专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09413777B2 Detection of network security breaches based on analysis of network record logs 有权
标题翻译：基于网络记录日志的分析检测网络安全漏洞
公开(公告)号：US09413777B2
公开(公告)日：2016-08-09
申请号：US13615903
申请日：2012-09-14
申请人： Nir Zuk
发明人： Nir Zuk
IPC分类号： G06F17/30 , H04L29/06
CPC分类号： H04L63/1425 , Y10S707/99943
摘要： Computer program products and methods of inspecting a log of security records in a computer network are provided. The method includes retrieving a log record, processing the log record including deriving a key to a table, determining a data value from information in the log record and adding the data value to a list of data values associated with the key if the data value is unique. One or more entries of the table are evaluated based on predetermined criteria to detect attempted security breaches.
摘要翻译：提供计算机程序产品和检查计算机网络中安全记录日志的方法。该方法包括检索日志记录，处理日志记录，包括向表导出密钥，从日志记录中的信息确定数据值，并将数据值添加到与密钥相关联的数据值的列表中，如果数据值为独特。基于预定标准评估表中的一个或多个条目以检测尝试的安全漏洞。

2. 发明授权

US08631113B2 Intelligent integrated network security device for high-availability applications 有权
标题翻译：用于高可用性应用的智能集成网络安全设备
公开(公告)号：US08631113B2
公开(公告)日：2014-01-14
申请号：US13616706
申请日：2012-09-14
申请人： Nir Zuk , Yu Ming Mao , Kowsik Guruswamy
发明人： Nir Zuk , Yu Ming Mao , Kowsik Guruswamy
IPC分类号： G06F15/173
CPC分类号： G06F11/2002 , H04L29/06 , H04L63/0227 , H04L63/0236 , H04L63/0428 , H04L63/1416 , H04L69/40
摘要： Methods and apparatuses for inspecting packets are provided. A primary security system may be configured for processing packets. The primary security system may be operable to maintain flow information for a group of devices to facilitate processing of the packets. A secondary security system may be designated for processing packets upon a failover event. Flow records may be shared from the primary security system with the secondary security system.
摘要翻译：提供了检查数据包的方法和设备。可以配置主安全系统来处理分组。主安全系统可以可操作地维护一组设备的流信息以便于分组的处理。可以指定辅助安全系统用于在故障转移事件时处理数据包。可以使用辅助安全系统从主安全系统共享流记录。

3. 发明授权

US08594085B2 L2/L3 multi-mode switch including policy processing 有权
标题翻译： L2 / L3多模切换包括策略处理
公开(公告)号：US08594085B2
公开(公告)日：2013-11-26
申请号：US11734198
申请日：2007-04-11
申请人： Nir Zuk , Yuming Mao , Haoying Xu , Arnit Green
发明人： Nir Zuk , Yuming Mao , Haoying Xu , Arnit Green
IPC分类号： H04L12/28
CPC分类号： H04L69/22 , H04L45/04 , H04L45/308 , H04L45/54 , H04L45/56 , H04L45/60 , H04L45/66 , H04L45/745
摘要： Methods and apparatus for processing data packets in a computer network are described. One general method includes receiving a data packet; examining the data packet to classify the data packet including classifying the data packet as a L2 or L3 packet and including determining at least one zone associated with the packet; processing the packet in accordance with one or more policies associated with the zone; determining forwarding information associated with the data packet; and if one or more policies permit, forwarding the data packet toward an intended destination using the forwarding information.
摘要翻译：描述了在计算机网络中处理数据分组的方法和装置。一种一般方法包括接收数据包; 检查所述数据分组以对所述数据分组进行分类，包括将所述数据分组分类为L2或L3分组，并且包括确定与所述分组相关联的至少一个区域; 根据与该区域相关联的一个或多个策略来处理分组; 确定与所述数据分组相关联的转发信息; 并且如果一个或多个策略允许，则使用转发信息将数据分组转发到预期目的地。

4. 发明授权

US08370936B2 Multi-method gateway-based network security systems and methods 有权
公开(公告)号：US08370936B2
公开(公告)日：2013-02-05
申请号：US10072683
申请日：2002-02-08
申请人： Nir Zuk , Kowsik Guruswamy
发明人： Nir Zuk , Kowsik Guruswamy
IPC分类号： G06F11/00 , G06F9/00
CPC分类号： H04L63/0254 , H04L63/0263 , H04L63/12 , H04L63/1416 , H04L63/1441
摘要： Systems and methods for detecting and preventing network security breaches are described. The systems and methods present a gateway-based packet-forwarding network security solution to not only detect security breaches but also prevent them by directly dropping suspicious packets and connections. The systems and methods employ multiple techniques to detect and prevent network security breaches, including stateful signature detection, traffic signature detection, and protocol anomaly detection.

5. 发明授权

US08332948B2 Intelligent integrated network security device 有权
标题翻译：智能集成网络安全设备
公开(公告)号：US08332948B2
公开(公告)日：2012-12-11
申请号：US12575997
申请日：2009-10-08
申请人： Nir Zuk
发明人： Nir Zuk
IPC分类号： G06F9/00 , G06F7/04 , G06F11/00 , H04L29/06
CPC分类号： H04L63/02 , H04L63/0209 , H04L63/0218 , H04L63/0227 , H04L63/0254 , H04L63/0263 , H04L63/12 , H04L63/1416 , H04L63/1441 , H04L69/22
摘要： Methods, computer program products and apparatus for processing data packets are described. Methods include receiving the data packet, examining the data packet, determining a single flow record associated with the packet and extracting flow instructions for two or more devices from the single flow record.
摘要翻译：描述了处理数据包的方法，计算机程序产品和装置。方法包括接收数据分组，检查数据分组，确定与分组相关联的单个流记录，并从单流记录中提取两个或多个设备的流指令。

6. 发明授权

US08331374B2 Packet processing in a multiple processor system 有权
标题翻译：多处理器系统中的数据包处理
公开(公告)号：US08331374B2
公开(公告)日：2012-12-11
申请号：US13323299
申请日：2011-12-12
申请人： Nir Zuk , Yu Ming Mao
发明人： Nir Zuk , Yu Ming Mao
IPC分类号： H04L12/28
CPC分类号： H04L63/0227
摘要： Packet processing is provided in a multiple processor system including a first processor to processing a packet and to create a tag associated with the packet. The tag includes information about the processing of the packet. A second processor receives the packet subsequent to the first processor and processes the packet using the tag information.
摘要翻译：在包括第一处理器的多处理器系统中提供分组处理以处理分组并创建与分组相关联的标签。标签包括有关数据包处理的信息。第二处理器接收第一处理器之后的分组，并使用标签信息处理分组。

7. 发明授权

US08284699B1 Managing network devices 有权
标题翻译：管理网络设备
公开(公告)号：US08284699B1
公开(公告)日：2012-10-09
申请号：US12433740
申请日：2009-04-30
申请人： Nir Zuk
发明人： Nir Zuk
IPC分类号： H04L12/28
CPC分类号： H04L41/084 , H04L41/0816 , H04L41/085
摘要： Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for configuring network devices. A central management system stores shared configuration objects in a central configuration database. A network device stores shared configuration objects and device-specific configuration objects in a local configuration database. The local configuration database's shared configuration objects correspond to shared configuration objects in the central configuration database. The central management system determines the network device has received a request to update a shared configuration object, where the request did not originate from the central management system, and updates the central configuration database.
摘要翻译：方法，系统和装置，包括在计算机存储介质上编码的计算机程序，用于配置网络设备。中央管理系统将共享配置对象存储在中央配置数据库中。网络设备将共享的配置对象和设备特定的配置对象存储在本地配置数据库中。本地配置数据库的共享配置对象与中央配置数据库中的共享配置对象相对应。中央管理系统确定网络设备已经接收到更新共享配置对象的请求，其中请求不是源于中央管理系统，并且更新中央配置数据库。

8. 发明申请

US20120084426A1 PACKET PROCESSING IN A MULTIPLE PROCESSOR SYSTEM 有权
标题翻译：多处理器系统中的分组处理
公开(公告)号：US20120084426A1
公开(公告)日：2012-04-05
申请号：US13323299
申请日：2011-12-12
申请人： Nir ZUK , Yu Ming MAO
发明人： Nir ZUK , Yu Ming MAO
IPC分类号： G06F15/173
CPC分类号： H04L63/0227
摘要： Packet processing is provided in a multiple processor system including a first processor to processing a packet and to create a tag associated with the packet. The tag includes information about the processing of the packet. A second processor receives the packet subsequent to the first processor and processes the packet using the tag information.
摘要翻译：在包括第一处理器的多处理器系统中提供分组处理以处理分组并创建与分组相关联的标签。标签包括有关数据包处理的信息。第二处理器接收第一处理器之后的分组，并使用标签信息处理分组。

9. 发明授权

US08077723B2 Packet processing in a multiple processor system 有权
标题翻译：多处理器系统中的数据包处理
公开(公告)号：US08077723B2
公开(公告)日：2011-12-13
申请号：US12780695
申请日：2010-05-14
申请人： Nir Zuk , Yu Ming Mao
发明人： Nir Zuk , Yu Ming Mao
IPC分类号： H04L12/28
CPC分类号： H04L63/0227
摘要： Packet processing is provided in a multiple processor system including a first processor to processing a packet and to create a tag associated with the packet. The tag includes information about the processing of the packet. A second processor receives the packet subsequent to the first processor and processes the packet using the tag information.
摘要翻译：在包括第一处理器的多处理器系统中提供分组处理以处理分组并创建与分组相关联的标签。标签包括有关数据包处理的信息。第二处理器接收第一处理器之后的分组，并使用标签信息处理分组。

10. 发明申请

US20100242093A1 INTELLIGENT INTEGRATED NETWORK SECURITY DEVICE FOR HIGH-AVAILABILITY APPLICATIONS 有权
标题翻译：用于高可用性应用的智能集成网络安全设备
公开(公告)号：US20100242093A1
公开(公告)日：2010-09-23
申请号：US12766773
申请日：2010-04-23
申请人： Nir ZUK , Yu Ming MAO , Kowsik GURUSWAMY
发明人： Nir ZUK , Yu Ming MAO , Kowsik GURUSWAMY
IPC分类号： G06F21/00
CPC分类号： G06F11/2002 , H04L29/06 , H04L63/0227 , H04L63/0236 , H04L63/0428 , H04L63/1416 , H04L69/40
摘要： Methods and apparatuses for inspecting packets are provided. A primary security system may be configured for processing packets. The primary security system may be operable to maintain flow information for a group of devices to facilitate processing of the packets. A secondary security system may be designated for processing packets upon a failover event. Flow records may be shared from the primary security system with the secondary security system.
摘要翻译：提供了检查数据包的方法和设备。可以配置主安全系统来处理分组。主安全系统可以可操作地维护一组设备的流信息以便于分组的处理。可以指定辅助安全系统用于在故障转移事件时处理数据包。可以使用辅助安全系统从主安全系统共享流记录。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式