专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08516583B2 Aggregating the knowledge base of computer systems to proactively protect a computer from malware 有权
标题翻译：汇总计算机系统的知识库，主动保护计算机免受恶意软件攻击
公开(公告)号：US08516583B2
公开(公告)日：2013-08-20
申请号：US11096490
申请日：2005-03-31
申请人： Anil Francis Thomas , Michael Kramer , Mihai Costea , Efim Hudis , Pradeep Bahl , Rajesh K Dadhia , Yigal Edery
发明人： Anil Francis Thomas , Michael Kramer , Mihai Costea , Efim Hudis , Pradeep Bahl , Rajesh K Dadhia , Yigal Edery
IPC分类号： G06F21/00
CPC分类号： G06F21/56 , G06F21/562 , G06F21/577
摘要： In accordance with the present invention, a system, method, and computer-readable medium for aggregating the knowledge base of a plurality of security services or other event collection systems to protect a computer from malware is provided. One aspect of the present invention is a method that proactively protects a computer from malware by using anti-malware services or other event collection systems to observe suspicious events that are potentially indicative of malware; determining if the suspicious events satisfy a predetermined threshold; and if the suspicious events satisfy the predetermined threshold, implementing a restrictive security policy designed to prevent the spread of malware.
摘要翻译：根据本发明，提供了一种用于聚合多个安全服务或其他事件收集系统的知识库以保护计算机免受恶意软件的系统，方法和计算机可读介质。本发明的一个方面是通过使用反恶意软件服务或其他事件收集系统来观察潜在地指示恶意软件的可疑事件来主动地保护计算机免受恶意软件的影响; 确定可疑事件是否满足预定阈值; 并且如果可疑事件满足预定阈值，则实施旨在防止恶意软件传播的限制性安全策略。

2. 发明授权

US08079074B2 Dynamic security shielding through a network resource 有权
标题翻译：通过网络资源实现动态安全屏蔽
公开(公告)号：US08079074B2
公开(公告)日：2011-12-13
申请号：US11787589
申请日：2007-04-17
申请人： Pradeep Bahl , Rajesh K. Dadhia
发明人： Pradeep Bahl , Rajesh K. Dadhia
IPC分类号： G06F21/00 , H04L29/06
CPC分类号： H04L63/145 , H04L29/12226 , H04L29/12339 , H04L61/2015 , H04L61/2503 , H04L63/0281 , H04L67/2814
摘要： Architecture for facilitating access of remote system software functionality by a host machine for the redirection of incoming and/or outgoing host traffic through the remote system for protection services to the host machine. The host machine can gain the benefits of effective protection software such as firewall, intrusion protection software, and anti-malware services, of the remote machine. The host machine can choose to exercise traffic redirection when there is a risk of being compromised, and then revert back to direct communications when the risk has been averted. The host machine takes advantage of the resources available on the remote machine in substantially realtime with minimal disruption to the host and/or the remote machine operations. This facilitates widespread and temporary protection of network systems for a more secure working environment and improved customer experience.
摘要翻译：用于促进由主机访问远程系统软件功能的架构，用于通过远程系统重定向传入和/或传出主机流量以保护服务到主机。主机可以获得远程机器的有效保护软件（如防火墙，入侵保护软件和反恶意软件服务）的好处。主机可能会在有风险的情况下选择进行流量重定向，然后在避免风险的情况下恢复直接通信。主机利用远程机器上可用的资源实质上实时地利用主机和/或远程机器操作的中断。这有助于网络系统的广泛和临时保护，以实现更安全的工作环境和改善客户体验。

3. 发明申请

US20110179481A1 NETWORK AWARE FIREWALL 有权
标题翻译：网络防火墙
公开(公告)号：US20110179481A1
公开(公告)日：2011-07-21
申请号：US13011517
申请日：2011-01-21
申请人： Rajesh K. Dadhia , Fabien J. Royer , Pradeep Bahl
发明人： Rajesh K. Dadhia , Fabien J. Royer , Pradeep Bahl
IPC分类号： G06F21/20 , G06F15/16
CPC分类号： H04L63/02 , H04L63/20
摘要： Among other things, one or more systems and/or methods for a network aware firewall are disclosed. A method comprises accessing a first network connection from a client computer system and determining whether the first network connection is a first network type or a second network type. The method further comprises dynamically modifying security parameters associated with a firewall local to the client computer system in response to determining whether the network connection is the first network type or the second network type.
摘要翻译：除其他之外，还公开了用于网络感知防火墙的一个或多个系统和/或方法。一种方法包括从客户端计算机系统访问第一网络连接并确定第一网络连接是第一网络类型还是第二网络类型。该方法还包括响应于确定网络连接是第一网络类型还是第二网络类型，动态地修改与客户端计算机系统本地的防火墙相关联的安全性参数。

4. 发明授权

US08321927B2 Network aware firewall 有权
标题翻译：网络感知防火墙
公开(公告)号：US08321927B2
公开(公告)日：2012-11-27
申请号：US13011517
申请日：2011-01-21
申请人： Rajesh K. Dadhia , Fabien J. Royer , Pradeep Bahl
发明人： Rajesh K. Dadhia , Fabien J. Royer , Pradeep Bahl
IPC分类号： G06F9/00
CPC分类号： H04L63/02 , H04L63/20
摘要： Among other things, one or more systems and/or methods for a network aware firewall are disclosed. A method comprises accessing a first network connection from a client computer system and determining whether the first network connection is a first network type or a second network type. The method further comprises dynamically modifying security parameters associated with a firewall local to the client computer system in response to determining whether the network connection is the first network type or the second network type.
摘要翻译：除其他之外，还公开了用于网络感知防火墙的一个或多个系统和/或方法。一种方法包括从客户端计算机系统访问第一网络连接并确定第一网络连接是第一网络类型还是第二网络类型。该方法还包括响应于确定网络连接是第一网络类型还是第二网络类型，动态地修改与客户端计算机系统本地的防火墙相关联的安全性参数。

5. 发明申请

US20080250407A1 Network group name for virtual machines 审中-公开
标题翻译：虚拟机的网络组名称
公开(公告)号：US20080250407A1
公开(公告)日：2008-10-09
申请号：US11784060
申请日：2007-04-05
申请人： Rajesh K. Dadhia , Pradeep Bahl
发明人： Rajesh K. Dadhia , Pradeep Bahl
IPC分类号： G06F9/455
CPC分类号： G06F9/45533 , G06F2009/45595
摘要： Virtual machine (VM) management using a group name. By associating VM registration information with a group name, all VMs running off a single physical machine image can be managed (e.g., blocked or unblocked) simultaneously. A service component captures registration information (e.g., IP address-VM name pair) between a virtual machine and a name server. The IP address-VM name pair is recorded (or stored) in the name server database. Based on the VM pair, a record component generates a group name, and stores the VM pair in association with the group name in the name server database. Blocking of the group name then blocks all VMs associated with the group name. Moreover, queries against the group name will then expose all operational VMs for that host. Updates to the group name record can be made based on registration and deregistration of VMs for a given host machine.
摘要翻译：使用组名的虚拟机（VM）管理。通过将VM注册信息与组名相关联，可以同时管理运行单个物理机映像的所有虚拟机（例如，阻塞或解除阻塞）。服务组件捕获虚拟机和名称服务器之间的注册信息（例如，IP地址-VM名称对）。 IP地址 - VM名称对被记录（或存储）在名称服务器数据库中。基于VM对，记录组件生成组名称，并将VM对与名称服务器数据库中的组名相关联存储。阻止组名称然后阻止与组名关联的所有虚拟机。此外，针对组名称的查询将会显示该主机的所有操作VM。可以基于给定主机的VM的注册和注销来对组名记录进行更新。

6. 发明授权

US07886351B2 Network aware firewall 有权
标题翻译：网络感知防火墙
公开(公告)号：US07886351B2
公开(公告)日：2011-02-08
申请号：US11455328
申请日：2006-06-19
申请人： Rajesh K. Dadhia , Fabien J. Royer , Pradeep Bahl
发明人： Rajesh K. Dadhia , Fabien J. Royer , Pradeep Bahl
IPC分类号： H04L29/06
CPC分类号： H04L63/02 , H04L63/20
摘要： A system and method for a network aware firewall is disclosed. The method includes accessing a first network connection from a client computer system and determining whether the first network connection is public or private. The method further includes dynamically modifying security parameters associated with a firewall local to the client computer system in response to determining whether the network connection is public or private.
摘要翻译：公开了一种用于网络感知防火墙的系统和方法。该方法包括从客户端计算机系统访问第一网络连接并确定第一网络连接是公共的还是私有的。该方法还包括响应于确定网络连接是公共的还是私有的，动态地修改与客户端计算机系统本地的防火墙相关联的安全性参数。

7. 发明申请

US20080263654A1 Dynamic security shielding through a network resource 有权
标题翻译：通过网络资源实现动态安全屏蔽
公开(公告)号：US20080263654A1
公开(公告)日：2008-10-23
申请号：US11787589
申请日：2007-04-17
申请人： Pradeep Bahl , Rajesh K. Dadhia
发明人： Pradeep Bahl , Rajesh K. Dadhia
IPC分类号： G06F9/00
CPC分类号： H04L63/145 , H04L29/12226 , H04L29/12339 , H04L61/2015 , H04L61/2503 , H04L63/0281 , H04L67/2814
摘要： Architecture for facilitating access of remote system software functionality by a host machine for the redirection of incoming and/or outgoing host traffic through the remote system for protection services to the host machine. The host machine can gain the benefits of effective protection software such as firewall, intrusion protection software, and anti-malware services, of the remote machine. The host machine can choose to exercise traffic redirection when there is a risk of being compromised, and then revert back to direct communications when the risk has been averted. The host machine takes advantage of the resources available on the remote machine in substantially realtime with minimal disruption to the host and/or the remote machine operations. This facilitates widespread and temporary protection of network systems for a more secure working environment and improved customer experience.
摘要翻译：用于促进由主机访问远程系统软件功能的架构，用于通过远程系统重定向传入和/或传出主机流量以保护服务到主机。主机可以获得远程机器的有效保护软件（如防火墙，入侵保护软件和反恶意软件服务）的好处。主机可能会在有风险的情况下选择进行流量重定向，然后在避免风险的情况下恢复直接通信。主机利用远程机器上可用的资源实质上实时地利用主机和/或远程机器操作的中断。这有助于网络系统的广泛和临时保护，以实现更安全的工作环境和改善客户体验。

8. 发明申请

US20070294755A1 Network aware firewall 有权
标题翻译：网络感知防火墙
公开(公告)号：US20070294755A1
公开(公告)日：2007-12-20
申请号：US11455328
申请日：2006-06-19
申请人： Rajesh K. Dadhia , Fabien J. Royer , Pradeep Bahl
发明人： Rajesh K. Dadhia , Fabien J. Royer , Pradeep Bahl
IPC分类号： G06F15/16
CPC分类号： H04L63/02 , H04L63/20
摘要： A system and method for a network aware firewall is disclosed. The method includes accessing a first network connection from a client computer system and determining whether the first network connection is public or private. The method further includes dynamically modifying security parameters associated with a firewall local to the client computer system in response to determining whether the network connection is public or private.
摘要翻译：公开了一种用于网络感知防火墙的系统和方法。该方法包括从客户端计算机系统访问第一网络连接并确定第一网络连接是公共的还是私有的。该方法还包括响应于确定网络连接是公共的还是私有的，动态地修改与客户端计算机系统本地的防火墙相关联的安全性参数。

9. 发明授权

US08909743B2 Dynamic session maintenance for mobile computing devices 有权
标题翻译：移动计算设备的动态会话维护
公开(公告)号：US08909743B2
公开(公告)日：2014-12-09
申请号：US13157089
申请日：2011-06-09
申请人： Pradeep Bahl
发明人： Pradeep Bahl
IPC分类号： G06F15/177 , H04L29/12
CPC分类号： H04L61/1511 , H04L29/12066 , H04L29/12301 , H04L61/2015 , H04L61/2076
摘要： A framework and method are disclosed for supporting changed addresses by mobile network nodes. Such support is provided through enhancements to the mobile network nodes and utilizes DNS servers, Dynamic Host Configuration Protocol (DHCP), and virtual private network (VPN) servers—or their functional equivalents—to dynamically assign a current network address to a mobile node, provide the current network address to an authoritative name server, and thereafter have correspondent nodes update their addresses for the mobile node based upon an address provided by the authoritative name server. A mobile node registers all of its name-to-address mappings with its authoritative DNS server using a time to live of zero. Furthermore, when a mobile node moves outside its home security domain, the mobile node initiates a virtual private network connection to a virtual private server for a security domain.
摘要翻译：公开了用于支持移动网络节点改变的地址的框架和方法。通过对移动网络节点的增强来提供这样的支持，并且利用DNS服务器，动态主机配置协议（DHCP）和虚拟专用网络（VPN）服务器或其功能等效物来动态地为移动节点分配当前网络地址，将当前网络地址提供给权威的名称服务器，然后基于由权威名称服务器提供的地址，对应节点更新其移动节点的地址。移动节点通过其权威DNS服务器将所有名称与地址映射注册为零。此外，当移动节点移动到其家庭安全域之外时，移动节点发起到用于安全域的虚拟专用服务器的虚拟专用网络连接。

10. 发明授权

US08676969B2 Network classification 有权
标题翻译：网络分类
公开(公告)号：US08676969B2
公开(公告)日：2014-03-18
申请号：US13300743
申请日：2011-11-21
申请人： Pradeep Bahl , Christopher J. Corbett , Mohamed Jawad Khaki
发明人： Pradeep Bahl , Christopher J. Corbett , Mohamed Jawad Khaki
IPC分类号： G06F15/173
CPC分类号： H04L43/08 , H04L41/00 , H04L41/0233 , H04L41/0803 , H04L41/0853 , H04L41/12 , H04L41/14 , H04L41/145 , H04L41/28 , H04L63/20
摘要： Network DNA may be determined for a computer network that taxonomically classifies the computer network. Network DNA may include derived network DNA components and raw network DNA components. Raw network DNA components may be acquired from local or remote sources. Derived network DNA components may be generated according to derived network DNA component specifications. Derived network DNA component specifications may reference raw network DNA components. Network DNA determined for the computer network may include a network species component capable of indicating network species classifications for computer networks. Network species classifications may include enterprise network, home network and public place network. Network species classifications may be determined as a function of network security, network management and network addressing. One or more network DNA stores may be configured to store network DNA for computer networks. Network DNA stores may store network DNA history as well as current network DNA.
摘要翻译：可以为对计算机网络进行分类分类的计算机网络确定网络DNA。网络DNA可以包括衍生的网络DNA组分和原始网络DNA组分。原始网络DNA组件可以从本地或远程来源获取。衍生网络DNA组分可以根据衍生网络DNA组分规格生成。衍生网络DNA组件规范可以参考原始网络DNA组件。为计算机网络确定的网络DNA可以包括能够指示计算机网络的网络物种分类的网络物种组件。网络物种分类可能包括企业网络，家庭网络和公共场所网络。网络物种分类可以根据网络安全，网络管理和网络寻址来确定。一个或多个网络DNA存储可以被配置为存储用于计算机网络的网络DNA。网络DNA存储可以存储网络DNA历史以及当前的网络DNA。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式