专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09197602B2 Propagation of viruses through an information technology network 有权
标题翻译：通过信息技术网络传播病毒
公开(公告)号：US09197602B2
公开(公告)日：2015-11-24
申请号：US10457091
申请日：2003-06-09
申请人： Matthew Murray Williamson , John Melvin Brawn
发明人： Matthew Murray Williamson , John Melvin Brawn
IPC分类号： G06F15/16 , H04L29/06
CPC分类号： H04L63/145 , H04L63/0227
摘要： Requests to send data from a first host within a network of hosts are monitored against a record of destination hosts that have been sent data in accordance with a predetermined policy. Destination host identities (not the record) are stored in a buffer. The buffer size is monitored to determine whether requests from the first host are pursuant to viral activity therein.
摘要翻译：根据预定策略已发送数据的目的地主机的记录来监视从主机网络内的第一主机发送数据的请求。目的主机身份（而不是记录）存储在缓冲区中。监视缓冲区大小以确定来自第一主机的请求是否依赖于其中的病毒活动。

2. 发明授权

US07400591B2 Method of creating an address and a discontiguous mask for a network security policy area 有权
标题翻译：为网络安全策略区域创建地址和不连续掩码的方法
公开(公告)号：US07400591B2
公开(公告)日：2008-07-15
申请号：US11142643
申请日：2005-06-01
申请人： John Melvin Brawn , Brian Jemes , Stephen F. Froelich
发明人： John Melvin Brawn , Brian Jemes , Stephen F. Froelich
IPC分类号： G06F15/177
CPC分类号： H04L61/2061 , H04L29/12283 , H04L29/12801 , H04L45/02 , H04L45/025 , H04L45/30 , H04L61/6004
摘要： A method of creating a discontiguous address plan for an enterprise is provided which includes determining a hierarchy of routing optimization for an enterprise, determining a number of route advertisement aggregation points at each level of the hierarchy, determining a number of network security policy areas for the enterprise, and determining a number of addresses for each of the network security policy areas. The number of addresses is rounded up to a power of the address scheme base number to produce a plurality of rounded addresses. The method further includes allocating an address range for each of the plurality of rounded addresses so that a starting address of the address range begins on a power of the base number and determining a size of the plurality of address ranges. The size of the plurality of address ranges is rounded up to a power of the base number to produce the size of a repeating policy pattern. The method further includes assigning an instance of the repeating policy pattern to each of the route advertisement aggregation points at each hierarchy, and determining an address and a mask for each of the network security policy areas in the repeating policy pattern.
摘要翻译：提供了一种为企业创建不连续的地址计划的方法，其包括确定企业的路由优化的层级，确定层级的每个级别的路由通告聚合点的数量，确定用于该层次的网络安全策略区域的数量企业，并确定每个网络安全策略领域的多个地址。地址数被四舍五入为地址方案基数的幂，以产生多个舍入地址。该方法还包括为多个舍入地址中的每一个分配地址范围，使得地址范围的起始地址以基本号码的功率开始，并确定多个地址范围的大小。多个地址范围的大小被舍入到基数的幂，以产生重复策略模式的大小。该方法还包括将重复策略模式的实例分配给每个层级的每个路由通告聚合点，以及确定重复策略模式中每个网络安全策略区域的地址和掩码。

3. 发明授权

US07376965B2 System and method for implementing a bubble policy to achieve host and network security 有权
标题翻译：实现泡沫政策以实现主机和网络安全的系统和方法
公开(公告)号：US07376965B2
公开(公告)日：2008-05-20
申请号：US09861986
申请日：2001-05-14
申请人： Brian Jemes , John Melvin Brawn , Leif Buch-Pedersen
发明人： Brian Jemes , John Melvin Brawn , Leif Buch-Pedersen
IPC分类号： G06F15/177 , G06F15/173
CPC分类号： H04L63/0218 , H04L29/06 , H04L29/12283 , H04L29/12801 , H04L61/2061 , H04L61/6004 , H04L63/0227 , H04L63/0263 , H04L63/104 , H04L69/40
摘要： A method of creating a structured access list template, which includes dividing an access list template into a plurality of sections, creating an inbound local rule group for the bubble, creating an outbound local rule group for the bubble, creating an inbound remote rule group for the bubble, and creating an outbound remote rule group for the bubble. A method of creating an access list for each of the plurality of bubble boundary devices, which includes creating an address table that includes a plurality of addresses corresponding to devices in a bubble partition, creating a protocol table that includes a list of network services and whether each of the network services are granted or denied access to the bubble partition, creating an access list template using the address table and the protocol table, generating an access list from the access list template, and providing the access list to one of the plurality of bubble boundary devices.
摘要翻译：一种创建结构化访问列表模板的方法，包括将访问列表模板划分为多个区段，为泡沫创建入站本地规则组，为泡沫创建出站本地规则组，为入口远程规则组创建入口远程规则组，气泡，并为气泡创建出站远程规则组。一种为多个气泡边界设备中的每一个创建访问列表的方法，其包括创建包括与气泡分区中的设备相对应的多个地址的地址表，创建包括网络服务列表的协议表以及是否每个网络服务被授予或拒绝访问气泡分区，使用地址表和协议表创建访问列表模板，从访问列表模板生成访问列表，并将访问列表提供给多个气泡边界装置。

4. 发明授权

US07020718B2 System and method of aggregating discontiguous address ranges into addresses and masks using a plurality of repeating address blocks 失效
公开(公告)号：US07020718B2
公开(公告)日：2006-03-28
申请号：US09855862
申请日：2001-05-14
申请人： John Melvin Brawn , Brian Jemes , Stephen F. Froelich
发明人： John Melvin Brawn , Brian Jemes , Stephen F. Froelich
IPC分类号： G06F15/173 , G06F15/16 , G06F12/14 , G06F12/10
CPC分类号： H04L61/2061 , H04L29/12283 , H04L29/12801 , H04L45/02 , H04L45/025 , H04L45/30 , H04L61/6004
摘要： A method of creating a discontiguous address plan for an enterprise is provided which includes determining a hierarchy of routing optimization for an enterprise, determining a number of route advertisement aggregation points at each level of the hierarchy, determining a number of network security policy areas for the enterprise, and determining a number of addresses for each of the network security policy areas. The number of addresses is rounded up to a power of the address scheme base number to produce a plurality of rounded addresses. The method further includes allocating an address range for each of the plurality of rounded addresses so that a starting address of the address range begins on a power of the base number and determining a size of the plurality of address ranges. The size of the plurality of address ranges is rounded up to a power of the base number to produce the size of a repeating policy pattern. The method further includes assigning an instance of the repeating policy pattern to each of the route advertisement aggregation points at each hierarchy, and determining an address and a mask for each of the network security policy areas in the repeating policy pattern.

5. 发明授权

US08230497B2 Method of identifying software vulnerabilities on a computer system 有权
标题翻译：识别计算机系统上的软件漏洞的方法
公开(公告)号：US08230497B2
公开(公告)日：2012-07-24
申请号：US10287125
申请日：2002-11-04
申请人： Andrew Patrick Norman , John Melvin Brawn , John P Scrimsher , Jonathan Griffin
发明人： Andrew Patrick Norman , John Melvin Brawn , John P Scrimsher , Jonathan Griffin
IPC分类号： G06F12/14 , G06F21/00
CPC分类号： H04L63/1433
摘要： A method of identifying a software vulnerability on a computer system is disclosed in which the computer system has software stored thereon and is connected to a management system over a computer network. The method comprises the steps of: applying an interrogation program to the software, the interrogation program being capable of exploiting a known software vulnerability if it is present in the software to which the interrogation program is applied; in the event that the software vulnerability is exploited by the interrogation program, operating the interrogation program to generate a set of management information from which can be derived the identification of the computer system; and sending the management information to the management system.
摘要翻译：公开了一种在计算机系统上识别软件漏洞的方法，其中计算机系统具有存储在其上的软件，并且通过计算机网络连接到管理系统。该方法包括以下步骤：向软件应用询问程序，询问程序能够利用已知的软件漏洞（如果存在于应用询问程序的软件中）; 在询问程序利用软件漏洞的情况下，操作询问程序以生成一组管理信息，从中可以导出计算机系统的识别; 并将管理信息发送到管理系统。

6. 发明授权

US07353539B2 Signal level propagation mechanism for distribution of a payload to vulnerable systems 有权
标题翻译：用于将有效载荷分配到易受攻击的系统的信号级传播机制
公开(公告)号：US07353539B2
公开(公告)日：2008-04-01
申请号：US10345701
申请日：2003-01-16
申请人： John Melvin Brawn , Andrew Patrick Norman , Chris Ralph Dalton , Jonathan Griffin
发明人： John Melvin Brawn , Andrew Patrick Norman , Chris Ralph Dalton , Jonathan Griffin
IPC分类号： G06F12/14 , G06F11/30 , H04L9/32 , G06F15/173
CPC分类号： H04L63/1433
摘要： A method of identifying a software vulnerability in computer systems in a computer network includes a multiple level scanning process controlled from a management system connected to the network. The management system runs a root scanner which applies an interrogation program to remote systems having network addresses in a predefined address range. When a software vulnerability is detected, the interrogation program causes the respective remote system to scan topologically local systems, the remote system itself applying a second interrogation program to the local systems to detect and mitigate the vulnerability using an associated mitigation payload. Whilst that local scanning process is in progress, the root scanner can be applied to remote systems in other predefined address ranges.
摘要翻译：在计算机网络中识别计算机系统中的软件漏洞的方法包括从连接到网络的管理系统控制的多级扫描过程。管理系统运行根扫描器，其向具有预定地址范围内的网络地址的远程系统应用询问程序。当检测到软件漏洞时，询问程序使相应的远程系统扫描拓扑结构的本地系统，远程系统本身将本地系统应用第二询问程序以使用相关的缓冲有效载荷来检测和减轻该漏洞。当本地扫描过程正在进行时，根扫描仪可以应用于其他预定义地址范围内的远程系统。

7. 发明授权

US07263719B2 System and method for implementing network security policies on a common network infrastructure 有权
标题翻译：在公共网络基础设施上实施网络安全策略的系统和方法
公开(公告)号：US07263719B2
公开(公告)日：2007-08-28
申请号：US09726072
申请日：2000-11-29
申请人： Brian Jemes , John Melvin Brawn , Joseph Garcia , Michael Milligan , John M. Pape , Jeff Hansell
发明人： Brian Jemes , John Melvin Brawn , Joseph Garcia , Michael Milligan , John M. Pape , Jeff Hansell
IPC分类号： G06F15/16
CPC分类号： H04L63/0227 , H04L29/06 , H04L29/12283 , H04L29/12801 , H04L61/2061 , H04L61/6004 , H04L63/104 , H04L63/1466 , H04L69/40
摘要： A secure network is provided which includes a plurality of network bubbles having a plurality of bubble partitions. Each bubble partition has at least one network device configured to transmit and receive data. All the network devices that belong to or correspond to a particular network bubble have the same network security policy. The secure network also includes a plurality of network control points, which has one or more network control point devices having at least one interface. Each bubble partition is connected to at least one network control point. The network control point is used to provide a connection between at least two network devices. Each network control point device is configured to enforce the network security policy of all the network bubbles that are connected to it. During the transmission of data from one network device to another network device, one or more network control points are traversed.
摘要翻译：提供一种安全网络，其包括具有多个气泡分隔件的多个网络气泡。每个气泡分区具有至少一个被配置为发送和接收数据的网络设备。属于或对应于特定网络泡沫的所有网络设备具有相同的网络安全策略。安全网络还包括多个网络控制点，其具有一个或多个具有至少一个接口的网络控制点设备。每个气泡分区连接至少一个网络控制点。网络控制点用于提供至少两个网络设备之间的连接。每个网络控制点设备被配置为强制连接到它的所有网络泡沫的网络安全策略。在从一个网络设备传输到另一个网络设备的过程中，遍历一个或多个网络控制点。

8. 发明授权

US07024686B2 Secure network and method of establishing communication amongst network devices that have restricted network connectivity 失效
公开(公告)号：US07024686B2
公开(公告)日：2006-04-04
申请号：US09854359
申请日：2001-05-11
申请人： John Melvin Brawn , Christian Klein
发明人： John Melvin Brawn , Christian Klein
IPC分类号： H04K1/00 , H04L9/32
CPC分类号： H04L61/2061 , H04L29/06 , H04L29/12283 , H04L29/12801 , H04L61/6004 , H04L63/0218 , H04L63/0227 , H04L63/0263 , H04L63/104 , H04L67/1097 , H04L69/40
摘要： A secure network is provided which includes a plurality of anti-bubbles having a plurality of anti-bubble partitions. Each anti-bubble partition has at least one network device configured to transmit and receive data. All the network devices that belong to or correspond to a particular anti-bubble have the same network security policy. Data may not be transmitted between two network devices in the same anti-bubble or two network devices in different anti-bubble partitions of the same anti-bubble. The secure network also includes a plurality of network control points, which has one or more network control point devices having at least one interface. Each anti-bubble partition is connected to at least one network control point. The network control point is used to provide a connection between at least two network devices. Each network control point device is configured to enforce the network security policy of all the anti-bubbles that are connected to it. During the transmission of data from one network device to another network device, one or more network control points are traversed.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式