专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20070282981A1 AGGREGATING POLICY CRITERIA PARAMETERS INTO RANGES FOR EFFICIENT NETWORK ANALYSIS 有权
标题翻译：将政策标准参数纳入有效网络分析范围
公开(公告)号：US20070282981A1
公开(公告)日：2007-12-06
申请号：US11735474
申请日：2007-04-15
申请人： Alain J. Cohen , Pradeep K. Singh , Ankit Agarwal , Venuprakash Barathan
发明人： Alain J. Cohen , Pradeep K. Singh , Ankit Agarwal , Venuprakash Barathan
IPC分类号： G06F15/16
CPC分类号： H04L47/10 , H04L41/0853 , H04L41/0893 , H04L41/5003 , H04L43/50 , H04L47/127 , H04L47/20 , H04L47/2441
摘要： A network configuration is processed to identify each policy and the criteria associated with each policy. The criteria of the policies are processed to identify a non-overlapping set of ranges of the criteria parameter, each range being associated with a particular policy or set of policies. In a preferred embodiment, the criteria include the protocol, the source and destination IP addresses, and the source and destination ports, and a default range is defined for each criteria parameter.
摘要翻译：处理网络配置以识别每个策略和与每个策略相关联的标准。处理策略的标准以识别标准参数的不重叠的范围集合，每个范围与特定策略或策略集相关联。在优选实施例中，标准包括协议，源和目的地IP地址以及源端口和目的端口，并且为每个标准参数定义默认范围。

2. 发明授权

US08898734B2 Analyzing security compliance within a network 有权
标题翻译：分析网络中的安全合规性
公开(公告)号：US08898734B2
公开(公告)日：2014-11-25
申请号：US11505171
申请日：2006-08-16
申请人： Pradeep K. Singh , Ankit Agarwal , Alain J. Cohen , Venuprakash Barathan , Vinod Jeyachandran
发明人： Pradeep K. Singh , Ankit Agarwal , Alain J. Cohen , Venuprakash Barathan , Vinod Jeyachandran
IPC分类号： H04L29/06 , H04L12/26 , H04L12/24
CPC分类号： H04L41/28 , H04L12/2697 , H04L41/0866 , H04L41/0893 , H04L41/145 , H04L41/22 , H04L43/50 , H04L63/1433 , H04L63/20
摘要： A security policy database identifies the intended security policies within a network, a traffic generator provides test traffic that is configured to test each defined security policy, and a simulator simulates the propagation of this traffic on a model of the network. The model of the network includes the configuration data associated with each device, and thus, if devices are properly configured to enforce the intended security policies, the success/failure of the simulated test traffic will conform to the intended permit/deny policy of each connection. Differences between the simulated message propagation and the intended security policies are reported to the user, and diagnostic tools are provided to facilitate identification of the device configuration data that accounts for the observed difference. Additionally, if a network's current security policy is unknown, test traffic is generated to reveal the actual policy in effect, to construct a baseline intended security policy.
摘要翻译：安全策略数据库标识网络中的预期安全策略，流量生成器提供被配置为测试每个定义的安全策略的测试流量，并且模拟器模拟该流量在网络模型上的传播。网络模型包括与每个设备相关联的配置数据，因此，如果设备被正确配置以实施预期的安全策略，则模拟测试流量的成功/失败将符合每个连接的预期允许/拒绝策略。向用户报告模拟消息传播与预期安全策略之间的差异，并提供诊断工具以便于识别出所观察到的差异的设备配置数据。此外，如果网络当前的安全策略未知，则生成测试流量以显示实际的实际策略，以构建基准预期的安全策略。

3. 发明授权

US08005945B2 Aggregating policy criteria parameters into ranges for efficient network analysis 有权
标题翻译：将策略标准参数聚合到有效网络分析的范围内
公开(公告)号：US08005945B2
公开(公告)日：2011-08-23
申请号：US11735474
申请日：2007-04-15
申请人： Alain J. Cohen , Pradeep K. Singh , Ankit Agarwal , Venuprakash Barathan
发明人： Alain J. Cohen , Pradeep K. Singh , Ankit Agarwal , Venuprakash Barathan
IPC分类号： G06F15/173 , G06F15/177
CPC分类号： H04L47/10 , H04L41/0853 , H04L41/0893 , H04L41/5003 , H04L43/50 , H04L47/127 , H04L47/20 , H04L47/2441
摘要： A network configuration is processed to identify each policy and the criteria associated with each policy. The criteria of the policies are processed to identify a non-overlapping set of ranges of the criteria parameter, each range being associated with a particular policy or set of policies. In a preferred embodiment, the criteria include the protocol, the source and destination IP addresses, and the source and destination ports, and a default range is defined for each criteria parameter.
摘要翻译：处理网络配置以识别每个策略和与每个策略相关联的标准。处理策略的标准以识别标准参数的不重叠的范围集合，每个范围与特定策略或一组策略相关联。在优选实施例中，标准包括协议，源和目的地IP地址以及源和目的地端口，并且为每个标准参数定义默认范围。

4. 发明授权

US08493883B2 Identifying and analyzing network configuration differences 有权
标题翻译：识别和分析网络配置差异
公开(公告)号：US08493883B2
公开(公告)日：2013-07-23
申请号：US11505228
申请日：2006-08-16
申请人： Pradeep K. Singh , Alain J. Cohen , Ankit Agarwal
发明人： Pradeep K. Singh , Alain J. Cohen , Ankit Agarwal
IPC分类号： H04L12/28
CPC分类号： H04L41/0866 , H04L41/0859
摘要： A contextual and semantic analysis of network entities facilitates a mapping and comparison of the entities between network models. The system includes a plurality of refine handler and match handler pairs that use rules that are specific to the type of network entities being analyzed. The refine handler analyzes the network model to identify the entities for which its rules apply, and the match handler processes these identified entities to establish a pairing between corresponding entities in each model. A sequence of refine-match processes are applied to the network models, typically in accordance with a hierarchy of rules until each entity is identified as a matched, added, or removed entity. A difference handler processes the identified pairings to provide a difference analysis that facilitates a meaningful interpretation of the configuration changes, and a user interface provides an interactive environment to view the differences from different perspectives.
摘要翻译：网络实体的上下文和语义分析有助于网络模型之间的实体的映射和比较。该系统包括使用特定于正在分析的网络实体的类型的规则的多个精简处理程序和匹配处理程序对。精简处理程序分析网络模型以识别其规则适用的实体，匹配处理程序处理这些标识的实体以在每个模型中的对应实体之间建立配对。精细匹配过程的序列通常根据规则的层次结构应用于网络模型，直到每个实体被识别为匹配的，添加的或移除的实体。差异处理程序处理识别的配对以提供有助于对配置更改进行有意义的解释的差异分析，并且用户界面提供交互式环境以从不同的角度来查看差异。

5. 发明申请

US20070157286A1 Analyzing security compliance within a network 有权
标题翻译：分析网络中的安全合规性
公开(公告)号：US20070157286A1
公开(公告)日：2007-07-05
申请号：US11505171
申请日：2006-08-16
申请人： Pradeep Singh , Ankit Agarwal , Alain Cohen , Venuprakash Barathan , Vinod Jeyachandran
发明人： Pradeep Singh , Ankit Agarwal , Alain Cohen , Venuprakash Barathan , Vinod Jeyachandran
IPC分类号： H04L9/00
CPC分类号： H04L41/28 , H04L12/2697 , H04L41/0866 , H04L41/0893 , H04L41/145 , H04L41/22 , H04L43/50 , H04L63/1433 , H04L63/20
摘要： A security policy database identifies the intended security policies within a network, a traffic generator provides test traffic that is configured to test each defined security policy, and a simulator simulates the propagation of this traffic on a model of the network. The model of the network includes the configuration data associated with each device, and thus, if devices are properly configured to enforce the intended security policies, the success/failure of the simulated test traffic will conform to the intended permit/deny policy of each connection. Differences between the simulated message propagation and the intended security policies are reported to the user, and diagnostic tools are provided to facilitate identification of the device configuration data that accounts for the observed difference. Additionally, if a network's current security policy is unknown, test traffic is generated to reveal the actual policy in effect, to construct a baseline intended security policy.
摘要翻译：安全策略数据库标识网络中的预期安全策略，流量生成器提供被配置为测试每个定义的安全策略的测试流量，并且模拟器模拟该流量在网络模型上的传播。网络模型包括与每个设备相关联的配置数据，因此，如果设备被正确配置以实施预期的安全策略，则模拟测试流量的成功/失败将符合每个连接的预期允许/拒绝策略。向用户报告模拟消息传播与预期安全策略之间的差异，并提供诊断工具以便于识别出所观察到的差异的设备配置数据。此外，如果网络当前的安全策略未知，则生成测试流量以显示实际的实际策略，以构建基准预期的安全策略。

6. 发明申请

US20090055416A1 VERIFYING DATA CONSISTENCY AMONG STRUCTURED FILES 有权
标题翻译：在结构化文件中验证数据一致性
公开(公告)号：US20090055416A1
公开(公告)日：2009-02-26
申请号：US12176317
申请日：2008-07-18
申请人： Ankit Agarwal , Mahesh Lavannis , Pradeep K. Singh
发明人： Ankit Agarwal , Mahesh Lavannis , Pradeep K. Singh
IPC分类号： G06F17/30
CPC分类号： G06F17/30067
摘要： A scalable comparison structure and methodology is provided that is suitable for comparing select data content in hundreds or thousands of files in an efficient manner. Section delimiters are defined to identify the sections of the files within which the select data content is located, and sets of unique sections are identified based on the select data content within the section. Thereafter, comparisons and reports are based on these unique content sections. If multiple files include a common set of data, a single unique content section is used to represent these multiple files. File groups are optionally defined, and different sets of select data content can be compared based on these file groups. The result of the comparison is presented in multiple hierarchical forms, including an identification of which files are different from each other, and an identification of the differences among the unique content segments.
摘要翻译：提供了可扩展的比较结构和方法，适用于以有效的方式比较数百或数千个文件中的选择数据内容。段定界符被定义为识别选择数据内容所在的文件的部分，并且基于该部分内的选择数据内容来识别唯一部分的集合。此后，比较和报告是基于这些独特的内容部分。如果多个文件包含一组通用数据，则使用单个唯一内容部分来表示这些多个文件。可选地定义文件组，并且可以基于这些文件组来比较不同组的选择数据内容。比较的结果以多种分层形式呈现，包括哪些文件彼此不同的标识以及唯一内容段之间的差异的识别。

7. 发明授权

US08166004B2 Verifying data consistency among structured files 有权
标题翻译：验证结构化文件之间的数据一致性
公开(公告)号：US08166004B2
公开(公告)日：2012-04-24
申请号：US12176317
申请日：2008-07-18
申请人： Ankit Agarwal , Mahesh Lavannis , Pradeep K. Singh
发明人： Ankit Agarwal , Mahesh Lavannis , Pradeep K. Singh
IPC分类号： G06F17/00
CPC分类号： G06F17/30067
摘要： A scalable comparison structure and methodology is provided that is suitable for comparing select data content in hundreds or thousands of files in an efficient manner. Section delimiters are defined to identify the sections of the files within which the select data content is located, and sets of unique sections are identified based on the select data content within the section. Thereafter, comparisons and reports are based on these unique content sections. If multiple files include a common set of data, a single unique content section is used to represent these multiple files. File groups are optionally defined, and different sets of select data content can be compared based on these file groups. The result of the comparison is presented in multiple hierarchical forms, including an identification of which files are different from each other, and an identification of the differences among the unique content segments.
摘要翻译：提供了可扩展的比较结构和方法，适用于以有效的方式比较数百或数千个文件中的选择数据内容。段定界符被定义为识别选择数据内容所在的文件的部分，并且基于该部分内的选择数据内容来识别唯一部分的集合。此后，比较和报告是基于这些独特的内容部分。如果多个文件包含一组通用数据，则使用单个唯一内容部分来表示这些多个文件。可选地定义文件组，并且可以基于这些文件组来比较不同组的选择数据内容。比较的结果以多种分层形式呈现，包括哪些文件彼此不同的标识以及唯一内容段之间的差异的识别。

8. 发明申请

US20120209867A1 VERIFYING CONSISTENCY AMONG DEVICE CONFIGURATIONS BASED ON COMPARING CONFIGURATION FILES 审中-公开
标题翻译：基于比较配置文件的设备配置中的验证一致性
公开(公告)号：US20120209867A1
公开(公告)日：2012-08-16
申请号：US13454050
申请日：2012-04-23
申请人： Ankit Agarwal , Mahesh Lavannis , Pradeep K. Singh
发明人： Ankit Agarwal , Mahesh Lavannis , Pradeep K. Singh
IPC分类号： G06F17/30
CPC分类号： G06F16/10
摘要： A scalable comparison structure and methodology is provided that is suitable for comparing the configuration of devices in an efficient manner. In the configuration files, section delimiters are defined to identify the sections of the files within which the select data content is located, and differences in the sections are identified based on the select data content within the section. Thereafter, comparisons and reports are based on these unique content sections. Groups of devices are optionally defined, and different sets of select data content can be compared based on these groups. The result of the comparison may be presented in multiple hierarchical forms, including an identification of which configuration files are different from each other, and an identification of the differences among the unique content in these configuration files.
摘要翻译：提供了一种可扩展的比较结构和方法，适用于以有效的方式比较设备的配置。在配置文件中，定义了分段定界符，以标识选择数据内容所在的文件部分，并根据部分中的选择数据内容识别部分中的差异。此后，比较和报告是基于这些独特的内容部分。可选择地定义设备组，并且可以基于这些组来比较不同组的选择数据内容。比较的结果可以以多种分层形式呈现，包括哪些配置文件彼此不同的标识以及这些配置文件中的唯一内容之间的差异的标识。

9. 发明授权

US08955032B2 Assessing network and device compliance with security policies 有权
标题翻译：评估网络和设备符合安全策略
公开(公告)号：US08955032B2
公开(公告)日：2015-02-10
申请号：US11776721
申请日：2007-07-12
申请人： Ankit Agarwal , Nick Bastin , Pradeep K. Singh , Seth Martin
发明人： Ankit Agarwal , Nick Bastin , Pradeep K. Singh , Seth Martin
IPC分类号： H04L29/00 , H04L29/06
CPC分类号： H04L63/20
摘要： All of the transit services that each device is expected to provide are determined and contrasted with the transit configuration of each device. Because the transit configuration of each device may be state-dependent, the service items within each application service are processed in sequential order. Sequences of service items are associated with connection groups, and each of the routes associated with each connection group is determined based on the sequential order of the service items. The configuration of each device along each route is processed to determine the services that will be permitted or denied, based on its current configuration. Each desired transit service item is compared to the transit configuration provided by each device to identify any inconsistencies and/or violations.
摘要翻译：每个设备预期提供的所有过境服务都被确定，并与每个设备的传输配置进行对比。由于每个设备的传输配置可能与状态有关，因此每个应用服务中的服务项目按顺序进行处理。服务项目的顺序与连接组相关联，并且基于服务项目的顺序来确定与每个连接组相关联的每个路线。根据其当前配置，处理每个路由上每个设备的配置，以确定将被允许或拒绝的服务。将每个期望的中转服务项目与由每个设备提供的传输配置进行比较，以识别任何不一致和/或违规。

10. 发明授权

US08620729B2 Methods for supply chain management incorporating uncertainty 有权
标题翻译：包含不确定性的供应链管理方法
公开(公告)号：US08620729B2
公开(公告)日：2013-12-31
申请号：US11994957
申请日：2006-07-07
申请人： Prasanna Gorur Narayana Srinivasa , Abhishek Bagchi , Ankit Agarwal , Debashree Sen , Jyotsna Chatradhi , Manjunath Appasaheb Sindagi , Harjindersingh Gurubaxsingh Mistry , Namrata Dureja , Nandish Jayaram , Neeraj Motwani , Neha Kanchan , Nidhi Rajshree , Pallavi Karan , Pradeep Puthuparampil , Priyanka Sriyapareddy , Ravi Kumar Jain , Raehan Ahsen , Silpa Uppalapati , Shruti Garg , Siddhartha Godbole , Siddhartha Pandey , Sougato Chakraborty
发明人： Prasanna Gorur Narayana Srinivasa , Abhishek Bagchi , Ankit Agarwal , Debashree Sen , Jyotsna Chatradhi , Manjunath Appasaheb Sindagi , Harjindersingh Gurubaxsingh Mistry , Namrata Dureja , Nandish Jayaram , Neeraj Motwani , Neha Kanchan , Nidhi Rajshree , Pallavi Karan , Pradeep Puthuparampil , Priyanka Sriyapareddy , Ravi Kumar Jain , Raehan Ahsen , Silpa Uppalapati , Shruti Garg , Siddhartha Godbole , Siddhartha Pandey , Sougato Chakraborty
IPC分类号： G06F17/00
CPC分类号： G06Q10/06 , G06Q10/04 , G06Q10/06375 , G06Q30/0206
摘要： A robust method for solving in a computer, optimization problems under uncertainty including the steps of: specifying the uncertainty as a hierarchical series of sets of constraints on parameters, with the parameters restricted to each constraint set forming an ensemble, and the hierarchy of constraints, represented as mathematical sets forming a hierarchy of ensembles, said hierarchy being based on subset, intersection or disjoint relationships amongst them; utilizing optimization techniques to create effective identify minimum and maximum bounds on the each objective function, said bounds depending on the constraints comprising each ensemble of parameters and being computed for each of the assumptions about the future; estimating a volume of candidate ensembles and relating the volume to one or more information theoretic measures; and utilizing information theoretic measures to analyze and improve the candidate iteratively refine the ensembles and associated by changing a specificity of the bounds on the objective function.
摘要翻译：一种用于在计算机中求解的鲁棒方法，在不确定性下的优化问题包括以下步骤：将不确定性指定为参数约束集合的分级系列，限制于形成集合的每个约束集的参数以及约束层次，表示为形成集合层次的数学集合，所述层次结构基于它们之间的子集，交集或不相交关系; 利用优化技术来创建对每个目标函数的有效识别最小和最大界限，所述边界取决于包括每个参数集合的约束，并且针对关于未来的每个假设来计算; 估计候选集合的数量并将该卷与一个或多个信息理论度量相关联; 并利用信息理论测量来分析和改进候选者，通过改变目标函数边界的特异性来迭代地改进整体并进行相关联。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式