专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明申请

WO2022159964A1 JOINING JAVASCRIPT OBJECT NOTATION (JSON) QUERIES ACROSS CLOUD RESOURCES 审中-公开
公开(公告)号：WO2022159964A1
公开(公告)日：2022-07-28
申请号：PCT/US2022/070273
申请日：2022-01-20
申请人： PALO ALTO NETWORKS, INC.
发明人： MOULEESWARAN, Chandra Biksheswaran , REPAKA, Rama Teja , WANG, Xiaoyan , SHUKLA, Parul
IPC分类号： G06F16/2455 , G06F16/835
摘要： A cloud resource join query for join operations across cloud resources is parsed to extract join rules and queries to each cloud resource in the cloud resource join query. Results from the individual cloud queries are dynamically indexed based on pairs of cloud resources indicated in the join rules. A search engine applies first order predicates in the join rules using the dynamic indexes to generate pairwise join results corresponding to the query. A result for the cloud resource join query comprises the pairwise join results after merging.

22. 发明申请

WO2022027009A1 CONJOINING MALWARE DETECTION MODELS FOR DETECTION PERFORMANCE AGGREGATION 审中-公开
公开(公告)号：WO2022027009A1
公开(公告)日：2022-02-03
申请号：PCT/US2021/070981
申请日：2021-07-27
申请人： PALO ALTO NETWORKS, INC.
发明人： RAO, Akshata Krishnamoorthy , TSECHANSKY, Danny , HU, Wenjun
IPC分类号： H04L29/06 , G06F21/56 , G06N20/00
摘要： To leverage the higher detection rate of a supplemental model and manage the higher false positive rate of that model, an activation range is tuned for the candidate model to operate in conjunction with an incumbent model. The activation range is a range of output values for the incumbent model that activates the supplemental model. Inputs having benign output values from the incumbent model that are within the activation range are fed into the supplemental model. Thus, the lower threshold of the activation range corresponds to the malware detection threshold of the incumbent model and the upper threshold determines how many benign classified outputs from the incumbent model activate the supplemental model. This conjoining of models with a tuned activation range manages overall false positive rate of the conjoined detection models while the malware detection rate increases over the incumbent detection model alone.

23. 发明申请

WO2021247597A1 IOT DEVICE DISCOVERY AND IDENTIFICATION 审中-公开
公开(公告)号：WO2021247597A1
公开(公告)日：2021-12-09
申请号：PCT/US2021/035278
申请日：2021-06-01
申请人： PALO ALTO NETWORKS, INC.
发明人： DU, Jun , ZHAO, Yilin
IPC分类号： H04W8/00 , H04W8/18 , H04L63/104 , H04L63/1408 , H04L63/1433 , H04L63/162 , H04L63/205 , H04W8/005 , H04W8/183
摘要： Techniques for performing Internet of Things (IoT) device identification are disclosed. Information associated with a network communication of an IoT device is received. A determination of whether the IoT device has been classified has been made. In response to determining that the IoT device has not been classified, a two-part classification process is performed, where a first portion includes an inline classification, and a second portion includes a subsequent verification of the inline classification. A result of the classification process is provided to a security appliance configured to apply a policy to the IoT device.

24. 发明申请

WO2020198157A1 MULTI-ACCESS DISTRIBUTED EDGE SECURITY IN MOBILE NETWORKS 审中-公开
公开(公告)号：WO2020198157A1
公开(公告)日：2020-10-01
申请号：PCT/US2020/024281
申请日：2020-03-23
申请人： PALO ALTO NETWORKS, INC.
发明人： VERMA, Sachin , BURAKOVSKY, Leonid
IPC分类号： H04L29/06 , H04W76/11 , H04W24/08 , H04W12/06 , H04W76/12 , H04W80/12
摘要： Techniques for providing multi-access distributed edge security in mobile networks (e.g., service provider networks for mobile subscribers, such as for 5G networks) are disclosed. In some embodiments, a system/process/computer program product for multi- access distributed edge security in mobile networks in accordance with some embodiments includes monitoring network traffic on a service provider network at a security platform to identify a new session, wherein the service provider network includes a 5G network or a converged 5G network; extracting subscription and/or equipment identifier information for user traffic associated with the new session at the security platform; and determining a security policy to apply at the security platform to the new session based on the subscription and/or equipment identifier information.

25. 发明申请

WO2020072379A1 EXPLORABLE VISUAL ANALYTICS SYSTEM HAVING REDUCED LATENCY 审中-公开
公开(公告)号：WO2020072379A1
公开(公告)日：2020-04-09
申请号：PCT/US2019/053866
申请日：2019-09-30
申请人： PALO ALTO NETWORKS, INC.
发明人： YAHYAVI FIROUZ ABADI, Seyed, Amir , AMIRPOUR, Amraii, Saman , ROOSTA, Pour, Laleh
IPC分类号： G06T15/00
摘要： A method and system for processing datasets having a number of data points are described. A portion of the dataset is received and processed in parallel. A view on a display is updated to include a first section of the portion of the dataset after the first section completes processing but before a remainder of the portion of the dataset completes processing. In some aspects, the portion of the dataset can include up to one million or more data points. In some aspects, if a change from the view to a second view is received before processing has completed, an unusable part of the dataset is discarded and/or a reusable part of the dataset that has completed processing is reused for the second view. In some aspects, columns of different dataset may be correlated and/or processed data is provided such that the processed data may be rapidly rendered.

26. 发明申请

WO2015009404A1 PACKET CLASSIFICATION FOR NETWORK ROUTING 审中-公开
标题翻译：网路路由分组分类
公开(公告)号：WO2015009404A1
公开(公告)日：2015-01-22
申请号：PCT/US2014/043367
申请日：2014-06-20
申请人： PALO ALTO NETWORKS, INC.
发明人： ZUK, Nir , BENOIT, Marc, Joseph
IPC分类号： H04L1/00
CPC分类号： H04L63/0227 , H04L45/38 , H04L45/64 , H04L47/2441 , H04L67/327 , H04L69/22
摘要： Techniques for packet classification for network routing are disclosed. In some embodiments, packet classification for network routing includes receiving packets associated with a new flow at a security controller from a network device, in which the network device performs packet forwarding; classifying the flow; and determining an action for the flow based on a policy (e.g., a security policy). In some embodiments, the network device is a Software Defined Network (SDN) network device (e.g., a packet forwarding device that supports the OpenFlow protocol or another protocol).
摘要翻译：公开了用于网络路由的分组分类的技术。在一些实施例中，用于网络路由的分组分类包括从网络设备在安全控制器处接收与新流相关联的分组，其中网络设备执行分组转发; 分流; 以及基于策略（例如，安全策略）确定用于流的动作。在一些实施例中，网络设备是软件定义网络（SDN）网络设备（例如，支持OpenFlow协议或另一协议的分组转发设备）。

27. 发明申请

WO2014120838A2 SECURITY DEVICE IMPLEMENTING NETWORK FLOW PREDICTION, AND FLOW OWNERSHIP ASSIGNMENT AND EVENT AGGREGATION IN A DISTRIBUTED PROCESSOR SYSTEM 审中-公开
标题翻译：安全设备实现网络流量预测，分布式处理器系统中的流量所有权分配和事件聚合
公开(公告)号：WO2014120838A2
公开(公告)日：2014-08-07
申请号：PCT/US2014/013689
申请日：2014-01-29
申请人： PALO ALTO NETWORKS, INC.
发明人： ROBERSON, William, A. , XU, Wilson
IPC分类号： H04L29/06
CPC分类号： H04L63/0227 , H04L45/38 , H04L45/74 , H04L47/2441 , H04L47/2483 , H04L49/00 , H04L69/22
摘要： A security device for processing network flows includes a predict flow table containing predict flow entries mapping predicted network flows to packet processor ownership assignments. The predict key includes multiple data fields identifying a predicted network flow where one or more of the data fields have a wildcard value. In another embodiment, a security device for processing network flows includes a packet processing manager configured to assign ownership of network flows to the one or more packet processors where the packet processing manager includes a global flow table containing entries mapping network flows to packet processor ownership assignments. In another embodiment, a security device for processing network flows includes packet processing cards with packet processors formed thereon where each packet processing card stores local counter values for one or more events and a packet processing manager including global event counters to maintain event statistics for events in the security device.
摘要翻译：用于处理网络流的安全设备包括预测流表，该预测流表包含将预测的网络流映射到分组处理器所有权分配的预测流条目。预测密钥包括标识预测网络流的多个数据字段，其中一个或多个数据字段具有通配符值。在另一实施例中，用于处理网络流的安全设备包括分组处理管理器，其被配置为将网络流的所有权分配给一个或多个分组处理器，其中分组处理管理器包括全局流表，该全局流表包含将网络流映射到分组处理器所有权分配。在另一个实施例中，用于处理网络流的安全设备包括其上形成有分组处理卡的分组处理卡，其中每个分组处理卡存储用于一个或多个事件的本地计数器值，以及包处理管理器包括全局事件计数器以维护事件安全设备。

28. 发明申请

WO2008002930A2 PACKET CLASSIFICATION IN A NETWORK SECURITY DEVICE 审中-公开
标题翻译：网络安全设备中的分组分类
公开(公告)号：WO2008002930A2
公开(公告)日：2008-01-03
申请号：PCT/US2007/072148
申请日：2007-06-26
申请人： PALO ALTO NETWORKS, INC. , ZUK, Nir , WANG, Song , LEUNG, Siu-wang , GONG, Fengmin
发明人： ZUK, Nir , WANG, Song , LEUNG, Siu-wang , GONG, Fengmin
IPC分类号： H04J1/16 , H04L12/56
CPC分类号： H04L63/0227 , H04L63/1416
摘要： Methods and apparatuses are described for inspecting data packets in a computer network. One or more data packets through the network have associated header data and content. One method includes receiving a data packet, examining the data packet to classify the data packet including classifying the data packet using information included in the header and content, determining flow instructions for processing the packet based on both the header information and the content and processing of the packet using the flow instructions.
摘要翻译：描述了用于检查计算机网络中的数据分组的方法和装置。通过网络的一个或多个数据包具有相关联的头部数据和内容。一种方法包括接收数据分组，检查数据分组以对数据分组进行分类，包括使用包括在报头和内容中的信息对数据分组进行分类，确定基于报头信息和内容的处理分组的流指令，以及处理该包使用流程指令。

29. 发明申请

WO2021247598A1 AUTOMATING IOT DEVICE IDENTIFICATION USING STATISTICAL PAYLOAD FINGERPRINTS 审中-公开
公开(公告)号：WO2021247598A1
公开(公告)日：2021-12-09
申请号：PCT/US2021/035279
申请日：2021-06-01
申请人： PALO ALTO NETWORKS, INC.
发明人： WANG, Feng
IPC分类号： G06F11/00 , H04L63/0227 , H04L63/0876 , H04L63/102 , H04L63/1425 , H04L63/20
摘要： Internet of Things (IoT) device classification is disclosed. A byte frequency pattern associated with network traffic of an IoT device is received. The received pattern is used to determine a classification for the IoT device. The classification is provided to a security appliance. The security appliance is configured to apply a policy to the IoT device based at least in part on the classification.

30. 发明申请

WO2021081139A1 INTELLIGENT SIGNATURE-BASED ANTI-CLOAKING WEB RECRAWLING 审中-公开
公开(公告)号：WO2021081139A1
公开(公告)日：2021-04-29
申请号：PCT/US2020/056730
申请日：2020-10-21
申请人： PALO ALTO NETWORKS, INC.
发明人： STAROV, Oleksii , CHEN, Zhanhao , ZHOU, Yuchen , LIU, Fang
IPC分类号： H04L29/06 , G06F16/951 , H04L29/08
摘要： Web sites are crawled using multiple browser profiles to avoid malicious cloaking. Based on web page content returned from HTTP requests using the multiple browser profiles, web sites returning substantively different content to HTTP requests for different browser profiles are identified. Web sites are further filtered by common cloaking behavior, and redirect scripts are extracted from web page content that performed cloaking. Signatures comprising tokenized versions of the redirect scripts are generated and compared to a database of known cloaking signatures. URLs corresponding to signatures having approximate matches with signatures in the database are flagged for recrawling. Recrawled URLs are verified for malicious cloaking again using HTTP requests from multiple browser profiles.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式