专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明授权

US08161555B2 Progressive wiretap 有权
标题翻译：逐行窃听
公开(公告)号：US08161555B2
公开(公告)日：2012-04-17
申请号：US11239754
申请日：2005-09-30
申请人： Oliver Spatscheck , Jacobus Van der Merwe
发明人： Oliver Spatscheck , Jacobus Van der Merwe
IPC分类号： G06F11/00 , G06F12/14
CPC分类号： H04L63/1408 , H04L63/1425 , H04L63/1458 , H04L2463/141 , H04L2463/144
摘要： Disclosed is a method and system for identifying a controller of a first computer transmitting a network attack to an attacked computer. To identify an attacker implementing the attack on the attacked computer, the present invention traces the attack back to the controller one hop at a time. The invention examines traces of the attacked computer to identify the first computer. Traffic transmitted to the first computer is redirected through a monitoring complex before being transmitted to the first computer. The controller is then detected from traffic monitoring by the monitoring complex.
摘要翻译：公开了一种用于识别向受攻击的计算机发送网络攻击的第一计算机的控制器的方法和系统。为了识别实施攻击的计算机的攻击的攻击者，本发明一次将攻击追溯到控制器一跳。本发明检查受攻击的计算机的踪迹以识别第一台计算机。传输到第一台计算机的流量在被传送到第一台计算机之前被重定向到一个监控中心。然后通过监控综合体的流量监控来检测控制器。

32. 发明申请

US20100208744A1 System and method for compressing internet protocol rounting tables 有权
标题翻译：用于压缩互联网协议寻线表的系统和方法
公开(公告)号：US20100208744A1
公开(公告)日：2010-08-19
申请号：US12378511
申请日：2009-02-17
申请人： Aman Shaikh , Jacobus Van der Merwe , Elliot Karpilovsky , Jennifer Lynn Rexford , Matthew Caeser
发明人： Aman Shaikh , Jacobus Van der Merwe , Elliot Karpilovsky , Jennifer Lynn Rexford , Matthew Caeser
IPC分类号： H04L12/28 , H04L12/56
CPC分类号： H04L45/04 , H04L45/02 , H04L45/42 , H04L45/54
摘要： A networking device connects to a router and to an autonomous system (AS). The networking device receives a routing table from the router, exchanges routing information with the AS, updates the routing table in response to exchanging information with the AS, coalesces the updated routing table into a compressed routing table, and sends the compressed routing table back to the router. The compressed routing table causes the router to forward data in a manner that is identical to the received routing table.
摘要翻译：网络设备连接到路由器和自治系统（AS）。网络设备从路由器接收路由表，与AS交换路由信息，响应与AS交换信息更新路由表，将更新的路由表合并为压缩路由表，并将压缩路由表发送回路由器压缩路由表使得路由器以与所接收的路由表相同的方式转发数据。

33. 发明申请

US20070204338A1 Reverse Firewall with Self-Provisioning 有权
标题翻译：具有自供应的反向防火墙
公开(公告)号：US20070204338A1
公开(公告)日：2007-08-30
申请号：US11616325
申请日：2006-12-27
申请人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
发明人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
IPC分类号： G06F15/16
CPC分类号： H04W28/00 , H04L43/16 , H04L63/0236 , H04L63/0254 , H04L63/0263 , H04L63/029
摘要： An application provisioning device may be used to manage a profile of a host and provide data corresponding to a selected application for installation at a host. A reverse firewall may use the profile of the host to determine whether to allow or block particular network communication from an application running on the host. An indication of a selected application may be received at the application provisioning device. Configuration information may also be received at the application provisioning device. The application provisioning server may request an update to the profile of a host and transmit such a request. The profile may be updated to reflect the configuration information and/or information of the selected application. Data corresponding to the selected application may be updated and transmitted to a host computer, where it may be installed. Therefore, the installed application running on the host may operate without being prematurely blocked by the reverse firewall.
摘要翻译：应用配置设备可以用于管理主机的配置文件，并且提供与所选择的应用相对应的数据以在主机上安装。反向防火墙可以使用主机的简档来确定是否允许或阻止来自在主机上运行的应用的特定网络通信。可以在应用供应设备处接收所选择的应用的指示。还可以在应用配置设备处接收配置信息。应用供应服务器可以请求对主机的配置文件的更新并传送这样的请求。可以更新配置文件以反映所选择的应用的配置信息和/或信息。与所选择的应用相对应的数据可以被更新并发送到可以安装在其上的主计算机。因此，主机上运行的已安装应用程序可能会运行，而不会被反向防火墙过早阻止。

34. 发明申请

US20060185014A1 Systems, methods, and devices for defending a network 有权
公开(公告)号：US20060185014A1
公开(公告)日：2006-08-17
申请号：US11234433
申请日：2005-09-23
申请人： Oliver Spatscheck , Jacobus Van der Merwe
发明人： Oliver Spatscheck , Jacobus Van der Merwe
IPC分类号： G06F12/14
CPC分类号： H04L63/1416 , H04L63/1441 , H04L63/1458 , H04L2463/141
摘要： Certain exemplary embodiments comprise a method comprising: within a backbone network: for backbone network traffic addressed to a particular target and comprising attack traffic and non-attack traffic, the attack traffic simultaneously carried by the backbone network with the non-attack traffic: redirecting at least a portion of the attack traffic to a scrubbing complex; and allowing at least a portion of the non-attack traffic to continue to the particular target without redirection to the scrubbing complex.

35. 发明授权

US08806032B2 Methods and apparatus to migrate border gateway protocol sessions between routers 有权
标题翻译：在路由器之间迁移边界网关协议会话的方法和设备
公开(公告)号：US08806032B2
公开(公告)日：2014-08-12
申请号：US12969392
申请日：2010-12-15
申请人： Jacobus Van der Merwe , Jennifer Rexford , Eric Robert Keller
发明人： Jacobus Van der Merwe , Jennifer Rexford , Eric Robert Keller
IPC分类号： G06F15/16
CPC分类号： H04L69/16 , H04L45/02
摘要： Methods and apparatus to migrate border gateway protocol sessions between routers are disclosed. An example method to migrate a border gateway protocol session from a first router to a second router disclosed herein comprises exporting a connection state to migrate a transport control protocol connection supporting the border gateway protocol session with a session endpoint from the first router to the second router, and after the transport control protocol connection has been migrated to the second router, announcing, from the first router to the second router, routes contained in an exported routing information base associated with the session endpoint, the second router to process the routes to migrate handling of the border gateway protocol session with the session endpoint to the second router.
摘要翻译：公开了在路由器之间迁移边界网关协议会话的方法和装置。将边界网关协议会话从第一路由器迁移到本文公开的第二路由器的示例性方法包括：导出连接状态以将支持与会话端点的边界网关协议会话的传输控制协议连接从第一路由器迁移到第二路由器，并且在传输控制协议连接已被迁移到第二路由器之后，从第一路由器向第二路由器通知包含在与会话端点相关联的导出路由信息库中的路由，第二路由器处理迁移路由处理与会话端点到第二路由器的边界网关协议会话。

36. 发明申请

US20140040206A1 PIPELINED DATA REPLICATION FOR DISASTER RECOVERY 审中-公开
标题翻译：用于灾难恢复的管道数据复制
公开(公告)号：US20140040206A1
公开(公告)日：2014-02-06
申请号：US13565494
申请日：2012-08-02
申请人： Kadangode K. Ramakrishnan , Horacio Andres Lagar-Cavilla , Prashant Shenoy , Jacobus Van der Merwe , Timothy Wood
发明人： Kadangode K. Ramakrishnan , Horacio Andres Lagar-Cavilla , Prashant Shenoy , Jacobus Van der Merwe , Timothy Wood
IPC分类号： G06F7/00 , G06F17/30
CPC分类号： G06F11/2097 , G06F11/2094 , G06F2201/82
摘要： Pipelined data replication for disaster recovery is disclosed. An example pipelined data replication method for disaster recovery disclosed herein comprises sending replicated first data from a primary processing environment to a secondary processing environment for backup by the secondary processing environment, the replicated first data being a replica of first data in the primary processing environment, processing the first data in the primary processing environment prior to the backup of the replicated first data by the secondary processing environment being confirmed, and preventing a result of the processing of the first data from being released by the primary processing environment until the backup of the replicated first data by the secondary processing environment is confirmed.
摘要翻译：披露了用于灾难恢复的流水线数据复制。本文所公开的用于灾难恢复的流水线数据复制方法包括：将复制的第一数据从主处理环境发送到辅助处理环境以供辅助处理环境备份，复制的第一数据是主处理环境中的第一数据的副本，在正在确认的辅助处理环境备份复制的第一数据之前在主处理环境中处理第一数据，并且防止第一数据的处理结果被主处理环境释放直到备份确认了由二次处理环境复制的第一数据。

37. 发明授权

US08607014B2 Multi-autonomous system anycast content delivery network 有权
标题翻译：多自治系统任播内容传送网络
公开(公告)号：US08607014B2
公开(公告)日：2013-12-10
申请号：US12645000
申请日：2009-12-22
申请人： Oliver Spatscheck , Zakaria Al-Qudah , Seunjoon Lee , Michael Rabinovich , Jacobus Van der Merwe
发明人： Oliver Spatscheck , Zakaria Al-Qudah , Seunjoon Lee , Michael Rabinovich , Jacobus Van der Merwe
IPC分类号： G06F12/00 , G06F13/00 , G06F13/28 , G06F15/173 , G06F15/16
CPC分类号： G06F9/5083 , H04L67/1004 , H04L67/1008 , H04L67/1031
摘要： A content delivery network includes first and second sets of cache servers, a domain name server, and an anycast island controller. The first set of cache servers is hosted by a first autonomous system and the second set of cache servers is hosted by a second autonomous system. The cache servers are configured to respond to an anycast address for the content delivery network, to receive a request for content from a client system, and provide the content to the client system. The first and second autonomous systems are configured to balance the load across the first and second sets of cache servers, respectively. The domain name server is configured to receive a request from a requestor for a cache server address, and provide the anycast address to the requestor in response to the request. The anycast island controller is configured to receive load information from each of the cache servers, determine an amount of requests to transfer from the first autonomous system to the second autonomous system; send an instruction to the first autonomous system to transfer the amount of requests to the second autonomous system.
摘要翻译：内容传送网络包括第一和第二组缓存服务器，域名服务器和任播岛控制器。第一组缓存服务器由第一自主系统托管，第二组缓存服务器由第二自主系统托管。缓存服务器被配置为响应内容传送网络的任播地址，从客户端系统接收对内容的请求，并将内容提供给客户端系统。第一和第二自治系统被配置为分别平衡跨越第一组和第二组缓存服务器的负载。域名服务器被配置为从缓存服务器地址的请求者接收请求，并且响应于请求向请求者提供任播地址。所述任播岛控制器被配置为从每个所述高速缓存服务器接收负载信息，确定从所述第一自治系统转移到所述第二自治系统的请求量; 向第一自治系统发送指令以将请求量传送到第二自治系统。

38. 发明授权

US08560598B2 Integrated adaptive anycast for content distribution 有权
公开(公告)号：US08560598B2
公开(公告)日：2013-10-15
申请号：US12645006
申请日：2009-12-22
申请人： Mario Santoro , Herani Brotman , Alan L. Glasser , James Miros , Oliver Spatscheck , Jacobus Van der Merwe
发明人： Mario Santoro , Herani Brotman , Alan L. Glasser , James Miros , Oliver Spatscheck , Jacobus Van der Merwe
IPC分类号： G06F15/16
CPC分类号： H04L43/08 , H04L29/12066 , H04L45/126 , H04L61/1511 , H04L61/2007 , H04L67/1002 , H04L67/1008 , H04L67/1021
摘要： A system includes first and second cache servers a domain name server, and a route controller. The cache servers are each configured to respond to an anycast address. Additionally, the first cache server is configured to respond to a first unicast address, and the second cache server is configured to respond to a second unicast address. The router controller configured to determine wither the status of the first cache server is non-overloaded, overloaded, or offline. The route controller is further configured to instruct the domain name server to provide the second unicast address when the status is overloaded or offline, and modify routing of the anycast address to direct a content request sent to the anycast address to the second cache server when the status is offline. The domain name server is configured to receive a request from a requestor for a cache server address. Additionally, the domain name server is configured to provide an anycast address to the requestor when the status of the first cache server is non-overloaded, and provide the second unicast address to the requestor when the status of the first cache server is offline or overloaded.

39. 发明授权

US08036126B2 System and method for compressing internet protocol routing tables 有权
标题翻译：用于压缩互联网协议路由表的系统和方法
公开(公告)号：US08036126B2
公开(公告)日：2011-10-11
申请号：US12378511
申请日：2009-02-17
申请人： Aman Shaikh , Jacobus Van der Merwe , Elliot Karpilovsky , Jennifer Lynn Rexford , Matthew Caeser
发明人： Aman Shaikh , Jacobus Van der Merwe , Elliot Karpilovsky , Jennifer Lynn Rexford , Matthew Caeser
IPC分类号： G01R31/08 , H04L12/28
CPC分类号： H04L45/04 , H04L45/02 , H04L45/42 , H04L45/54
摘要： A networking device connects to a router and to an autonomous system (AS). The networking device receives a routing table from the router, exchanges routing information with the AS, updates the routing table in response to exchanging information with the AS, coalesces the updated routing table into a compressed routing table, and sends the compressed routing table back to the router. The compressed routing table causes the router to forward data in a manner that is identical to the received routing table.
摘要翻译：网络设备连接到路由器和自治系统（AS）。网络设备从路由器接收路由表，与AS交换路由信息，响应与AS交换信息更新路由表，将更新的路由表合并为压缩路由表，并将压缩路由表发送回路由器压缩路由表使得路由器以与所接收的路由表相同的方式转发数据。

40. 发明申请

US20110030054A1 Progressive wiretap 有权
标题翻译：逐行窃听
公开(公告)号：US20110030054A1
公开(公告)日：2011-02-03
申请号：US11239754
申请日：2005-09-30
申请人： Oliver Spatscheck , Jacobus Van der Merwe
发明人： Oliver Spatscheck , Jacobus Van der Merwe
IPC分类号： G06F11/00
CPC分类号： H04L63/1408 , H04L63/1425 , H04L63/1458 , H04L2463/141 , H04L2463/144
摘要： Disclosed is a method and system for identifying a controller of a first computer transmitting a network attack to an attacked computer. To identify an attacker implementing the attack on the attacked computer, the present invention traces the attack back to the controller one hop at a time. The invention examines traces of the attacked computer to identify the first computer. Traffic transmitted to the first computer is redirected through a monitoring complex before being transmitted to the first computer. The controller is then detected from traffic monitoring by the monitoring complex.
摘要翻译：公开了一种用于识别向受攻击的计算机发送网络攻击的第一计算机的控制器的方法和系统。为了识别实施攻击的计算机的攻击的攻击者，本发明一次将攻击追溯到控制器一跳。本发明检查受攻击的计算机的踪迹以识别第一台计算机。传输到第一台计算机的流量在被传送到第一台计算机之前被重定向到一个监控中心。然后通过监控综合体的流量监控来检测控制器。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式