专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明公开

EP4352919A1 SECURING CONTAINERIZED APPLICATIONS 审中-实审
公开(公告)号：EP4352919A1
公开(公告)日：2024-04-17
申请号：EP22811988.9
申请日：2022-05-24
申请人： Palo Alto Networks, Inc.
发明人： MCDOWALL, John, Edward , SAHA, Sharad , BANSAL, Nilesh
IPC分类号： H04L9/40
CPC分类号： G06F9/45558 , G06F2009/4558720130101 , G06F2009/4559520130101 , H04L63/0245 , H04L63/02 , H04L63/1408 , H04L63/20 , H04L63/1441

2. 发明公开

EP4221092A1 FLOW METADATA EXCHANGES BETWEEN NETWORK AND SECURITY FUNCTIONS FOR A SECURITY SERVICE 审中-实审
公开(公告)号：EP4221092A1
公开(公告)日：2023-08-02
申请号：EP23164673.8
申请日：2021-07-05
申请人： Palo Alto Networks, Inc.
发明人： OSWAL, Anand , RAMASAMY, Arivu Mani , BHUPALAM, Bhaskar , LIN, Shu , RAMACHANDRAN, Kumar
IPC分类号： H04L9/40 , H04L12/46 , H04L45/037 , H04L45/302 , H04L45/00 , H04L47/10 , H04L47/2483 , H04L67/56
摘要： Techniques for providing flow meta data exchanges between network and security functions for a security service are disclosed. In some embodiments, a system/process/computer program product for providing flow meta data exchanges between network and security functions for a security service includes receiving a flow at a network gateway of a security service from a software-defined wide area network (SD-WAN) device; inspecting the flow to determine meta information associated with the flow; and communicating the meta information associated with the flow to the SD-WAN device.

3. 发明公开

EP4156633A1 PACKET LOSS BASED REAL-TIME NETWORK PATH HEALTH SCORING 审中-实审
公开(公告)号：EP4156633A1
公开(公告)日：2023-03-29
申请号：EP22197084.1
申请日：2022-09-22
申请人： Palo Alto Networks, Inc.
发明人： Reddy, Gopal Gadekal
IPC分类号： H04L43/045 , H04L43/04 , H04L43/0829 , H04L43/0882 , H04L43/16 , H04L41/142
摘要： The disclosed scoring uses a "dynamic packet loss threshold" that is based on benchmarks of "good" packet loss behavior of network paths associated with circuits of different bandwidths and recent behavior of the path being scored. The observations for good packet loss behavior are bucketized by corresponding circuit load. For the path being scored, observations are also bucketized and aggregated into a moving average per load bucket. The moving averages represent recent behavior of the path by load bucket. The scoring system scores a path as a function of the current time interval packet loss of the network path being scored and the dynamic packet loss threshold of the current time interval. The dynamic packet loss threshold of the current time interval is a function of a good packet loss benchmark and the packet loss moving average for the load of the current time interval.

4. 发明公开

EP4054120A1 LOCATION BASED SECURITY IN SERVICE PROVIDER NETWORKS 审中-实审
公开(公告)号：EP4054120A1
公开(公告)日：2022-09-07
申请号：EP22167689.3
申请日：2018-06-12
申请人： Palo Alto Networks, Inc.
发明人： VERMA, Sachin , BURAKOVSKY, Leonid , SHU, Jesse , LI, Chang , CHANG, Lei , CHEN, I-Chun
IPC分类号： H04L9/40 , H04W12/088 , H04W12/63
摘要： Techniques for location based security in service provider networks (e.g., service provider networks for mobile subscribers) are disclosed. In some embodiments, a system/process/computer program product for location based security in service provider networks includes monitoring network traffic on a service provider network at a security platform to identify a location for a new session; associating the location with the new session at the security platform; and determining a security policy to apply at the security platform to the new session based on the location.

5. 发明公开

EP3682325A1 FINE-GRAINED FIREWALL POLICY ENFORCEMENT USING SESSION APP ID AND ENDPOINT PROCESS ID CORRELATION 审中-实审
公开(公告)号：EP3682325A1
公开(公告)日：2020-07-22
申请号：EP18855870.4
申请日：2018-09-14
申请人： Palo Alto Networks, Inc.
发明人： ASHLEY, Robert, Earle , LAM, Ho, Yu , TESH, Robert , JIN, Xuanyu , MATHISON, Paul, Theodore , LI, Qiuming , ETTEMA, Taylor
IPC分类号： G06F9/00

6. 发明授权

EP3264720B1 USING DNS COMMUNICATIONS TO FILTER DOMAIN NAMES 有权
公开(公告)号：EP3264720B1
公开(公告)日：2020-07-08
申请号：EP17180579.9
申请日：2012-05-17
申请人： Palo Alto Networks, Inc.
发明人： XIE, Huagang
IPC分类号： H04L29/06 , H04L29/12 , H04L29/08

7. 发明公开

EP3423980A1 AUTOMATICALLY GROUPING MALWARE BASED ON ARTIFACTS 审中-实审
公开(公告)号：EP3423980A1
公开(公告)日：2019-01-09
申请号：EP17760554.0
申请日：2017-02-27
申请人： Palo Alto Networks, Inc.
发明人： ROSTAMI-HESARSORKH, Shadi , VASUDEVAN, Sudarshan , HEWLETT, Redington, William , ROSTAMABADI, Farshad , MALIK, Bilal
IPC分类号： G06F21/55 , G06F21/56 , H04L29/06

8. 发明公开

EP2951977A4 SECURITY DEVICE IMPLEMENTING NETWORK FLOW PREDICTION, AND FLOW OWNERSHIP ASSIGNMENT AND EVENT AGGREGATION IN A DISTRIBUTED PROCESSOR SYSTEM 有权
标题翻译：安全装置：用于河流潮流预测和所有权配置和事件汇总在一个分布式处理器系统
公开(公告)号：EP2951977A4
公开(公告)日：2016-09-28
申请号：EP14746596
申请日：2014-01-29
申请人： PALO ALTO NETWORKS INC
发明人： ROBERSON WILLIAM A , XU WILSON
IPC分类号： H04L29/06 , H04L12/851 , H04L12/931
CPC分类号： H04L63/0227 , H04L45/38 , H04L45/46 , H04L47/2441 , H04L47/2483 , H04L49/00 , H04L69/22
摘要： A security device for processing network flows includes a predict flow table containing predict flow entries mapping predicted network flows to packet processor ownership assignments. The predict key includes multiple data fields identifying a predicted network flow where one or more of the data fields have a wildcard value. In another embodiment, a security device for processing network flows includes a packet processing manager configured to assign ownership of network flows to the one or more packet processors where the packet processing manager includes a global flow table containing entries mapping network flows to packet processor ownership assignments. In another embodiment, a security device for processing network flows includes packet processing cards with packet processors formed thereon where each packet processing card stores local counter values for one or more events and a packet processing manager including global event counters to maintain event statistics for events in the security device.

9. 发明公开

EP2951977A2 SECURITY DEVICE IMPLEMENTING NETWORK FLOW PREDICTION, AND FLOW OWNERSHIP ASSIGNMENT AND EVENT AGGREGATION IN A DISTRIBUTED PROCESSOR SYSTEM 有权
标题翻译：安全装置：用于河流潮流预测和所有权配置和事件汇总在一个分布式处理器系统
公开(公告)号：EP2951977A2
公开(公告)日：2015-12-09
申请号：EP14746596.7
申请日：2014-01-29
申请人： Palo Alto Networks, Inc.
发明人： ROBERSON, William, A. , XU, Wilson
IPC分类号： H04L29/06
CPC分类号： H04L63/0227 , H04L45/38 , H04L45/74 , H04L47/2441 , H04L47/2483 , H04L49/00 , H04L69/22
摘要： A security device for processing network flows includes a predict flow table containing predict flow entries mapping predicted network flows to packet processor ownership assignments. The predict key includes multiple data fields identifying a predicted network flow where one or more of the data fields have a wildcard value. In another embodiment, a security device for processing network flows includes a packet processing manager configured to assign ownership of network flows to the one or more packet processors where the packet processing manager includes a global flow table containing entries mapping network flows to packet processor ownership assignments. In another embodiment, a security device for processing network flows includes packet processing cards with packet processors formed thereon where each packet processing card stores local counter values for one or more events and a packet processing manager including global event counters to maintain event statistics for events in the security device.
摘要翻译：用于处理网络流的安全装置包括：预测包含流表条目预测流映射预测网络流向分组处理器所有权分配。关键预测包括多个数据字段标识的预测网络流，其中的一个或多个数据字段的具有通配符值。在另一个实施例用于处理网络中的安全设备流向包括被配置为分配网络的所有权流向所述一个或多个分组处理器，其中所述分组处理管理器包括全局流表包含条目映射网络的分组处理管理器流至分组处理器所有权分配，在另一个实施例的用于处理网络流量包括与在其上形成的分组处理器的分组处理卡的安全装置，其中对于一个或多个事件的每个分组处理卡中存储本地计数器值以及分组处理管理器包括全局事件计数器保持的事件日志中的事件安全设备。

10. 发明公开

EP2715540A1 MALWARE ANALYSIS SYSTEM 有权
标题翻译： SYSTEM FOR分析恶意软件
公开(公告)号：EP2715540A1
公开(公告)日：2014-04-09
申请号：EP12789167.9
申请日：2012-05-17
申请人： Palo Alto Networks, Inc.
发明人： XIE, Huagang , WANG, Xinran , LIU, Jiangxia
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16
CPC分类号： H04L63/0227 , G06F21/00 , G06F21/53 , H04L63/0263 , H04L63/0428 , H04L63/1408 , H04L63/1425 , H04L63/145
摘要： In some embodiments, a malware analysis system includes receiving a potential malware sample from a firewall; analyzing the potential malware sample using a virtual machine to determine if the potential malware sample is malware; and automatically generating a signature if the potential malware sample is determined to be malware. In some embodiments, the potential malware sample does not match a preexisting signature, and the malware is a zero-day attack.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式