专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20070282981A1 AGGREGATING POLICY CRITERIA PARAMETERS INTO RANGES FOR EFFICIENT NETWORK ANALYSIS 有权
标题翻译：将政策标准参数纳入有效网络分析范围
公开(公告)号：US20070282981A1
公开(公告)日：2007-12-06
申请号：US11735474
申请日：2007-04-15
申请人： Alain J. Cohen , Pradeep K. Singh , Ankit Agarwal , Venuprakash Barathan
发明人： Alain J. Cohen , Pradeep K. Singh , Ankit Agarwal , Venuprakash Barathan
IPC分类号： G06F15/16
CPC分类号： H04L47/10 , H04L41/0853 , H04L41/0893 , H04L41/5003 , H04L43/50 , H04L47/127 , H04L47/20 , H04L47/2441
摘要： A network configuration is processed to identify each policy and the criteria associated with each policy. The criteria of the policies are processed to identify a non-overlapping set of ranges of the criteria parameter, each range being associated with a particular policy or set of policies. In a preferred embodiment, the criteria include the protocol, the source and destination IP addresses, and the source and destination ports, and a default range is defined for each criteria parameter.
摘要翻译：处理网络配置以识别每个策略和与每个策略相关联的标准。处理策略的标准以识别标准参数的不重叠的范围集合，每个范围与特定策略或策略集相关联。在优选实施例中，标准包括协议，源和目的地IP地址以及源端口和目的端口，并且为每个标准参数定义默认范围。

2. 发明授权

US08898734B2 Analyzing security compliance within a network 有权
标题翻译：分析网络中的安全合规性
公开(公告)号：US08898734B2
公开(公告)日：2014-11-25
申请号：US11505171
申请日：2006-08-16
申请人： Pradeep K. Singh , Ankit Agarwal , Alain J. Cohen , Venuprakash Barathan , Vinod Jeyachandran
发明人： Pradeep K. Singh , Ankit Agarwal , Alain J. Cohen , Venuprakash Barathan , Vinod Jeyachandran
IPC分类号： H04L29/06 , H04L12/26 , H04L12/24
CPC分类号： H04L41/28 , H04L12/2697 , H04L41/0866 , H04L41/0893 , H04L41/145 , H04L41/22 , H04L43/50 , H04L63/1433 , H04L63/20
摘要： A security policy database identifies the intended security policies within a network, a traffic generator provides test traffic that is configured to test each defined security policy, and a simulator simulates the propagation of this traffic on a model of the network. The model of the network includes the configuration data associated with each device, and thus, if devices are properly configured to enforce the intended security policies, the success/failure of the simulated test traffic will conform to the intended permit/deny policy of each connection. Differences between the simulated message propagation and the intended security policies are reported to the user, and diagnostic tools are provided to facilitate identification of the device configuration data that accounts for the observed difference. Additionally, if a network's current security policy is unknown, test traffic is generated to reveal the actual policy in effect, to construct a baseline intended security policy.
摘要翻译：安全策略数据库标识网络中的预期安全策略，流量生成器提供被配置为测试每个定义的安全策略的测试流量，并且模拟器模拟该流量在网络模型上的传播。网络模型包括与每个设备相关联的配置数据，因此，如果设备被正确配置以实施预期的安全策略，则模拟测试流量的成功/失败将符合每个连接的预期允许/拒绝策略。向用户报告模拟消息传播与预期安全策略之间的差异，并提供诊断工具以便于识别出所观察到的差异的设备配置数据。此外，如果网络当前的安全策略未知，则生成测试流量以显示实际的实际策略，以构建基准预期的安全策略。

3. 发明授权

US08493883B2 Identifying and analyzing network configuration differences 有权
标题翻译：识别和分析网络配置差异
公开(公告)号：US08493883B2
公开(公告)日：2013-07-23
申请号：US11505228
申请日：2006-08-16
申请人： Pradeep K. Singh , Alain J. Cohen , Ankit Agarwal
发明人： Pradeep K. Singh , Alain J. Cohen , Ankit Agarwal
IPC分类号： H04L12/28
CPC分类号： H04L41/0866 , H04L41/0859
摘要： A contextual and semantic analysis of network entities facilitates a mapping and comparison of the entities between network models. The system includes a plurality of refine handler and match handler pairs that use rules that are specific to the type of network entities being analyzed. The refine handler analyzes the network model to identify the entities for which its rules apply, and the match handler processes these identified entities to establish a pairing between corresponding entities in each model. A sequence of refine-match processes are applied to the network models, typically in accordance with a hierarchy of rules until each entity is identified as a matched, added, or removed entity. A difference handler processes the identified pairings to provide a difference analysis that facilitates a meaningful interpretation of the configuration changes, and a user interface provides an interactive environment to view the differences from different perspectives.
摘要翻译：网络实体的上下文和语义分析有助于网络模型之间的实体的映射和比较。该系统包括使用特定于正在分析的网络实体的类型的规则的多个精简处理程序和匹配处理程序对。精简处理程序分析网络模型以识别其规则适用的实体，匹配处理程序处理这些标识的实体以在每个模型中的对应实体之间建立配对。精细匹配过程的序列通常根据规则的层次结构应用于网络模型，直到每个实体被识别为匹配的，添加的或移除的实体。差异处理程序处理识别的配对以提供有助于对配置更改进行有意义的解释的差异分析，并且用户界面提供交互式环境以从不同的角度来查看差异。

4. 发明授权

US08005945B2 Aggregating policy criteria parameters into ranges for efficient network analysis 有权
标题翻译：将策略标准参数聚合到有效网络分析的范围内
公开(公告)号：US08005945B2
公开(公告)日：2011-08-23
申请号：US11735474
申请日：2007-04-15
申请人： Alain J. Cohen , Pradeep K. Singh , Ankit Agarwal , Venuprakash Barathan
发明人： Alain J. Cohen , Pradeep K. Singh , Ankit Agarwal , Venuprakash Barathan
IPC分类号： G06F15/173 , G06F15/177
CPC分类号： H04L47/10 , H04L41/0853 , H04L41/0893 , H04L41/5003 , H04L43/50 , H04L47/127 , H04L47/20 , H04L47/2441
摘要： A network configuration is processed to identify each policy and the criteria associated with each policy. The criteria of the policies are processed to identify a non-overlapping set of ranges of the criteria parameter, each range being associated with a particular policy or set of policies. In a preferred embodiment, the criteria include the protocol, the source and destination IP addresses, and the source and destination ports, and a default range is defined for each criteria parameter.
摘要翻译：处理网络配置以识别每个策略和与每个策略相关联的标准。处理策略的标准以识别标准参数的不重叠的范围集合，每个范围与特定策略或一组策略相关联。在优选实施例中，标准包括协议，源和目的地IP地址以及源和目的地端口，并且为每个标准参数定义默认范围。

5. 发明申请

US20120209867A1 VERIFYING CONSISTENCY AMONG DEVICE CONFIGURATIONS BASED ON COMPARING CONFIGURATION FILES 审中-公开
标题翻译：基于比较配置文件的设备配置中的验证一致性
公开(公告)号：US20120209867A1
公开(公告)日：2012-08-16
申请号：US13454050
申请日：2012-04-23
申请人： Ankit Agarwal , Mahesh Lavannis , Pradeep K. Singh
发明人： Ankit Agarwal , Mahesh Lavannis , Pradeep K. Singh
IPC分类号： G06F17/30
CPC分类号： G06F16/10
摘要： A scalable comparison structure and methodology is provided that is suitable for comparing the configuration of devices in an efficient manner. In the configuration files, section delimiters are defined to identify the sections of the files within which the select data content is located, and differences in the sections are identified based on the select data content within the section. Thereafter, comparisons and reports are based on these unique content sections. Groups of devices are optionally defined, and different sets of select data content can be compared based on these groups. The result of the comparison may be presented in multiple hierarchical forms, including an identification of which configuration files are different from each other, and an identification of the differences among the unique content in these configuration files.
摘要翻译：提供了一种可扩展的比较结构和方法，适用于以有效的方式比较设备的配置。在配置文件中，定义了分段定界符，以标识选择数据内容所在的文件部分，并根据部分中的选择数据内容识别部分中的差异。此后，比较和报告是基于这些独特的内容部分。可选择地定义设备组，并且可以基于这些组来比较不同组的选择数据内容。比较的结果可以以多种分层形式呈现，包括哪些配置文件彼此不同的标识以及这些配置文件中的唯一内容之间的差异的标识。

6. 发明授权

US08955032B2 Assessing network and device compliance with security policies 有权
标题翻译：评估网络和设备符合安全策略
公开(公告)号：US08955032B2
公开(公告)日：2015-02-10
申请号：US11776721
申请日：2007-07-12
申请人： Ankit Agarwal , Nick Bastin , Pradeep K. Singh , Seth Martin
发明人： Ankit Agarwal , Nick Bastin , Pradeep K. Singh , Seth Martin
IPC分类号： H04L29/00 , H04L29/06
CPC分类号： H04L63/20
摘要： All of the transit services that each device is expected to provide are determined and contrasted with the transit configuration of each device. Because the transit configuration of each device may be state-dependent, the service items within each application service are processed in sequential order. Sequences of service items are associated with connection groups, and each of the routes associated with each connection group is determined based on the sequential order of the service items. The configuration of each device along each route is processed to determine the services that will be permitted or denied, based on its current configuration. Each desired transit service item is compared to the transit configuration provided by each device to identify any inconsistencies and/or violations.
摘要翻译：每个设备预期提供的所有过境服务都被确定，并与每个设备的传输配置进行对比。由于每个设备的传输配置可能与状态有关，因此每个应用服务中的服务项目按顺序进行处理。服务项目的顺序与连接组相关联，并且基于服务项目的顺序来确定与每个连接组相关联的每个路线。根据其当前配置，处理每个路由上每个设备的配置，以确定将被允许或拒绝的服务。将每个期望的中转服务项目与由每个设备提供的传输配置进行比较，以识别任何不一致和/或违规。

7. 发明授权

US08166004B2 Verifying data consistency among structured files 有权
标题翻译：验证结构化文件之间的数据一致性
公开(公告)号：US08166004B2
公开(公告)日：2012-04-24
申请号：US12176317
申请日：2008-07-18
申请人： Ankit Agarwal , Mahesh Lavannis , Pradeep K. Singh
发明人： Ankit Agarwal , Mahesh Lavannis , Pradeep K. Singh
IPC分类号： G06F17/00
CPC分类号： G06F17/30067
摘要： A scalable comparison structure and methodology is provided that is suitable for comparing select data content in hundreds or thousands of files in an efficient manner. Section delimiters are defined to identify the sections of the files within which the select data content is located, and sets of unique sections are identified based on the select data content within the section. Thereafter, comparisons and reports are based on these unique content sections. If multiple files include a common set of data, a single unique content section is used to represent these multiple files. File groups are optionally defined, and different sets of select data content can be compared based on these file groups. The result of the comparison is presented in multiple hierarchical forms, including an identification of which files are different from each other, and an identification of the differences among the unique content segments.
摘要翻译：提供了可扩展的比较结构和方法，适用于以有效的方式比较数百或数千个文件中的选择数据内容。段定界符被定义为识别选择数据内容所在的文件的部分，并且基于该部分内的选择数据内容来识别唯一部分的集合。此后，比较和报告是基于这些独特的内容部分。如果多个文件包含一组通用数据，则使用单个唯一内容部分来表示这些多个文件。可选地定义文件组，并且可以基于这些文件组来比较不同组的选择数据内容。比较的结果以多种分层形式呈现，包括哪些文件彼此不同的标识以及唯一内容段之间的差异的识别。

8. 发明申请

US20090055416A1 VERIFYING DATA CONSISTENCY AMONG STRUCTURED FILES 有权
标题翻译：在结构化文件中验证数据一致性
公开(公告)号：US20090055416A1
公开(公告)日：2009-02-26
申请号：US12176317
申请日：2008-07-18
申请人： Ankit Agarwal , Mahesh Lavannis , Pradeep K. Singh
发明人： Ankit Agarwal , Mahesh Lavannis , Pradeep K. Singh
IPC分类号： G06F17/30
CPC分类号： G06F17/30067
摘要： A scalable comparison structure and methodology is provided that is suitable for comparing select data content in hundreds or thousands of files in an efficient manner. Section delimiters are defined to identify the sections of the files within which the select data content is located, and sets of unique sections are identified based on the select data content within the section. Thereafter, comparisons and reports are based on these unique content sections. If multiple files include a common set of data, a single unique content section is used to represent these multiple files. File groups are optionally defined, and different sets of select data content can be compared based on these file groups. The result of the comparison is presented in multiple hierarchical forms, including an identification of which files are different from each other, and an identification of the differences among the unique content segments.
摘要翻译：提供了可扩展的比较结构和方法，适用于以有效的方式比较数百或数千个文件中的选择数据内容。段定界符被定义为识别选择数据内容所在的文件的部分，并且基于该部分内的选择数据内容来识别唯一部分的集合。此后，比较和报告是基于这些独特的内容部分。如果多个文件包含一组通用数据，则使用单个唯一内容部分来表示这些多个文件。可选地定义文件组，并且可以基于这些文件组来比较不同组的选择数据内容。比较的结果以多种分层形式呈现，包括哪些文件彼此不同的标识以及唯一内容段之间的差异的识别。

9. 发明授权

US08130759B2 Routing validation 有权
标题翻译：路由验证
公开(公告)号：US08130759B2
公开(公告)日：2012-03-06
申请号：US11494441
申请日：2006-07-27
申请人： Alain J. Cohen , Pradeep K. Singh , Vinod Jeyachandran , Nitin Gupta
发明人： Alain J. Cohen , Pradeep K. Singh , Vinod Jeyachandran , Nitin Gupta
IPC分类号： H04L12/28
CPC分类号： H04L45/28 , H04L41/0631 , H04L41/08 , H04L41/0866 , H04L41/14 , H04L41/145 , H04L45/02 , H04L45/124
摘要： A simulator simulates routing system protocols to build routing tables corresponding to a modeled network, and a comparator compares the routing tables in the actual network to these simulator-created routing tables. Because the modeled system represents a fault-free version of the actual system, and assuming that the modeled routing system protocols are representative of the algorithms used in the actual routers, these simulator-produced routing tables will represent the ‘ideal’ routing tables that should be present in the routers of the actual network. By querying each router in the actual network for its routing table and comparing each routing table to the corresponding simulator-produced routing table, any differences from the ‘ideal’ can be identified.
摘要翻译：模拟器模拟路由系统协议以构建与建模网络相对应的路由表，并且比较器将实际网络中的路由表与这些模拟器创建的路由表进行比较。因为建模的系统代表了实际系统的无故障版本，并且假设建模的路由系统协议代表实际路由器中使用的算法，则这些模拟器生成的路由表将表示应该应用的“理想”路由表存在于实际网络的路由器中。通过查询实际网络中的每个路由器的路由表，并将每个路由表与相应的模拟器生成的路由表进行比较，可以识别与“ideal”的任何差异。

10. 发明授权

US07843840B2 Traffic independent survivability analysis 有权
标题翻译：交通独立生存能力分析
公开(公告)号：US07843840B2
公开(公告)日：2010-11-30
申请号：US12195393
申请日：2008-08-20
申请人： Vanko Vankov , Arun Pasupathy , Vinod Jeyachandran , Pradeep K. Singh , Alain J. Cohen , Yonghuan Cao
发明人： Vanko Vankov , Arun Pasupathy , Vinod Jeyachandran , Pradeep K. Singh , Alain J. Cohen , Yonghuan Cao
IPC分类号： G06F11/30
CPC分类号： H04L43/50
摘要： First-order effects of hypothesized fault conditions are determined by propagating discrete test packets between select nodes and noting the change of path, if any, taken by the test packet under each condition relative to the fault-free path. Tools are provided to create classes of node pairs of interest, and test packets are created only for select classes. The network is analyzed to identify fault conditions that are likely to impact system performance, and only these fault conditions are simulated. By providing a methodology for selecting classes of node pairs to test, and prioritizing the faults to simulate, a first-order survivability analysis of large networks can be performed efficiently and effectively. The efficiency of this technique is also enhanced by providing test packets that are representative of a wide range of possible source-destination combinations, and by evaluating only the source-destination combinations that may be directly affected by each fault condition.
摘要翻译：通过在选择节点之间传播离散的测试包，并注意到每个条件下相对于无故障路径，由测试包采取的路径（如果有的话）的变化来确定假设故障条件的一阶影响。提供工具来创建感兴趣的节点对类，并且只为选择类创建测试包。分析网络以识别可能影响系统性能的故障状况，并且仅模拟这些故障条件。通过提供一种选择要测试的节点对的类别并对故障进行优先级模拟的方法，可以有效和高效地执行大型网络的一阶生存性分析。通过提供表示广泛范围的可能的源 - 目的地组合的测试分组以及通过仅评估可能由每个故障状况直接影响的源 - 目的地组合来增强该技术的效率。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式