专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08528088B2 Modeling and outlier detection in threat management system data 有权
标题翻译：威胁管理系统数据中的建模和异常值检测
公开(公告)号：US08528088B2
公开(公告)日：2013-09-03
申请号：US13116613
申请日：2011-05-26
申请人： Jeremy Wright , John Hogoboom , Chaim Spielman
发明人： Jeremy Wright , John Hogoboom , Chaim Spielman
IPC分类号： H04L29/06
CPC分类号： H04L63/1425 , G06F21/552 , H04L63/1416
摘要： Methods, systems, and computer-readable media for identifying potential threats on a network based on anomalous behavior in communication between endpoints are provided. Traffic data for a network is accumulated over some period of time. The traffic data is grouped by one or more keys, such as source IP address, and sets of metric values are calculated for the keys. A mixture distribution, such as a negative binomial mixture distribution, is fitted to each set of metric values, and outlying metric values are determined based on the mixture distribution(s). A list of outliers is then generated comprising key values having outlying metric values in one or more of the sets of metric values.
摘要翻译：提供了用于基于端点之间的通信中的异常行为来识别网络上的潜在威胁的方法，系统和计算机可读介质。网络的流量数据在一段时间内累积。交通数据由一个或多个键（例如源IP地址）分组，并且针对密钥计算度量值集合。混合分布，例如负二项式混合分布，适合于每组度量值，并且基于混合分布来确定偏离度量值。然后生成异常值列表，其包括在度量值集合中的一个或多个集合中具有超出度量值的密钥值。

2. 发明申请

US20120158975A1 Method and Apparatus for Detecting Network Protocols 审中-公开
标题翻译：用于检测网络协议的方法和装置
公开(公告)号：US20120158975A1
公开(公告)日：2012-06-21
申请号：US12968479
申请日：2010-12-15
申请人： John Hogoboom , David Gross
发明人： John Hogoboom , David Gross
IPC分类号： G06F15/16
CPC分类号： H04L69/22 , H04L63/0245 , H04L63/1416
摘要： A method and system for dynamic detection of network protocols are provided. Data is received from a device, wherein the data does not specifically identify a protocol for communication. The data is analyzed to determine a communication protocol associated with a connection. A response is transmitted to the device using the determined communication protocol.
摘要翻译：提供了一种用于动态检测网络协议的方法和系统。从设备接收数据，其中数据不具体识别用于通信的协议。分析数据以确定与连接相关联的通信协议。使用确定的通信协议将响应发送到设备。

3. 发明授权

US10038763B2 Method and apparatus for detecting network protocols 有权
公开(公告)号：US10038763B2
公开(公告)日：2018-07-31
申请号：US12968479
申请日：2010-12-15
申请人： John Hogoboom , David Gross
发明人： John Hogoboom , David Gross
IPC分类号： G06F15/16 , H04L29/06
CPC分类号： H04L69/22 , H04L63/0245 , H04L63/1416
摘要： A method and system for dynamic detection of network protocols are provided. Data is received from a device, wherein the data does not specifically identify a protocol for communication. The data is analyzed to determine a communication protocol associated with a connection. A response is transmitted to the device using the determined communication protocol.

4. 发明申请

US20120304288A1 Modeling and Outlier Detection in Threat Management System Data 有权
标题翻译：威胁管理系统数据建模与异常检测
公开(公告)号：US20120304288A1
公开(公告)日：2012-11-29
申请号：US13116613
申请日：2011-05-26
申请人： Jeremy Wright , John Hogoboom , Chaim Spielman
发明人： Jeremy Wright , John Hogoboom , Chaim Spielman
IPC分类号： G06F21/00 , G06F15/16
CPC分类号： H04L63/1425 , G06F21/552 , H04L63/1416
摘要： Methods, systems, and computer-readable media for identifying potential threats on a network based on anomalous behavior in communication between endpoints are provided. Traffic data for a network is accumulated over some period of time. The traffic data is grouped by one or more keys, such as source IP address, and sets of metric values are calculated for the keys. A mixture distribution, such as a negative binomial mixture distribution, is fitted to each set of metric values, and outlying metric values are determined based on the mixture distribution(s). A list of outliers is then generated comprising key values having outlying metric values in one or more of the sets of metric values.
摘要翻译：提供了用于基于端点之间的通信中的异常行为来识别网络上的潜在威胁的方法，系统和计算机可读介质。网络的流量数据在一段时间内累积。交通数据由一个或多个键（例如源IP地址）分组，并且针对密钥计算度量值集合。混合分布，例如负二项式混合分布，适合于每组度量值，并且基于混合分布来确定偏离度量值。然后生成异常值列表，其包括在度量值集合中的一个或多个集合中具有超出度量值的密钥值。

5. 发明申请

US20100154024A1 METHODS, APPLIANCES, AND COMPUTER PROGRAM PRODUCTS FOR CONTROLLING ACCESS TO A COMMUNICATION NETWORK BASED ON POLICY INFORMATION 审中-公开
标题翻译：基于政策信息控制通信网络的方法，设备和计算机程序产品
公开(公告)号：US20100154024A1
公开(公告)日：2010-06-17
申请号：US12334002
申请日：2008-12-12
申请人： James Boxmeyer , David Gross , John Hogoboom
发明人： James Boxmeyer , David Gross , John Hogoboom
IPC分类号： G06F21/00
CPC分类号： H04L63/102 , G06F21/85 , G06F2221/2137 , H04L63/108 , H04L63/20
摘要： A method of operating an appliance in a communication network includes receiving policy information associated with at least one network access account from a responsible party associated with the account, the policy information restricting and/or expanding allowable use of the communication network, and controlling access to the communication network based on the received policy information.
摘要翻译：在通信网络中操作设备的方法包括从与所述帐户相关联的负责方接收与至少一个网络接入帐户相关联的策略信息，所述策略信息限制和/或扩展所述通信网络的允许使用，以及控制对基于接收到的策略信息的通信网络。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式