专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07657615B1 Approach for provisioning network devices 有权
标题翻译：方法来配置网络设备
公开(公告)号：US07657615B1
公开(公告)日：2010-02-02
申请号：US10731889
申请日：2003-12-08
申请人： Martin Patterson , Jayaraman Manni , Shriram Krishnan , Benjamin H. Stoltz , Christopher T. La
发明人： Martin Patterson , Jayaraman Manni , Shriram Krishnan , Benjamin H. Stoltz , Christopher T. La
IPC分类号： G06F15/177
CPC分类号： G06F9/4416
摘要： An approach for provisioning network devices generally involves supplying boot data to network devices over a network so that the network devices can be booted up in an imaging mode or an application mode, depending upon the particular boot data supplied to the network device. When booted up in the imaging mode, imaging data can be downloaded and stored on network devices. When booted up in the application mode, the network devices execute one or more programs contained in the image data stored on the network devices. The first and second boot data may be in the form of boot loader scripts. Furthermore, the first and second boot data may be provided to the network device in the payload of a dynamic host configuration protocol (DHCP) reply. The DHCP reply may be generated and provided by a DHCP server to the network device in response to receiving a DHCP request from the network device. The approach may be implemented using a secure network environment.
摘要翻译：用于配置网络设备的方法通常涉及通过网络向网络设备提供引导数据，使得根据提供给网络设备的特定引导数据，网络设备可以以成像模式或应用模式启动。当以成像模式启动时，成像数据可以下载并存储在网络设备上。当在应用模式下启动时，网络设备执行包含在存储在网络设备上的图像数据中的一个或多个程序。第一和第二引导数据可以是引导加载程序脚本的形式。此外，可以在动态主机配置协议（DHCP）应答的有效载荷中将第一和第二引导数据提供给网络设备。响应于从网络设备接收到DHCP请求，DHCP响应可以由DHCP服务器生成并提供给网络设备。该方法可以使用安全网络环境来实现。

2. 发明授权

US07237077B1 Tool for disk image replication 有权
标题翻译：磁盘映像复制工具
公开(公告)号：US07237077B1
公开(公告)日：2007-06-26
申请号：US10731681
申请日：2003-12-08
申请人： Martin Patterson , Shriram Krishnan , Jayaraman Manni , Benjamin H. Stoltz
发明人： Martin Patterson , Shriram Krishnan , Jayaraman Manni , Benjamin H. Stoltz
IPC分类号： G06F12/00
CPC分类号： G06F3/065 , G06F3/0607 , G06F3/067
摘要： A method and apparatus for replicating an image from a source to a destination disk are provided. Specific embodiments may be optimized for single source to multiple destination replication requests, for example. In one embodiment, the present invention provides tools and techniques for synchronous data replication responsive to asynchronous same-source-to-different-destination replication requests.
摘要翻译：提供了用于将图像从源复制到目的地盘的方法和装置。例如，针对单个源到多个目的地复制请求可以优化特定实施例。在一个实施例中，本发明提供响应于异步同源到不同目的地复制请求的同步数据复制的工具和技术。

3. 发明授权

US08935779B2 Network-based binary file extraction and analysis for malware detection 有权
标题翻译：基于网络的二进制文件提取和分析，用于恶意软件检测
公开(公告)号：US08935779B2
公开(公告)日：2015-01-13
申请号：US13350645
申请日：2012-01-13
申请人： Jayaraman Manni , Ashar Aziz , Fengmin Gong , Upendran Loganathan , Muhammad Amin
发明人： Jayaraman Manni , Ashar Aziz , Fengmin Gong , Upendran Loganathan , Muhammad Amin
IPC分类号： G06F11/00 , G06F21/56 , H04L29/06
CPC分类号： G06F21/567 , G06F21/566 , H04L63/1408
摘要： A system and method are disclosed for network-based file analysis for malware detection. Network content is received from a network tap. A binary packet is identified in the network content. A binary file, including the binary packet, is extracted from the network content. It is determined whether the extracted binary file is detected to be malware.
摘要翻译：公开了用于恶意软件检测的基于网络的文件分析的系统和方法。从网络点击接收网络内容。在网络内容中识别二进制数据包。从网络内容中提取包含二进制数据包的二进制文件。确定提取的二进制文件是否被检测为恶意软件。

4. 发明授权

US08793787B2 Detecting malicious network content using virtual environment components 有权
标题翻译：使用虚拟环境组件检测恶意网络内容
公开(公告)号：US08793787B2
公开(公告)日：2014-07-29
申请号：US12359252
申请日：2009-01-23
申请人： Osman Abdoul Ismael , Samuel Yie , Jayaraman Manni , Muhammad Amin , Bahman Mahbod
发明人： Osman Abdoul Ismael , Samuel Yie , Jayaraman Manni , Muhammad Amin , Bahman Mahbod
IPC分类号： H04L29/06 , G06F21/56
CPC分类号： H04L63/145 , G06F9/455 , G06F21/53 , G06F21/566 , G06F2221/2101 , G06F2221/2149 , H04L63/1408 , H04L63/1416 , H04L2463/144
摘要： Malicious network content is identified based on the behavior of one or more virtual environment components which process network content in a virtual environment. Network content can be monitored and analyzed using a set of heuristics. The heuristics identify suspicious network content communicated over a network. The suspicious network content can further be analyzed in a virtual environment that includes one or more virtual environment components. Each virtual environment component is configured to mimic live environment components, for example a browser application component or an operating system component. The suspicious network content is replayed in the virtual environment using one or more of the virtual environment components. The virtual environment component behavior is analyzed in view of an expected behavior to identify malicious network content. The malicious network content is then identified and processed.
摘要翻译：基于在虚拟环境中处理网络内容的一个或多个虚拟环境组件的行为来识别恶意网络内容。可以使用一组启发式方法来监控和分析网络内容。启发式识别通过网络传送的可疑网络内容。可疑网络内容可以在包括一个或多个虚拟环境组件的虚拟环境中进一步分析。每个虚拟环境组件都配置为模拟实时环境组件，例如浏览器应用程序组件或操作系统组件。使用一个或多个虚拟环境组件在虚拟环境中重播可疑网络内容。鉴于预期的行为来分析虚拟环境组件行为，以识别恶意网络内容。然后识别和处理恶意网络内容。

5. 发明授权

US08375444B2 Dynamic signature creation and enforcement 有权
标题翻译：动态签名创建和执行
公开(公告)号：US08375444B2
公开(公告)日：2013-02-12
申请号：US11494990
申请日：2006-07-28
申请人： Ashar Aziz , Ramesh Radhakrishnan , Wei-Lung Lai , Jayaraman Manni
发明人： Ashar Aziz , Ramesh Radhakrishnan , Wei-Lung Lai , Jayaraman Manni
IPC分类号： G06F12/16 , G06F11/30
CPC分类号： G06F21/554 , G06F9/455 , G06F21/56 , H04L63/145 , H04L63/1491
摘要： A dynamic signature creation and enforcement system can comprise a tap configured to copy network data from a communication network, and a controller coupled to the tap. The controller is configured to receive the copy of the network data from the tap, analyze the copy of the network data with a heuristic to determine if the network data is suspicious, flag the network data as suspicious based on the heuristic determination, simulate transmission of the network data to a destination device to identify unauthorized activity, generate an unauthorized activity signature based on the identification, and transmit the unauthorized activity signature to a digital device configured to enforce the unauthorized activity signature.
摘要翻译：动态签名创建和执行系统可以包括被配置为从通信网络复制网络数据的抽头以及耦合到抽头的控制器。控制器被配置为从抽头接收网络数据的副本，用启发式分析网络数据的副本以确定网络数据是否可疑，基于启发式确定将网络数据标记为可疑，模拟传输将目标设备的网络数据发送到目的地设备以识别未经授权的活动，基于所述标识生成未经授权的活动签名，并将未经授权的活动签名发送到被配置为执行未经授权的活动签名的数字设备。

6. 发明申请

US20120331553A1 DYNAMIC SIGNATURE CREATION AND ENFORCEMENT 有权
标题翻译：动态签名创建和执行
公开(公告)号：US20120331553A1
公开(公告)日：2012-12-27
申请号：US11494990
申请日：2006-07-28
申请人： Ashar Aziz , Ramesh Radhakrishnan , Wei-Lung Lai , Jayaraman Manni
发明人： Ashar Aziz , Ramesh Radhakrishnan , Wei-Lung Lai , Jayaraman Manni
IPC分类号： G06F21/20
CPC分类号： G06F21/554 , G06F9/455 , G06F21/56 , H04L63/145 , H04L63/1491
摘要： A dynamic signature creation and enforcement system can comprise a tap configured to copy network data from a communication network, and a controller coupled to the tap. The controller is configured to receive the copy of the network data from the tap, analyze the copy of the network data with a heuristic to determine if the network data is suspicious, flag the network data as suspicious based on the heuristic determination, simulate transmission of the network data to a destination device to identify unauthorized activity, generate an unauthorized activity signature based on the identification, and transmit the unauthorized activity signature to a digital device configured to enforce the unauthorized activity signature.
摘要翻译：动态签名创建和执行系统可以包括被配置为从通信网络复制网络数据的抽头以及耦合到抽头的控制器。控制器被配置为从抽头接收网络数据的副本，用启发式分析网络数据的副本以确定网络数据是否可疑，基于启发式确定将网络数据标记为可疑，模拟传输将目标设备的网络数据发送到目的地设备以识别未经授权的活动，基于所述标识生成未经授权的活动签名，并将未经授权的活动签名发送到被配置为执行未经授权的活动签名的数字设备。

7. 发明授权

US08898788B1 Systems and methods for malware attack prevention 有权
标题翻译：防止恶意软件攻击的系统和方法
公开(公告)号：US08898788B1
公开(公告)日：2014-11-25
申请号：US11717474
申请日：2007-03-12
申请人： Ashar Aziz , Wei-Lung Lai , Jayaraman Manni
发明人： Ashar Aziz , Wei-Lung Lai , Jayaraman Manni
IPC分类号： G06F11/30 , H04L29/06 , G06F21/00
CPC分类号： G06F21/00 , G06F9/455 , G06F21/554 , G06F21/56 , H04L63/00 , H04L63/145 , H04L63/1491
摘要： Systems and methods for malware attack prevention are provided. Network data is copied from a communication network. It is then determined if a possible malware attack is within the copied network data. The network data is intercepted based on the determination. The network data is then analyzed to identify a malware attack.
摘要翻译：提供了防止恶意软件攻击的系统和方法。从通信网络复制网络数据。然后确定可能的恶意软件攻击是否在复制的网络数据内。网络数据根据确定被拦截。然后分析网络数据以识别恶意软件攻击。

8. 发明授权

US08561177B1 Systems and methods for detecting communication channels of bots 有权
标题翻译：用于检测漫游器通信信道的系统和方法
公开(公告)号：US08561177B1
公开(公告)日：2013-10-15
申请号：US11998605
申请日：2007-11-30
申请人： Ashar Aziz , Wei-Lung Lai , Jayaraman Manni
发明人： Ashar Aziz , Wei-Lung Lai , Jayaraman Manni
IPC分类号： G06F21/00
CPC分类号： G06F21/554 , G06F21/56 , G06F2009/45591 , H04L63/145 , H04L63/1491 , H04L2463/144
摘要： Exemplary systems and methods for detecting a communication channel of a bot. In exemplary embodiments, presence of a communication channel between a first network device and a second network device is detected. Data from the communication channel is scanned and used to determine if a suspected bot communication exists. If a bot communication is detected, then a recovery process may be initiated.
摘要翻译：用于检测机器人的通信信道的示例性系统和方法。在示例性实施例中，检测在第一网络设备和第二网络设备之间存在通信信道。来自通信信道的数据被扫描并用于确定是否存在可疑的机器人通信。如果检测到机器人通信，则可以启动恢复过程。

9. 发明申请

US20120174186A1 Policy Based Capture with Replay to Virtual Machine 有权
标题翻译：基于策略的捕获与虚拟机重放
公开(公告)号：US20120174186A1
公开(公告)日：2012-07-05
申请号：US13423057
申请日：2012-03-16
申请人： Ashar Aziz , Adrian Drzewiecki , Ramesh Radhakrishnan , Jayaraman Manni , Muhammad Amin
发明人： Ashar Aziz , Adrian Drzewiecki , Ramesh Radhakrishnan , Jayaraman Manni , Muhammad Amin
IPC分类号： G06F21/00
CPC分类号： H04L63/1425 , G06F9/45537 , G06F9/45558 , G06F21/53 , G06F21/55 , G06F21/554 , G06F21/56 , G06F21/566 , G06F2009/45587 , G06F2009/45591 , G06F2009/45595 , G06F2221/034 , H04L63/0227 , H04L63/10 , H04L63/101 , H04L63/1408 , H04L63/1416 , H04L63/1433 , H04L63/145 , H04L63/1491 , H04L63/20
摘要： A suspicious activity capture system can comprise a tap configured to copy network data from a communication network, and a controller. The controller is coupled to the tap and is configured to receive the copy of the network data from the tap, analyze the copy of the network data to flag the network data as suspicious, and simulate transmission of the network data to a destination device.
摘要翻译：可疑活动捕获系统可以包括被配置为从通信网络复制网络数据的分接头和控制器。控制器耦合到抽头，并被配置为从分接头接收网络数据的副本，分析网络数据的副本以将网络数据标记为可疑，并且模拟网络数据到目的地设备的传输。

10. 发明申请

US20120117652A1 Network-Based Binary File Extraction and Analysis for Malware Detection 有权
标题翻译：基于网络的二进制文件提取和分析恶意软件检测
公开(公告)号：US20120117652A1
公开(公告)日：2012-05-10
申请号：US13350645
申请日：2012-01-13
申请人： Jayaraman Manni , Ashar Aziz , Fengmin Gong , Upendran Loganathan , Amin Sukhera
发明人： Jayaraman Manni , Ashar Aziz , Fengmin Gong , Upendran Loganathan , Amin Sukhera
IPC分类号： G06F12/14
CPC分类号： G06F21/567 , G06F21/566 , H04L63/1408
摘要： A system and method are disclosed for network-based file analysis for malware detection. Network content is received from a network tap. A binary packet is identified in the network content. A binary file, including the binary packet, is extracted from the network content. It is determined whether the extracted binary file is detected to be malware.
摘要翻译：公开了用于恶意软件检测的基于网络的文件分析的系统和方法。从网络点击接收网络内容。在网络内容中识别二进制数据包。从网络内容中提取包含二进制数据包的二进制文件。确定提取的二进制文件是否被检测为恶意软件。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式