专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09817970B2 Method for detecting attacks on virtual machines 有权
公开(公告)号：US09817970B2
公开(公告)日：2017-11-14
申请号：US14770437
申请日：2014-03-03
申请人： ORANGE
发明人： Kahina Lazri , Sylvie Laniepce
IPC分类号： G06F9/45 , G06F21/55 , G06F9/455 , H04L29/06
CPC分类号： G06F21/554 , G06F9/45558 , G06F2009/45587 , G06F2221/034 , H04L63/1416
摘要： The invention relates to a method for detecting attacks on at least one virtual machine in a system including at least one host server (10) hosting a set of virtual machines (VM1, VM2, VM3, etc.), the method including the steps of: receiving (E2) an alert indicating a breakdown in performance in a virtual machine; verifying (E3) that a mechanism for managing resource contention has been implemented for the virtual machine; detecting (E5), over a given time interval, at least one time correlation between the breakdown in performance that occurred in the virtual machine and a variation in the use of at least one resource of the host server by at least one other virtual machine, data representing the use of resources being collected at regular intervals.

2. 发明授权

US10659475B2 Method of detecting attacks in a cloud computing architecture 有权
公开(公告)号：US10659475B2
公开(公告)日：2020-05-19
申请号：US15115495
申请日：2015-01-21
申请人： Orange
发明人： Kahina Lazri , Sylvie Laniepce
IPC分类号： H04L29/06 , G06F21/55 , G06F9/455
摘要： A method and a detection entity for detecting attacks in a system including at least two host servers. Each host server hosts a set of virtual machines. The detection entity performs acts of: detecting that a number of migrations of virtual machines from one server to another during a current time period is greater than a threshold value; partitioning the virtual machines of the system into a first subset having a stable profile of consumption of at least one resource, and into a second subset having a fluctuating profile; calculating, for the pairs of virtual machines of the second subset, a value of temporal correlation between the two profiles of the pair; and identifying in the second subset the virtual machines for which the correlation value is greater than or equal to a threshold correlation value, the machines being identified as constituting the origin of the attack.

3. 发明申请

US20210400020A1 Technique for collecting information relating to a flow routed in a network 有权
公开(公告)号：US20210400020A1
公开(公告)日：2021-12-23
申请号：US17287768
申请日：2019-10-16
申请人： ORANGE
发明人： Kahina Lazri , Sylvie Laniepce
IPC分类号： H04L29/06
摘要： A technique for collecting information relating to a flow routed in a communication network. This network includes, in a data plane, packet-processing devices that are configured so as to process packets on the basis of flow-processing rules and, in a control plane, at least one control device that is configured so as to control packet-processing devices and to manage the flow-processing rules. An analysis device identifies at least one flow-processing rule configured so as to process a flow including a first characteristic associated with a first endpoint device of a flow to be sought in the communication network and applied by a processing device. Based on the identified processing rule, the control device determines a second characteristic associated with a second endpoint device.

4. 发明申请

US20170163661A1 METHOD OF DETECTING ATTACKS IN A CLOUD COMPUTING ARCHITECTURE 审中-公开
公开(公告)号：US20170163661A1
公开(公告)日：2017-06-08
申请号：US15115495
申请日：2015-01-21
申请人： Orange
发明人： Kahina Lazri , Sylvie Laniepce
IPC分类号： H04L29/06 , G06F9/455
CPC分类号： H04L63/1408 , G06F9/45558 , G06F21/552 , G06F2009/4557 , G06F2009/45587
摘要： A method and a detection entity for detecting attacks in a system including at least two host servers. Each host server hosts a set of virtual machines. The detection entity performs acts of: detecting that a number of migrations of virtual machines from one server to another during a current time period is greater than a threshold value; partitioning the virtual machines of the system into a first subset having a stable profile of consumption of at least one resource, and into a second subset having a fluctuating profile; calculating, for the pairs of virtual machines of the second subset, a value of temporal correlation between the two profiles of the pair; and identifying in the second subset the virtual machines for which the correlation value is greater than or equal to a threshold correlation value, the machines being identified as constituting the origin of the attack.

5. 发明授权

US11218370B2 Method for applying a patch to a virtualized network function to be updated 有权
公开(公告)号：US11218370B2
公开(公告)日：2022-01-04
申请号：US16760308
申请日：2018-10-24
申请人： ORANGE
发明人： Paul Chaignon , Kahina Lazri
IPC分类号： H04L12/24 , G06F9/455 , H04L12/26 , H04L12/713
摘要： A method including: identifying a set of dependent virtualised network functions included in a first virtual network, the set including at least a virtualised network function to be updated; creating a second virtual network including clones of virtual machines implementing the dependent virtualised network functions of the set; interconnecting, in the second virtual network, clones of the dependent virtualised network functions, identically to an interconnection in the first network of dependent virtualised network functions; identifying an input data packet of the dependent virtualised network functions, duplicating the packet and sending the duplicated packet to the second network; applying a patch to the clone of the virtualised network function to be updated in the second network; triggering an alert when a performance value of a dependent virtualised network function of the first virtual network differs from a performance value on the clone of the virtualised network function in the second network.

6. 发明申请

US20210021462A1 METHOD FOR APPLYING A PATCH TO A VIRTUALIZED NETWORK FUNCTION TO BE UPDATED 有权
公开(公告)号：US20210021462A1
公开(公告)日：2021-01-21
申请号：US16760308
申请日：2018-10-24
申请人： ORANGE
发明人： Paul Chaignon , Kahina Lazri
IPC分类号： H04L12/24 , H04L12/713 , H04L12/26 , G06F9/455
摘要： A method including: identifying a set of dependent virtualised network functions included in a first virtual network, the set including at least a virtualised network function to be updated; creating a second virtual network including clones of virtual machines implementing the dependent virtualised network functions of the set; interconnecting, in the second virtual network, clones of the dependent virtualised network functions, identically to an interconnection in the first network of dependent virtualised network functions; identifying an input data packet of the dependent virtualised network functions, duplicating the packet and sending the duplicated packet to the second network; applying a patch to the clone of the virtualised network function to be updated in the second network; triggering an alert when a performance value of a dependent virtualised network function of the first virtual network differs from a performance value on the clone of the virtualised network function in the second network.

7. 发明申请

US20160004863A1 METHOD FOR DETECTING ATTACKS ON VIRTUAL MACHINES 有权
标题翻译：用于检测虚拟机的攻击的方法
公开(公告)号：US20160004863A1
公开(公告)日：2016-01-07
申请号：US14770437
申请日：2014-03-03
申请人： ORANGE
发明人： Kahina Lazri , Sylvie Laniepce
IPC分类号： G06F21/55 , G06F9/455 , H04L29/06
CPC分类号： G06F21/554 , G06F9/45558 , G06F2009/45587 , G06F2221/034 , H04L63/1416
摘要： The invention relates to a method for detecting attacks on at least one virtual machine in a system including at least one host server (10) hosting a set of virtual machines (VM1, VM2, VM3, etc.), the method including the steps of: receiving (E2) an alert indicating a breakdown in performance in a virtual machine; verifying (E3) that a mechanism for managing resource contention has been implemented for the virtual machine; detecting (E5), over a given time interval, at least one time correlation between the breakdown in performance that occurred in the virtual machine and a variation in the use of at least one resource of the host server by at least one other virtual machine, data representing the use of resources being collected at regular intervals.
摘要翻译：本发明涉及一种用于检测系统中至少一个虚拟机的攻击的方法，包括：托管一组虚拟机（VM1，VM2，VM3等）的至少一个主机服务器（10），该方法包括以下步骤：：接收（E2）指示虚拟机中的性能故障的警报; 验证（E3）虚拟机已经实现了管理资源争用的机制; 在给定的时间间隔内检测（E5）在所述虚拟机中发生的性能的故障与由至少一个其他虚拟机使用所述主机服务器的至少一个资源的变化之间的至少一次时间相关性，表示定期收集资源的数据的数据。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式