专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08566373B2 Probabilistic fingerprint checking for preventing data leakage 有权
标题翻译：用于防止数据泄漏的概率指纹检查
公开(公告)号：US08566373B2
公开(公告)日：2013-10-22
申请号：US13367441
申请日：2012-02-07
申请人： Fang Hao , Krishna P. Puttaswamy Naga , Murali Kodialam , Tirunell V. Lakshman
发明人： Fang Hao , Krishna P. Puttaswamy Naga , Murali Kodialam , Tirunell V. Lakshman
IPC分类号： G06F17/30
CPC分类号： G06F17/30109 , G06F21/6236
摘要： A data-leakage prevention capability is presented herein. The data-leakage prevention capability prevents leakage of data, of a file set having a plurality of files, from a secure network using online fingerprint checking of data flows at a boundary of the secure network. The online fingerprint checking is performed using a set of data structures configured for the file set. The data structures for the file set are configured based on file set characteristics information of the file set and a target detection lag indicative of a maximum number of bits within which a data leakage event for the file set is to be determined. The data structure configuration is computed for a plurality of data structures configured for use in monitoring the files of the file set. The data structure configuration includes a plurality of data structure locations and data structure sizes for the respective plurality of data structures.
摘要翻译：本文介绍了数据泄漏防护功能。数据泄漏防止能力通过使用在安全网络的边界上的数据流的在线指纹检查来防止来自安全网络的具有多个文件的文件组的数据的泄漏。使用为文件集配置的一组数据结构来执行在线指纹检查。文件集的数据结构是基于文件集的文件集特征信息和指示要确定文件集的数据泄漏事件的最大位数的目标检测滞后来配置的。为配置为用于监视文件集文件的多个数据结构计算数据结构配置。数据结构配置包括用于各个多个数据结构的多个数据结构位置和数据结构大小。

2. 发明申请

US20130204903A1 PROBABILISTIC FINGERPRINT CHECKING FOR PREVENTING DATA LEAKAGE 有权
标题翻译：用于防止数据泄漏的指纹指纹检查
公开(公告)号：US20130204903A1
公开(公告)日：2013-08-08
申请号：US13367441
申请日：2012-02-07
申请人： Fang Hao , Krishna P. Puttaswamy Naga , Murali Kodialam , Tirunell V. Lakshman
发明人： Fang Hao , Krishna P. Puttaswamy Naga , Murali Kodialam , Tirunell V. Lakshman
IPC分类号： G06F7/00
CPC分类号： G06F17/30109 , G06F21/6236
摘要： A data-leakage prevention capability is presented herein. The data-leakage prevention capability prevents leakage of data, of a file set having a plurality of files, from a secure network using online fingerprint checking of data flows at a boundary of the secure network. The online fingerprint checking is performed using a set of data structures configured for the file set. The data structures for the file set are configured based on file set characteristics information of the file set and a target detection lag indicative of a maximum number of bits within which a data leakage event for the file set is to be determined. The data structure configuration is computed for a plurality of data structures configured for use in monitoring the files of the file set. The data structure configuration includes a plurality of data structure locations and data structure sizes for the respective plurality of data structures.
摘要翻译：本文介绍了数据泄漏防护功能。数据泄漏防止能力通过使用在安全网络的边界上的数据流的在线指纹检查来防止来自安全网络的具有多个文件的文件组的数据的泄漏。使用为文件集配置的一组数据结构来执行在线指纹检查。文件集的数据结构是基于文件集的文件集特征信息和指示要确定文件集的数据泄漏事件的最大位数的目标检测滞后来配置的。为配置为用于监视文件集文件的多个数据结构计算数据结构配置。数据结构配置包括用于各个多个数据结构的多个数据结构位置和数据结构大小。

3. 发明申请

US20140089506A1 SECURING SOFTWARE DEFINED NETWORKS VIA FLOW DEFLECTION 有权
标题翻译：通过流量偏移来保护软件定义的网络
公开(公告)号：US20140089506A1
公开(公告)日：2014-03-27
申请号：US13627003
申请日：2012-09-26
申请人： Krishna P. Puttaswamy Naga , Fang Hao , Tirunell V. Lakshman
发明人： Krishna P. Puttaswamy Naga , Fang Hao , Tirunell V. Lakshman
IPC分类号： G06F15/173
CPC分类号： H04L47/80 , H04L12/4641 , H04L45/42 , H04L45/50 , H04L45/64 , H04L45/7457 , H04L63/1458 , H04L63/20
摘要： A flow deflection capability is provided for deflecting data flows within a Software Defined Network (SDN) in order to provide security for the SDN. A flow forwarding rule is generated for a first network element of the SDN based on detection of a condition (e.g., TCAM utilization condition, CPU utilization condition, or the like) associated with the first network element. The flow forwarding rule is generated by a control element of the SDN or the first network element of the SDN. The flow forwarding rule is indicative that at least a portion of new flow requests received at the first network element are to be forwarded from the first network element to a second network element of the SDN. The flow forwarding rule may specify full flow deflection or selective flow deflection.
摘要翻译：提供流量偏转能力用于偏转软件定义网络（SDN）内的数据流，以便为SDN提供安全性。基于与第一网元相关联的条件（例如，TCAM利用条件，CPU利用条件等）的检测，为SDN的第一网元生成流转发规则。流转发规则由SDN的控制元素或SDN的第一网元生成。流转发规则指示在第一网元接收到的新流请求的至少一部分将从第一网元转发到SDN的第二网元。流量转移规则可以指定全流量偏转或选择性流量偏转。

4. 发明授权

US08943269B2 Apparatus and method for meeting performance metrics for users in file systems 有权
标题翻译：用于满足文件系统中用户的性能指标的装置和方法
公开(公告)号：US08943269B2
公开(公告)日：2015-01-27
申请号：US13446010
申请日：2012-04-13
申请人： Krishna P. Puttaswamy Naga , Murali Kodialam
发明人： Krishna P. Puttaswamy Naga , Murali Kodialam
IPC分类号： G06F12/08 , G06F11/30 , G06F12/12
CPC分类号： G06F12/0866 , G06F3/0619 , G06F3/0665 , G06F3/067 , G06F3/0689 , G06F11/3037 , G06F11/3409 , G06F11/3495 , G06F12/12 , G06F12/121 , G06F17/30135 , G06F2003/0692 , G06F2212/263 , H04L67/10 , H04L67/1097 , H04L67/2842 , H04L67/2852 , H04L67/2857
摘要： A data block storage management capability is presented. A file system includes a plurality of data blocks which are managed using a first storage service and a second storage service, where the first storage service has a lower storage cost and a higher input-output cost than the second storage service. The data blocks stored using the second storage service have associated therewith respective expected storage durations indicative of respective lengths of time for which the data blocks are to be stored using the second storage service (which may be the same or different across the ones of the data blocks stored using the second storage service). The expected storage durations of the data blocks are modified based on a comparison of an expected hit rate of the second storage service and a current hit rate of the second storage service or current hit rates of the data blocks.
摘要翻译：提出了数据块存储管理能力。文件系统包括使用第一存储服务和第二存储服务来管理的多个数据块，其中第一存储服务具有比第二存储服务更低的存储成本和更高的输入/输出成本。使用第二存储服务存储的数据块具有与其相应的预期存储持续时间，其指示将使用第二存储服务来存储数据块的相应时间长度（其可以在数据中的数据块之间相同或不同）使用第二存储服务存储的块）。基于第二存储服务的预期命中率和第二存储服务的当前命中率或数据块的当前命中率的比较来修改数据块的预期存储持续时间。

5. 发明申请

US20140067994A1 REDUCING COSTS RELATED TO USE OF NETWORKS BASED ON PRICING HETEROGENEITY 审中-公开
标题翻译：基于价格异质性降低与网络使用相关的成本
公开(公告)号：US20140067994A1
公开(公告)日：2014-03-06
申请号：US13597614
申请日：2012-08-29
申请人： Krishna P. Puttaswamy Naga , Murali Kodialam , Matteo Varvello
发明人： Krishna P. Puttaswamy Naga , Murali Kodialam , Matteo Varvello
IPC分类号： G06F15/16
CPC分类号： G06Q10/06313 , H04L41/0896 , H04L67/10 , H04L67/1095 , H04L67/1097
摘要： A capability is provided for reducing the costs of data transfers for networks using pricing heterogeneity. For data to be transferred between an application of a first network and a user device, the data may be transferred directly without using a second network or indirectly using a second network including a transfer of the data between the first network and the second network. In a network-based file system, a first network is primarily used for write requests and a second network is primarily used for read requests, and a data block is transferred from the first network to the second network based on a determination that a threshold number of read requests for the data block have been received. The determination as to when to transfer data between networks may be determined based on various costs associated with the networks.
摘要翻译：提供了一种降低使用定价异质性的网络数据传输成本的能力。对于要在第一网络和用户设备的应用之间传输的数据，可以直接传送数据而不使用第二网络，或间接地使用包括第一网络和第二网络之间的数据传输的第二网络。在基于网络的文件系统中，第一网络主要用于写入请求，并且第二网络主要用于读取请求，并且基于确定阈值数目的确定将数据块从第一网络传送到第二网络已经接收到数据块的读请求。关于何时在网络之间传送数据的确定可以基于与网络相关联的各种成本来确定。

6. 发明申请

US20140188656A1 DETERMINING COST OPTIMIZATION BASED ON CONSTRAINTS ON SKI-RENTAL PROBLEMS 审中-公开
标题翻译：基于滑坡问题的约束条件确定成本优化
公开(公告)号：US20140188656A1
公开(公告)日：2014-07-03
申请号：US13727852
申请日：2012-12-27
申请人： Krishna P. Puttaswamy Naga , Murali Kodialam , Ali Khanafer
发明人： Krishna P. Puttaswamy Naga , Murali Kodialam , Ali Khanafer
IPC分类号： G06Q30/06
CPC分类号： G06Q30/0631
摘要： A constrained ski-rental problem is defined. In the constrained ski-rental problem, a determination as to whether a first action having a first cost associated therewith or a second action having a second cost associated therewith is more cost effective is performed based on moment information associated with events related to the first action or the second action. The moment information may include a moment of the occurrences distribution of events related to the first and second actions. The moment information may include a moment of a number of occurrences of events related to the first and second actions, a moment of the inter-event times of occurrences of events related to the first and second actions, or the like. The moment information may include a first moment, a second moment, or the like.
摘要翻译：限定了滑雪租赁问题。在限制的滑雪租赁问题中，基于与第一动作相关联的事件相关联的时刻信息来执行关于具有与其相关联的第一成本的第一动作或与其相关联的具有第二成本的第二动作是否更具成本效益的确定或第二动作。时刻信息可以包括与第一和第二动作有关的事件的发生发生的时刻。时刻信息可以包括与第一和第二动作相关的事件发生次数的时刻，与第一和第二动作相关的事件的事件发生时间的时刻等。时刻信息可以包括第一时刻，第二时刻等。

7. 发明申请

US20130275669A1 APPARATUS AND METHOD FOR MEETING PERFORMANCE METRICS FOR USERS IN FILE SYSTEMS 有权
公开(公告)号：US20130275669A1
公开(公告)日：2013-10-17
申请号：US13446010
申请日：2012-04-13
申请人： Krishna P. Puttaswamy Naga , Murali Kodialam
发明人： Krishna P. Puttaswamy Naga , Murali Kodialam
IPC分类号： G06F12/00 , G06F12/08
CPC分类号： G06F12/0866 , G06F3/0619 , G06F3/0665 , G06F3/067 , G06F3/0689 , G06F11/3037 , G06F11/3409 , G06F11/3495 , G06F12/12 , G06F12/121 , G06F17/30135 , G06F2003/0692 , G06F2212/263 , H04L67/10 , H04L67/1097 , H04L67/2842 , H04L67/2852 , H04L67/2857
摘要： A data block storage management capability is presented. A file system includes a plurality of data blocks which are managed using a first storage service and a second storage service, where the first storage service has a lower storage cost and a higher input-output cost than the second storage service. The data blocks stored using the second storage service have associated therewith respective expected storage durations indicative of respective lengths of time for which the data blocks are to be stored using the second storage service (which may be the same or different across the ones of the data blocks stored using the second storage service). The expected storage durations of the data blocks are modified based on a comparison of an expected hit rate of the second storage service and a current hit rate of the second storage service or current hit rates of the data blocks.

8. 发明授权

US09548962B2 Apparatus and method for providing a fluid security layer 有权
标题翻译：用于提供流体安全层的装置和方法
公开(公告)号：US09548962B2
公开(公告)日：2017-01-17
申请号：US13469176
申请日：2012-05-11
申请人： Krishna P. Puttaswamy Naga , Fang Hao , Antony Martin
发明人： Krishna P. Puttaswamy Naga , Fang Hao , Antony Martin
IPC分类号： H04L29/06
CPC分类号： H04L63/0263 , H04L63/20
摘要： A security management capability enables migration of individual security rules between storage/application locations. The migration of a security rule may include selection of a location at which the security rule is to be applied and migration of the security rule to the selected location at which the security rule is to be applied. The selection of the location at which the security rule is to be applied may be performed based on security rule policies and/or security rule location selection information. The security rule is migrated from a current location (e.g., a location at which the security rule is currently applied, a management system, or the like) to the selected location at which the security rule is to be applied. In this manner, a fluid security layer may be provided. The fluid security layer may be optimized for one or more of security level, performance, cost, or the like.
摘要翻译：安全管理功能可以在存储/应用程序位置之间迁移各个安全规则。安全规则的迁移可以包括选择要应用安全规则的位置，以及将安全规则迁移到要应用安全规则的所选择的位置。可以基于安全规则策略和/或安全规则位置选择信息来执行对应用安全规则的位置的选择。安全规则从当前位置（例如，当前应用安全规则的位置，管理系统等）迁移到要应用安全规则的所选择的位置。以这种方式，可以提供流体安全层。可以针对安全级别，性能，成本等中的一个或多个优化流体安全层。

9. 发明申请

US20130212710A1 Data Leakage Prevention for Cloud and Enterprise Networks 有权
标题翻译：数据泄漏预防云和企业网络
公开(公告)号：US20130212710A1
公开(公告)日：2013-08-15
申请号：US13369475
申请日：2012-02-09
申请人： Krishna P. Puttaswamy Naga , Fang Hao , Muralidharan S. Kodialam , T.V. Lakshman
发明人： Krishna P. Puttaswamy Naga , Fang Hao , Muralidharan S. Kodialam , T.V. Lakshman
IPC分类号： G06F21/20
CPC分类号： H04L63/0245 , H04L9/3247 , H04L63/123
摘要： Apparatuses, methods and articles of manufacture for performing data leakage prevention are provided. Data leakage prevention may be performed by determining a signature of a transmitted document, the transmitted document being in transit to a location beyond a network boundary. The signature of the transmitted document is compared with one or more signatures of documents authorized to be transmitted beyond the network boundary. The transmitted document is prevented from being transmitted beyond the network boundary if the signature of the document does not correspond to a signature of a document authorized to be transmitted beyond the network boundary.
摘要翻译：提供了用于执行防止数据泄漏的设备，方法和制造。可以通过确定所发送的文档的签名，所发送的文档正在转移到超出网络边界的位置来执行数据泄露防止。将所发送的文档的签名与授权发送超出网络边界的文档的一个或多个签名进行比较。如果文档的签名不对应于被授权在网络边界之外被发送的文档的签名，则防止传输的文档被超出网络边界的传输。

10. 发明申请

US20130305311A1 APPARATUS AND METHOD FOR PROVIDING A FLUID SECURITY LAYER 有权
标题翻译：提供流体安全层的装置和方法
公开(公告)号：US20130305311A1
公开(公告)日：2013-11-14
申请号：US13469176
申请日：2012-05-11
申请人： Krishna P. Puttaswamy Naga , Fang Hao , Antony Martin
发明人： Krishna P. Puttaswamy Naga , Fang Hao , Antony Martin
IPC分类号： G06F21/00
CPC分类号： H04L63/0263 , H04L63/20
摘要： A security management capability enables migration of individual security rules between storage/application locations. The migration of a security rule may include selection of a location at which the security rule is to be applied and migration of the security rule to the selected location at which the security rule is to be applied. The selection of the location at which the security rule is to be applied may be performed based on security rule policies and/or security rule location selection information. The security rule is migrated from a current location (e.g., a location at which the security rule is currently applied, a management system, or the like) to the selected location at which the security rule is to be applied. In this manner, a fluid security layer may be provided. The fluid security layer may be optimized for one or more of security level, performance, cost, or the like.
摘要翻译：安全管理功能可以在存储/应用程序位置之间迁移各个安全规则。安全规则的迁移可以包括选择要应用安全规则的位置，以及将安全规则迁移到要应用安全规则的所选择的位置。可以基于安全规则策略和/或安全规则位置选择信息来执行对应用安全规则的位置的选择。安全规则从当前位置（例如，当前应用安全规则的位置，管理系统等）迁移到要应用安全规则的所选择的位置。以这种方式，可以提供流体安全层。可以针对安全级别，性能，成本等中的一个或多个优化流体安全层。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式