专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09503471B2 Pre-processing system for minimizing application-level denial-of-service in a multi-tenant system 有权
公开(公告)号：US09503471B2
公开(公告)日：2016-11-22
申请号：US14834531
申请日：2015-08-25
申请人： International Business Machines Corporation
发明人： Mark McGloin , John Douglas Curtis , Peter Otto Mierswa , Russell L. Holden , Olgierd Stanislaw Pieczul
IPC分类号： H04L29/00 , H04L29/06 , G06F17/30 , G06F9/50
CPC分类号： H04L63/1458 , G06F9/505 , G06F17/30153 , H04L63/1416 , H04L63/1425 , H04L2463/141
摘要： Denial-of-service attacks are prevented or mitigated in a cloud compute environment, such as a multi-tenant, collaborative SaaS system. This is achieved by providing a mechanism by which characterization of “legitimate” behavior is defined for tenant applications or application classes, preferably along with actions to be taken in the event a request to execute an application is anticipated to exceed defined workflow limits. A set of application profiles are generated. Typically, a profile comprises information, such as a request defined by one or more request variables, one or more “constraints,” one or more “request mappings,” and one or more “actions.” A constraint is a maximum permitted workload for the application. A request mapping maps a request variable to the constraint, either directly or indirectly. The profile information defines how a request is mapped to a workload to determine whether the request is in policy or, if not, what action to take.

2. 发明授权

US09444838B2 Pre-processing system for minimizing application-level denial-of-service in a multi-tenant system 有权
标题翻译：用于在多租户系统中最小化应用程序级拒绝服务的预处理系统
公开(公告)号：US09444838B2
公开(公告)日：2016-09-13
申请号：US14336865
申请日：2014-07-21
申请人： International Business Machines Corporation
发明人： Mark McGloin , John Douglas Curtis , Peter Otto Mierswa , Russell L. Holden , Olgierd S. Pieczul
IPC分类号： H04L29/00 , H04L29/06 , G06F17/30 , G06F9/50
CPC分类号： H04L63/1458 , G06F9/505 , G06F17/30153 , H04L63/1416 , H04L63/1425 , H04L2463/141
摘要： Denial-of-service attacks are prevented or mitigated in a cloud compute environment, such as a multi-tenant, collaborative SaaS system. This is achieved by providing a mechanism by which characterization of “legitimate” behavior is defined for tenant applications or application classes, preferably along with actions to be taken in the event a request to execute an application is anticipated to exceed defined workflow limits. A set of application profiles are generated. Typically, a profile comprises information, such as a request defined by one or more request variables, one or more “constraints,” one or more “request mappings,” and one or more “actions.” A constraint is a maximum permitted workload for the application. A request mapping maps a request variable to the constraint, either directly or indirectly. The profile information defines how a request is mapped to a workload to determine whether the request is in policy or, if not, what action to take.
摘要翻译：拒绝服务攻击在云计算环境（如多租户协同SaaS系统）中被阻止或缓解。这通过提供一种机制来实现，对于租户应用程序或应用程序类定义“合法”行为的表征，最好连同在执行应用程序的请求超过定义的工作流程限制的情况下采取的动作一起实现。生成一组应用程序配置文件。通常，简档包括诸如由一个或多个请求变量定义的请求，一个或多个“约束”，一个或多个“请求映射”和一个或多个“动作”的信息。约束是用于应用程序。请求映射将请求变量直接或间接映射到约束。配置文件信息定义请求如何映射到工作负载以确定请求是否在策略中，如果不是，则执行什么操作。

3. 发明申请

US20150358349A1 Preventing application-level denial-of-service in a multi-tenant system 有权
公开(公告)号：US20150358349A1
公开(公告)日：2015-12-10
申请号：US14829197
申请日：2015-08-18
申请人： International Business Machines Corporation
发明人： Russell L. Holden , John Douglas Curtis , Peter Otto Mierswa
IPC分类号： H04L29/06
CPC分类号： H04L63/1458 , G06F9/505 , G06F17/30153 , H04L63/1416 , H04L63/1425 , H04L2463/141
摘要： Denial-of-service attacks are prevented or mitigated in a cloud compute environment, such as a multi-tenant, collaborative SaaS system. This is achieved by providing a mechanism by which characterization of “legitimate” behavior is defined for accessor classes, preferably along with actions to be taken in the event an accessor exceeds those limits. A set of accessor “usage profiles” are generated. Typically, a profile comprises information, such as a “request time window,” one or more “constraints,” and one or more “actions.” A request time window defines a time period over which request usage is accumulated and over which constraints are applied. A constraint may be of various types (e.g., number of transactions, defined resource usage limits, etc.) to be applied for the usage monitoring An action defines how the system will respond if a particular constraint is triggered. By applying the constraints to accessor requests, over-utilization of compute resources is enabled.

4. 发明授权

US09942266B2 Preventing application-level denial-of-service in a multi-tenant system 有权
公开(公告)号：US09942266B2
公开(公告)日：2018-04-10
申请号：US14829197
申请日：2015-08-18
申请人： International Business Machines Corporation
发明人： Russell L. Holden , John Douglas Curtis , Peter Otto Mierswa
IPC分类号： G06F13/00 , H04L29/06 , G06F17/30 , G06F9/50
CPC分类号： H04L63/1458 , G06F9/505 , G06F17/30153 , H04L63/1416 , H04L63/1425 , H04L2463/141
摘要： Denial-of-service attacks are prevented or mitigated in a cloud compute environment, such as a multi-tenant, collaborative SaaS system. This is achieved by providing a mechanism by which characterization of “legitimate” behavior is defined for accessor classes, preferably along with actions to be taken in the event an accessor exceeds those limits. A set of accessor “usage profiles” are generated. Typically, a profile comprises information, such as a “request time window,” one or more “constraints,” and one or more “actions.” A request time window defines a time period over which request usage is accumulated and over which constraints are applied. A constraint may be of various types (e.g., number of transactions, defined resource usage limits, etc.) to be applied for the usage monitoring An action defines how the system will respond if a particular constraint is triggered. By applying the constraints to accessor requests, over-utilization of compute resources is enabled.

5. 发明申请

US20170078325A1 Pre-processing system for minimizing application-level denial-of-service in a multi-tenant system 审中-公开
标题翻译：用于在多租户系统中最小化应用程序级拒绝服务的预处理系统
公开(公告)号：US20170078325A1
公开(公告)日：2017-03-16
申请号：US15359088
申请日：2016-11-22
申请人： International Business Machines Corporation
发明人： Mark McGloin , John Douglas Curtis , Peter Otto Mierswa , Russell L. Holden , Olgierd Stanislaw Pieczul
IPC分类号： H04L29/06
CPC分类号： H04L63/1458 , G06F9/505 , G06F16/1744 , H04L63/1416 , H04L63/1425 , H04L2463/141
摘要： Denial-of-service attacks are prevented or mitigated in a cloud compute environment, such as a multi-tenant, collaborative SaaS system. This is achieved by providing a mechanism by which characterization of “legitimate” behavior is defined for tenant applications or application classes, preferably along with actions to be taken in the event a request to execute an application is anticipated to exceed defined workflow limits. A set of application profiles are generated. Typically, a profile comprises information, such as a request defined by one or more request variables, one or more “constraints,” one or more “request mappings,” and one or more “actions.” A constraint is a maximum permitted workload for the application. A request mapping maps a request variable to the constraint, either directly or indirectly. The profile information defines how a request is mapped to a workload to determine whether the request is in policy or, if not, what action to take.
摘要翻译：拒绝服务攻击在云计算环境（如多租户协同SaaS系统）中被阻止或缓解。这通过提供一种机制来实现，对于租户应用程序或应用程序类定义“合法”行为的表征，最好连同在执行应用程序的请求超过定义的工作流程限制的情况下采取的动作一起实现。生成一组应用程序配置文件。通常，简档包括诸如由一个或多个请求变量定义的请求，一个或多个“约束”，一个或多个“请求映射”和一个或多个“动作”的信息。约束是用于应用程序。请求映射将请求变量直接或间接映射到约束。配置文件信息定义请求如何映射到工作负载以确定请求是否在策略中，如果不是，则执行什么操作。

6. 发明申请

US20160021138A1 Pre-processing system for minimizing application-level denial-of-service in a multi-tenant system 有权
公开(公告)号：US20160021138A1
公开(公告)日：2016-01-21
申请号：US14834531
申请日：2015-08-25
申请人： International Business Machines Corporation
发明人： Mark McGloin , John Douglas Curtis , Peter Otto Mierswa , Russell L. Holden , Olgierd Stanislaw Pieczul
IPC分类号： H04L29/06 , G06F9/50
CPC分类号： H04L63/1458 , G06F9/505 , G06F17/30153 , H04L63/1416 , H04L63/1425 , H04L2463/141
摘要： Denial-of-service attacks are prevented or mitigated in a cloud compute environment, such as a multi-tenant, collaborative SaaS system. This is achieved by providing a mechanism by which characterization of “legitimate” behavior is defined for tenant applications or application classes, preferably along with actions to be taken in the event a request to execute an application is anticipated to exceed defined workflow limits. A set of application profiles are generated. Typically, a profile comprises information, such as a request defined by one or more request variables, one or more “constraints,” one or more “request mappings,” and one or more “actions.” A constraint is a maximum permitted workload for the application. A request mapping maps a request variable to the constraint, either directly or indirectly. The profile information defines how a request is mapped to a workload to determine whether the request is in policy or, if not, what action to take.

7. 发明授权

US09942289B2 Smoothing peak system load via behavior prediction in collaborative systems with temporal data access patterns 有权
公开(公告)号：US09942289B2
公开(公告)日：2018-04-10
申请号：US14991600
申请日：2016-01-08
申请人： International Business Machines Corporation
发明人： Russell L. Holden
IPC分类号： G06F15/16 , H04L29/06 , G06F9/50 , H04L29/08 , H04L12/911 , H04L12/58
CPC分类号： H04L65/403 , G06F9/5083 , H04L47/823 , H04L51/22 , H04L67/10 , H04L67/2842 , H04L67/2847 , H04L67/322
摘要： Techniques are described above for smoothing peak load in collaborative systems. One embodiment includes, prior to a predicted peak load period, pre-staging user-data associated with one or more users of the collaborative system. During the predicted peak load period, a request from a first one of the users for access to the pre-staged user-data associated with the first user is received. And in response to the request, the pre-staged user-data is provided to the first user.

8. 发明授权

US09942265B2 Preventing application-level denial-of-service in a multi-tenant system 有权
公开(公告)号：US09942265B2
公开(公告)日：2018-04-10
申请号：US14148305
申请日：2014-01-06
申请人： International Business Machines Corporation
发明人： Russell L. Holden , John Douglas Curtis , Peter Otto Mierswa
IPC分类号： G06F13/00 , H04L29/06 , G06F17/30 , G06F9/50
CPC分类号： H04L63/1458 , G06F9/505 , G06F17/30153 , H04L63/1416 , H04L63/1425 , H04L2463/141
摘要： Denial-of-service attacks are prevented or mitigated in a cloud compute environment, such as a multi-tenant, collaborative SaaS system. This is achieved by providing a mechanism by which characterization of “legitimate” behavior is defined for accessor classes, preferably along with actions to be taken in the event an accessor exceeds those limits. A set of accessor “usage profiles” are generated. Typically, a profile comprises information, such as a “request time window,” one or more “constraints,” and one or more “actions.” A request time window defines a time period over which request usage is accumulated and over which constraints are applied. A constraint may be of various types (e.g., number of transactions, defined resource usage limits, etc.) to be applied for the usage monitoring An action defines how the system will respond if a particular constraint is triggered. By applying the constraints to accessor requests, over-utilization of compute resources is enabled.

9. 发明授权

US09300753B2 Smoothing peak system load via behavior prediction in collaborative systems with temporal data access patterns 有权
公开(公告)号：US09300753B2
公开(公告)日：2016-03-29
申请号：US14705146
申请日：2015-05-06
申请人： International Business Machines Corporation
发明人： Russell L. Holden
IPC分类号： G06F15/16 , H04L29/08
CPC分类号： H04L65/403 , G06F9/5083 , H04L47/823 , H04L51/22 , H04L67/10 , H04L67/2842 , H04L67/2847 , H04L67/322
摘要： Techniques are described above for smoothing peak load in collaborative systems. One embodiment includes, prior to a predicted peak load period, pre-staging user-data associated with one or more users of the collaborative system. During the predicted peak load period, a request from a first one of the users for access to the pre-staged user-data associated with the first user is received. And in response to the request, the pre-staged user-data is provided to the first user.

10. 发明申请

US20150195303A1 Preventing application-level denial-of-service in a multi-tenant system 有权
标题翻译：防止多租户系统中的应用程序级拒绝服务
公开(公告)号：US20150195303A1
公开(公告)日：2015-07-09
申请号：US14148305
申请日：2014-01-06
申请人： International Business Machines Corporation
发明人： Russell L. Holden , John Douglas Curtis , Peter Otto Mierswa
IPC分类号： H04L29/06
CPC分类号： H04L63/1458 , G06F9/505 , G06F17/30153 , H04L63/1416 , H04L63/1425 , H04L2463/141
摘要： Denial-of-service attacks are prevented or mitigated in a cloud compute environment, such as a multi-tenant, collaborative SaaS system. This is achieved by providing a mechanism by which characterization of “legitimate” behavior is defined for accessor classes, preferably along with actions to be taken in the event an accessor exceeds those limits. A set of accessor “usage profiles” are generated. Typically, a profile comprises information, such as a “request time window,” one or more “constraints,” and one or more “actions.” A request time window defines a time period over which request usage is accumulated and over which constraints are applied. A constraint may be of various types (e.g., number of transactions, defined resource usage limits, etc.) to be applied for the usage monitoring An action defines how the system will respond if a particular constraint is triggered. By applying the constraints to accessor requests, over-utilization of compute resources is enabled.
摘要翻译：拒绝服务攻击在云计算环境（如多租户协同SaaS系统）中被阻止或缓解。这是通过提供一种机制，通过这种机制，为访问者类定义“合法”行为的表征，最好连同在访问者超过这些限制的情况下采取的行为。生成一组访问者“使用情况配置文件”。通常，简档包括诸如“请求时间窗口”，一个或多个“约束”和一个或多个“动作”的信息。请求时间窗口定义累积了哪个请求使用的时间周期，应用。约束可以是用于使用监视的各种类型（例如，事务数量，定义的资源使用限制等）。动作定义如果触发特定约束，系统将如何响应。通过对访问者请求应用约束，启用计算资源的过度利用。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式