专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明公开

EP3284238A1 RULE-BASED NETWORK-THREAT DETECTION 有权转让
标题翻译：基于规则的网络威胁检测
公开(公告)号：EP3284238A1
公开(公告)日：2018-02-21
申请号：EP16719984.3
申请日：2016-04-07
申请人： Centripetal Networks Inc.
发明人： AHN, David K. , GEORGE, Keith A. , GEREMIA, Peter P. , MALLETT, III, Pierre , MOORE, Sean , PERRY, Robert T. , ROGERS, Jonathan R.
IPC分类号： H04L29/06 , H04L12/26
CPC分类号： H04L63/1425 , H04L43/028 , H04L63/0227 , H04L63/0236 , H04L63/0263 , H04L63/12 , H04L63/1416 , H04L63/1441
摘要： A packet-filtering device may receive packet-filtering rules configured to cause the packet-filtering device to identify packets corresponding to network-threat indicators. The packet-filtering device may receive packets and, for each packet, may determine that the packet corresponds to criteria specified by a packet-filtering rule. The criteria may correspond to one or more of the network-threat indicators. The packet-filtering device may apply an operator specified by the packet-filtering rule. The operator may be configured to cause the packet-filtering device to either prevent the packet from continuing toward its destination or allow the packet to continue toward its destination. The packet-filtering device may generate a log entry comprising information from the packet-filtering rule that identifies the one or more network-threat indicators and indicating whether the packet-filtering device prevented the packet from continuing toward its destination or allowed the packet to continue toward its destination.

2. 发明公开

EP3941019A1 METHODS AND SYSTEMS FOR EFFICIENT ENCRYPTED SNI FILTERING FOR CYBERSECURITY APPLICATIONS 审中-实审转让
公开(公告)号：EP3941019A1
公开(公告)日：2022-01-19
申请号：EP21185646.3
申请日：2021-07-14
申请人： Centripetal Networks, Inc.
发明人： MOORE, Sean , MUTOLO, Vincent , ROGERS, Jonathan R.
IPC分类号： H04L29/06 , H04L29/12
摘要： A packet-filtering system described herein may be configured to filter packets with encrypted hostnames in accordance with one or packet-filtering rules. The packet-filtering system may resolve a plaintext hostname from ciphertext comprising an encrypted Server Name Indication (eSNI) value. The packet-filtering system may resolve the plaintext hostname using a plurality of techniques. Once the plaintext hostname is resolved, the packet-filtering system may then use the plaintext hostname to determine whether the packets are associated with one or more threat indicators. If the packet-filtering system determines that the packets are associated with one or more threat indicators, the packet-filtering system may apply a packet filtering operation associated with the packet-filtering rules to the packets.

3. 发明公开

EP4080822A8 METHODS AND SYSTEMS FOR EFFICIENT THREAT CONTEXT-AWARE PACKET FILTERING FOR NETWORK PROTECTION 有权转让
公开(公告)号：EP4080822A8
公开(公告)日：2022-11-23
申请号：EP22169106.6
申请日：2022-04-20
申请人： Centripetal Networks, Inc.
发明人： MOORE, Sean , ROGERS, Jonathan R. , MUTOLO, Vincent , GEREMIA, Peter
IPC分类号： H04L9/40 , G06F21/55
摘要： A threat intelligence gateway (TIG) may protect TCP/IP networks from network (e.g., Internet) threats by enforcing certain policies on in-transit packets that are crossing network boundaries. The policies may be composed of packet filtering rules with packet-matching criteria derived from cyber threat intelligence (CTI) associated with Internet threats. These CTI-derived packet-filtering rules may be created offline by policy creation and management servers, which may distribute the policies to subscribing TIGs that subsequently enforce the policies on in-transit packets. Each packet filtering rule may specify a disposition that may be applied to a matching in-transit packet, such as deny/block/drop the in-transit packet or pass/allow/forward the in-transit packet, and also may specify directives that may be applied to a matching in-transit packet, such as log, capture, spoof-tcp-rst, etc. Often, however, the selection of a rule's disposition and directives that best protect the associated network may not be optimally determined before a matching in-transit packet is observed by the associated TIG. In such cases, threat context information that may only be available (e.g., computable) at in-transit packet observation and/or filtering time, such as current time-of-day, current TIG/network location, current TIG/network administrator, the in-transit packet being determined to be part of an active attack on the network, etc., may be helpful to determine the disposition and directives that may best protect the network from the threat associated with the in-transit packet. The present disclosure describes examples of methods, systems, and apparatuses that may be used for efficiently determining (e.g., accessing and/or computing), in response to the in-transit packet, threat context information associated with an in-transit packet. The threat context information may be used to efficiently determine the disposition and/or one or more directives to apply to the in-transit packet. This may result in dispositions and/or directives being applied to in-transit packets that better protect the network as compared with solely using dispositions and directives that were predetermined prior to receiving the in-transit packet.

4. 发明公开

EP3957050A1 METHODS AND SYSTEMS FOR EFFICIENT PACKET FILTERING 审中-实审转让
公开(公告)号：EP3957050A1
公开(公告)日：2022-02-23
申请号：EP20725384.0
申请日：2020-04-27
申请人： Centripetal Networks, Inc.
发明人： MOORE, Sean , ROGERS, Jonathan R. , ROGERS, Steven
IPC分类号： H04L29/06 , H04L12/721 , H04L29/12

5. 发明公开

EP3821580A1 METHODS AND SYSTEMS FOR EFFICIENT NETWORK PROTECTION 有权转让
公开(公告)号：EP3821580A1
公开(公告)日：2021-05-19
申请号：EP19745478.8
申请日：2019-07-08
申请人： Centripetal Networks, Inc.
发明人： MOORE, Sean , PARNELL, Jess , ROGERS, Jonathan R.
IPC分类号： H04L29/06

6. 发明授权

EP3284238B1 RULE-BASED NETWORK-THREAT DETECTION 有权转让
公开(公告)号：EP3284238B1
公开(公告)日：2019-07-10
申请号：EP16719984.3
申请日：2016-04-07
申请人： Centripetal Networks Inc.
发明人： AHN, David K. , GEORGE, Keith A. , GEREMIA, Peter P. , MALLETT, III, Pierre , MOORE, Sean , PERRY, Robert T. , ROGERS, Jonathan R.
IPC分类号： H04L29/06 , H04L12/26

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式