专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2006098900A2 METHOD AND APPARATUS FOR SECURING A COMPUTER NETWORK 审中-公开
标题翻译：用于安全计算机网络的方法和装置
公开(公告)号：WO2006098900A2
公开(公告)日：2006-09-21
申请号：PCT/US2006/007612
申请日：2006-03-02
申请人： TREND MICRO INCORPORATED , LIANG, Yung-Chang , KAKI, Said , CHEN, Yi-Fen
发明人： LIANG, Yung-Chang , KAKI, Said , CHEN, Yi-Fen
IPC分类号： G06F12/14
CPC分类号： H04L63/1416 , H04L63/145 , H04L63/1483 , H04L63/16
摘要： In one embodiment, a network security appliance (100) includes a logic circuit (530), a network processing unit (110), and a general purpose processor (510) to protect a computer network from malicious codes, unauthorized data packets, and other network security threats. The logic circuit (530) may include one or more programmable logic devices configured to scan incoming data packets at different layers of a multi-layer protocol, such as the OSI-seven layer model. The network processing unit (110) may work in conjunction with the logic circuit (530) to perform protocol parsing, to form higher layer data units from the data packets, and other network communications-related tasks. The general purpose processor (510) may execute software for performing functions not available from the logic circuit or the network processing unit. For example, the general purpose processor (510) may remove malicious code from infected data or perform malicious code scanning on data when the logic circuit (530) is not configured to do so.
摘要翻译：在一个实施例中，网络安全设备（100）包括逻辑电路（530），网络处理单元（110）和通用处理器（510），用于保护计算机网络免受恶意代码，未经授权的数据分组和其他网络安全威胁。逻辑电路（530）可以包括被配置为扫描诸如OSI-7层模型的多层协议的不同层处的输入数据分组的一个或多个可编程逻辑器件。网络处理单元（110）可以与逻辑电路（530）一起工作以执行协议解析，以从数据分组形成更高层数据单元，以及其他与网络通信有关的任务。通用处理器（510）可以执行用于执行逻辑电路或网络处理单元不可用的功能的软件。例如，当逻辑电路（530）未配置为这样做时，通用处理器（510）可以从受感染的数据中去除恶意代码或对数据执行恶意代码扫描。

2. 发明申请

WO2005022440A1 NETWORK ISOLATION TECHNIQUES SUITABLE FOR VIRUS PROTECTION 审中-公开
标题翻译：网络隔离技术适用于病毒保护
公开(公告)号：WO2005022440A1
公开(公告)日：2005-03-10
申请号：PCT/IB2004/002781
申请日：2004-08-27
申请人： TREND MICRO INCORPORATED , LIANG, Yung, Chang , CHEN, Yi, Fen
发明人： LIANG, Yung, Chang , CHEN, Yi, Fen
IPC分类号： G06F21/00
CPC分类号： H04L63/145 , G06F21/56 , G06F21/566 , H04L29/06 , H04L63/0218 , H04L63/0227 , H04L63/108 , H04L63/1408 , H04L63/20 , H04L67/34 , H04L69/329
摘要： In a distributed network having a number of server computers and associated client devices, method of isolating infected client devices from uninfected client devices is described. The method is carried out by correlating network related virus infection information, determining if a virus outbreak has occurred based on the correlated information, isolating infected client devices from uninfected client devices when the virus outbreak is confirmed, monitoring all data packets in the network for the virus, identifying a packet type associated with the virus, and blocking only the identified packet type.
摘要翻译：在具有多个服务器计算机和相关联的客户端设备的分布式网络中，描述了将受感染的客户端设备与未感染的客户端设备隔离的方法。该方法通过关联网络相关病毒感染信息，基于相关信息确定是否发生病毒爆发，当病毒爆发被确认时，将受感染的客户端设备与未感染的客户端设备隔离，监视网络中的所有数据包病毒，识别与病毒相关的数据包类型，并且仅阻止识别的数据包类型。

3. 发明申请

WO2005022441A2 NETWORK TRAFFIC MANAGEMENT BY A VIRUS/WORM MONITOR IN A DISTRIBUTED NETWORK 审中-公开
标题翻译：分布式网络中的病毒/ WORM监视器的网络交通管理
公开(公告)号：WO2005022441A2
公开(公告)日：2005-03-10
申请号：PCT/IB2004/002782
申请日：2004-08-27
申请人： TREND MICRO INCORPORATED , LIANG, Yung, Chang , CHEN, Yi, Fen
发明人： LIANG, Yung, Chang , CHEN, Yi, Fen
IPC分类号： G06F21/00
CPC分类号： H04L63/145 , G06F21/56 , G06F21/566 , H04L29/06 , H04L63/0218 , H04L63/0227 , H04L63/108 , H04L63/1408 , H04L63/20 , H04L67/34 , H04L69/329
摘要： A network level virus monitoring system capable of monitoring a flow of network traffic in any of a number of inspection modes depending upon the particular needs of a system administrator. The system includes a network virus sensor self registration module coupled to a network virus/worm sensor arranged to automatically self register the associated network virus/worm sensor. The monitoring provides an early warning of a virus attack thereby facilitating quarantine procedures directed at containing a virus outbreak. By providing such an early warning, the network virus monitor reduces the number of computers ultimately affected by the virus attack resulting in a concomitant reduction in both the cost of repair to the system and the amount of downtime. In this way, the inventive network virus monitor provides a great improvement in system uptime and reduction in system losses.
摘要翻译：一种网络级病毒监视系统，其能够根据系统管理员的特定需要监视任何多种检查模式中的网络流量流。该系统包括网络病毒传感器自注册模块，其耦合到网络病毒/蠕虫传感器，其被布置为自动自动注册相关联的网络病毒/蠕虫传感器。该监测提供病毒攻击的早期警告，从而促进针对包含病毒爆发的检疫程序。通过提供这样的早期警告，网络病毒监视器减少最终受病毒攻击影响的计算机的数量，从而同时降低系统的维修成本和停机时间。以这种方式，本发明的网络病毒监视器提供了系统正常运行时间的极大改进和系统损失的减少。

4. 发明申请

WO2005109366A3 METHOD AND APPARATUS FOR CONTROLLING TRAFFIC IN A COMPUTER NETWORK 审中-公开
公开(公告)号：WO2005109366A3
公开(公告)日：2005-11-17
申请号：PCT/US2005/005279
申请日：2005-02-18
申请人： TREND MICRO INCORPORATED , CHEN, Yi-Fen , LIANG, Yung-Chang , LIAO, En-Yi
发明人： CHEN, Yi-Fen , LIANG, Yung-Chang , LIAO, En-Yi
IPC分类号： G06F15/16 , H04L12/28
摘要： In one embodiment, a technique for controlling traffic in a computer network (700) includes modifying a packet generated by a first computer (710). The packet may be intended for a second computer, but is modified to be redirected to a third computer (740). The packet may be processed in the third computer (740) prior to being forwarded from the third computer to the second computer. The packet may be scanned for viruses at the third computer (740), for example. Among other advantages, the technique allows for scanning of early generated packets, redirection of selected packets, and routing of packets from a computer in general.

5. 发明申请

WO2006098900A3 METHOD AND APPARATUS FOR SECURING A COMPUTER NETWORK 审中-公开
标题翻译：用于安全计算机网络的方法和装置
公开(公告)号：WO2006098900A3
公开(公告)日：2007-10-11
申请号：PCT/US2006007612
申请日：2006-03-02
申请人： TREND MICRO INC , LIANG YUNG-CHANG , KAKI SAID , CHEN YI-FEN
发明人： LIANG YUNG-CHANG , KAKI SAID , CHEN YI-FEN
IPC分类号： G06F11/00
CPC分类号： H04L63/1416 , H04L63/145 , H04L63/1483 , H04L63/16
摘要： In one embodiment, a network security appliance (100) includes a logic circuit (530), a network processing unit (110), and a general purpose processor (510) to protect a computer network from malicious codes, unauthorized data packets, and other network security threats. The logic circuit (530) may include one or more programmable logic devices configured to scan incoming data packets at different layers of a multi-layer protocol, such as the OSI-seven layer model. The network processing unit (110) may work in conjunction with the logic circuit (530) to perform protocol parsing, to form higher layer data units from the data packets, and other network communications-related tasks. The general purpose processor (510) may execute software for performing functions not available from the logic circuit or the network processing unit. For example, the general purpose processor (510) may remove malicious code from infected data or perform malicious code scanning on data when the logic circuit (530) is not configured to do so.
摘要翻译：在一个实施例中，网络安全设备（100）包括逻辑电路（530），网络处理单元（110）和通用处理器（510），用于保护计算机网络免受恶意代码，未经授权的数据分组和其他网络安全威胁。逻辑电路（530）可以包括被配置为扫描诸如OSI-7层模型的多层协议的不同层处的输入数据分组的一个或多个可编程逻辑器件。网络处理单元（110）可以与逻辑电路（530）一起工作以执行协议解析，以从数据分组形成更高层数据单元以及其他与网络通信有关的任务。通用处理器（510）可以执行用于执行逻辑电路或网络处理单元不可用的功能的软件。例如，当逻辑电路（530）未配置为这样做时，通用处理器（510）可以从感染的数据中去除恶意代码或对数据执行恶意代码扫描。

6. 发明申请

WO2005109366A2 METHOD AND APPARATUS FOR CONTROLLING TRAFFIC IN A COMPUTER NETWORK 审中-公开
标题翻译：用于控制计算机网络中的交通的方法和装置
公开(公告)号：WO2005109366A2
公开(公告)日：2005-11-17
申请号：PCT/US2005005279
申请日：2005-02-18
申请人： TREND MICRO INC , CHEN YI-FEN , LIANG YUNG-CHANG , LIAO EN-YI
发明人： CHEN YI-FEN , LIANG YUNG-CHANG , LIAO EN-YI
IPC分类号： G01R31/08 , G06F11/00 , G08C15/00 , H04J1/16 , H04J3/14 , H04J3/16 , H04J3/22 , H04L1/00 , H04L12/26 , H04L12/28 , H04L12/56 , H04L29/06
CPC分类号： H04L63/145
摘要： In one embodiment, a technique for controlling traffic in a computer network (700) includes modifying a packet generated by a first computer (710). The packet may be intended for a second computer, but is modified to be redirected to a third computer (740). The packet may be processed in the third computer (740) prior to being forwarded from the third computer to the second computer. The packet may be scanned for viruses at the third computer (740), for example. Among other advantages, the technique allows for scanning of early generated packets, redirection of selected packets, and routing of packets from a computer in general.
摘要翻译：在一个实施例中，一种用于控制计算机网络（700）中的业务的技术包括修改由第一计算机（710）产生的分组。分组可以用于第二计算机，但是被修改为被重定向到第三计算机（740）。在从第三计算机转发到第二计算机之前，分组可以在第三计算机（740）中被处理。例如，可以在第三计算机（740）处扫描分组的病毒。除了其他优点之外，该技术允许早期生成的分组的扫描，所选分组的重定向以及一般来说来自计算机的分组的路由。

7. 发明申请

WO2005022441A3 NETWORK TRAFFIC MANAGEMENT BY A VIRUS/WORM MONITOR IN A DISTRIBUTED NETWORK 审中-公开
标题翻译：分布式网络病毒/蠕虫监测网络流量管理
公开(公告)号：WO2005022441A3
公开(公告)日：2005-04-14
申请号：PCT/IB2004002782
申请日：2004-08-27
申请人： TREND MICRO INC , LIANG YUNG CHANG , CHEN YI FEN
发明人： LIANG YUNG CHANG , CHEN YI FEN
IPC分类号： G06F11/30 , G06F21/00 , H04L29/06 , H04L29/08 , G06F1/00
CPC分类号： H04L63/145 , G06F21/56 , G06F21/566 , H04L29/06 , H04L63/0218 , H04L63/0227 , H04L63/108 , H04L63/1408 , H04L63/20 , H04L67/34 , H04L69/329
摘要： A network level virus monitoring system capable of monitoring a flow of network traffic in any of a number of inspection modes depending upon the particular needs of a system administrator. The system includes a network virus sensor self registration module coupled to a network virus/worm sensor arranged to automatically self register the associated network virus/worm sensor. The monitoring provides an early warning of a virus attack thereby facilitating quarantine procedures directed at containing a virus outbreak. By providing such an early warning, the network virus monitor reduces the number of computers ultimately affected by the virus attack resulting in a concomitant reduction in both the cost of repair to the system and the amount of downtime. In this way, the inventive network virus monitor provides a great improvement in system uptime and reduction in system losses.
摘要翻译：网络级病毒监测系统，能够根据系统管理员的特定需求，以多种检测模式中的任意一种监测网络流量。该系统包括耦合到网络病毒/蠕虫传感器的网络病毒传感器自注册模块，该网络病毒/蠕虫传感器被设置为自动注册相关联的网络病毒/蠕虫传感器。监控提供病毒攻击的早期预警，从而促进针对遏制病毒爆发的隔离程序。通过提供这样的预警，网络病毒监视器减少了最终受到病毒攻击影响的计算机数量，从而伴随着对系统修复成本和停机时间的减少。这样，本发明的网络病毒监视器在系统正常运行时间和减少系统损失方面提供了很大的改进。

8. 发明申请

WO2005022440A8 NETWORK ISOLATION TECHNIQUES SUITABLE FOR VIRUS PROTECTION 审中-公开
标题翻译：网络隔离技术适用于病毒保护
公开(公告)号：WO2005022440A8
公开(公告)日：2005-04-14
申请号：PCT/IB2004002781
申请日：2004-08-27
申请人： TREND MICRO INC , LIANG YUNG CHANG , CHEN YI FEN
发明人： LIANG YUNG CHANG , CHEN YI FEN
IPC分类号： G06F11/30 , G06F21/00 , H04L29/06 , H04L29/08
CPC分类号： H04L63/145 , G06F21/56 , G06F21/566 , H04L29/06 , H04L63/0218 , H04L63/0227 , H04L63/108 , H04L63/1408 , H04L63/20 , H04L67/34 , H04L69/329
摘要： In a distributed network having a number of server computers and associated client devices, method of isolating infected client devices from uninfected client devices is described. The method is carried out by correlating network related virus infection information, determining if a virus outbreak has occurred based on the correlated information, isolating infected client devices from uninfected client devices when the virus outbreak is confirmed, monitoring all data packets in the network for the virus, identifying a packet type associated with the virus, and blocking only the identified packet type.
摘要翻译：在具有多个服务器计算机和相关联的客户端设备的分布式网络中，描述了将感染的客户端设备与未感染的客户端设备隔离的方法。该方法是通过将网络相关的病毒感染信息相关联，根据相关信息确定是否发生病毒爆发，在病毒爆发确认时将受感染的客户端设备与未感染的客户端设备隔离，监控网络中的所有数据包，病毒，识别与病毒相关联的分组类型，并且仅阻塞所识别的分组类型。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式