专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20200382560A1 Validation of Cloud Security Policies 审中-公开
公开(公告)号：US20200382560A1
公开(公告)日：2020-12-03
申请号：US16428849
申请日：2019-05-31
申请人： vArmour Networks, Inc.
发明人： Marc Woolward , Meng Xu , Hong Xiao , Keith Stewart , Matthew M. Williamson
IPC分类号： H04L29/06 , H04L29/08 , G06F16/901
摘要： Methods and systems for validating security policy in a cloud computing environment are provided. An example method includes providing a graph database, the graph database representing workloads of the cloud computing environment as nodes and relationships between the workloads as edges, receiving a security policy, the security policy logically describing rules for the relationships between the workloads, determining, based on the security policy and the graph database, a list of violations, the list of violations including at least one relationship from the relationships between the workloads in the graph database, the at least one relationship being not allowed by at least one of the rules in the security policy, and providing the list of violations to a user.

2. 发明申请

US20200382557A1 Reliability Prediction for Cloud Security Policies 审中-公开
公开(公告)号：US20200382557A1
公开(公告)日：2020-12-03
申请号：US16428858
申请日：2019-05-31
申请人： vArmour Networks, Inc.
发明人： Marc Woolward , Xiaodan Li
IPC分类号： H04L29/06 , G06F17/18 , G06F16/901
摘要： Methods and systems for reliability prediction of security policies in a cloud computing environment are provided. An example method includes providing a graph database representing workloads of the cloud computing environment as nodes and relationships between the workloads as edges, the relationships being associated with points in time, receiving a security policy including rules for the relationships between the workloads, generating a plurality of earliest points in time based on the rules and the graph database, wherein generating the plurality of earliest points in time includes: determining, for each rule of the rules, a subset of the relationships in the graph database such that each of the subset of the relationships matches the rule, and selecting an earliest point in time from points in time associated with relationships from the subset, and analyzing the plurality of earliest points in time to determine a reliability score for the security policy.

3. 发明申请

US20170374032A1 Autonomic Protection of Critical Network Applications Using Deception Techniques 审中-公开
公开(公告)号：US20170374032A1
公开(公告)日：2017-12-28
申请号：US15299433
申请日：2016-10-20
申请人： vArmour Networks, Inc.
发明人： Marc Woolward , Matthew M. Williamson
IPC分类号： H04L29/06 , G06F9/455
CPC分类号： H04L63/0263 , G06F9/45558 , G06F2009/45587 , G06F2009/45595 , H04L63/1491
摘要： Methods and systems for autonomously forwarding unauthorized access of critical application infrastructure in a network to a deception point are provided. Exemplary methods include: receiving a high-level security policy including a specification of the critical application infrastructure, prohibited behaviors, and an identification associated with the deception point, the specification including at least one of an application and a protocol; classifying each workload in the network; identifying the critical application infrastructure using the classification and specification of the critical application infrastructure; generating a low-level firewall rule set using the identified critical application infrastructure and the high-level security policy; and providing the low-level firewall rule set to an enforcement point, such that the enforcement point forwards incoming data traffic including prohibited behaviors directed to the critical application infrastructure to the deception point.

4. 发明授权

US09525697B2 Delivering security functions to distributed networks 有权
标题翻译：向分布式网络提供安全功能
公开(公告)号：US09525697B2
公开(公告)日：2016-12-20
申请号：US14677755
申请日：2015-04-02
申请人： vArmour Networks, Inc.
发明人： Marc Woolward , Choung-Yaw Shieh , Jia-Jyi Lian
IPC分类号： H04L29/06 , G06F21/55 , G06F21/57
CPC分类号： H04L63/0263 , G06F21/53 , G06F21/552 , G06F21/57 , H04L63/0227 , H04L63/0236 , H04L63/1408 , H04L63/1425 , H04L63/1433 , H04L63/1441 , H04L63/1458 , H04L63/20 , H04L2463/141
摘要： Systems and methods for delivering security functions to a distributed network are described herein. An exemplary method may include: processing a data packet received from a switch, the data packet directed to the at least one network asset; selectively forwarding the data packet using the processing and a rule set; inspecting the forwarded packet; directing the enforcement point to at least one of forward the data packet to the at least one network asset and drop the data packet, using the inspection and the rule set; accumulating data associated with at least one of the data packet, the processing, and the inspection; analyzing the at least one of the data packet, the processing, and the inspection; and initiating compilation of a high-level security policy by the compiler using the analysis to produce an updated rule set.
摘要翻译：这里描述了用于将安全功能递送到分布式网络的系统和方法。一种示例性方法可以包括：处理从交换机接收的数据分组，该数据分组被定向到该至少一个网络资产; 使用处理和规则集选择性地转发数据分组; 检查转发的数据包; 将执行点指向至少一个将所述数据分组转发到所述至少一个网络资产并使用所述检查和所述规则集丢弃所述数据分组的至少一个; 累积与数据分组，处理和检查中的至少一个相关联的数据; 分析数据分组中的至少一个，处理和检查; 并且由编译器使用分析开始编译高级别安全策略以生成更新的规则集。

5. 发明申请

US20160269425A1 METHODS AND SYSTEMS FOR PROVIDING SECURITY TO DISTRIBUTED MICROSERVICES 审中-公开
标题翻译：用于向分布式微型器件提供安全保护的方法和系统
公开(公告)号：US20160269425A1
公开(公告)日：2016-09-15
申请号：US14657282
申请日：2015-03-13
申请人： vArmour Networks, Inc.
发明人： Choung-Yaw Michael Shieh , Marc Woolward
IPC分类号： H04L29/06
CPC分类号： H04L63/0254 , H04L63/0263 , H04L63/10
摘要： Systems for providing security to distributed microservices are provided herein. In some embodiments, a system includes a plurality of microservices, each of the plurality of microservices having a plurality of distributed microservice components. At least a portion of the distributed microservice components execute on different physical or virtual servers in a data center or a cloud. The system also includes a plurality of logical security boundaries, with each of the plurality of logical security boundaries being created by a plurality of enforcement points positioned in association with the plurality of distributed microservice components. Each of plurality of microservices is bounded by one of the plurality of logical security boundaries.
摘要翻译：本文提供了为分布式微服务提供安全性的系统。在一些实施例中，系统包括多个微服务器，多个微服务器中的每一个具有多个分布式微服务组件。分布式微服务组件的至少一部分在数据中心或云中的不同物理或虚拟服务器上执行。该系统还包括多个逻辑安全边界，多个逻辑安全边界中的每一个由与多个分布式微服务组件相关联地定位的多个执行点创建。多个微服务中的每一个由多个逻辑安全边界中的一个界限。

6. 发明授权

US11310284B2 Validation of cloud security policies 有权
公开(公告)号：US11310284B2
公开(公告)日：2022-04-19
申请号：US16428849
申请日：2019-05-31
申请人： vArmour Networks, Inc.
发明人： Marc Woolward , Meng Xu , Hong Xiao , Keith Stewart , Matthew M. Williamson
IPC分类号： H04L29/06 , G06F16/901 , H04L67/1097
摘要： Methods and systems for validating security policy in a cloud computing environment are provided. An example method includes providing a graph database, the graph database representing workloads of the cloud computing environment as nodes and relationships between the workloads as edges, receiving a security policy, the security policy logically describing rules for the relationships between the workloads, determining, based on the security policy and the graph database, a list of violations, the list of violations including at least one relationship from the relationships between the workloads in the graph database, the at least one relationship being not allowed by at least one of the rules in the security policy, and providing the list of violations to a user.

7. 发明申请

US20210168150A1 Systems and Methods for Understanding Identity and Organizational Access to Applications within an Enterprise Environment 有权
公开(公告)号：US20210168150A1
公开(公告)日：2021-06-03
申请号：US17170320
申请日：2021-02-08
申请人： vArmour Networks, Inc.
发明人： Colin Ross , Marc Woolward , Keith Stewart , Paul Bigbee , Hsi-Sheng Wang
IPC分类号： H04L29/06 , G06Q10/10 , G06Q10/06 , G06F16/21
摘要： Methods and systems for understanding identity and organizational access to applications within an enterprise environment are provided. Exemplary methods include collecting data about relationships between applications and metadata associated with the applications in a computing environment of an enterprise, the metadata including information concerning a plurality of users accessing the applications; updating a graph database including nodes representing the applications of the computing environment of the enterprise and edges representing relationships between the applications; enriching the graph database by associating the nodes with metadata associated with the applications and associating user accounts with metadata associated with roles, organizations membership, privileges, and permissions; analyzing the graph database to identify a subset of nodes being accessed by a user of the plurality of users; and displaying, via a graphical user interface, a graphical representation of the subset of nodes and relationships between the nodes in the subset of the nodes.

8. 发明申请

US20210120029A1 Modeling Application Dependencies to Identify Operational Risk 有权
公开(公告)号：US20210120029A1
公开(公告)日：2021-04-22
申请号：US17133466
申请日：2020-12-23
申请人： vArmour Networks, Inc.
发明人： Colin Ross , Marc Woolward , Keith Stewart
IPC分类号： H04L29/06 , G06F16/901 , G06F16/23 , G06F9/54
摘要： Methods and systems for managing security in a cloud computing environment are provided. Exemplary methods include: gathering data about workloads and applications in the cloud computing environment; updating a graph database using the data, the graph database representing the workloads of the cloud computing environment as nodes and relationships between the workloads as edges; receiving a security template, the security template logically describing targets in the cloud computing environment to be protected and how to protect the targets; creating a security policy using the security template and information in the graph database; and deploying the security policy in the cloud computing environment.

9. 发明授权

US10009317B2 Security policy generation using container metadata 有权
公开(公告)号：US10009317B2
公开(公告)日：2018-06-26
申请号：US15334151
申请日：2016-10-25
申请人： vArmour Networks, Inc.
发明人： Marc Woolward
IPC分类号： H04L29/06
CPC分类号： H04L63/0263 , H04L63/1416 , H04L63/1441 , H04L63/20
摘要： Methods, systems, and media for producing a firewall rule set are provided herein. Exemplary methods may include: receiving metadata about a deployed container from a container orchestration layer; determining an application or service associated with the deployed container from the received metadata; retrieving at least one model using the determined application or service, the at least one model identifying expected network communications behavior of the deployed container; and generating a high-level declarative security policy associated with the deployed container using the at least one model, the high-level declarative security policy indicating at least an application or service with which the deployed container can communicate.

10. 发明申请

US20170208100A1 Conditional Declarative Policies 审中-公开
公开(公告)号：US20170208100A1
公开(公告)日：2017-07-20
申请号：US15479728
申请日：2017-04-05
申请人： vArmour Networks, Inc.
发明人： Jia-Jyi Lian , Anthony Paterra , Marc Woolward
IPC分类号： H04L29/06 , H04L12/24
CPC分类号： H04L63/20 , H04L41/0806 , H04L41/0893 , H04L63/0263
摘要： Methods, systems, and media for producing a firewall rule set are provided herein. Exemplary methods may include receiving a declarative policy associated with a computer network security policy; collecting information from at least one external system of record; generating a firewall rule set using the declarative policy and information, the firewall rule set including addresses to or from which network communications are permitted, denied, redirected or logged, the firewall rule set being at a lower level of abstraction than the declarative policy; and provisioning the firewall rule set to a plurality of enforcement points of a distributed firewall, the firewall selectively policing network communications among workloads using the firewall rule set.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式