专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2004045126A3 ACTIVE NETWORK DEFENSE SYSTEM AND METHOD 审中-公开
公开(公告)号：WO2004045126A3
公开(公告)日：2004-05-27
申请号：PCT/US2003/035619
申请日：2003-11-07
申请人： TIPPINGPOINT TECHNOLOGIES, INC. , CANTRELL, Craig , WILLEBEEK-LEMAIR, Marc , COX, Dennis , MCHALE, John , SMITH, Brian , KOLBLY, Donovan
发明人： CANTRELL, Craig , WILLEBEEK-LEMAIR, Marc , COX, Dennis , MCHALE, John , SMITH, Brian , KOLBLY, Donovan
IPC分类号： G01R31/08
摘要： An active network defense system is provided that is operable to monitor and block traffic in automated fashion. This active network defense system is placed in-line with respect to the packet traffic data flow as a part of the network infrastructure. In this configuration, inspection and manipulation of every passing packet is possible. An algorithmic filtering operation applies statistical threshold filtering to the data flow in order to identify threats existing across multiple sessions. A trigger filtering operation applies header and content match filtering to the data flow in order to identify threats existing within individual sessions. Threatening packet traffic is blocked and threatening sessions are terminated. Suspicious traffic is extracted from the data flow for further examination with more comprehensive content matching as well as asset risk analysis. A flow control mechanism is provided to control passage rate for packets passing through the data flow.

2. 发明申请

WO2004015586A1 MULTI-LEVEL PACKET SCREENING WITH DYNAMICALLY SELECTED FILTERING CRITERIA 审中-公开
标题翻译：具有动态选择过滤标准的多级数据包筛选
公开(公告)号：WO2004015586A1
公开(公告)日：2004-02-19
申请号：PCT/US2003/025070
申请日：2003-08-11
申请人： TIPPINGPOINT TECHNOLOGIES, INC.
发明人： CANTRELL, Craig , LEMAIR-WILLEBEEK, Marc , COX, Dennis , KOLBLY, Donovan , SMITH, Brian
IPC分类号： G06F15/173
CPC分类号： H04L63/0263 , H04L29/06 , H04L63/0209 , H04L63/1408 , H04L69/16 , H04L69/161 , H04L69/22
摘要： A packet filtering operation implements a hierarchical technique. Received packet traffic is first filtered with a first filtering criteria. This first filtering action generates a first pass traffic portion and a fail traffic portion from the received packet traffic. The fail traffic portion is then second filtered with a second filtering criteria. This second filtering action generates a second pass traffic portion and a reject traffic portion. The first filtering criteria provide for higher throughput, lower accuracy processing while the second filtering criteria provide for lower throughput, higher accuracy processing. Dynamic adjustments may be made to the first and second filtering criteria to achieve better overall packet filtering performance. For example, load is measured and the filtering criteria adjusted to better balance load between the hierarchical filtering actions.
摘要翻译：包过滤操作实现分层技术。接收到的数据包流量首先用第一个过滤标准进行过滤。该第一过滤动作从接收到的分组流量生成第一通过业务部分和故障业务部分。然后以第二过滤标准对故障业务部分进行第二次过滤。该第二过滤动作产生第二通过业务部分和拒绝业务部分。第一个过滤标准提供更高的吞吐量，更低的精度处理，而第二个过滤标准提供较低的吞吐量，更高的精度处理。可以对第一和第二过滤标准进行动态调整，以实现更好的整体包过滤性能。例如，测量负载并调整过滤标准以更好地平衡分层过滤动作之间的负载。

3. 发明公开

EP1558937A2 ACTIVE NETWORK DEFENSE SYSTEM AND METHOD 有权
标题翻译：网络主动防御系统及方法
公开(公告)号：EP1558937A2
公开(公告)日：2005-08-03
申请号：EP03783255.7
申请日：2003-11-07
申请人： Tippingpoint Technologies, Inc.
发明人： CANTRELL, Craig , WILLEBEEK-LEMAIR, Marc , COX, Dennis , MCHALE, John , SMITH, Brian , KOLBLY, Donovan
IPC分类号： G01R31/08
CPC分类号： H04L63/0227 , H04L43/00 , H04L43/028 , H04L43/0888 , H04L43/16 , H04L63/0254 , H04L63/0263 , H04L63/0442 , H04L63/1416 , H04L63/1425 , H04L63/1441
摘要： An active network defense system is provided that is operable to monitor and block traffic in automated fashion. This active network defense system is placed in-line with respect to the packet traffic data flow as a part of the network infrastructure. In this configuration, inspection and manipulation of every passing packet is possible. An algorithmic filtering operation applies statistical threshold filtering to the data flow in order to identify threats existing across multiple sessions. A trigger filtering operation applies header and content match filtering to the data flow in order to identify threats existing within individual sessions. Threatening packet traffic is blocked and threatening sessions are terminated. Suspicious traffic is extracted from the data flow for further examination with more comprehensive content matching as well as asset risk analysis. A flow control mechanism is provided to control passage rate for packets passing through the data flow.

4. 发明公开

EP1540502A1 MULTI-LEVEL PACKET SCREENING WITH DYNAMICALLY SELECTED FILTERING CRITERIA 有权
标题翻译：具有动态AUSGEWûHLTEN过滤条件分组筛选MULTI-LEVEL
公开(公告)号：EP1540502A1
公开(公告)日：2005-06-15
申请号：EP03785167.2
申请日：2003-08-11
申请人： Tippingpoint Technologies, Inc.
发明人： CANTRELL, Craig , LEMAIR-WILLEBEEK, Marc , COX, Dennis , KOLBLY, Donovan , SMITH, Brian
IPC分类号： G06F15/173 , G06F12/14
CPC分类号： H04L63/0263 , H04L29/06 , H04L63/0209 , H04L63/1408 , H04L69/16 , H04L69/161 , H04L69/22
摘要： A packet filtering operation implements a hierarchical technique. Received packet traffic is first filtered with a first filtering criteria. This first filtering action generates a first pass traffic portion and a fail traffic portion from the received packet traffic. The fail traffic portion is then second filtered with a second filtering criteria. This second filtering action generates a second pass traffic portion and a reject traffic portion. The first filtering criteria provide for higher throughput, lower accuracy processing while the second filtering criteria provide for lower throughput, higher accuracy processing. Dynamic adjustments may be made to the first and second filtering criteria to achieve better overall packet filtering performance. For example, load is measured and the filtering criteria adjusted to better balance load between the hierarchical filtering actions.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式