专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08819115B2 Systems and methods for sampling management across multiple cores for HTML injection 有权
标题翻译：用于HTML注入的多个内核采样管理的系统和方法
公开(公告)号：US08819115B2
公开(公告)日：2014-08-26
申请号：US12645677
申请日：2009-12-23
申请人： Roy Rajan , Saravanakumar Annamalaisami
发明人： Roy Rajan , Saravanakumar Annamalaisami
IPC分类号： G06F15/16
CPC分类号： H04L67/10 , H04L67/02 , H04L67/2804 , H04L67/2819 , H04L67/288 , H04L67/325 , H04L67/42
摘要： A method for sampling management includes establishing, for a multi-core intermediary comprising a plurality of packet evaluation components executing on a corresponding plurality of cores, a frequency at which the multi-core intermediary intercepts a response transmitted from a server to a client and injects data into the intercepted response. For each of the plurality of packet evaluation components, an offset and a frequency based on a number of packet evaluation components in the plurality of packet evaluation components is established, a combination of the established frequencies substantially similar to the frequency established for the multi-core intermediary. One of the plurality of cores intercepts a response from the server to the client, at a time specified by the frequency and the offset. The packet evaluation component executing on the one of the plurality of cores injects data into the intercepted response.
摘要翻译：一种用于采样管理的方法包括：对于包含在相应多个核上执行的多个分组评估组件的多核心中介，建立多核中介拦截从服务器发送到客户端的响应并注入的频率数据进入截获的响应。对于多个分组评估组件中的每一个，建立基于多个分组评估组件中的分组评估分量的数量的偏移和频率，所建立的频率的组合与为多核建立的频率基本相似中介。多个核心中的一个在由频率和偏移指定的时间内截获从服务器到客户端的响应。在多个核心中的一个上执行的分组评估组件将数据注入被截获的响应中。

2. 发明申请

US20110153839A1 SYSTEMS AND METHODS FOR SERVER SURGE PROTECTION IN A MULTI-CORE SYSTEM 有权
标题翻译：用于多核系统中的服务器防护的系统和方法
公开(公告)号：US20110153839A1
公开(公告)日：2011-06-23
申请号：US12645803
申请日：2009-12-23
申请人： Roy Rajan , Saravanakumar Annamalaisami
发明人： Roy Rajan , Saravanakumar Annamalaisami
IPC分类号： G06F15/16
CPC分类号： H04L47/32 , H04L67/1002 , H04L67/1008 , H04L67/1029 , H04L69/16
摘要： The present application is directed towards systems and methods for providing connection surge protection to one or more servers by an intermediary multi-core system. A packet processing engine of a multi-core device deployed as an intermediary between a plurality of clients and one or more servers determines an estimated number of total pending requests received by all packet processing engines based on a value of a local counter of received requests, the total number of pending requests received by all other packet processing engines at a last predetermined interval, and a rate of change of the total number of pending requests received by all other packet processing engines multiplied by the time since the last predetermined interval. The packet processing engine applies a surge protection policy to received pending requests responsive to the determined estimated number of total pending requests.
摘要翻译：本申请涉及用于通过中间多核系统向一个或多个服务器提供连接浪涌保护的系统和方法。作为在多个客户机和一个或多个服务器之间的中介部署的多核设备的分组处理引擎，基于接收到的请求的本地计数器的值来确定所有分组处理引擎接收的总待决请求的估计数量，所有其他分组处理引擎以最后一个预定间隔接收到的未决请求的总数，以及所有其他分组处理引擎所接收的待处理请求总数乘以自上一个预定间隔以来的时间的变化率。分组处理引擎响应于所确定的总待决请求的估计数量，将接收的未决请求应用浪涌保护策略。

3. 发明申请

US20110131654A1 SYSTEMS AND METHODS FOR AGGRESSIVE WINDOW PROBING 有权
标题翻译：用于爬行窗口探测的系统和方法
公开(公告)号：US20110131654A1
公开(公告)日：2011-06-02
申请号：US12627534
申请日：2009-11-30
申请人： Varun Taneja , Mahesh Mylarappa , Saravanakumar Annamalaisami
发明人： Varun Taneja , Mahesh Mylarappa , Saravanakumar Annamalaisami
IPC分类号： G06F21/00 , G06F15/173
CPC分类号： H04L67/141 , H04L63/1416 , H04L63/1441 , H04L63/1458 , H04L69/16 , H04L69/163
摘要： The present application is directed towards systems and methods for aggressively probing a client side connection to determine and counteract a malicious window size attack or similar behavior from a malfunctioning client. The solution described herein detects when a connection may be under malicious attach via improper or unusual window size settings. Responsive to the detection, the solution described herein will setup probes that determine whether or not the client is malicious and does so within an aggressive time period to avoid the tying up of processing cycles, transport layer sockets and buffers, and other resources of the sender.
摘要翻译：本申请涉及用于积极探测客户端连接以确定和抵消来自故障客户端的恶意窗口大小攻击或类似行为的系统和方法。本文描述的解决方案通过不正确或异常的窗口大小设置来检测连接是否可能处于恶意附着状态。响应于检测，本文所述的解决方案将建立探测器，其确定客户端是否是恶意的并且在激进的时间段内这样做以避免处理周期，传输层套接字和缓冲器的绑定以及发送者的其他资源。

4. 发明授权

US07924884B2 Performance logging using relative differentials and skip recording 有权
标题翻译：使用相对差分和跳过记录的性能记录
公开(公告)号：US07924884B2
公开(公告)日：2011-04-12
申请号：US11312816
申请日：2005-12-20
申请人： Kailash Kailash , Saravanakumar Annamalaisami
发明人： Kailash Kailash , Saravanakumar Annamalaisami
IPC分类号： H04J3/00
CPC分类号： H04L43/024
摘要： The present invention is directed towards “skip” and “differential” recording techniques for recording values of network parameter to a log in a lossless manner while reducing storage resources used to record such values. The counter monitor of the present invention monitors and records values of counters at time intervals to generate a counter log provided via temporary or permanent storage. The counter monitor compares a reading of the value of the counter to a previously obtained value of the counter. If the value of the counter has not changed, the counter monitor records only the timestamp to the counter log, thereby “skipping” the recording of the unchanged value. If there is any change in the value of the counter, then the change in value of the counter, i.e., a “differential” value, along with the timestamp is stored in the counters log. To further reduce storage resource usage, the counter monitor also stores changes to the timestamps as differential changes in time values.
摘要翻译：本发明涉及用于以无损耗方式将网络参数的值记录到日志的“跳过”和“差分”记录技术，同时减少用于记录这些值的存储资源。本发明的计数器监视器以时间间隔监视和记录计数器的值，以产生经由临时或永久存储提供的计数器日志。计数器监视器将计数器的值的读数与先前获得的计数器的值进行比较。如果计数器的值没有改变，则计数器监视器将时间戳记录到计数器日志中，从而“跳过”不变值的记录。如果计数器的值有任何变化，则计数器值的变化，即“差分”值以及时间戳存储在计数器日志中。为了进一步减少存储资源的使用，计数器监视器还将时间戳的变化存储为时间值的差异变化。

5. 发明申请

US20070140301A1 Performance logging using relative differentials and skip recording 有权
标题翻译：使用相对差分和跳过记录的性能记录
公开(公告)号：US20070140301A1
公开(公告)日：2007-06-21
申请号：US11312816
申请日：2005-12-20
申请人： Kailash Kailash , Saravanakumar Annamalaisami
发明人： Kailash Kailash , Saravanakumar Annamalaisami
IPC分类号： H04J3/00
CPC分类号： H04L43/024
摘要： The present invention is directed towards “skip” and “differential” recording techniques for recording values of network parameter to a log in a lossless manner while reducing storage resources used to record such values. The counter monitor of the present invention monitors and records values of counters at time intervals to generate a counter log provided via temporary or permanent storage. The counter monitor compares a reading of the value of the counter to a previously obtained value of the counter. If the value of the counter has not changed, the counter monitor records only the timestamp to the counter log, thereby “skipping” the recording of the unchanged value. If there is any change in the value of the counter, then the change in value of the counter, i.e., a “differential” value, along with the timestamp is stored in the counters log. To further reduce storage resource usage, the counter monitor also stores changes to the timestamps as differential changes in time values.
摘要翻译：本发明涉及用于以无损耗方式将网络参数的值记录到日志的“跳过”和“差分”记录技术，同时减少用于记录这些值的存储资源。本发明的计数器监视器以时间间隔监视和记录计数器的值，以产生经由临时或永久存储提供的计数器日志。计数器监视器将计数器的值的读数与先前获得的计数器的值进行比较。如果计数器的值没有改变，则计数器监视器将时间戳记录到计数器日志中，从而“跳过”不变值的记录。如果计数器的值有任何变化，则计数器值的变化，即“差分”值以及时间戳存储在计数器日志中。为了进一步减少存储资源的使用，计数器监视器还将时间戳的变化存储为时间值的差异变化。

6. 发明授权

US08875290B2 Systems and methods for aggressive window probing 有权
标题翻译：积极的窗口探测的系统和方法
公开(公告)号：US08875290B2
公开(公告)日：2014-10-28
申请号：US13769425
申请日：2013-02-18
申请人： Varun Taneja , Mahesh Mylarappa , Saravanakumar Annamalaisami
发明人： Varun Taneja , Mahesh Mylarappa , Saravanakumar Annamalaisami
IPC分类号： G06F21/00
CPC分类号： H04L67/141 , H04L63/1416 , H04L63/1441 , H04L63/1458 , H04L69/16 , H04L69/163
摘要： The present application is directed towards systems and methods for aggressively probing a client side connection to determine and counteract a malicious window size attack or similar behavior from a malfunctioning client. The solution described herein detects when a connection may be under malicious attach via improper or unusual window size settings. Responsive to the detection, the solution described herein will setup probes that determine whether or not the client is malicious and does so within an aggressive time period to avoid the tying up of processing cycles, transport layer sockets and buffers, and other resources of the sender.
摘要翻译：本申请涉及用于积极探测客户端连接以确定和抵消来自故障客户端的恶意窗口大小攻击或类似行为的系统和方法。本文描述的解决方案通过不正确或异常的窗口大小设置来检测连接是否可能处于恶意附着状态。响应于检测，本文所述的解决方案将建立探测器，其确定客户端是否是恶意的并且在激进的时间段内这样做以避免处理周期，传输层套接字和缓冲器的绑定以及发送者的其他资源。

7. 发明授权

US08463887B2 Systems and methods for server surge protection in a multi-core system 有权
公开(公告)号：US08463887B2
公开(公告)日：2013-06-11
申请号：US12645803
申请日：2009-12-23
申请人： Roy Rajan , Saravanakumar Annamalaisami
发明人： Roy Rajan , Saravanakumar Annamalaisami
IPC分类号： G06F15/173
CPC分类号： H04L47/32 , H04L67/1002 , H04L67/1008 , H04L67/1029 , H04L69/16
摘要： The present application is directed towards systems and methods for providing connection surge protection to one or more servers by an intermediary multi-core system. A packet processing engine of a multi-core device deployed as an intermediary between a plurality of clients and one or more servers determines an estimated number of total pending requests received by all packet processing engines based on a value of a local counter of received requests, the total number of pending requests received by all other packet processing engines at a last predetermined interval, and a rate of change of the total number of pending requests received by all other packet processing engines multiplied by the time since the last predetermined interval. The packet processing engine applies a surge protection policy to received pending requests responsive to the determined estimated number of total pending requests.

8. 发明授权

US08387143B2 Systems and methods for aggressive window probing 有权
标题翻译：积极的窗口探测的系统和方法
公开(公告)号：US08387143B2
公开(公告)日：2013-02-26
申请号：US12627534
申请日：2009-11-30
申请人： Varun Taneja , Mahesh Mylarappa , Saravanakumar Annamalaisami
发明人： Varun Taneja , Mahesh Mylarappa , Saravanakumar Annamalaisami
IPC分类号： G06F21/00
CPC分类号： H04L67/141 , H04L63/1416 , H04L63/1441 , H04L63/1458 , H04L69/16 , H04L69/163
摘要： The present application is directed towards systems and methods for aggressively probing a client side connection to determine and counteract a malicious window size attack or similar behavior from a malfunctioning client. The solution described herein detects when a connection may be under malicious attach via improper or unusual window size settings. Responsive to the detection, the solution described herein will setup probes that determine whether or not the client is malicious and does so within an aggressive time period to avoid the tying up of processing cycles, transport layer sockets and buffers, and other resources of the sender.
摘要翻译：本申请涉及用于积极地探测客户端连接以确定和抵消来自故障客户端的恶意窗口大小攻击或类似行为的系统和方法。本文描述的解决方案通过不正确或异常的窗口大小设置来检测连接是否可能处于恶意附着状态。响应于检测，本文所述的解决方案将建立探测器，其确定客户端是否是恶意的并且在激进的时间段内这样做以避免处理周期，传输层套接字和缓冲器的绑定以及发送者的其他资源。

9. 发明申请

US20110154488A1 SYSTEMS AND METHODS FOR GENERATING AND MANAGING COOKIE SIGNATURES FOR PREVENTION OF HTTP DENIAL OF SERVICE IN MULTI-CORE SYSTEM 有权
标题翻译：用于生成和管理COOKIE签名的系统和方法，用于防止多核系统中的服务质量问题
公开(公告)号：US20110154488A1
公开(公告)日：2011-06-23
申请号：US12645938
申请日：2009-12-23
申请人： Roy Rajan , Saravanakumar Annamalaisami
发明人： Roy Rajan , Saravanakumar Annamalaisami
IPC分类号： G06F21/00
CPC分类号： G06F15/167 , H04L63/123 , H04L63/168
摘要： The present application is directed towards systems and methods for generating and maintaining cookie consistency for security protection across a plurality of cores in a multi-core system. A packet processing engine executing on one core designated as a primary packet processing engine generates and maintains a global random seed. The global random seed may be used as an initial seed for creation of cookie signatures by each of a plurality of packet processing engines executing on a plurality of cores of the multi-core system using a deterministic pseudo-random number generation function such that each core creates an identical set of cookie signatures.
摘要翻译：本申请涉及用于生成和维护跨多核系统中的多个核心的安全保护的cookie一致性的系统和方法。在指定为主分组处理引擎的一个核上执行的分组处理引擎生成并维护全局随机种子。全局随机种子可以被用作通过使用确定性伪随机数生成函数在多核系统的多个核上执行的多个分组处理引擎中的每一个来创建cookie签名的初始种子，使得每个核心创建一组相同的cookie签名。

10. 发明申请

US20110153937A1 SYSTEMS AND METHODS FOR MAINTAINING TRANSPARENT END TO END CACHE REDIRECTION 有权
标题翻译：用于维护透明端到端缓存重定向的系统和方法
公开(公告)号：US20110153937A1
公开(公告)日：2011-06-23
申请号：US12645874
申请日：2009-12-23
申请人： Saravanakumar Annamalaisami , Anil Shetty , Josephine Suganthi , Akshat Choudhary
发明人： Saravanakumar Annamalaisami , Anil Shetty , Josephine Suganthi , Akshat Choudhary
IPC分类号： G06F15/16 , G06F12/08
CPC分类号： H04L67/42 , G06Q10/10 , H04L61/2007 , H04L67/2814 , H04L67/2842 , H04L69/16 , H04L69/324
摘要： The present disclosure presents systems and methods for maintaining original source and destination IP addresses of a request while performing intermediary cache redirection. An intermediary receives a request from a client destined to a server identifying a client IP address as a source IP address and a server IP address as a destination IP address. The intermediary transmits the request to a cache server, the request maintaining original IP addresses and identifying a MAC address of the cache server as the destination MAC address. The intermediary receives the request from the cache server responsive to a cache miss, the received request maintaining the original source and destination IP addresses. The intermediary identifying that the third request is coming from the cache server via one or more data link layer properties of the third transport layer connection. The intermediary transmits to the server the request identifying the client IP address as the source IP address and the server IP address as the destination IP address.
摘要翻译：本公开提供了用于在执行中间缓存重定向的同时维护请求的原始源和目的地IP地址的系统和方法。中介接收来自发往服务器的客户端的请求，该服务器标识客户端IP地址作为源IP地址，服务器IP地址作为目的地IP地址。中介将请求发送到缓存服务器，请求维护原始IP地址，并将缓存服务器的MAC地址识别为目的MAC地址。中继器响应于高速缓存未命中从缓存服务器接收请求，所接收的请求保持原始源和目的地IP地址。识别第三请求的中介通过第三传输层连接的一个或多个数据链路层属性从缓存服务器发出。中介向服务器发送将客户端IP地址标识为源IP地址和服务器IP地址作为目标IP地址的请求。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式