专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2019099879A1 SYSTEMS AND METHODS FOR MANAGING ENDPOINTS AND SECURITY POLICIES IN A NETWORKED ENVIRONMENT 审中-公开
公开(公告)号：WO2019099879A1
公开(公告)日：2019-05-23
申请号：PCT/US2018/061586
申请日：2018-11-16
申请人： SHIELDX NETWORKS, INC.
发明人： AHUJA, Ratinder Paul Singh , NEDBAL, Manuel , GAITONDE, Jitendra , PARKER, John , AHLUWALIA, Manoj , HEGDE, Damodar , LIBERMAN, Neil , SREEDHAR, Rajiv
IPC分类号： H04L29/06 , H04L12/24
CPC分类号： H04L63/0263 , H04L63/101 , H04L63/20 , H04L67/10 , H04L69/16
摘要： Systems, methods, and apparatuses enable deploying and executing a security policy on endpoints in a network. In an embodiment, a security orchestrator determines a set of endpoints in a network and determines transformed endpoints from the determined set of endpoints through an endpoint transformation process. The security orchestrator determines a connectivity vector for at least a first transformed endpoint and a second transformed endpoint, where the connectivity vector includes properties associated with the corresponding transformed endpoint. Using the properties from the connectivity vector of the first transformed endpoint, a security policy is generated and deployed to the first transformed endpoint. Based on a comparison of the connectivity vectors of the first and second transformed endpoints indicating a similarity between the first and second transformed endpoints, the security policy is further deployed to the second transformed endpoint.

2. 发明申请

WO2018229110A1 COMMUNICATION APPARATUS, METHOD AND SOFTWARE 审中-公开
公开(公告)号：WO2018229110A1
公开(公告)日：2018-12-20
申请号：PCT/EP2018/065629
申请日：2018-06-13
申请人： NOKIA SOLUTIONS AND NETWORKS OY
发明人： HOLTMANNS, Silke , OLIVER, Ian Justin , MICHE, Yoan Jean Claude , KALLIOLA, Aapo
IPC分类号： G06F21/53 , G06F21/55 , H04L29/06
CPC分类号： G06F21/53 , G06F21/554 , H04L63/0263 , H04L63/1425
摘要： A method comprising: receiving from a node of a communication system, at least part of one or more data packets received at the node from an interconnection network; providing the at least part of one or more data packets to a virtualised environment comprising one or more virtualised nodes of a communication system to determine a threat level associated with the at least part of one or more data packets; and based on the determined threat level, transmitting information for controlling the node.

3. 发明申请

WO2018148058A1 NETWORK APPLICATION SECURITY POLICY ENFORCEMENT 审中-公开
公开(公告)号：WO2018148058A1
公开(公告)日：2018-08-16
申请号：PCT/US2018/015902
申请日：2018-01-30
申请人： EDGEWISE NETWORKS, INC.
发明人： SMITH, Peter , SVERDLOVE, Harry
IPC分类号： H04L29/06
CPC分类号： H04L63/20 , G06F21/606 , G06F21/6218 , H04L63/0263 , H04L63/102 , H04L63/30
摘要： A system validates the establishment and/or continuation of a connection between two applications over a network using a three-stage process: (1) a local security agent on the same source system as the source application validates the connection against a set of policies stored locally on the source system; (2) a local security agent on the same destination system as the destination application validates the connection against a set of policies stored locally on the destination system; and (3) a reconciliation engine, after receiving connection and application state information from both the source and destination local security agents, validates the connection against a master set of policies. The connection is allowed or blocked depending on the outcome of the three-stage validation. This system protects against policy violations that are not detected by traditional systems without requiring alterations to the source and destination applications or the network traffic between them.

4. 发明申请

WO2018103825A1 SYSTEM AND METHOD FOR LOW MEMORY AND LOW TRAFFIC OVERHEAD HEAVY-HITTER DETECTION 审中-公开
公开(公告)号：WO2018103825A1
公开(公告)日：2018-06-14
申请号：PCT/EP2016/079921
申请日：2016-12-06
申请人： HUAWEI TECHNOLOGIES CO., LTD. , CHOUVARDAS, Symeon
发明人： CHOUVARDAS, Symeon , MAGGI, Lorenzo , LEGUAY, Jeremie , DRAIEF, Moez , PARIS, Stefano
IPC分类号： H04L12/26 , H04L29/06
CPC分类号： H04L63/1425 , H04L43/028 , H04L43/12 , H04L43/16 , H04L63/0263
摘要： The present invention relates to a system and method for identifying in terms of identity and size a plurality of heavy-hitter (HH) flows amongst data packet flows in a communication network. At each routing device, the data packet flows are filtered at the ingress of an adjustable sketch-based table according to an adjustable filtering rule, and a sketch-based counter is provided to detect candidate HH flows amongst the filtered data packet flows, the candidate HH flows being the actual HH flows together with false positives. In combination, a forwarding plane counter is provided at each routing device to collect forwarding plane counters from aggregates of data packet flows according to an adjustable forwarding plane monitoring rule. A controller iteratively adjusts the respective rules monitoring rules and estimates the identification of each HH flow based on the candidate HH flows and the forwarding plane counters, until reaching a final estimation.

5. 发明申请

WO2018081051A1 REAL-TIME MALWARE DETECTION 审中-公开
标题翻译：实时恶意软件检测
公开(公告)号：WO2018081051A1
公开(公告)日：2018-05-03
申请号：PCT/US2017/057984
申请日：2017-10-24
申请人： REDBERRY SYSTEMS, INC.
发明人： BAKTHAVATCHALAM, Madhavan , KHANNA, Sandeep , SRINIVASAN, Varadarajan
IPC分类号： H04L29/06
CPC分类号： G06F21/567 , G06F21/566 , H04L63/0245 , H04L63/0263 , H04L63/1416 , H04L63/145
摘要： Upon receiving malware detection rules that are to be identified with respect to an input traffic stream, a rule database that requires less storage capacity than the malware detection rules is generated by substituting tokens for selected symbol strings within the malware detection rules. A compressed traffic stream is generated by substituting the tokens for instances of the selected symbol strings within the input traffic stream, and then compared with the rule database to determine whether the input traffic stream contains one or more symbol sequences that correspond to any of the malware detection rules.
摘要翻译：一旦接收到关于输入业务流要识别的恶意软件检测规则，则通过用标记替换令牌中的所选符号串来生成需要比恶意软件检测规则更少的存储容量的规则数据库恶意软件检测规则。通过将令牌替换为输入业务流内的所选符号串的实例来生成压缩业务流，然后将其与规则数据库进行比较以确定输入业务流是否包含对应于任何恶意软件的一个或多个符号序列检测规则。

6. 发明申请

WO2017112535A1 RULE-BASED NETWORK-THREAT DETECTION FOR ENCRYPTED COMMUNICATIONS 审中-公开
标题翻译：基于规则的加密通信网络威胁检测
公开(公告)号：WO2017112535A1
公开(公告)日：2017-06-29
申请号：PCT/US2016/067111
申请日：2016-12-16
申请人： CENTRIPETAL NETWORKS, INC.
发明人： AHN, David K. , MOORE, Sean , DISABELLO, Douglas M.
IPC分类号： H04L29/06
CPC分类号： H04L63/1425 , H04L61/1511 , H04L63/0227 , H04L63/0263 , H04L63/0281 , H04L63/1416 , H04L63/1441 , H04L63/20 , H04L69/22
摘要： A packet-filtering system configured to filter packets in accordance with packet-filtering rules may receive data indicating network-threat indicators and may configure the packet-filtering rules to cause the packet-filtering system to identify packets comprising unencrypted data, and packets comprising encrypted data. A portion of the unencrypted data may correspond to one or more of the network-threat indicators, and the packet-filtering rules may be configured to cause the packet-filtering system to determine, based on the portion of the unencrypted data, that the packets comprising encrypted data correspond to the one or more network-threat indicators.
摘要翻译：被配置为根据分组过滤规则过滤分组的分组过滤系统可以接收指示网络威胁指示符的数据，并且可以配置分组过滤规则以使得分组过滤系统识别分组包括未加密的数据和包含加密数据的分组。未加密数据的一部分可以对应于一个或多个网络威胁指示符，并且分组过滤规则可以被配置为使分组过滤系统基于未加密数据的一部分来确定分组包括加密数据对应于一个或多个网络威胁指示符。

7. 发明申请

WO2017108790A1 A DATA DRIVEN ORCHESTRATED NETWORK USING A LIGHT WEIGHT DISTRIBUTED SDN CONTROLLER 审中-公开
标题翻译：数据驱动的网络使用轻量级分布式SDN控制器
公开(公告)号：WO2017108790A1
公开(公告)日：2017-06-29
申请号：PCT/EP2016/081921
申请日：2016-12-20
申请人： SANCTUM NETWORKS LIMITED
发明人： SHAIKH, Nazneen , KRISHNAN, Murali , GULAWANI, Girish
IPC分类号： H04L12/24
CPC分类号： H04L63/0263 , H04L41/5074 , H04L63/10 , H04L63/1408 , H04L63/20
摘要： A computer implemented method for controlling a software defined network (SDN). The method comprising providing one or more client portals which are configured for facilitating users controlling networked devices. Generating configuration data based on input received from users via the client portals. Provising a master SDN controller for managing data flow control on the SDN network. The master SDN controller being operable to generate routing data for the networked devices. Generating by the master SDN controller a plurality of discrete co -controllers each associated with a particular end user. Each SDN co-controller including configuration data and routing data for an associated networked device. Dispatching the SDN co-controller by the master SDN controller to the networked devices associated with the respective end users for controlling thereof. Installing the SDN co-controller on the networked devices. Registering the installed SDN co-controllers with the master SDN controller for controlling the routing of data from the networked devices and for controlling the configuration of the networked devices.
摘要翻译：一种用于控制软件定义网络（SDN）的计算机实现的方法。该方法包括提供一个或多个客户端门户，其被配置为便于用户控制联网设备。根据通过客户端门户从用户接收的输入生成配置数据。提供一个主SDN控制器来管理SDN网络上的数据流控制。主SDN控制器可操作来生成联网设备的路由数据。由主SDN控制器生成多个分立的协同控制器，每个协同控制器与特定的最终用户相关联。每个SDN协同控制器包括相关联网设备的配置数据和路由数据。由主SDN控制器将SDN协同控制器分配给与各个最终用户相关联的联网设备，以便对其进行控制。在联网设备上安装SDN协同控制器。注册已安装的SDN协同控制器和主SDN控制器，以控制来自联网设备的数据路由以及控制联网设备的配置。

8. 发明申请

WO2017048340A1 METHOD AND APPARATUS FOR DETECTING SECURITY ANOMALIES IN A PUBLIC CLOUD ENVIRONMENT USING NETWORK ACTIVITY MONITORING, APPLICATION PROFILING, AND SELF-BUILDING HOST MAPPING 审中-公开
标题翻译：使用网络活动监控，应用程序配置和自建主机映射来检测公共云环境中的安全异常的方法和装置
公开(公告)号：WO2017048340A1
公开(公告)日：2017-03-23
申请号：PCT/US2016/038301
申请日：2016-06-20
申请人： SYMANTEC CORPORATION
发明人： MOHANTY, Shubhabrata , IYER, Sudha
IPC分类号： H04L29/06 , G06F21/55
CPC分类号： H04L63/1425 , G06F21/55 , H04L63/0263 , H04L63/14 , H04L63/1441 , H04L63/145
摘要： The disclosed computer-implemented method for detecting security anomalies in a public cloud environment using network activity monitoring, application profiling, and self-building host mapping may include (1) collecting host information that identifies (A) at least one communication channel that has previously facilitated communication between at least one host computing platform within a cloud computing environment and at least one additional computing platform and/or (B) at least one application that has previously run on the host computing platform, (2) monitoring network traffic involving the host computing platform, (3) detecting, while monitoring the network traffic, network activity that is inconsistent with the collected host information, and then (4) determining that the detected network activity represents a potential security threat within the cloud computing environment due at least in part to the detected network activity being inconsistent with the collected host information. Various other methods, systems, and computer-readable media are also disclosed.
摘要翻译：用于使用网络活动监视，应用程序分析和自建主机映射来检测公共云环境中的安全异常的公开的计算机实现的方法可以包括（1）收集标识（A）先前具有至少一个通信信道的主机信息促进云计算环境中的至少一个主机计算平台与至少一个附加计算平台之间的通信和/或（B）先前在主机计算平台上运行的至少一个应用程序，（2）监视涉及主机的网络流量（3）在监测网络流量的同时，检测与收集到的主机信息不一致的网络活动，然后（4）确定检测到的网络活动代表云计算环境中的潜在安全威胁，至少在检测到的网络活动的一部分与收集的主机信息不一致灰。还公开了各种其它方法，系统和计算机可读介质。

9. 发明申请

WO2017028513A1 一种部署安全访问控制策略的方法及装置审中-公开
公开(公告)号：WO2017028513A1
公开(公告)日：2017-02-23
申请号：PCT/CN2016/073810
申请日：2016-02-15
申请人：华为技术有限公司
发明人：刘春亮 , 贾海青 , 孙斗
IPC分类号： H04L29/06
CPC分类号： H04L63/0263 , G06F9/45558 , G06F2009/45587 , G06F2009/45595 , H04L29/06 , H04L63/10 , H04L63/20
摘要：本发明涉及网络安全领域，特别是涉及一种部署安全访问控制策略的方法及装置，用以解决现有技术中由于安全访问控制策略配置需要手动完成，使配置工作繁重、费时，且存在人为配置错误的可能性的问题。该方法为：云管理平台根据创建应用指令确定所需创建的应用采用的应用模板，以及对应应用模板的安全模板；云管理平台通知虚拟化平台根据应用模板为应用中的每一个应用组件创建对应的虚拟机，并获取虚拟化平台创建的每一个虚拟机的IP地址；云管理平台根据每一个虚拟机的IP地址，采用安全模板生成对应应用的一组安全访问控制策略；云管理平台下发一组安全访问控制策略至对应的防火墙。因此，实现了安全访问控制策略的自动部署。

10. 发明申请

WO2017025488A1 USING MULTIPLE LAYERS OF POLICY MANAGEMENT TO MANAGE RISK 审中-公开
标题翻译：使用多层政策管理来管理风险
公开(公告)号：WO2017025488A1
公开(公告)日：2017-02-16
申请号：PCT/EP2016/068824
申请日：2016-08-05
申请人： GLASSWALL (IP) LIMITED
发明人： HUTTON, Sam , SHIRK, Leon
IPC分类号： G06F21/51 , G06F21/56 , G06F21/64 , G06F17/30 , H04L29/06
CPC分类号： H04L63/1416 , G06F17/30109 , G06F21/51 , G06F21/564 , G06F21/565 , G06F21/64 , H04L63/0263 , H04L63/101 , H04L63/145 , H04L63/20
摘要： A system for processing a file using a file issue exclusion policy to manage risk is disclosed. If a file does not conform to a set of rules and would otherwise be quarantined, a file issue exclusion policy can be reviewed. If the file issue exclusion policy indicates that the reason why the file did not conform to the set of rules is acceptable, the file can be delivered to the recipient despite not conforming to the set of rules.
摘要翻译：公开了一种使用文件排除策略处理文件来管理风险的系统。如果文件不符合一组规则，否则将被隔离，则可以检查文件问题排除策略。如果文件发布排除策略指示文件不符合规则集的原因是可接受的，则尽管不符合规则集，文件可以传递给收件人。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式