专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明授权

US07249191B1 Transparent bridge that terminates TCP connections 有权
标题翻译：透明网桥，终止TCP连接
公开(公告)号：US07249191B1
公开(公告)日：2007-07-24
申请号：US10251101
申请日：2002-09-20
申请人： Paul Hutchison , Cameron Smith , Vilis Ositis
发明人： Paul Hutchison , Cameron Smith , Vilis Ositis
IPC分类号： G06F15/16
CPC分类号： H04L29/1249 , H04L29/12028 , H04L61/103 , H04L61/256 , H04L67/06 , H04L69/16 , H04L69/163
摘要： A multi-application transparent platform intercepts an incoming application file communicated from a source across a first TCP connection by terminating the first TCP connection on the multi-application transparent platform and supplying the application file to an application program. The application file is received onto the platform in the form of multiple incoming Ethernet frames. The application layer program analyzes the application file and identifies characteristics of the application file, such as virus content, that are not apparent in the individual Ethernet frames that carried the application file over the first TCP connection. The platform resends the application file over a second TCP connection in outgoing frames having the same IP addresses and Ethernet MAC addresses as the incoming frames. The platform can be inserted into a running network without reconfiguring devices on the network.
摘要翻译：多应用透明平台通过终止多应用透明平台上的第一TCP连接并将应用文件提供给应用程序来拦截通过第一TCP连接从源传送的传入应用文件。应用文件以多个传入的以太网帧的形式被接收到平台上。应用层程序分析应用程序文件，并识别通过第一个TCP连接承载应用程序文件的各个以太网帧中不明显的应用程序文件（如病毒内容）的特征。该平台通过第二个TCP连接在具有与传入帧相同的IP地址和以太网MAC地址的输出帧中重新发送应用程序文件。该平台可以插入到正在运行的网络中，而无需重新配置网络上的设备。

32. 发明授权

US09525696B2 Systems and methods for processing data flows 有权
公开(公告)号：US09525696B2
公开(公告)日：2016-12-20
申请号：US13416647
申请日：2012-03-09
申请人： Harsh Kapoor , Moisey Akerman , Stephen D. Justus , John C. Ferguson , Yevgeny Korsunsky , Paul S. Gallo , Charles Ching Lee , Timothy M. Martin , Chunsheng Fu , Weidong Xu
发明人： Harsh Kapoor , Moisey Akerman , Stephen D. Justus , John C. Ferguson , Yevgeny Korsunsky , Paul S. Gallo , Charles Ching Lee , Timothy M. Martin , Chunsheng Fu , Weidong Xu
IPC分类号： G06F17/00 , H04L29/06 , G06N3/08
CPC分类号： H04L63/1425 , G06N3/088 , H04L41/0866 , H04L63/1416 , H04L63/20 , H04L67/306
摘要： A flow processing facility, which uses a set of artificial neurons for pattern recognition, such as a self-organizing map, in order to provide security and protection to a computer or computer system supports unified threat management based at least in part on patterns relevant to a variety of types of threats that relate to computer systems, including computer networks. Flow processing for switching, security, and other network applications, including a facility that processes a data flow to address patterns relevant to a variety of conditions are directed at internal network security, virtualization, and web connection security. A flow processing facility for inspecting payloads of network traffic packets detects security threats and intrusions across accessible layers of the IP-stack by applying content matching and behavioral anomaly detection techniques based on regular expression matching and self-organizing maps. Exposing threats and intrusions within packet payload at or near real-time rates enhances network security from both external and internal sources while ensuring security policy is rigorously applied to data and system resources. Intrusion Detection and Protection (IDP) is provided by a flow processing facility that processes a data flow to address patterns relevant to a variety of types of network and data integrity threats that relate to computer systems, including computer networks.

33. 发明授权

US09305208B2 System and method for recognizing offensive images 有权
标题翻译：用于识别令人反感的图像的系统和方法
公开(公告)号：US09305208B2
公开(公告)日：2016-04-05
申请号：US13740136
申请日：2013-01-11
申请人： Blue Coat Systems, Inc.
发明人： Jonathan Jeremiah Dinerstein , Joshua David Dinerstein
IPC分类号： G06K9/00
CPC分类号： G06K9/00369 , G06K9/00234 , G06K9/00362 , G06K9/6212 , G06T7/90
摘要： According to one aspect, a method for categorizing at least one image includes obtaining the at least one image and mapping the at least one image to at least a first grid. The first grid is a two-dimensional grid that includes a plurality of cells. The method also includes characterizing the first grid, wherein categorizing the first grid includes determining whether the first grid is indicative of an offensive characteristic, and identifying the at least one image as offensive when it is determined that the first grid is indicative of the offensive characteristic. When it is determined that the first grid is not indicative of the offensive characteristic, the at least one image is identified as not offensive.
摘要翻译：根据一个方面，一种用于对至少一个图像进行分类的方法包括获得所述至少一个图像并将所述至少一个图像映射到至少第一格子。第一格是包括多个单元的二维网格。该方法还包括表征第一网格，其中分类第一网格包括确定第一网格是否指示攻击性特征，以及当确定第一网格指示攻击特征时，将该至少一个图像识别为令人反感的。当确定第一格子不指示攻击特征时，至少一个图像被识别为不冒犯。

34. 发明授权

US09237068B2 System and method for distributing heuristics to network intermediary devices 有权
标题翻译：向网络中介设备分发启发式的系统和方法
公开(公告)号：US09237068B2
公开(公告)日：2016-01-12
申请号：US13017027
申请日：2011-01-30
申请人： Kevin Porter , Thomas J. Kelly , Marcin Lukasz Lizon , Darrell Long , Eric Maki , Kim Tremblay , Jennifer Vance
发明人： Kevin Porter , Thomas J. Kelly , Marcin Lukasz Lizon , Darrell Long , Eric Maki , Kim Tremblay , Jennifer Vance
IPC分类号： H04L12/24
CPC分类号： H04L41/0893 , H04L41/082 , H04L41/5054 , H04L67/2852
摘要： A policy distribution server provides, on a subscription basis, policy updates to effect desired behaviors of network intermediary devices. The policy updates may specify caching policies, and may in some instances, include instructions for data collection by the network intermediary devices. Data collected in accordance with such instructions may be used to inform future policy updates distributed to the network intermediary devices.
摘要翻译：策略分发服务器在订阅的基础上提供策略更新以实现网络中间设备的期望行为。策略更新可以指定高速缓存策略，并且在某些情况下可以包括由网络中间设备收集数据的指令。根据这样的指令收集的数据可用于通知分发给网络中间设备的未来策略更新。

35. 发明授权

US08826411B2 Client-side extensions for use in connection with HTTP proxy policy enforcement 有权
标题翻译：用于与HTTP代理策略执行相关联的客户端扩展
公开(公告)号：US08826411B2
公开(公告)日：2014-09-02
申请号：US11376917
申请日：2006-03-15
申请人： Doug Moen , Alex Campbell
发明人： Doug Moen , Alex Campbell
IPC分类号： H04L29/06
CPC分类号： H04L63/0281 , H04L63/0227 , H04L63/102 , H04L63/1408 , H04L63/168 , H04L67/2804 , H04L67/2842 , H04L67/34
摘要： A Web browser is configured to participate with a proxy server in enforcing traffic policies within a computer network. This may include modifying the Web browser to report contextual information regarding requests for Web documents to the proxy server and/or causing the Web browser to report information concerning Web documents requested through the proxy server to the proxy server.
摘要翻译： Web浏览器被配置为参与代理服务器来实施计算机网络内的流量策略。这可以包括修改Web浏览器以将有关Web文档的请求的上下文信息报告给代理服务器和/或使Web浏览器向代理服务器报告关于通过代理服务器请求的Web文档的信息。

36. 发明授权

US08793390B2 Systems and methods for protocol detection in a proxy 有权
标题翻译：代理中协议检测的系统和方法
公开(公告)号：US08793390B2
公开(公告)日：2014-07-29
申请号：US11419953
申请日：2006-05-23
申请人： Jamshid Mahdavi , Ron Frederick , Srinath Joshi
发明人： Jamshid Mahdavi , Ron Frederick , Srinath Joshi
IPC分类号： G06F15/16 , H04L9/32
CPC分类号： H04L63/0281 , H04L63/029 , H04L69/18
摘要： Systems, methods, and computer products for detecting protocols in a network proxy are provided. Protocol detection includes receiving from a first computer a request for connection to a second computer, the request conforming to a first protocol; establishing a connection with at least one of the first computer and the second computer; receiving data from at least one of the first computer and the second computer, wherein the data conforms to a second protocol; and performing protocol detection on the data.
摘要翻译：提供了用于检测网络代理中的协议的系统，方法和计算机产品。协议检测包括从第一计算机接收与第二计算机连接的请求，所述请求符合第一协议; 建立与第一计算机和第二计算机中的至少一个的连接; 从所述第一计算机和所述第二计算机中的至少一个接收数据，其中所述数据符合第二协议; 并对数据执行协议检测。

37. 发明授权

US08793361B1 Traffic synchronization across multiple devices in wide area network topologies 有权
标题翻译：广域网拓扑中的多个设备的流量同步
公开(公告)号：US08793361B1
公开(公告)日：2014-07-29
申请号：US11479371
申请日：2006-06-30
申请人： Guy Riddle
发明人： Guy Riddle
IPC分类号： G06F15/173
CPC分类号： H04L47/2441 , H04L47/193 , H04L47/22 , H04L47/2408 , H04L47/27
摘要： An exemplary embodiment provides for a method for use in a network device operative to facilitate classification of data flows in a multipath network topology by intelligently mirroring one or more packets of the data flows to a set of cooperating network devices. The method, in one implementation, can involve tracking asymmetric data flows and synchronizing at least portions of the asymmetric data flows between a plurality of network devices to facilitate classification and other operations in multipath network topologies. In one implementation, the present invention allows a plurality of network devices, each disposed on the boundaries of an autonomous system (such as an ISP network) to communicate enough information about data flows encountered at each of the network devices to enable more accurate data flow classification. Since mirrored traffic may affect available bandwidth for regular network traffic, certain implementations of the invention include optimization directed to reducing the amount of mirrored traffic between network devices.
摘要翻译：示例性实施例提供了一种在网络设备中使用的方法，其可操作以便于通过智能地将数据流的一个或多个分组镜像到一组协作网络设备来促进多路径网络拓扑中的数据流的分类。在一个实现中，该方法可以涉及跟踪非对称数据流并使多个网络设备之间的非对称数据流的至少部分同步，以便于多径网络拓扑中的分类和其他操作。在一个实施方式中，本发明允许多个网络设备（每个设置在自治系统（例如ISP网络）的边界上）传送关于在每个网络设备处遇到的数据流的足够信息，以实现更准确的数据流分类。由于镜像的流量可能影响常规网络流量的可用带宽，本发明的某些实施方案包括针对减少网络设备之间的镜像流量的量的优化。

38. 发明授权

US08547972B2 Bypass mechanism for virtual computing infrastructures 有权
标题翻译：虚拟计算基础设施的旁路机制
公开(公告)号：US08547972B2
公开(公告)日：2013-10-01
申请号：US13016890
申请日：2011-01-28
申请人： Jamshid Mahdavi , Greg Veres
发明人： Jamshid Mahdavi , Greg Veres
IPC分类号： H04L12/28
CPC分类号： G06F9/455 , G06F2009/45595 , H04L12/6418
摘要： In accordance with one embodiment of the present disclosure, a system includes one or more computer systems including a memory, one or more processors, and a bypass switch with an open position and a closed position. The one or more computer systems further include computer-executable program code. The computer-executable program code includes one or more virtual machines modules including computer-executable instructions configured, when executed, to cause the one or more processors to implement one or more virtual machines that host one or more guest operating systems and one or more applications. The computer-executable program code further includes a virtual bypass switch module including computer-executable instructions configured, when executed, to cause the one or more processors to, responsive to the availability of the one or more applications, forward packets received on the first physical network interface to at least one of the one or more virtual machines.
摘要翻译：根据本公开的一个实施例，系统包括一个或多个计算机系统，包括存储器，一个或多个处理器以及具有打开位置和关闭位置的旁路开关。一个或多个计算机系统还包括计算机可执行程序代码。计算机可执行程序代码包括一个或多个虚拟机模块，其包括计算机可执行指令，所述计算机可执行指令在执行时被配置为使所述一个或多个处理器实现托管一个或多个客户操作系统和一个或多个应用程序的一个或多个虚拟机。计算机可执行程序代码还包括虚拟旁路交换机模块，其包括计算机可执行指令，所述计算机可执行指令在被执行时被配置为使所述一个或多个处理器响应于所述一个或多个应用的可用性转发在所述第一物理网络接口连接到所述一个或多个虚拟机中的至少一个。

39. 发明申请

US20130080611A1 Managing Network Content 有权
标题翻译：管理网络内容
公开(公告)号：US20130080611A1
公开(公告)日：2013-03-28
申请号：US13240469
申请日：2011-09-22
申请人： Qing Li , Ronald Andrew Frederick
发明人： Qing Li , Ronald Andrew Frederick
IPC分类号： G06F15/173
CPC分类号： H04N21/222 , H04L67/2842 , H04N21/23106
摘要： In one embodiment, downloading one or more content items; determining which ones of the one or more content items are popular among a plurality of users; categorizing the one or more content items into one or more groups, wherein each group comprises one or more related content items; associating one or more keywords with each group, wherein the one or more keywords describe content of the one or more related content items in the corresponding group; and caching the one or more content items categorized into the one or more groups and the one or more keywords associated with each group.
摘要翻译：在一个实施例中，下载一个或多个内容项; 确定所述一个或多个内容项中的哪一个在多个用户中是流行的; 将一个或多个内容项目分类为一个或多个组，其中每个组包括一个或多个相关内容项; 将一个或多个关键字与每个组相关联，其中一个或多个关键字描述相应组中的一个或多个相关内容项的内容; 以及缓存分类为所述一个或多个组的所述一个或多个内容项以及与每个组相关联的所述一个或多个关键字。

40. 发明授权

US08316446B1 Methods and apparatus for blocking unwanted software downloads 有权
标题翻译：阻止不必要的软件下载的方法和设备
公开(公告)号：US08316446B1
公开(公告)日：2012-11-20
申请号：US11112033
申请日：2005-04-22
申请人： Alexander Wade Campbell , Lee Thomas Dolsen , Vilis Ositis , Cameron Charles Smith
发明人： Alexander Wade Campbell , Lee Thomas Dolsen , Vilis Ositis , Cameron Charles Smith
IPC分类号： G06F11/00
CPC分类号： H04L63/0263 , G06F21/554 , G06T1/0021 , G06T1/0071 , H04L63/0245 , H04L63/0281 , H04L63/145 , H04L63/20 , H04L67/02
摘要： Methods and systems for blocking unwanted software downloads within a network. Such methods may thereby prevent (i) downloads of spyware from one or more identified locations, and/or (ii) certain outbound communications from the network and/or may also permit software downloads only from specified locations. In general, the policies are defined by rules specified by a network administrator or other user.
摘要翻译：阻止网络中不需要的软件下载的方法和系统。这样的方法可以因此防止（i）从一个或多个识别的位置下载间谍软件，和/或（ii）来自网络的某些出站通信和/或也可以仅允许来自指定位置的软件下载。一般来说，策略由网络管理员或其他用户指定的规则定义。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式