专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07516476B1 Methods and apparatus for automated creation of security policy 有权
标题翻译：用于自动创建安全策略的方法和设备
公开(公告)号：US07516476B1
公开(公告)日：2009-04-07
申请号：US10395711
申请日：2003-03-24
申请人： Jeffrey A. Kraemer , Brian F. Costello , Dan L. Grecu , Venkat R. Rangamani , Philip J. S. Gladstone , Alan J. Kirby
发明人： Jeffrey A. Kraemer , Brian F. Costello , Dan L. Grecu , Venkat R. Rangamani , Philip J. S. Gladstone , Alan J. Kirby
IPC分类号： G06F21/00 , G06F11/30
CPC分类号： G06F21/604
摘要： An automated method and apparatus for creating a security policy for one or more applications is provided. The method includes exercising the features of the one or more applications to generate behavioral data, applying a heuristic to aggregate the behavioral data into a subset of representative actions, and organizing the representative actions according to a structure defined by a template into a security policy for the one or more applications. The security policy may be downloaded to one or more workstations for deployment, and provides a safeguard to protect a computer system against cyber-terrorism.
摘要翻译：提供了一种用于为一个或多个应用创建安全策略的自动化方法和装置。该方法包括行使一个或多个应用的特征以产生行为数据，应用启发式将行为数据聚合成代表性动作的子集，以及根据由模板定义的结构将代表性动作组织到用于一个或多个应用程序。安全策略可以下载到一个或多个工作站进行部署，并提供保护计算机系统免受网络恐怖主义的威胁。

2. 发明授权

US07891000B1 Methods and apparatus for monitoring and reporting network activity of applications on a group of host computers 有权
标题翻译：用于监控和报告一组主机上的应用程序的网络活动的方法和装置
公开(公告)号：US07891000B1
公开(公告)日：2011-02-15
申请号：US11197861
申请日：2005-08-05
申请人： Venkat Raghavan Rangamani , Philip J. S. Gladstone , Brian F. Costello
发明人： Venkat Raghavan Rangamani , Philip J. S. Gladstone , Brian F. Costello
IPC分类号： G06F11/00 , G06F12/14
CPC分类号： H04L63/1416 , G06F21/552 , G06F2221/2143 , G06F2221/2147 , H04L63/20 , H04L69/16
摘要： A security management system provides rules for monitoring network activity of applications to groups of host, computers, specifically activity indicating that communications mechanisms have been established (i.e. open TCP ports) but are receiving little or no use (i.e., few connection acceptances). Agents on the hosts utilize monitoring software inserted between the applications and the network protocol stacks. The agents store network activity data gathered during the monitoring in local storage, and periodically upload the data to a centralized server in a compressed and optionally encrypted fashion. The server uses the uploaded data from all hosts to update a security management database reflecting the network activity of all the hosts. Reports may be generated to identify activity that may present security risks, such as open but inactive ports, to enable a network administrator to take remedial action such as de-activating or de-installing applications.
摘要翻译：安全管理系统提供用于监视应用程序到主机，计算机组的网络活动的规则，具体指示已经建立了通信机制的活动（即，打开TCP端口）但是几乎没有使用（即，几乎没有连接接受）。主机上的代理利用插入应用程序和网络协议栈之间的监控软件。代理存储在本地存储期间监视期间收集的网络活动数据，并且以压缩和可选地加密的方式定期地将数据上传到集中式服务器。服务器使用所有主机上传的数据来更新反映所有主机的网络活动的安全管理数据库。可能会生成报告来识别可能存在安全风险的活动，例如开放但不活跃的端口，以使网络管理员能够采取补救措施，如停用或取消安装应用程序。

3. 发明授权

US08588253B2 Methods and apparatuses to reduce context switching during data transmission and reception in a multi-processor device 有权
标题翻译：减少在多处理器设备中的数据发送和接收期间的上下文切换的方法和设备
公开(公告)号：US08588253B2
公开(公告)日：2013-11-19
申请号：US12491993
申请日：2009-06-25
申请人： Jeffrey A. Dyck , Brian F. Costello , Vamsi K. Dokku , Udayakumar U. Menon , Amit M. Singh
发明人： Jeffrey A. Dyck , Brian F. Costello , Vamsi K. Dokku , Udayakumar U. Menon , Amit M. Singh
IPC分类号： H04J3/24 , G06F9/46
CPC分类号： H04L49/9036 , H04L49/90
摘要： A method and apparatus are provided for efficiently transferring data between a first and second processors having shared memory. A plurality of data packets are aggregated into a packet bundle at the first processor. The packet bundle is then transferred from the first processor to the second processor using the shared memory, wherein the transfer of the packet bundle is performed in a single context switch at the first processor. The packet bundle is then unbundled into individual data packets at the second processor, wherein a processing load of the second processor is reduced due to the aggregation of the data packets into the packet bundle by the first processor.
摘要翻译：提供了一种用于在具有共享存储器的第一和第二处理器之间有效地传送数据的方法和装置。在第一处理器处将多个数据分组聚合成分组束。然后使用共享存储器将分组束从第一处理器传送到第二处理器，其中分组束的传送在第一处理器的单个上下文切换中执行。然后，分组束在第二处理器处被分组成单个数据分组，其中由于第一处理器将数据分组聚合到分组束中，第二处理器的处理负载被减小。

4. 发明申请

US20090323686A1 METHODS AND APPARATUSES TO REDUCE CONTEXT SWITCHING DURING DATA TRANSMISSION AND RECEPTION IN A MULTI-PROCESSOR DEVICE 有权
标题翻译：在多处理器设备中的数据传输和接收期间减少上下文切换的方法和装置
公开(公告)号：US20090323686A1
公开(公告)日：2009-12-31
申请号：US12491993
申请日：2009-06-25
申请人： Jeffrey A. Dyck , Brian F. Costello , Vamsi K. Dokku , Udayakumar U. Menon , Amit M. Singh
发明人： Jeffrey A. Dyck , Brian F. Costello , Vamsi K. Dokku , Udayakumar U. Menon , Amit M. Singh
IPC分类号： H04L12/56
CPC分类号： H04L49/9036 , H04L49/90
摘要： A method and apparatus are provided for efficiently transferring data between a first and second processors having shared memory. A plurality of data packets are aggregated into a packet bundle at the first processor. The packet bundle is then transferred from the first processor to the second processor using the shared memory, wherein the transfer of the packet bundle is performed in a single context switch at the first processor. The packet bundle is then unbundled into individual data packets at the second processor, wherein a processing load of the second processor is reduced due to the aggregation of the data packets into the packet bundle by the first processor.
摘要翻译：提供了一种用于在具有共享存储器的第一和第二处理器之间有效地传送数据的方法和装置。在第一处理器处将多个数据分组聚合成分组束。然后使用共享存储器将分组束从第一处理器传送到第二处理器，其中分组束的传送在第一处理器的单个上下文切换中执行。然后，分组束在第二处理器处被分组成单个数据分组，其中由于第一处理器将数据分组聚合到分组束中，第二处理器的处理负载被减小。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式