专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

41. 发明申请

US20070204338A1 Reverse Firewall with Self-Provisioning 有权
标题翻译：具有自供应的反向防火墙
公开(公告)号：US20070204338A1
公开(公告)日：2007-08-30
申请号：US11616325
申请日：2006-12-27
申请人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
发明人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
IPC分类号： G06F15/16
CPC分类号： H04W28/00 , H04L43/16 , H04L63/0236 , H04L63/0254 , H04L63/0263 , H04L63/029
摘要： An application provisioning device may be used to manage a profile of a host and provide data corresponding to a selected application for installation at a host. A reverse firewall may use the profile of the host to determine whether to allow or block particular network communication from an application running on the host. An indication of a selected application may be received at the application provisioning device. Configuration information may also be received at the application provisioning device. The application provisioning server may request an update to the profile of a host and transmit such a request. The profile may be updated to reflect the configuration information and/or information of the selected application. Data corresponding to the selected application may be updated and transmitted to a host computer, where it may be installed. Therefore, the installed application running on the host may operate without being prematurely blocked by the reverse firewall.
摘要翻译：应用配置设备可以用于管理主机的配置文件，并且提供与所选择的应用相对应的数据以在主机上安装。反向防火墙可以使用主机的简档来确定是否允许或阻止来自在主机上运行的应用的特定网络通信。可以在应用供应设备处接收所选择的应用的指示。还可以在应用配置设备处接收配置信息。应用供应服务器可以请求对主机的配置文件的更新并传送这样的请求。可以更新配置文件以反映所选择的应用的配置信息和/或信息。与所选择的应用相对应的数据可以被更新并发送到可以安装在其上的主计算机。因此，主机上运行的已安装应用程序可能会运行，而不会被反向防火墙过早阻止。

42. 发明授权

US08880614B1 Method and apparatus for dynamically protecting a mail server 有权
标题翻译：用于动态保护邮件服务器的方法和装置
公开(公告)号：US08880614B1
公开(公告)日：2014-11-04
申请号：US11598582
申请日：2006-11-13
申请人： Albert G. Greenberg , Patrick Haffner , Subhabrata Sen , Oliver Spatscheck
发明人： Albert G. Greenberg , Patrick Haffner , Subhabrata Sen , Oliver Spatscheck
IPC分类号： H04L12/58
CPC分类号： H04L51/12
摘要： A method and apparatus for providing protection for mail servers in networks such as the packet networks are disclosed. For example, the present method detects a mail server is reaching its processing limit. The method then selectively limits connections to the mail server from a plurality of source nodes based on a spam index associated with each of the source nodes.
摘要翻译：公开了一种在诸如分组网络的网络中为邮件服务器提供保护的方法和装置。例如，本方法检测到邮件服务器正在达到其处理限制。该方法然后基于与每个源节点相关联的垃圾邮件索引来选择性地限制来自多个源节点的到邮件服务器的连接。

43. 发明授权

US07860004B2 Systems and methods for proactive surge protection 有权
标题翻译：主动浪涌保护的系统和方法
公开(公告)号：US07860004B2
公开(公告)日：2010-12-28
申请号：US12180309
申请日：2008-07-25
申请人： Oliver Spatscheck , Subhabrata Sen , Bill Lin , Jerry Chou
发明人： Oliver Spatscheck , Subhabrata Sen , Bill Lin , Jerry Chou
IPC分类号： H04J3/14 , H04L12/26 , H04L12/28 , G06F11/30
CPC分类号： H04L47/10 , H04L47/20 , H04L47/31 , H04L47/32 , H04L47/521 , H04L63/1458 , H04L2463/141
摘要： A system for protecting a network from a traffic surge includes a data collection module, an allocation module, and a traffic flow module. The data collection module is configured to obtain network utilization information for a plurality of traffic flows. The allocation module is configured to determine a bandwidth allocation to minimize a drop probability for the plurality of traffic flows. The traffic flow module is configured to preferentially drop network packets for a traffic flow exceeding the optimal bandwidth allocation.
摘要翻译：用于保护网络免受流量波动的系统包括数据收集模块，分配模块和业务流模块。数据采集模块被配置为获得多个业务流的网络利用信息。分配模块被配置为确定带宽分配以最小化多个业务流的丢弃概率。流量模块配置为优先丢弃超过最优带宽分配的业务流的网络报文。

44. 发明申请

US20100085889A1 Statistical, Signature-Based Approach to IP Traffic Classification 失效
标题翻译：统计，基于签名的IP流量分类方法
公开(公告)号：US20100085889A1
公开(公告)日：2010-04-08
申请号：US12635127
申请日：2009-12-10
申请人： Nicholas G. Duffield , Matthew Roughan , Subhabrata Sen , Oliver Spatscheck
发明人： Nicholas G. Duffield , Matthew Roughan , Subhabrata Sen , Oliver Spatscheck
IPC分类号： H04L12/26 , H04L12/56
CPC分类号： H04L41/5022 , H04L41/142
摘要： A signature-based traffic classification method maps traffic into preselected classes of service (CoS). By analyzing a known corpus of data that clearly belongs to identified ones of the preselected classes of service, in a training session the method develops statistics about a chosen set of traffic features. In an analysis session, relative to traffic of the network where QoS treatments are desired (target network), the method obtains statistical information relative to the same chosen set of features for values of one or more predetermined traffic attributes that are associated with connections that are analyzed in the analysis session, yielding a statistical features signature of each of the values of the one ore more attributes. A classification process then establishes a mapping between values of the one or more predetermined traffic attributes and the preselected classes of service, leading to the establishment of QoS treatment rules.
摘要翻译：基于签名的流量分类方法将流量映射到预选的服务等级（CoS）。通过分析明确属于所选择的服务类别的已知数据库，在训练课程中，该方法开发关于所选择的一组交通特征的统计。在分析会话中，相对于期望QoS处理的网络的业务量（目标网络），该方法获得相对于与所连接的连接相关联的一个或多个预定业务属性的值的相同所选择的特征集的统计信息在分析会话中进行分析，产生一个或多个属性的每个值的统计特征签名。然后，分类过程建立一个或多个预定业务属性的值与预选的业务类别之间的映射，导致建立QoS处理规则。

45. 发明授权

US07975044B1 Automated disambiguation of fixed-serverport-based applications from ephemeral applications 有权
标题翻译：从临时应用程序自动消除基于固定服务器端口的应用程序
公开(公告)号：US07975044B1
公开(公告)日：2011-07-05
申请号：US11317256
申请日：2005-12-27
申请人： Oliver Spatscheck , Subhabrata Sen , Jacobus E. Van der Merwe , Patrick McDaniel
发明人： Oliver Spatscheck , Subhabrata Sen , Jacobus E. Van der Merwe , Patrick McDaniel
IPC分类号： G06F15/173
CPC分类号： G06F9/54 , H04L43/00 , H04L43/026 , H04L69/326
摘要： Provided are methods for partitioning communication data in a network and disambiguating fixed or non-ephemeral communication data from ephemeral communication data and services. In one example, kmeans data clustering is used to partition or cluster server ports based on a location of the server ports in a 2-dimensional space. The location of the server ports may be based on a number of connections per server port and the number of servers using that port.
摘要翻译：提供了用于分割网络中的通信数据并且从短暂通信数据和服务中消除固定或非短暂通信数据的方法。在一个示例中，kmeans数据集群用于基于二维空间中的服务器端口的位置对服务器端口进行分区或集群。服务器端口的位置可以基于每个服务器端口的多个连接以及使用该端口的服务器数量。

46. 发明申请

US20110035282A1 Consumer Sensitive Electronic Billboards 审中-公开
标题翻译：消费敏感电子广告牌
公开(公告)号：US20110035282A1
公开(公告)日：2011-02-10
申请号：US12537882
申请日：2009-08-07
申请人： Oliver Spatscheck , Subhabrata Sen
发明人： Oliver Spatscheck , Subhabrata Sen
IPC分类号： G06Q30/00
CPC分类号： G06Q30/02 , G06Q30/0261 , G06Q30/0273 , G06Q30/0275 , G09F2027/001
摘要： A method and system for advertising on an electronic billboard is capable of adapting over time to advertising criteria associated with actual viewers of the billboard. Mobile device users in a vicinity of the billboard are identified. User profiles indicative of fixed network and/or wireless network usage for the mobile device users are analyzed for pertinent advertising criteria. The predominant advertising criteria may be used to select the billboard content. The content may also be obtained via an auction for the billboard display and/or the advertising criteria.
摘要翻译：用于在电子广告牌上进行广告的方法和系统能够随着时间而适应与广告牌的实际观众相关联的广告标准。识别广告牌附近的移动设备用户。针对相关广告标准分析指示移动设备用户的固定网络和/或无线网络使用的用户简档。主要的广告标准可以用于选择广告牌内容。也可以通过用于广告牌显示和/或广告标准的拍卖来获得内容。

47. 发明申请

US20100064131A1 METHOD AND APPARATUS FOR AUTOMATICALLY CONSTRUCTING APPLICATION SIGNATURES 审中-公开
标题翻译：自动构建应用信号的方法和装置
公开(公告)号：US20100064131A1
公开(公告)日：2010-03-11
申请号：US12619620
申请日：2009-11-16
申请人： Oliver Spatscheck , Subhabrata Sen , Dongmei Wang
发明人： Oliver Spatscheck , Subhabrata Sen , Dongmei Wang
IPC分类号： H04L29/06
CPC分类号： H04L47/10 , H04L47/2441 , H04L69/22
摘要： The present invention relates to a method and system for the automated construction of application signatures. In one example, an approach for automatically constructing accurate signatures for individual applications, with minimal human involvement or application domain knowledge, is provided. Given a training data set containing the application traffic, the Automated Construction of Application Signatures (ACAS) system uses a combination of statistical, information theoretic and combinatorial optimization techniques, to derive application-layer signatures from the payload of packets, e.g., IP packets. Evaluations with a range of applications demonstrate that the derived signatures are very accurate and scale to identifying a large number of flows in real time on high-speed links.
摘要翻译：本发明涉及一种用于自动构建应用签名的方法和系统。在一个示例中，提供了一种用于以最小的人为参与或应用领域知识为个体应用自动构建准确签名的方法。给定包含应用流量的训练数据集，自动构建应用签名（ACAS）系统使用统计，信息理论和组合优化技术的组合来从分组的有效载荷（例如IP分组）中导出应用层签名。使用一系列应用程序的评估表明，派生的签名非常准确，可扩展到在高速链路上实时识别大量的流量。

48. 发明申请

US20060239219A1 Application signature based traffic classification 审中-公开
标题翻译：基于应用签名的流量分类
公开(公告)号：US20060239219A1
公开(公告)日：2006-10-26
申请号：US11321054
申请日：2005-12-30
申请人： Patrick Haffner , Subhabrata Sen , Oliver Spatscheck , Dongmei Wang
发明人： Patrick Haffner , Subhabrata Sen , Oliver Spatscheck , Dongmei Wang
IPC分类号： H04B7/212
CPC分类号： H04L41/142 , H04L43/028 , H04L43/0823 , H04L63/0227
摘要： A method for identifying traffic to an application including the steps of monitoring communication traffic in a network, identifying data from communication traffic content, and constructing a model for mapping the communication traffic for an application derived from data identified from the communication traffic content is described. A related system and computer readable medium for performing the method is also described. The described method and system has utility in a wide array of networks including IP networks.
摘要翻译：一种用于识别对应用的业务的方法，包括以下步骤：监视网络中的通信业务，从通信业务内容识别数据，以及构建用于映射从通信业务内容识别的数据导出的应用的通信业务的模型。还描述了用于执行该方法的相关系统和计算机可读介质。所描述的方法和系统在包括IP网络的广泛网络中具有实用性。

49. 发明申请

US20060190998A1 Determining firewall rules for reverse firewalls 审中-公开
标题翻译：确定反向防火墙的防火墙规则
公开(公告)号：US20060190998A1
公开(公告)日：2006-08-24
申请号：US11290976
申请日：2005-11-30
申请人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
发明人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
IPC分类号： G06F15/16
CPC分类号： H04W28/00 , H04L43/16 , H04L63/0236 , H04L63/0254 , H04L63/0263 , H04L63/029
摘要： A reverse firewall for removing undesirable traffic from a computing network, such as a virtual private network (VPN), is disclosed. The reverse firewall uses firewall rules that may be determined and maintained within the enterprise network to control communication sent between computers in the computing network. The reverse firewall rules may be used to identify the communications between computers in the network that are undesirable and/or intrusive. For example, a computer in a network that is infected with a worm or that is surreptitiously hosting a denial-of-service attack may be identified by the reverse firewall and quarantined. The reverse firewall may be implemented in hardware and/or software.
摘要翻译：公开了用于从诸如虚拟专用网（VPN）的计算网络去除不期望的业务的反向防火墙。反向防火墙使用可以在企业网络内确定和维护的防火墙规则来控制计算网络中计算机之间发送的通信。反向防火墙规则可用于识别网络中不希望的和/或侵入的计算机之间的通信。例如，网络中受感染蠕虫或暗中托管拒绝服务攻击的计算机可能由反向防火墙识别，并被隔离。反向防火墙可以在硬件和/或软件中实现。

50. 发明授权

US08601567B2 Firewall for tunneled IPv6 traffic 有权
标题翻译：防火墙用于隧道式IPv6流量
公开(公告)号：US08601567B2
公开(公告)日：2013-12-03
申请号：US12387931
申请日：2009-05-08
申请人： Oliver Spatscheck , Subhabrata Sen
发明人： Oliver Spatscheck , Subhabrata Sen
IPC分类号： G06F9/00
CPC分类号： H04L63/0236 , H04L29/12367 , H04L29/12575 , H04L61/2514 , H04L61/2592
摘要： A NAT device and method implemented on the device for filtering tunneled IPv6 traffic is disclosed. The method comprises: receiving an IP traffic stream at an ingress network interface to the NAT, performing deep packet inspection on the traffic stream to detect the tunneled IPv6 packets, and applying a filter to the IPv6 packets.
摘要翻译：公开了一种在设备上实现的用于过滤隧道IPv6业务的NAT设备和方法。该方法包括：在到达NAT的入口网络接口接收IP业务流，对业务流执行深度报文检测，检测隧道IPv6报文，并对IPv6报文应用过滤。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式