专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20100205672A1 HASH-BASED SYSTEMS AND METHODS FOR DETECTING, PREVENTING, AND TRACING NETWORK WORMS AND VIRUSES 审中-公开
标题翻译：基于HASH的系统和检测，预防和跟踪网络和病毒的方法
公开(公告)号：US20100205672A1
公开(公告)日：2010-08-12
申请号：US12762365
申请日：2010-04-18
申请人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Partridge
发明人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Partridge
IPC分类号： G06F21/00
CPC分类号： H04L63/145 , G06F21/562 , H04L51/12
摘要： A system (126-129) detects transmission of potentially malicious packets. The system (126-129) receives packets and generates hash values corresponding to each of the packets. The system (126-129) may then compare the generated hash values to hash values corresponding to prior packets. The system (126-129) determines that one of the packets is a potentially malicious packet when the generated hash value corresponding to the one packet matches one of the hash values corresponding to one of the prior packets and the one prior packet was received within a predetermined amount of time of the one packet. The system (126-129) may also facilitate the tracing of the path taken by a potentially malicious packet. In this case, the system (126-129) may receive a message that identifies a potentially malicious packet, generate hash values from the potentially malicious packet, and determine whether one or more of the generated hash values match hash values corresponding to previously-received packets. The system (126-129) may then identify the potentially malicious packet as one of the previously-received packets when one or more of the generated hash values match the hash value corresponding to the one previously-received packet.
摘要翻译：系统（126-129）检测潜在恶意数据包的传输。系统（126-129）接收分组并产生与每个分组对应的散列值。然后，系统（126-129）可以将生成的散列值与对应于先前分组的散列值进行比较。当对应于一个分组的生成的散列值与对应于先前分组之一的哈希值中的一个匹配，并且在一个分组内接收到一个先前分组时，系统（126-129）确定分组中的一个是潜在的恶意分组一个分组的预定时间量。系统（126-129）还可以便利跟踪潜在的恶意数据包所采取的路径。在这种情况下，系统（126-129）可以接收标识潜在恶意数据包的消息，从潜在的恶意数据包生成散列值，并确定所生成的散列值中的一个或多个是否与先前接收到的散列值相匹配数据包然后当一个或多个所生成的散列值与对应于先前接收的一个分组的散列值相匹配时，系统（126-129）可以将潜在的恶意分组识别为先前接收的分组之一。

2. 发明申请

US20090182867A1 METHOD AND APPARATUS FOR IDENTIFYING A PACKET 审中-公开
标题翻译：用于识别分组的方法和装置
公开(公告)号：US20090182867A1
公开(公告)日：2009-07-16
申请号：US12249832
申请日：2008-10-10
申请人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Partridge
发明人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Partridge
IPC分类号： G06F15/173
CPC分类号： H04L63/145 , G06F21/562 , H04L51/12
摘要： A system and method for identifying target packets in a network. The invention identifies packets by computing a hash value over at least a portion of a packet passing through a network device such as a router. The hash value is used as an address, or index, into a memory. The hash value identifies a unique memory address and a flag is set at the respective memory location. When a target packet is detected elsewhere in a network, the network device receives a query message containing a hash value of the target packet. The network device compares the target packet to the hash values in memory. A match between the hash value in memory and the hash value in the query message indicates the target packet was observed by the network device. After a match is detected, the network device makes a reply available to the network.
摘要翻译：一种用于识别网络中的目标分组的系统和方法。本发明通过在通过诸如路由器的网络设备的分组的至少一部分上计算散列值来识别分组。哈希值用作内存中的地址或索引。哈希值标识唯一的存储器地址，并且在相应的存储器位置设置标志。当在网络中的其他地方检测到目标分组时，网络设备接收到包含目标分组的哈希值的查询消息。网络设备将目标分组与存储器中的散列值进行比较。存储器中的哈希值和查询消息中的哈希值之间的匹配表示网络设备观察到目标分组。在检测到匹配后，网络设备向网络发出回复。

3. 发明申请

US20090031136A1 HASH-BASED SYSTEMS AND METHODS FOR DETECTING AND PREVENTING TRANSMISSION OF UNWANTED E-MAIL 审中-公开
标题翻译：基于HASH的系统和检测和防止未经授权的电子邮件传输的方法
公开(公告)号：US20090031136A1
公开(公告)日：2009-01-29
申请号：US12243778
申请日：2008-10-01
申请人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan
发明人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan
IPC分类号： G06F21/00
CPC分类号： H04L63/145 , G06F21/562 , H04L51/12
摘要： A system (120) detects transmission of potentially unwanted e-mail messages. The system (120) may receive e-mail messages and generate hash values based on one or more portions of the e-mail messages. The system (120) may then determine whether the generated hash values match hash values associated with prior e-mail messages. The system (120) may determine that one of the e-mail messages is a potentially unwanted e-mail message when one or more of the generated hash values associated with the e-mail message match one or more of the hash values associated with the prior e-mail messages.
摘要翻译：系统（120）检测潜在的不需要的电子邮件消息的传输。系统（120）可以接收电子邮件消息并且基于电子邮件消息的一个或多个部分来生成散列值。然后，系统（120）可以确定所生成的散列值是否匹配与先前的电子邮件消息相关联的散列值。当与电子邮件消息相关联的所生成的散列值中的一个或多个匹配一个或多个与该电子邮件消息相关联的散列值时，系统（120）可以确定电子邮件消息之一是潜在的不需要的电子邮件消息以前的电子邮件。

4. 发明申请

US20090158435A1 HASH-BASED SYSTEMS AND METHODS FOR DETECTING, PREVENTING, AND TRACING NETWORK WORMS AND VIRUSES 审中-公开
标题翻译：基于HASH的系统和检测，预防和跟踪网络和病毒的方法
公开(公告)号：US20090158435A1
公开(公告)日：2009-06-18
申请号：US12249803
申请日：2008-10-10
申请人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Partridge
发明人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Partridge
IPC分类号： G06F21/00
CPC分类号： H04L63/145 , G06F21/562 , H04L51/12
摘要： A system (126-129) detects transmission of potentially malicious packets. The system (126-129) receives packets and generates hash values corresponding to each of the packets. The system (126-129) may then compare the generated hash values to hash values corresponding to prior packets. The system (126-129) determines that one of the packets is a potentially malicious packet when the generated hash value corresponding to the one packet matches one of the hash values corresponding to one of the prior packets and the one prior packet was received within a predetermined amount of time of the one packet. The system (126-129) may also facilitate the tracing of the path taken by a potentially malicious packet. In this case, the system (126-129) may receive a message that identifies a potentially malicious packet, generate hash values from the potentially malicious packet, and determine whether one or more of the generated hash values match hash values corresponding to previously-received packets. The system (126-129) may then identify the potentially malicious packet as one of the previously-received packets when one or more of the generated hash values match the hash value corresponding to the one previously-received packet.
摘要翻译：系统（126-129）检测潜在恶意数据包的传输。系统（126-129）接收分组并产生与每个分组对应的散列值。然后，系统（126-129）可以将生成的散列值与对应于先前分组的散列值进行比较。当对应于一个分组的生成的散列值与对应于先前分组之一的哈希值中的一个匹配，并且在一个分组内接收到一个先前分组时，系统（126-129）确定分组中的一个是潜在的恶意分组一个分组的预定时间量。系统（126-129）还可以便利跟踪潜在的恶意数据包所采取的路径。在这种情况下，系统（126-129）可以接收标识潜在恶意数据包的消息，从潜在的恶意数据包生成散列值，并确定所生成的散列值中的一个或多个是否与先前接收到的散列值相匹配数据包然后当一个或多个所生成的散列值与对应于先前接收的一个分组的散列值相匹配时，系统（126-129）可以将潜在的恶意分组识别为先前接收的分组之一。

5. 发明申请

US20090158046A1 HASH-BASED SYSTEMS AND METHODS FOR DETECTING AND PREVENTING TRANSMISSION OF POLYMORPHIC NETWORK WORMS AND VIRUSES 审中-公开
标题翻译：基于HASH的系统和检测和防止多态网络病毒和病毒传播的方法
公开(公告)号：US20090158046A1
公开(公告)日：2009-06-18
申请号：US12249823
申请日：2008-10-10
申请人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Partridge
发明人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Partridge
IPC分类号： H04L9/00 , G08B23/00 , G06F11/00 , G06F12/14 , G06F12/16 , G06F15/18 , H04L12/16 , H04L12/26
CPC分类号： H04L63/145 , G06F21/562 , H04L51/12
摘要： A system (200) detects transmission of potentially malicious packets. The system (200) receives, or otherwise observes, packets and generates hash values based on variable-sized blocks of the packets. The system (200) then compares the generated hash values to hash values associated with prior packets. The system (200) determines that one of the received packets is a potentially malicious packet when one or more of the generated hash values associated with the received packet match one or more of the hash values associated with the prior packets.
摘要翻译：系统（200）检测潜在恶意分组的传输。系统（200）接收或以其他方式观察分组，并基于分组的可变大小的块生成哈希值。然后，系统（200）将生成的散列值与与先前分组相关联的散列值进行比较。当与接收到的分组相关联的所生成的哈希值中的一个或多个匹配与先前分组相关联的一个或多个散列值时，系统（200）确定接收到的分组之一是潜在的恶意分组。

6. 发明申请

US20090031129A1 HASH-BASED SYSTEMS AND METHODS FOR DETECTING AND PREVENTING TRANSMISSION OF UNWANTED E-MAIL 审中-公开
公开(公告)号：US20090031129A1
公开(公告)日：2009-01-29
申请号：US12243785
申请日：2008-10-01
申请人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan
发明人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan
IPC分类号： G06F21/00
CPC分类号： H04L63/145 , G06F21/562 , H04L51/12
摘要： A system (120) detects transmission of potentially unwanted e-mail messages. The system (120) may receive e-mail messages and generate hash values based on one or more portions of the e-mail messages. The system (120) may then determine whether the generated hash values match hash values associated with prior e-mail messages. The system (120) may determine that one of the e-mail messages is a potentially unwanted e-mail message when one or more of the generated hash values associated with the e-mail message match one or more of the hash values associated with the prior e-mail messages.

7. 发明授权

US08204945B2 Hash-based systems and methods for detecting and preventing transmission of unwanted e-mail 失效
标题翻译：用于检测和防止不需要的电子邮件传输的基于哈希的系统和方法
公开(公告)号：US08204945B2
公开(公告)日：2012-06-19
申请号：US12248790
申请日：2008-10-09
申请人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan
发明人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan
IPC分类号： G06F15/16
CPC分类号： H04L63/145 , G06F21/562 , H04L51/12
摘要： A system (120) detects transmission of potentially unwanted e-mail messages. The system (120) may receive e-mail messages and generate hash values based on one or more portions of the e-mail messages. The system (120) may then determine whether the generated hash values match hash values associated with prior e-mail messages. The system (120) may determine that one of the e-mail messages is a potentially unwanted e-mail message when one or more of the generated hash values associated with the e-mail message match one or more of the hash values associated with the prior e-mail messages.
摘要翻译：系统（120）检测潜在的不需要的电子邮件消息的传输。系统（120）可以接收电子邮件消息并且基于电子邮件消息的一个或多个部分来生成散列值。然后，系统（120）可以确定所生成的散列值是否匹配与先前的电子邮件消息相关联的散列值。当与电子邮件消息相关联的所生成的散列值中的一个或多个匹配一个或多个与该电子邮件消息相关联的散列值时，系统（120）可以确定电子邮件消息之一是潜在的不需要的电子邮件消息以前的电子邮件。

8. 发明申请

US20100205265A1 HASH-BASED SYSTEMS AND METHODS FOR DETECTING AND PREVENTING TRANSMISSION OF UNWANTED E-MAIL 审中-公开
标题翻译：基于HASH的系统和检测和防止未经授权的电子邮件传输的方法
公开(公告)号：US20100205265A1
公开(公告)日：2010-08-12
申请号：US12762368
申请日：2010-04-19
申请人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan
发明人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan
IPC分类号： G06F15/16
CPC分类号： H04L63/145 , G06F21/562 , H04L51/12
摘要： A system (120) detects transmission of potentially unwanted e-mail messages. The system (120) may receive e-mail messages and generate hash values based on one or more portions of the e-mail messages. The system (120) may then determine whether the generated hash values match hash values associated with prior e-mail messages. The system (120) may determine that one of the e-mail messages is a potentially unwanted e-mail message when one or more of the generated hash values associated with the e-mail message match one or more of the hash values associated with the prior e-mail messages.
摘要翻译：系统（120）检测潜在的不需要的电子邮件消息的传输。系统（120）可以接收电子邮件消息并且基于电子邮件消息的一个或多个部分来生成散列值。然后，系统（120）可以确定所生成的散列值是否匹配与先前的电子邮件消息相关联的散列值。当与电子邮件消息相关联的所生成的散列值中的一个或多个匹配一个或多个与该电子邮件消息相关联的散列值时，系统（120）可以确定电子邮件消息之一是潜在的不需要的电子邮件消息以前的电子邮件。

9. 发明授权

US08272060B2 Hash-based systems and methods for detecting and preventing transmission of polymorphic network worms and viruses 失效
标题翻译：用于检测和防止多态性网络蠕虫和病毒传播的基于哈希的系统和方法
公开(公告)号：US08272060B2
公开(公告)日：2012-09-18
申请号：US12762367
申请日：2010-04-18
申请人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Partridge
发明人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Partridge
IPC分类号： H04L9/00 , H04L29/06
CPC分类号： H04L63/145 , G06F21/562 , H04L51/12
摘要： A system (200) detects transmission of potentially malicious packets. The system (200) receives, or otherwise observes, packets and generates hash values based on variable-sized blocks of the packets. The system (200) then compares the generated hash values to hash values associated with prior packets. The system (200) determines that one of the received packets is a potentially malicious packet when one or more of the generated hash values associated with the received packet match one or more of the hash values associated with the prior packets.
摘要翻译：系统（200）检测潜在恶意分组的传输。系统（200）接收或以其他方式观察分组，并基于分组的可变大小的块生成哈希值。然后，系统（200）将生成的散列值与与先前分组相关联的散列值进行比较。当与接收到的分组相关联的所生成的哈希值中的一个或多个匹配与先前分组相关联的一个或多个散列值时，系统（200）确定接收到的分组之一是潜在的恶意分组。

10. 发明授权

US08166549B2 Hash-based systems and methods for detecting and preventing transmission of polymorphic network worms and viruses 有权
公开(公告)号：US08166549B2
公开(公告)日：2012-04-24
申请号：US12762367
申请日：2010-04-18
申请人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Partridge
发明人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Partridge
IPC分类号： H04L9/00 , H04L29/06
摘要： A system (200) detects transmission of potentially malicious packets. The system (200) receives, or otherwise observes, packets and generates hash values based on variable-sized blocks of the packets. The system (200) then compares the generated hash values to hash values associated with prior packets. The system (200) determines that one of the received packets is a potentially malicious packet when one or more of the generated hash values associated with the received packet match one or more of the hash values associated with the prior packets.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式