专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08458786B1 Automated dynamic tunnel management 有权
标题翻译：自动化动态隧道管理
公开(公告)号：US08458786B1
公开(公告)日：2013-06-04
申请号：US12856425
申请日：2010-08-13
申请人： Kailash Kailash , Jose Raphel , Srikanth Devarajan
发明人： Kailash Kailash , Jose Raphel , Srikanth Devarajan
IPC分类号： G06F17/30 , H04L29/06 , H04L12/28
CPC分类号： H04L63/0272
摘要： Systems, methods and apparatus for tunneling in a cloud based security system. In an aspect, tunnel session data describing authentication and unauthenticated sessions, and location data describing tunnel identifiers for tunnels, locations, and security policies specific to the locations are accessed. Tunnel packets are received, and for each tunnel packet it is determined, from the tunnel identifier associated with the packet, whether a session entry in the session data exists for the tunnel identified by the tunnel identifier. In response to determining that a session entry does not exist in the session data, then a session entry is created for the tunnel identifier, an authentication process to determine a location to be associated with the session entry is performed, and an entry in the location data for the location is associated with the session entry.
摘要翻译：用于基于云的安全系统中隧道的系统，方法和装置。在一方面，访问描述认证和未认证会话的隧道会话数据以及描述隧道，位置和特定于该位置的安全策略的隧道标识符的位置数据。接收隧道分组，并且对于每个隧道分组，根据与分组相关联的隧道标识，确定是否存在由隧道标识符标识的隧道的会话数据中的会话条目。响应于确定在会话数据中不存在会话条目，则为隧道标识符创建会话条目，执行用于确定与会话条目相关联的位置的认证过程，以及位置中的条目该位置的数据与会话条目相关联。

2. 发明授权

US08259571B1 Handling overlapping IP addresses in multi-tenant architecture 有权
标题翻译：在多租户架构中处理重叠的IP地址
公开(公告)号：US08259571B1
公开(公告)日：2012-09-04
申请号：US12732858
申请日：2010-03-26
申请人： Jose Raphel , Kailash Kailash , Srikanth Devarajan
发明人： Jose Raphel , Kailash Kailash , Srikanth Devarajan
IPC分类号： G01R31/08
CPC分类号： H04L61/2535 , H04L61/2592
摘要： Systems, methods and apparatus for tunneling in a cloud based security system. A multi-tenant cloud-based security system that can distinguish between client computing devices with overlapping private IP addresses is disclosed. Client devices communicate through a processing node to which a tunnel is established. The processing node is able to detect the client devices and apply security policies to the device.
摘要翻译：用于基于云的安全系统中隧道的系统，方法和装置。公开了一种可以区分具有重叠专用IP地址的客户端计算设备的多租户基于云的安全系统。客户端设备通过建立隧道的处理节点进行通信。处理节点能够检测客户端设备并对设备应用安全策略。

3. 发明授权

US08869259B1 Cloud based inspection of secure content avoiding man-in-the-middle attacks 有权
标题翻译：基于云的检查安全内容，避免中间人攻击
公开(公告)号：US08869259B1
公开(公告)日：2014-10-21
申请号：US13111753
申请日：2011-05-19
申请人： Sivaprasad Udupa , Narinder Paul , Jose Raphel , Kailash Kailash
发明人： Sivaprasad Udupa , Narinder Paul , Jose Raphel , Kailash Kailash
IPC分类号： H04L29/06
CPC分类号： H04L63/1483 , H04L63/0823 , H04L63/20
摘要： A cloud based system that facilitates inspection of secure content and inexpensively detects the presence of a Man-in-the-Middle attack in a client-server communication is disclosed. Through inspection of the server certificate, no Man-in-the-Middle attack between server and the system is ensured; through inspection and designation of the client certificate, absence of a Man-in-the-Middle attack between the cloud based system and the client is ensured. In this way, the cloud based system can perform its usual policy enforcement functions with respect to secure content while avoiding Man-in-the-Middle attacks.
摘要翻译：公开了一种基于云的系统，其便于检查安全内容并且廉价地检测客户端 - 服务器通信中的中间人攻击的存在。通过检查服务器证书，确保服务器与系统之间无中间人的攻击; 通过检查和指定客户端证书，确保了基于云的系统和客户端之间的中间人中的攻击。以这种方式，基于云的系统可以在安全内容方面执行其通常的策略执行功能，同时避免中间人攻击。

4. 发明授权

US08607066B1 Content inspection using partial content signatures 有权
标题翻译：内容检查使用部分内容签名
公开(公告)号：US08607066B1
公开(公告)日：2013-12-10
申请号：US12185539
申请日：2008-08-04
申请人： Kailash Kailash , Robert L. Voit , Jose Raphel
发明人： Kailash Kailash , Robert L. Voit , Jose Raphel
IPC分类号： G06F11/30 , G06F12/14
CPC分类号： G06F21/564 , G06F21/554 , G06F21/56 , H04L63/1441
摘要： Systems, methods and apparatus for a content item inspection. A plurality of portions of a content item are received in a buffer, the buffer divided into a plurality of segments. A partial signature of the content item is computed using the received portions of the content item in a most recently received segment and a partial signature computed for a preceding segment. The computed partial signature is compared against a plurality of partial signatures associated with trustworthy content items. If a matching partial signature associated with a trustworthy content item is found for the computed partial signature, the most recently received segment is allowed to be transmitted to a device that requested the content item.
摘要翻译：用于内容项目检查的系统，方法和装置。内容项目的多个部分被接收在缓冲器中，缓冲器被分成多个段。使用最近接收到的段中的内容项的接收部分和针对前一段计算的部分签名来计算内容项的部分签名。将所计算的部分签名与与可信赖内容项相关联的多个部分签名进行比较。如果针对所计算的部分签名找到与可信任内容项目相关联的匹配部分签名，则允许最近接收到的片段被发送到请求内容项目的设备。

5. 发明授权

US08010526B1 Instance counting and ranking 有权
标题翻译：实例计数和排名
公开(公告)号：US08010526B1
公开(公告)日：2011-08-30
申请号：US12182428
申请日：2008-07-30
申请人： Kailash Kailash , Jose Raphel
发明人： Kailash Kailash , Jose Raphel
IPC分类号： G06F7/00
CPC分类号： G06F7/22
摘要： In one general aspect, entity instances are monitored during a first interval, each entity instance being one of several types of entity instances. A first ranked list of entity instances is determined from the entity instances monitored during the first interval. The types of entity instances are ranked in the first list according to the number of times each type of entity instance occurred during the first interval and the first ranked list has a first cardinality of types of entity instances. Entity instances are monitored during a second interval. A second ranked list of entity instances is determined. The second ranked list has the first cardinality of types of entity instances. The first ranked list and the second ranked list are merged into a third ranked list of entities instances. The third ranked list has a second cardinality that is less than or equal to the first cardinality.
摘要翻译：在一个一般方面，在第一间隔期间监视实体实例，每个实体实例是几种类型的实体实例之一。实体实例的排名列表是从第一个间隔期间监控的实体实例确定的。实体实例的类型根据在第一间隔期间发生的每种类型的实体实例的次数排列在第一列表中，并且第一排名列表具有实体实例的类型的第一基数。在第二个时间间隔内监视实体实例。确定实体实例的第二排名列表。第二个排名的列表具有实体实例类型的第一个基数。排名第一的排名和排名第二的排名列表被合并到实体实例的排名第三的列表中。排名第三的名单的第二个基数小于或等于第一个基数。

6. 发明授权

US08185510B2 Distributed security provisioning 有权
标题翻译：分布式安全配置
公开(公告)号：US08185510B2
公开(公告)日：2012-05-22
申请号：US13016158
申请日：2011-01-28
申请人： Jay Chaudhry , Arcady V. Schekochikhin , Srikanth Devarajan , Narinder Paul , Kailash Kailash
发明人： Jay Chaudhry , Arcady V. Schekochikhin , Srikanth Devarajan , Narinder Paul , Kailash Kailash
IPC分类号： G06F7/00
CPC分类号： G06F21/552 , G06F21/577 , G06F21/6218 , H04L63/0218 , H04L63/10 , H04L63/1408 , H04L63/1441
摘要： Systems, methods and apparatus for a distributed security that provides security processing external to a network edge. The system can include many distributed processing nodes and one or more authority nodes that provide security policy data, threat data, and other security data to the processing nodes. The processing nodes detect and stop the distribution of malware, spyware and other undesirable content before such content reaches the destination network and computing systems.
摘要翻译：用于分布式安全性的系统，方法和设备，为网络边缘提供安全处理。该系统可以包括向处理节点提供安全策略数据，威胁数据和其他安全数据的许多分布式处理节点和一个或多个权限节点。处理节点在此类内容到达目标网络和计算系统之前检测并停止恶意软件，间谍软件和其他不需要的内容的分发。

7. 发明授权

US08887249B1 Protecting against denial of service attacks using guard tables 有权
标题翻译：使用保护表防止拒绝服务攻击
公开(公告)号：US08887249B1
公开(公告)日：2014-11-11
申请号：US12128481
申请日：2008-05-28
申请人： Arcady V. Schekochikhin , Srikanth Devarajan , Narinder Paul , Kailash Kailash
发明人： Arcady V. Schekochikhin , Srikanth Devarajan , Narinder Paul , Kailash Kailash
IPC分类号： H04L29/06
CPC分类号： H04L63/1458 , H04L63/083 , H04L63/1408
摘要： Guard tables including absence information are used in a security system to protect a network service from a denial of service attack. A login key corresponding to a login request is hashed and the output of the hash is a bit position in a guard table. The bit value at the bit position in the guard table can be checked to determine if login information corresponding to the key is present. Further processing of the login request can be based on the indicated presence or absence of the information.
摘要翻译：包括缺席信息的保护表在安全系统中用于保护网络服务免受拒绝服务攻击。与登录请求相对应的登录密钥被散列，并且散列的输出是保护表中的位置。可以检查保护表中的位位置处的位值，以确定是否存在与该键对应的登录信息。登录请求的进一步处理可以基于指示的信息的存在或不存在。

8. 发明申请

US20090300045A1 DISTRIBUTED SECURITY PROVISIONING 有权
标题翻译：分布式安全提供
公开(公告)号：US20090300045A1
公开(公告)日：2009-12-03
申请号：US12128371
申请日：2008-05-28
申请人： Jay Chaudhry , Arcady V. Schekochikhin , Srikanth Devarajan , Narinder Paul , Kailash Kailash
发明人： Jay Chaudhry , Arcady V. Schekochikhin , Srikanth Devarajan , Narinder Paul , Kailash Kailash
IPC分类号： G06F17/30 , G06F21/00
CPC分类号： G06F21/552 , G06F21/577 , G06F21/6218 , H04L63/0218 , H04L63/10 , H04L63/1408 , H04L63/1441
摘要： Systems, methods and apparatus for a distributed security that provides security processing external to a network edge. The system can include many distributed processing nodes and one or more authority nodes that provide security policy data, threat data, and other security data to the processing nodes. The processing nodes detect and stop the distribution of malware, spyware and other undesirable content before such content reaches the destination network and computing systems.
摘要翻译：用于分布式安全性的系统，方法和设备，为网络边缘提供安全处理。该系统可以包括向处理节点提供安全策略数据，威胁数据和其他安全数据的许多分布式处理节点和一个或多个权限节点。处理节点在此类内容到达目标网络和计算系统之前检测并停止恶意软件，间谍软件和其他不需要的内容的分发。

9. 发明授权

US08429111B1 Encoding and compression of statistical data 有权
标题翻译：统计数据的编码和压缩
公开(公告)号：US08429111B1
公开(公告)日：2013-04-23
申请号：US12185443
申请日：2008-08-04
申请人： Kailash Kailash , Arcady V. Schekochikhin , Srikanth Devarajan , Narinder Paul
发明人： Kailash Kailash , Arcady V. Schekochikhin , Srikanth Devarajan , Narinder Paul
IPC分类号： G06F17/00 , G06N5/02
CPC分类号： H03M7/40
摘要： Methods, systems, and apparatus, including computer program products, for generating or using augmentation queries. In one aspect, statistical model of statistical data is used to support lossless predictive compression. Data instances are identified in statistical data and classified into one of a plurality of data types. Each data type is associated with a corresponding compression process that is used to compress data instances of that type.
摘要翻译：用于生成或使用增强查询的方法，系统和装置，包括计算机程序产品。在一个方面，统计数据的统计模型用于支持无损预测压缩。数据实例在统计数据中标识并分类为多种数据类型之一。每个数据类型与用于压缩该类型的数据实例的相应的压缩过程相关联。

10. 发明授权

US07899849B2 Distributed security provisioning 有权
标题翻译：分布式安全配置
公开(公告)号：US07899849B2
公开(公告)日：2011-03-01
申请号：US12128371
申请日：2008-05-28
申请人： Jay Chaudhry , Arcady V. Schekochikhin , Srikanth Devarajan , Narinder Paul , Kailash Kailash
发明人： Jay Chaudhry , Arcady V. Schekochikhin , Srikanth Devarajan , Narinder Paul , Kailash Kailash
IPC分类号： G06F12/00
CPC分类号： G06F21/552 , G06F21/577 , G06F21/6218 , H04L63/0218 , H04L63/10 , H04L63/1408 , H04L63/1441
摘要： Systems, methods and apparatus for a distributed security that provides security processing external to a network edge. The system can include many distributed processing nodes and one or more authority nodes that provide security policy data, threat data, and other security data to the processing nodes. The processing nodes detect and stop the distribution of malware, spyware and other undesirable content before such content reaches the destination network and computing systems.
摘要翻译：用于分布式安全性的系统，方法和设备，为网络边缘提供安全处理。该系统可以包括向处理节点提供安全策略数据，威胁数据和其他安全数据的许多分布式处理节点和一个或多个权限节点。处理节点在此类内容到达目标网络和计算系统之前检测并停止恶意软件，间谍软件和其他不需要的内容的分发。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式