专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20220272003A1 NETWORK SERVICE PROCESSING METHOD, SYSTEM, AND GATEWAY DEVICE 有权
公开(公告)号：US20220272003A1
公开(公告)日：2022-08-25
申请号：US17742341
申请日：2022-05-11
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： Wu Jiang
IPC分类号： H04L41/00 , H04L12/66 , H04L41/0894 , H04L41/5009 , H04L41/5006
摘要： This application discloses a network service processing method, a network service processing system, and a gateway device, to alleviate a problem that the gateway device cannot meet increasing additional function requirements. The gateway device identifies a type of a first intranet device, where the first intranet device belongs to an intranet connected to the gateway device. The gateway device obtains a first software package based on the type of the first intranet device, where the first software package is used to implement a first additional function. The gateway device sends a first indication message and the first software package to the first intranet device, where the first indication message is used to indicate the first intranet device to install the first software package and execute the first additional function.

2. 发明申请

US20200304521A1 Bot Characteristic Detection Method and Apparatus 审中-公开
公开(公告)号：US20200304521A1
公开(公告)日：2020-09-24
申请号：US16897707
申请日：2020-06-10
申请人： Huawei Technologies Co., Ltd.
发明人： Wu Jiang
IPC分类号： H04L29/06 , G06F21/53 , G06F21/56
摘要： A bot characteristic detection method and apparatus, where the apparatus obtains a first dynamic behavior file and a second dynamic behavior file, where the first dynamic behavior file is a behavior file resulting from dynamic behavior detection performed on a malicious file in a first sandbox, and the second dynamic behavior file is a behavior file resulting from dynamic behavior detection performed on the malicious file in a second sandbox. The apparatus determines a bot characteristic of the malicious file based on a common characteristic of the first dynamic behavior file and the second dynamic behavior file.

3. 发明申请

US20200220896A1 SDN-Based DDoS Attack Prevention Method, Apparatus, and System 审中-公开
公开(公告)号：US20200220896A1
公开(公告)日：2020-07-09
申请号：US16824036
申请日：2020-03-19
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： Wu Jiang
IPC分类号： H04L29/06 , H04L12/26 , H04L12/715
摘要： A software defined networking (SDN)-based distributed denial of service (DDoS) attack prevention method, an apparatus, and a system, where a controller delivers a traffic statistics collection instruction to a first packet forwarding device. The traffic statistics collection instruction instructs the first packet forwarding device to perform traffic statistics collection, and carries a destination Internet Protocol (IP) address. The controller collects statistical data reported by the first packet forwarding device, obtains, according to the statistical data, a statistical value of global traffic flowing to the destination IP address, and delivers a DDoS prevention policy to a second packet forwarding device based on a determining result that the statistical value of the global traffic exceeds the preset threshold. Correspondingly, the second packet forwarding device receives the DDoS prevention policy from the controller, and performs, according to the DDoS prevention policy, prevention process on the traffic flowing to the destination IP address.

4. 发明授权

US08886927B2 Method, apparatus and system for preventing DDoS attacks in cloud system 有权
标题翻译：防止云系统DDoS攻击的方法，装置和系统
公开(公告)号：US08886927B2
公开(公告)日：2014-11-11
申请号：US13740519
申请日：2013-01-14
申请人： Huawei Technologies Co., Ltd.
发明人： Wu Jiang
IPC分类号： H04L29/06 , G06F9/455 , H04L29/08
CPC分类号： H04L63/1458 , G06F9/45533 , G06F9/45558 , G06F2009/45587 , H04L63/1425 , H04L67/10 , H04L2463/142
摘要： A method, an apparatus and a system for preventing DDoS (Distributed Denial of Service) attacks in a cloud system. The method for preventing DDoS attacks in a cloud system includes: monitoring, by a protection node in a cloud system, data traffic input into virtual machines, where the cloud system includes the protection node and multiple virtual machines, and data streams communicated between the virtual machines pass through the protection node; extracting data streams to be input into virtual machines if it is detected that the data traffic input into the virtual machines is abnormal; sending the extracted data streams to a traffic cleaning apparatus for cleaning; receiving the data streams cleaned by the traffic cleaning apparatus; and inputting the cleaned data streams into the virtual machines. The technical solutions provided in the embodiments of the present disclosure can effectively prevent DDoS attacks between virtual machines in the cloud system.
摘要翻译：用于防止云系统中的DDoS（分布式拒绝服务）攻击的方法，装置和系统。在云系统中防止DDoS攻击的方法包括：由云系统中的保护节点监控输入虚拟机的数据流量，云系统中包括保护节点和多个虚拟机，以及在虚拟机之间传输的数据流机器通过保护节点; 如果检测到输入虚拟机的数据业务异常，则提取要输入虚拟机的数据流; 将提取的数据流发送到用于清洁的交通清洁设备; 接收由交通清洁装置清洁的数据流; 并将清理的数据流输入到虚拟机中。在本公开的实施例中提供的技术方案可以有效地防止云系统中的虚拟机之间的DDoS攻击。

5. 发明申请

US20220239687A1 Security Vulnerability Defense Method and Device 有权
公开(公告)号：US20220239687A1
公开(公告)日：2022-07-28
申请号：US17717751
申请日：2022-04-11
申请人： Huawei Technologies Co., Ltd.
发明人： Wu Jiang
IPC分类号： H04L9/40
摘要： A security vulnerability defense method includes obtaining, by a vulnerability management device, asset information of an asset of a first network device, where the asset information includes an asset identifier, an asset model, and an asset version, and the first network device is located in a range of a controlled network; obtaining, by the vulnerability management device based on the asset model and the asset version in the asset information, vulnerability information corresponding to the asset information; and determining, by the vulnerability management device, a vulnerability response playbook corresponding to the vulnerability information, where the vulnerability response playbook is used to execute a vulnerability defense policy for the first network device after being parsed.

6. 发明授权

US10757135B2 Bot characteristic detection method and apparatus 有权
公开(公告)号：US10757135B2
公开(公告)日：2020-08-25
申请号：US16372923
申请日：2019-04-02
申请人： Huawei Technologies Co., Ltd.
发明人： Wu Jiang
IPC分类号： H04L29/06 , G06F21/56 , G06F21/53
摘要： A bot characteristic detection method and apparatus, where the apparatus obtains a first dynamic behavior file and a second dynamic behavior file, where the first dynamic behavior file is a behavior file resulting from dynamic behavior detection performed on a malicious file in a first sandbox, and the second dynamic behavior file is a behavior file resulting from dynamic behavior detection performed on the malicious file in a second sandbox. The apparatus determines a bot characteristic of the malicious file based on a common characteristic of the first dynamic behavior file and the second dynamic behavior file.

7. 发明授权

US10673874B2 Method, apparatus, and device for detecting e-mail attack 审中-公开
公开(公告)号：US10673874B2
公开(公告)日：2020-06-02
申请号：US16156514
申请日：2018-10-10
申请人： Huawei Technologies Co., Ltd.
发明人： Wu Jiang , Xingshui Dong
IPC分类号： H04L29/06 , H04L12/58
摘要： A method, an apparatus, and a device for detecting an electronic mail (E-mail) attack. The device receives a data flow, obtains an E-mail traffic parameter of each statistic period within a predetermined number of statistic periods, where within each statistic period, the E-mail traffic parameter of each of the statistic periods is determined according to a protocol type of the received data flow, and determines that an E-mail attack is detected when the E-mail traffic parameter of each statistic period within the predetermined number of statistic periods matches a first threshold.

8. 发明授权

US10630719B2 SDN-based DDOS attack prevention method, apparatus, and system 有权
公开(公告)号：US10630719B2
公开(公告)日：2020-04-21
申请号：US15711725
申请日：2017-09-21
申请人： Huawei Technologies Co., Ltd.
发明人： Wu Jiang
IPC分类号： H04L29/06 , H04L12/26 , H04L12/715 , H04L12/771
CPC分类号： H04L63/1458 , H04L29/06 , H04L43/16 , H04L45/64 , H04L63/1425 , H04L43/0876 , H04L45/56 , H04L63/0254 , H04L63/20
摘要： A software defined networking (SDN)-based distributed denial of service (DDoS) attack prevention method, an apparatus, and a system, where a controller delivers a traffic statistics collection instruction to a first packet forwarding device. The traffic statistics collection instruction instructs the first packet forwarding device to perform traffic statistics collection, and carries a destination Internet Protocol (IP) address. The controller collects statistical data reported by the first packet forwarding device, obtains, according to the statistical data, a statistical value of global traffic flowing to the destination IP address, and delivers a DDoS prevention policy to a second packet forwarding device based on a determining result that the statistical value of the global traffic exceeds the preset threshold. Correspondingly, the second packet forwarding device receives the DDoS prevention policy from the controller, and performs, according to the DDoS prevention policy, prevention process on the traffic flowing to the destination IP address.

9. 发明申请

US20190230097A1 Bot Characteristic Detection Method and Apparatus 审中-公开
公开(公告)号：US20190230097A1
公开(公告)日：2019-07-25
申请号：US16372923
申请日：2019-04-02
申请人： Huawei Technologies Co., Ltd.
发明人： Wu Jiang
IPC分类号： H04L29/06 , G06F21/53 , G06F21/56
摘要： A bot characteristic detection method and apparatus, where the apparatus obtains a first dynamic behavior file and a second dynamic behavior file, where the first dynamic behavior file is a behavior file resulting from dynamic behavior detection performed on a malicious file in a first sandbox, and the second dynamic behavior file is a behavior file resulting from dynamic behavior detection performed on the malicious file in a second sandbox. The apparatus determines a bot characteristic of the malicious file based on a common characteristic of the first dynamic behavior file and the second dynamic behavior file.

10. 发明申请

US20190044962A1 Method, Apparatus, and Device for Detecting E-mail Attack 审中-公开
公开(公告)号：US20190044962A1
公开(公告)日：2019-02-07
申请号：US16156514
申请日：2018-10-10
申请人： Huawei Technologies Co., Ltd.
发明人： Wu Jiang , Xingshui Dong
IPC分类号： H04L29/06 , H04L12/58
CPC分类号： H04L63/1416 , H04L51/12 , H04L63/1408 , H04L63/1441 , H04L63/1458 , H04L69/28
摘要： A method, an apparatus, and a device for detecting an electronic mail (E-mail) attack. The device receives a data flow, obtains an E-mail traffic parameter of each statistic period within a predetermined number of statistic periods, where within each statistic period, the E-mail traffic parameter of each of the statistic periods is determined according to a protocol type of the received data flow, and determines that an E-mail attack is detected when the E-mail traffic parameter of each statistic period within the predetermined number of statistic periods matches a first threshold.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式