffic based at least in part upon this characteristic. In one implementation, an edge traversal parameter can be set on a host firewall rule, which typically includes other parameters such as port, protocol, etc. If the unsolicited traffic received via an edge traversal interface matches a host firewall rule that has the edge traversal criterion, then the firewall does not block the traffic. On the other hand, if the unsolicited traffic received via an edge traversal interface fails to satisfy the edge traversal criterion on any firewall rule, then the firewall blocks the traffic.
摘要翻译：主机防火墙可以确定并考虑来自网络边缘的未经请求的流量是否入站，并且至少部分地基于该特性来允许或阻止该流量。在一个实现中，可以在主机防火墙规则上设置边缘遍历参数，主机防火墙规则通常包括诸如端口，协议等的其他参数。如果通过边缘遍历接口接收的未经请求的流量与具有边缘遍历的主机防火墙规则匹配标准，那么防火墙不会阻塞流量。另一方面，如果通过边缘遍历接口接收的未经请求的流量无法满足任何防火墙规则的边缘遍历标准，则防火墙会阻塞流量。

30. 发明申请

US20080289027A1 Incorporating network connection security levels into firewall rules 有权
标题翻译：将网络连接安全级别纳入防火墙规则
公开(公告)号：US20080289027A1
公开(公告)日：2008-11-20
申请号：US11804423
申请日：2007-05-18
申请人： Eran Yariv , Gerardo Diaz Cuellar , David Abzarian
发明人： Eran Yariv , Gerardo Diaz Cuellar , David Abzarian
IPC分类号： G06F15/16
CPC分类号： H04L63/0227 , H04L63/126
摘要： Embodiments of the present invention are directed to establishing and/or implementing firewall rules that may employ parameters based on connection security levels for a connection between devices. A firewall may thus provide greater granularity of security and integrate more closely with other security methods to provide better overall security with fewer conflicts.
摘要翻译：本发明的实施例涉及建立和/或实施防火墙规则，其可以基于用于设备之间的连接的连接安全级别来采用参数。因此，防火墙可以提供更大的安全性粒度，并与其他安全方法更紧密地集成，以更少的冲突提供更好的整体安全性。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式