会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 1. 发明授权
    • Peer based event conversion
    • 基于对等的事件转换
    • US07827132B2
    • 2010-11-02
    • US11531901
    • 2006-09-14
    • Genady GrabarnikChang-Shing PerngAbdolreza SalahshourBalan Subramanian
    • Genady GrabarnikChang-Shing PerngAbdolreza SalahshourBalan Subramanian
    • G06E1/00G06E3/00
    • G06F17/2247
    • A rule set to convert an event into a standardized format can be established based on cooperation among peer processing nodes. A processing node that receives the event takes the initial responsibility to convert the event. The responsible processing node initially attempts to convert the event using locally available rules. If the initial attempt fails, the responsible processing node will communicate the event to peer processing nodes and request them to provide conversion rules. Upon receipt of the rules provided by the peer processing nodes, the responsible processing node combines the received rules with the locally available rules to generate a rule set to convert the event. The responsible processing node may also transfer the event to another processing node for the other processing node to take the responsibility to convert the event.
    • 可以基于对等处理节点之间的协作来建立将事件转换成标准格式的规则集。 接收事件的处理节点负责转换事件。 负责的处理节点最初尝试使用本地可用规则转换事件。 如果初始尝试失败,负责的处理节点会将事件传达给对等处理节点,并请求它们提供转换规则。 在接收到对等处理节点提供的规则时,负责处理节点将接收到的规则与本地可用的规则组合以生成用于转换事件的规则集。 负责处理节点还可以将事件传送到另一个处理节点,以便另一个处理节点负责转换事件。
    • 2. 发明申请
    • PEER BASED EVENT CONVERSION
    • 基于同事的活动转换
    • US20080082473A1
    • 2008-04-03
    • US11531901
    • 2006-09-14
    • Genady GrabarnikChang-Shing PerngAbdolreza SalahshourBalan Subramanian
    • Genady GrabarnikChang-Shing PerngAbdolreza SalahshourBalan Subramanian
    • G06N5/02
    • G06F17/2247
    • A rule set to convert an event into a standardized format can be established based on cooperation among peer processing nodes. A processing node that receives the event takes the initial responsibility to convert the event. The responsible processing node initially attempts to convert the event using locally available rules. If the initial attempt fails, the responsible processing node will communicate the event to peer processing nodes and request them to provide conversion rules. Upon receipt of the rules provided by the peer processing nodes, the responsible processing node combines the received rules with the locally available rules to generate a rule set to convert the event. The responsible processing node may also transfer the event to another processing node for the other processing node to take the responsibility to convert the event.
    • 可以基于对等处理节点之间的协作来建立将事件转换成标准格式的规则集。 接收事件的处理节点负责转换事件。 负责的处理节点最初尝试使用本地可用规则转换事件。 如果初始尝试失败,负责的处理节点会将事件传达给对等处理节点,并请求它们提供转换规则。 在接收到对等处理节点提供的规则时,负责处理节点将接收到的规则与本地可用的规则组合以生成用于转换事件的规则集。 负责处理节点还可以将事件传送到另一个处理节点,以便另一个处理节点负责转换事件。
    • 4. 发明授权
    • Methods and apparatus for creation of parsing rules
    • 用于创建解析规则的方法和设备
    • US07343604B2
    • 2008-03-11
    • US10627824
    • 2003-07-25
    • Genady GrabarnikSheng MaChang-shing PerngAbdolreza SalahshourDavid H. Thoenen
    • Genady GrabarnikSheng MaChang-shing PerngAbdolreza SalahshourDavid H. Thoenen
    • G06F9/54G06F15/177
    • G06F8/427
    • Techniques for parsing rule creation are provided. A technique for constructing one or more message parsing rules may comprise the following steps. First, message data representing past messages, for example, associated with a network, an application and/or a system being analyzed, is obtained. For example, this may involve reading the past or historical message data from messages logs or having a system point to the message data in existing data storage. Parsing rules are then generated by a process from one or more existing rule templates and/or based on user selection and classification of at least a portion of a message. For example, the user may choose a message part and demonstratively classify the part, for example, as a positive or negative example. The generated rules may then be stored for access by a rule-based parsing system such as a message adaptation system. Prior to generation of the one or more parsing rules, a message structure may be established upon which generation of the rules may be based.
    • 提供了解析规则创建的技术。 用于构建一个或多个消息解析规则的技术可以包括以下步骤。 首先,获得表示与网络相关联的过去消息的消息数据,正在分析的应用和/或系统。 例如,这可能涉及从消息日志中读取过去或历史消息数据或者将系统指向现有数据存储器中的消息数据。 解析规则然后由来自一个或多个现有规则模板的过程和/或基于消息的至少一部分的用户选择和分类生成。 例如,用户可以选择一个消息部分并且将该部分示范地分类,例如,作为肯定或否定的示例。 然后,所生成的规则可以被存储以用于基于规则的解析系统(例如消息适配系统)的访问。 在生成一个或多个解析规则之前,可以建立基于规则的生成的消息结构。
    • 5. 发明申请
    • Methods and Apparatus for Creation of Parsing Rules
    • 用于创建解析规则的方法和装置
    • US20070226754A1
    • 2007-09-27
    • US11756278
    • 2007-05-31
    • Genady GrabarnikSheng MaChang-shing PerngAbdolreza SalahshourDavid Thoenen
    • Genady GrabarnikSheng MaChang-shing PerngAbdolreza SalahshourDavid Thoenen
    • G06F13/00
    • G06F8/427
    • Techniques for parsing rule creation are provided. A technique for constructing one or more message parsing rules may comprise the following steps. First, message data representing past messages, for example, associated with a network, an application and/or a system being analyzed, is obtained. For example, this may involve reading the past or historical message data from messages logs or having a system point to the message data in existing data storage. Parsing rules are then generated by a process from one or more existing rule templates and/or based on user selection and classification of at least a portion of a message. For example, the user may choose a message part and demonstratively classify the part, for example, as a positive or negative example. The generated rules may then be stored for access by a rule-based parsing system such as a message adaptation system. Prior to generation of the one or more parsing rules, a message structure may be established upon which generation of the rules may be based.
    • 提供了解析规则创建的技术。 用于构建一个或多个消息解析规则的技术可以包括以下步骤。 首先,获得表示与网络相关联的过去消息的消息数据,正在分析的应用和/或系统。 例如,这可能涉及从消息日志中读取过去或历史消息数据或者将系统指向现有数据存储器中的消息数据。 解析规则然后由来自一个或多个现有规则模板的过程和/或基于消息的至少一部分的用户选择和分类生成。 例如,用户可以选择一个消息部分并且将该部分示范地分类,例如,作为肯定或否定的示例。 然后,所生成的规则可以被存储以用于基于规则的解析系统(例如消息适配系统)的访问。 在生成一个或多个解析规则之前,可以建立基于规则的生成的消息结构。
    • 6. 发明授权
    • Methods and apparatus for creation of parsing rules
    • 用于创建解析规则的方法和设备
    • US07895611B2
    • 2011-02-22
    • US11756278
    • 2007-05-31
    • Genady GrabarnikSheng MaChang-shing PerngAbdolreza SalahshourDavid H. Thoenen
    • Genady GrabarnikSheng MaChang-shing PerngAbdolreza SalahshourDavid H. Thoenen
    • G06F9/44G06F17/00
    • G06F8/427
    • Techniques for parsing rule creation are provided. A technique for constructing one or more message parsing rules may comprise the following steps. First, message data representing past messages, for example, associated with a network, an application and/or a system being analyzed, is obtained. For example, this may involve reading the past or historical message data from messages logs or having a system point to the message data in existing data storage. Parsing rules are then generated by a process from one or more existing rule templates and/or based on user selection and classification of at least a portion of a message. For example, the user may choose a message part and demonstratively classify the part, for example, as a positive or negative example. The generated rules may then be stored for access by a rule-based parsing system such as a message adaptation system. Prior to generation of the one or more parsing rules, a message structure may be established upon which generation of the rules may be based.
    • 提供了解析规则创建的技术。 用于构建一个或多个消息解析规则的技术可以包括以下步骤。 首先,获得表示与网络相关联的过去消息的消息数据,正在分析的应用和/或系统。 例如,这可能涉及从消息日志中读取过去或历史消息数据或者将系统指向现有数据存储器中的消息数据。 解析规则然后由来自一个或多个现有规则模板的过程和/或基于消息的至少一部分的用户选择和分类生成。 例如,用户可以选择一个消息部分并且将该部分示范地分类,例如,作为肯定或否定的示例。 然后,所生成的规则可以被存储以用于基于规则的解析系统(例如消息适配系统)的访问。 在生成一个或多个解析规则之前,可以建立基于规则的生成的消息结构。
    • 7. 发明申请
    • Methods and apparatus for creation of parsing rules
    • 用于创建解析规则的方法和设备
    • US20050022207A1
    • 2005-01-27
    • US10627824
    • 2003-07-25
    • Genady GrabarnikSheng MaChang-shing PerngAbdolreza SalahshourDavid Thoenen
    • Genady GrabarnikSheng MaChang-shing PerngAbdolreza SalahshourDavid Thoenen
    • G06F9/45H04L12/24G06F9/46
    • G06F8/427
    • Techniques for parsing rule creation are provided. A technique for constructing one or more message parsing rules may comprise the following steps. First, message data representing past messages, for example, associated with a network, an application and/or a system being analyzed, is obtained. For example, this may involve reading the past or historical message data from messages logs or having a system point to the message data in existing data storage. Parsing rules are then generated by a process from one or more existing rule templates and/or based on user selection and classification of at least a portion of a message. For example, the user may choose a message part and demonstratively classify the part, for example, as a positive or negative example. The generated rules may then be stored for access by a rule-based parsing system such as a message adaptation system. Prior to generation of the one or more parsing rules, a message structure may be established upon which generation of the rules may be based.
    • 提供了解析规则创建的技术。 用于构建一个或多个消息解析规则的技术可以包括以下步骤。 首先,获得表示与网络相关联的过去消息的消息数据,正在分析的应用和/或系统。 例如,这可能涉及从消息日志中读取过去或历史消息数据或者将系统指向现有数据存储器中的消息数据。 解析规则然后由来自一个或多个现有规则模板的过程和/或基于消息的至少一部分的用户选择和分类生成。 例如,用户可以选择一个消息部分并且将该部分示范地分类,例如,作为肯定或否定的示例。 然后,所生成的规则可以被存储以用于基于规则的解析系统(例如消息适配系统)的访问。 在生成一个或多个解析规则之前,可以建立基于规则的生成的消息结构。
    • 8. 发明授权
    • Method of generating a common event format representation of information from a plurality of messages using rule-based directives and computer keys
    • 使用基于规则的指令和计算机密钥从多个消息生成信息的公共事件格式表示的方法
    • US07475150B2
    • 2009-01-06
    • US10935035
    • 2004-09-07
    • Genady GrabarnikSheng MaAbdolreza SalahshourBalan Subramanian
    • Genady GrabarnikSheng MaAbdolreza SalahshourBalan Subramanian
    • G06F15/16G06F15/173G06F9/54
    • G06F11/0769G06F11/0709G06F11/3006G06F11/3068H04L41/06H04L41/16
    • Methods, systems, and computer program products for generating a common event format representation of information from a plurality of messages include parsing a rule associated with a current message to determine if a property of a common event format representation for the current message is to be populated with a property value from a previous message. If the rule specifies to obtain the property value from the previous message, the property value is obtained from the previous message and the common event format representation for the current message is populated with the obtained property value from the previous message. The property value may be obtained by generating a computed key based on properties of the current message that are common to the previous message, and identifying the previous message based on the key of the current message. The rule associated with the current message may also be parsed to determine if the property of the common event format representation for the current message is to be populated with a property value determined by specified code. If the rule specifies to obtain the property value using the specified code, the property value is obtained using the specified code and the common event format representation for the current message is populated with the obtained property value obtained using the specified code.
    • 用于从多个消息生成信息的公共事件格式表示的方法,系统和计算机程序产品包括解析与当前消息相关联的规则,以确定是否要填充当前消息的公共事件格式表示的属性 具有来自先前消息的属性值。 如果规则指定从先前消息获取属性值,则从先前的消息获得属性值,并且使用从先前消息获取的属性值填充当前消息的公共事件格式表示。 可以通过基于当前消息的属性生成与先前消息相同的计算密钥并且基于当前消息的密钥来识别先前消息来获得属性值。 还可以解析与当前消息相关联的规则,以确定当前消息的公共事件格式表示的属性是否由用指定代码确定的属性值填充。 如果规则指定使用指定的代码获取属性值,则使用指定的代码获取属性值,并使用获取的使用指定代码获取的属性值填充当前消息的公共事件格式表示。
    • 9. 发明授权
    • Event decomposition using rule-based directives and computed keys
    • 事件分解使用基于规则的指令和计算密钥
    • US07769899B2
    • 2010-08-03
    • US12134940
    • 2008-06-06
    • Genady GrabarnikSheng MaAbdolreza SalahshourBalan Subramanian
    • Genady GrabarnikSheng MaAbdolreza SalahshourBalan Subramanian
    • G06F15/16G06F15/173G06F9/54
    • G06F11/0769G06F11/0709G06F11/3006G06F11/3068H04L41/06H04L41/16
    • Methods, systems, and computer program products for generating a common event format representation of information from a plurality of messages include parsing a rule associated with a current message to determine if a property of a common event format representation for the current message is to be populated with a property value from a previous message. If the rule specifies to obtain the property value from the previous message, the property value is obtained from the previous message and the common event format representation for the current message is populated with the obtained property value from the previous message. The property value may be obtained by generating a computed key based on properties of the current message that are common to the previous message, and identifying the previous message based on the key of the current message. The rule associated with the current message may also be parsed to determine if the property of the common event format representation for the current message is to be populated with a property value determined by specified code. If the rule specifies to obtain the property value using the specified code, the property value is obtained using the specified code and the common event format representation for the current message is populated with the obtained property value obtained using the specified code.
    • 用于生成来自多个消息的信息的公共事件格式表示的方法,系统和计算机程序产品包括解析与当前消息相关联的规则,以确定是否要填充当前消息的公共事件格式表示的属性 具有来自先前消息的属性值。 如果规则指定从先前消息获取属性值,则从先前的消息获得属性值,并且使用从先前消息获取的属性值填充当前消息的公共事件格式表示。 可以通过基于当前消息的属性生成与先前消息相同的计算密钥并且基于当前消息的密钥来识别先前消息来获得属性值。 还可以解析与当前消息相关联的规则,以确定当前消息的公共事件格式表示的属性是否由用指定代码确定的属性值填充。 如果规则指定使用指定的代码获取属性值,则使用指定的代码获取属性值,并使用获取的使用指定代码获取的属性值填充当前消息的公共事件格式表示。
    • 10. 发明申请
    • EVENT DECOMPOSITION USING RULE-BASED DIRECTIVES AND COMPUTED KEYS
    • 使用基于规则的指令和计算机的事件分解
    • US20080294740A1
    • 2008-11-27
    • US12134940
    • 2008-06-06
    • Genady GrabarnikSheng MaAbdolreza SalahshourBalan Subramanian
    • Genady GrabarnikSheng MaAbdolreza SalahshourBalan Subramanian
    • G06F15/16
    • G06F11/0769G06F11/0709G06F11/3006G06F11/3068H04L41/06H04L41/16
    • Methods, systems, and computer program products for generating a common event format representation of information from a plurality of messages include parsing a rule associated with a current message to determine if a property of a common event format representation for the current message is to be populated with a property value from a previous message. If the rule specifies to obtain the property value from the previous message, the property value is obtained from the previous message and the common event format representation for the current message is populated with the obtained property value from the previous message. The property value may be obtained by generating a computed key based on properties of the current message that are common to the previous message, and identifying the previous message based on the key of the current message. The rule associated with the current message may also be parsed to determine if the property of the common event format representation for the current message is to be populated with a property value determined by specified code. If the rule specifies to obtain the property value using the specified code, the property value is obtained using the specified code and the common event format representation for the current message is populated with the obtained property value obtained using the specified code.
    • 用于生成来自多个消息的信息的公共事件格式表示的方法,系统和计算机程序产品包括解析与当前消息相关联的规则,以确定是否要填充当前消息的公共事件格式表示的属性 具有来自先前消息的属性值。 如果规则指定从先前消息获取属性值,则从先前的消息获得属性值,并且使用从先前消息获取的属性值填充当前消息的公共事件格式表示。 可以通过基于当前消息的属性生成与先前消息相同的计算密钥并且基于当前消息的密钥来识别先前消息来获得属性值。 还可以解析与当前消息相关联的规则,以确定当前消息的公共事件格式表示的属性是否由用指定代码确定的属性值填充。 如果规则指定使用指定的代码获取属性值,则使用指定的代码获取属性值,并使用获取的使用指定代码获取的属性值填充当前消息的公共事件格式表示。