专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明授权

US08166195B2 Intelligent computer network routing using logically centralized, physically distributed servers distinct from network routers 有权
标题翻译：智能计算机网络路由使用逻辑集中的物理分布式服务器，与网络路由器不同
公开(公告)号：US08166195B2
公开(公告)日：2012-04-24
申请号：US13017088
申请日：2011-01-31
申请人： Jacobus Van Der Merwe , Dan Pei , Thomas B. Scholl , Aman Shaikh , Alex Snoeren , Patrick Verkaik
发明人： Jacobus Van Der Merwe , Dan Pei , Thomas B. Scholl , Aman Shaikh , Alex Snoeren , Patrick Verkaik
IPC分类号： G06F15/16
CPC分类号： H04L45/18 , H04L45/04 , H04L45/42
摘要： A route control architecture allows a network operator to flexibly control routing between the traffic ingresses and egresses in a computer network, without modifying existing routers. An intelligent route service control point (IRSCP) replaces distributed BGP decision processes of conventional network routers with a route computation that is flexible and logically centralized but physically distributed. One embodiment supplements the traditional BGP decision process with a ranking decision process that allows route-control applications to explicitly rank traffic egresses on a per-destination, per-router basis. A straightforward set of correctness requirements prevents routing anomalies in implementations that are scalable and fault-tolerant.
摘要翻译：路由控制架构允许网络运营商灵活地控制计算机网络中的流量进入和出口之间的路由，而不修改现有的路由器。智能路由业务控制点（IRSCP）用传统网络路由器的分布式BGP决策过程，以灵活，逻辑集中，物理分布的路由计算为代表。一个实施例通过排序决策过程来补充传统的BGP决策过程，其允许路由控制应用在每个目的地，每个路由器的基础上对流量出口进行明确排序。一组直观的正确性要求可以防止可扩展和容错的实现中的路由异常。

32. 发明申请

US20110219445A1 Methods, Systems and Computer Program Products for Identifying Traffic on the Internet Using Communities of Interest 有权
标题翻译：方法，系统和计算机程序产品用于识别互联网上的交通使用社区利益
公开(公告)号：US20110219445A1
公开(公告)日：2011-09-08
申请号：US12716420
申请日：2010-03-03
申请人： Jacobus Van Der Merwe , Minaxi Gupta , Andrew Kalafut
发明人： Jacobus Van Der Merwe , Minaxi Gupta , Andrew Kalafut
IPC分类号： G06F21/00
CPC分类号： G06F21/00
摘要： Methods for identifying wanted traffic on the Internet are provided. The methods include determining a traffic history for a user of the Internet; identifying wanted traffic in a stream of Internet traffic based on the determined traffic history; and prioritizing the identified wanted traffic such that unwanted traffic is assigned a lower priority than the wanted traffic. Related systems and computer program products are also provided.
摘要翻译：提供了在因特网上识别所需流量的方法。所述方法包括确定因特网用户的流量历史; 基于确定的交通历史识别因特网流量流中的所需流量; 并且对所识别的所需流量进行优先级排序，使得不期望的流量被分配比所需流量更低的优先级。还提供了相关系统和计算机程序产品。

33. 发明授权

US07916735B2 Method for applying macro-controls onto IP networks using intelligent route indexing 有权
标题翻译：使用智能路由索引将宏控制应用于IP网络的方法
公开(公告)号：US07916735B2
公开(公告)日：2011-03-29
申请号：US12315351
申请日：2008-12-02
申请人： John Mulligan , Han Q. Nguyen , Samir Saad , Jacobus Van Der Merwe , Simon Zelingher
发明人： John Mulligan , Han Q. Nguyen , Samir Saad , Jacobus Van Der Merwe , Simon Zelingher
IPC分类号： H04L12/28
CPC分类号： H04L45/08 , H04L41/0654 , H04L45/02 , H04L45/028 , H04L45/121 , H04L45/123
摘要： Systems and methods are described that manage routing information in an IP network using extensible indexing and use the indexing to control the network. The indexing and associated controls apply to any router within the routing domain.
摘要翻译：描述了使用可扩展索引来管理IP网络中的路由信息的系统和方法，并使用索引来控制网络。索引和相关控件适用于路由域内的任何路由器。

34. 发明授权

US07904589B2 Intelligent computer network routing using logically centralized, physically distributed servers distinct from network routers 有权
标题翻译：智能计算机网络路由使用逻辑集中的物理分布式服务器，与网络路由器不同
公开(公告)号：US07904589B2
公开(公告)日：2011-03-08
申请号：US11804447
申请日：2007-05-19
申请人： Jacobus Van Der Merwe , Dan Pei , Thomas B. Scholl , Aman Shaikh , Alex Snoeren , Patrick Verkaik
发明人： Jacobus Van Der Merwe , Dan Pei , Thomas B. Scholl , Aman Shaikh , Alex Snoeren , Patrick Verkaik
IPC分类号： G06F15/16
CPC分类号： H04L45/18 , H04L45/04 , H04L45/42
摘要： A route control architecture allows a network operator to flexibly control routing between the traffic ingresses and egresses in a computer network, without modifying existing routers. An intelligent route service control point (IRSCP) replaces distributed BGP decision processes of conventional network routers with a route computation that is flexible and logically centralized but physically distributed. One embodiment supplements the traditional BGP decision process with a ranking decision process that allows route-control applications to explicitly rank traffic egresses on a per-destination, per-router basis. A straightforward set of correctness requirements prevents routing anomalies in implementations that are scalable and fault-tolerant.
摘要翻译：路由控制架构允许网络运营商灵活地控制计算机网络中的流量进入和出口之间的路由，而不修改现有的路由器。智能路由业务控制点（IRSCP）用传统网络路由器的分布式BGP决策过程，以灵活，逻辑集中，物理分布的路由计算为代表。一个实施例通过允许路由控制应用在基于每个目的地的路由器基础上对流量出口进行明确排序的排序决策过程来补充传统的BGP决策过程。一组直观的正确性要求可以防止可扩展和容错的实现中的路由异常。

35. 发明申请

US20090300768A1 Method and apparatus for identifying phishing websites in network traffic using generated regular expressions 有权
标题翻译：用于使用生成的正则表达式来识别网络流量中的网络钓鱼网站的方法和装置
公开(公告)号：US20090300768A1
公开(公告)日：2009-12-03
申请号：US12156341
申请日：2008-05-30
申请人： Balachander Krishnamurthy , Oliver Spatscheck , Jacobus Van Der Merwe , Anirudh Ramachandran
发明人： Balachander Krishnamurthy , Oliver Spatscheck , Jacobus Van Der Merwe , Anirudh Ramachandran
IPC分类号： G06F21/00
CPC分类号： G06F21/552 , G06F21/566 , H04L63/10 , H04L63/1441 , H04L63/1483
摘要： According to an aspect of this invention, a method to detect phishing URLs involves: creating a whitelist of URLs using a first regular expression; creating a blacklist of URLs using a second regular expression; comparing a URL to the whitelist; and if the URL is not on the whitelist, comparing the URL to the blacklist. False negatives and positives may be avoided by classifying Internet domain names for the target organization as “legitimate”. This classification leaves a filtered set of URLs with unknown domain names which may be more closely examined to detect a potential phishing URL. Valid domain names may be classified without end-user participation.
摘要翻译：根据本发明的一个方面，一种检测网络钓鱼URL的方法包括：使用第一正则表达式创建URL的白名单; 使用第二个正则表达式创建URL黑名单; 将网址与白名单进行比较; 如果该网址不在白名单中，请将该URL与黑名单进行比较。通过将目标组织的互联网域名分类为“合法”，可以避免虚假的否定和积极性。此类别会留下一组经过筛选的未知域名的URL，可以更仔细地检查以检测潜在的网络钓鱼URL。有效的域名可能没有最终用户的参与分类。

36. 发明申请

US20070283436A1 Method and apparatus for large-scale automated distributed denial of service attack detection 有权
标题翻译：用于大规模自动分布式拒绝服务攻击检测的方法和装置
公开(公告)号：US20070283436A1
公开(公告)日：2007-12-06
申请号：US11452623
申请日：2006-06-14
申请人： Nicholas Duffield , Jacobus Van Der Merwe , Vyas Sekar , Oliver Spatscheck
发明人： Nicholas Duffield , Jacobus Van Der Merwe , Vyas Sekar , Oliver Spatscheck
IPC分类号： G06F12/14
CPC分类号： H04L63/1425 , H04L63/1458
摘要： A multi-staged framework for detecting and diagnosing Denial of Service attacks is disclosed in which a low-cost anomaly detection mechanism is first used to collect coarse data, such as may be obtained from Simple Network Management Protocol (SNMP) data flows. Such data is analyzed to detect volume anomalies that could possibly be indicative of a DDoS attack. If such an anomaly is suspected, incident reports are then generated and used to trigger the collection and analysis of fine grained data, such as that available in Netflow data flows. Both types of collection and analysis are illustratively conducted at edge routers within the service provider network that interface customers and customer networks to the service provider. Once records of the more detailed information have been retrieved, they are examined to determine whether the anomaly represents a distributed denial of service attack, at which point an alarm is generated.
摘要翻译：公开了一种用于检测和诊断拒绝服务攻击的多阶段框架，其中首先使用低成本异常检测机制来收集粗略数据，例如可以从简单网络管理协议（SNMP）数据流中获得。分析这些数据以检测可能表示DDoS攻击的体积异常。如果怀疑出现这种异常，则会生成事件报告，并用于触发对Netflow数据流中可用的细粒度数据的收集和分析。这两种类型的收集和分析在服务提供商网络中的边缘路由器上进行说明性地进行，其将客户和客户网络接入服务提供商。一旦检索到更详细信息的记录，就检查它们以确定异常是否表示分布式拒绝服务攻击，此时产生警报。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式