WO2011038420A3 - Procédés, systèmes et supports lisibles par ordinateur pour filtrage adaptatif de paquets - Google Patents

Procédés, systèmes et supports lisibles par ordinateur pour filtrage adaptatif de paquets Download PDF

Info

Publication number
WO2011038420A3
WO2011038420A3 PCT/US2010/054520 US2010054520W WO2011038420A3 WO 2011038420 A3 WO2011038420 A3 WO 2011038420A3 US 2010054520 W US2010054520 W US 2010054520W WO 2011038420 A3 WO2011038420 A3 WO 2011038420A3
Authority
WO
WIPO (PCT)
Prior art keywords
rules
packet
subset
firewall
sorted
Prior art date
Application number
PCT/US2010/054520
Other languages
English (en)
Other versions
WO2011038420A2 (fr
Inventor
David K. Ahn
Original Assignee
Great Wall Systems
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Great Wall Systems filed Critical Great Wall Systems
Priority to AU2010297968A priority Critical patent/AU2010297968B2/en
Priority to EP10819667.6A priority patent/EP2471218B1/fr
Priority to CA2772630A priority patent/CA2772630C/fr
Publication of WO2011038420A2 publication Critical patent/WO2011038420A2/fr
Publication of WO2011038420A3 publication Critical patent/WO2011038420A3/fr

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227—Filtering policies
    • H04L63/0263—Rule management
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/562—Static detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227—Filtering policies
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416—Event detection, e.g. attack signature detection

Abstract

L'invention concerne des procédés, des systèmes et des supports lisibles par ordinateur, destinés à un filtrage adaptatif de paquets. Un procédé consiste à identifier au moins un sous-ensemble de règles et un ensemble ordonné de règles de filtrage de paquets anti-intrusion définissant une politique anti-intrusion telle que le sous-ensemble contienne des règles disjointes. Les règles disjointes sont définies comme des règles dont l'ordre peut être changé sans nuire à l'intégrité de la politique anti-intrusion. Les règles du sous-ensemble sont triées de manière à réduire statistiquement le nombre de comparaisons qui seront appliquées à chaque paquet rencontré par le module anti-intrusion. Les paquets sont filtrés au niveau du module anti-intrusion, au moyen des règles triées du sous-ensemble, par comparaison de chaque paquet à chaque règle triée du sous-ensemble jusqu'à ce que le paquet soit accepté ou refusé, cette comparaison étant interrompue dès que le paquet est accepté ou refusé, ce qui permet d'effectuer une recherche sous linéaire de paquets filtrés au moyen des règles triées du sous-ensemble.
PCT/US2010/054520 2009-08-28 2010-10-28 Procédés, systèmes et supports lisibles par ordinateur pour filtrage adaptatif de paquets WO2011038420A2 (fr)

Priority Applications (3)

Application Number Priority Date Filing Date Title
AU2010297968A AU2010297968B2 (en) 2009-08-28 2010-10-28 Methods, systems, and computer readable media for adaptive packet filtering
EP10819667.6A EP2471218B1 (fr) 2009-08-28 2010-10-28 Procédé, système et support lisible par ordinateur pour filtrage adaptatif de paquets
CA2772630A CA2772630C (fr) 2010-08-30 2010-10-28 Procedes, systemes et supports lisibles par ordinateur pour filtrage adaptatif de paquets

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
US23797409P 2009-08-28 2009-08-28
US61/237,974 2009-08-28
US12/871,806 US8495725B2 (en) 2009-08-28 2010-08-30 Methods, systems, and computer readable media for adaptive packet filtering
US12/871,806 2010-08-30

Publications (2)

Publication Number Publication Date
WO2011038420A2 WO2011038420A2 (fr) 2011-03-31
WO2011038420A3 true WO2011038420A3 (fr) 2011-06-16

Family

ID=43626801

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2010/054520 WO2011038420A2 (fr) 2009-08-28 2010-10-28 Procédés, systèmes et supports lisibles par ordinateur pour filtrage adaptatif de paquets

Country Status (4)

Country Link
US (4) US8495725B2 (fr)
EP (1) EP2471218B1 (fr)
AU (1) AU2010297968B2 (fr)
WO (1) WO2011038420A2 (fr)

Families Citing this family (80)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1864226B1 (fr) * 2005-03-28 2013-05-15 Wake Forest University Procedes, systemes et produits de programmes informatiques pour l'optimisation de la politique de pare-feu d'un reseau
US8495725B2 (en) 2009-08-28 2013-07-23 Great Wall Systems Methods, systems, and computer readable media for adaptive packet filtering
WO2011030490A1 (fr) * 2009-09-10 2011-03-17 日本電気株式会社 Dispositif de commande de relais, système de commande de relais, procédé de commande de relais et programme de commande de relais
US8904514B2 (en) * 2010-04-12 2014-12-02 Hewlett-Packard Development Company, L.P. Implementing a host security service by delegating enforcement to a network device
KR20120058200A (ko) * 2010-11-29 2012-06-07 한국전자통신연구원 단계별 트래픽 제어정책을 수행하는 트래픽 제어시스템 및 트래픽 제어방법
US20120324569A1 (en) * 2011-06-15 2012-12-20 Mcafee, Inc. Rule compilation in a firewall
US9736065B2 (en) 2011-06-24 2017-08-15 Cisco Technology, Inc. Level of hierarchy in MST for traffic localization and load balancing
US8908698B2 (en) 2012-01-13 2014-12-09 Cisco Technology, Inc. System and method for managing site-to-site VPNs of a cloud managed network
US9100366B2 (en) * 2012-09-13 2015-08-04 Cisco Technology, Inc. Early policy evaluation of multiphase attributes in high-performance firewalls
US9137205B2 (en) 2012-10-22 2015-09-15 Centripetal Networks, Inc. Methods and systems for protecting a secured network
US9565213B2 (en) 2012-10-22 2017-02-07 Centripetal Networks, Inc. Methods and systems for protecting a secured network
JP5966092B2 (ja) 2012-11-14 2016-08-10 テレフオンアクチーボラゲット エルエム エリクソン（パブル） コンテンツベースの過負荷保護
US9203806B2 (en) 2013-01-11 2015-12-01 Centripetal Networks, Inc. Rule swapping in a packet network
US9124552B2 (en) 2013-03-12 2015-09-01 Centripetal Networks, Inc. Filtering network data transfers
US9094445B2 (en) 2013-03-15 2015-07-28 Centripetal Networks, Inc. Protecting networks from cyber attacks and overloading
US9747311B2 (en) 2013-07-09 2017-08-29 Oracle International Corporation Solution to generate a scriptset for an automated database migration
US9762461B2 (en) 2013-07-09 2017-09-12 Oracle International Corporation Cloud services performance tuning and benchmarking
US9491072B2 (en) 2013-07-09 2016-11-08 Oracle International Corporation Cloud services load testing and analysis
US11157664B2 (en) 2013-07-09 2021-10-26 Oracle International Corporation Database modeling and analysis
US9967154B2 (en) 2013-07-09 2018-05-08 Oracle International Corporation Advanced customer support services—advanced support cloud portal
US9805070B2 (en) 2013-07-09 2017-10-31 Oracle International Corporation Dynamic migration script management
US9792321B2 (en) 2013-07-09 2017-10-17 Oracle International Corporation Online database migration
US10776244B2 (en) 2013-07-09 2020-09-15 Oracle International Corporation Consolidation planning services for systems migration
US9996562B2 (en) 2013-07-09 2018-06-12 Oracle International Corporation Automated database migration architecture
US10735453B2 (en) 2013-11-13 2020-08-04 Verizon Patent And Licensing Inc. Network traffic filtering and routing for threat analysis
US9654445B2 (en) 2013-11-13 2017-05-16 ProtectWise, Inc. Network traffic filtering and routing for threat analysis
US9516049B2 (en) * 2013-11-13 2016-12-06 ProtectWise, Inc. Packet capture and network traffic replay
US9215214B2 (en) 2014-02-20 2015-12-15 Nicira, Inc. Provisioning firewall rules on a firewall enforcing device
US9264370B1 (en) 2015-02-10 2016-02-16 Centripetal Networks, Inc. Correlating packets in communications networks
US9866576B2 (en) 2015-04-17 2018-01-09 Centripetal Networks, Inc. Rule-based network-threat detection
US10476982B2 (en) 2015-05-15 2019-11-12 Cisco Technology, Inc. Multi-datacenter message queue
US9838354B1 (en) * 2015-06-26 2017-12-05 Juniper Networks, Inc. Predicting firewall rule ranking value
US9680706B2 (en) 2015-06-30 2017-06-13 Nicira, Inc. Federated firewall management for moving workload across data centers
US10205677B2 (en) 2015-11-24 2019-02-12 Cisco Technology, Inc. Cloud resource placement optimization and migration execution in federated clouds
US10084703B2 (en) * 2015-12-04 2018-09-25 Cisco Technology, Inc. Infrastructure-exclusive service forwarding
EP3366014A4 (fr) * 2015-12-17 2019-05-01 Hewlett-Packard Enterprise Development LP Sélection d'ensemble réduit de politiques de réseau orthogonales
US9917856B2 (en) 2015-12-23 2018-03-13 Centripetal Networks, Inc. Rule-based network-threat detection for encrypted communications
US11729144B2 (en) 2016-01-04 2023-08-15 Centripetal Networks, Llc Efficient packet capture for cyber threat analysis
US10367914B2 (en) 2016-01-12 2019-07-30 Cisco Technology, Inc. Attaching service level agreements to application containers and enabling service assurance
US10216478B2 (en) 2016-03-30 2019-02-26 International Business Machines Corporation Increasing radix sorting efficiency utilizing a crossover point
US10135727B2 (en) 2016-04-29 2018-11-20 Nicira, Inc. Address grouping for distributed service rules
US10348685B2 (en) 2016-04-29 2019-07-09 Nicira, Inc. Priority allocation for distributed service rules
US11425095B2 (en) * 2016-05-01 2022-08-23 Nicira, Inc. Fast ordering of firewall sections and rules
US11171920B2 (en) 2016-05-01 2021-11-09 Nicira, Inc. Publication of firewall configuration
US11036696B2 (en) 2016-06-07 2021-06-15 Oracle International Corporation Resource allocation for database provisioning
US11258761B2 (en) * 2016-06-29 2022-02-22 Nicira, Inc. Self-service firewall configuration
US11088990B2 (en) 2016-06-29 2021-08-10 Nicira, Inc. Translation cache for firewall configuration
US10432532B2 (en) 2016-07-12 2019-10-01 Cisco Technology, Inc. Dynamically pinning micro-service to uplink port
US10382597B2 (en) 2016-07-20 2019-08-13 Cisco Technology, Inc. System and method for transport-layer level identification and isolation of container traffic
US10567344B2 (en) 2016-08-23 2020-02-18 Cisco Technology, Inc. Automatic firewall configuration based on aggregated cloud managed information
US10320683B2 (en) 2017-01-30 2019-06-11 Cisco Technology, Inc. Reliable load-balancer using segment routing and real-time application monitoring
US10671571B2 (en) 2017-01-31 2020-06-02 Cisco Technology, Inc. Fast network performance in containerized environments for network function virtualization
EP3586485B1 (fr) * 2017-02-27 2021-09-22 Telefonaktiebolaget LM Ericsson (publ.) Composition et décomposition d'ensemble de règles de pare-feu
US11005731B2 (en) 2017-04-05 2021-05-11 Cisco Technology, Inc. Estimating model parameters for automatic deployment of scalable micro services
US10382274B2 (en) 2017-06-26 2019-08-13 Cisco Technology, Inc. System and method for wide area zero-configuration network auto configuration
US10439877B2 (en) 2017-06-26 2019-10-08 Cisco Technology, Inc. Systems and methods for enabling wide area multicast domain name system
US10503899B2 (en) 2017-07-10 2019-12-10 Centripetal Networks, Inc. Cyberanalysis workflow acceleration
US10425288B2 (en) 2017-07-21 2019-09-24 Cisco Technology, Inc. Container telemetry in data center environments with blade servers and switches
US10601693B2 (en) 2017-07-24 2020-03-24 Cisco Technology, Inc. System and method for providing scalable flow monitoring in a data center fabric
US10284526B2 (en) 2017-07-24 2019-05-07 Centripetal Networks, Inc. Efficient SSL/TLS proxy
US11233777B2 (en) 2017-07-24 2022-01-25 Centripetal Networks, Inc. Efficient SSL/TLS proxy
US10541866B2 (en) 2017-07-25 2020-01-21 Cisco Technology, Inc. Detecting and resolving multicast traffic performance issues
US10705882B2 (en) 2017-12-21 2020-07-07 Cisco Technology, Inc. System and method for resource placement across clouds for data intensive workloads
US11595474B2 (en) 2017-12-28 2023-02-28 Cisco Technology, Inc. Accelerating data replication using multicast and non-volatile memory enabled nodes
US10848462B2 (en) 2018-03-28 2020-11-24 Wipro Limited Method and system for managing policies in a network security system
US10728361B2 (en) 2018-05-29 2020-07-28 Cisco Technology, Inc. System for association of customer information across subscribers
US10904322B2 (en) 2018-06-15 2021-01-26 Cisco Technology, Inc. Systems and methods for scaling down cloud-based servers handling secure connections
US10764266B2 (en) 2018-06-19 2020-09-01 Cisco Technology, Inc. Distributed authentication and authorization for rapid scaling of containerized services
US11019083B2 (en) 2018-06-20 2021-05-25 Cisco Technology, Inc. System for coordinating distributed website analysis
US10819571B2 (en) 2018-06-29 2020-10-27 Cisco Technology, Inc. Network traffic optimization using in-situ notification system
US10333898B1 (en) 2018-07-09 2019-06-25 Centripetal Networks, Inc. Methods and systems for efficient network protection
US10904342B2 (en) 2018-07-30 2021-01-26 Cisco Technology, Inc. Container networking using communication tunnels
US11310242B2 (en) * 2019-01-15 2022-04-19 Raytheon Bbn Technologies Corp. System and method for protecting network-facing services
US11310202B2 (en) 2019-03-13 2022-04-19 Vmware, Inc. Sharing of firewall rules among multiple workloads in a hypervisor
DE102019208709A1 (de) 2019-06-14 2020-12-17 Siemens Mobility GmbH Rechenanlage und Verfahren zum Betreiben einer Rechenanlage
US11256671B2 (en) 2019-09-13 2022-02-22 Oracle International Corporation Integrated transition control center
US11316823B2 (en) 2020-08-27 2022-04-26 Centripetal Networks, Inc. Methods and systems for efficient virtualization of inline transparent computer networking devices
US11362996B2 (en) 2020-10-27 2022-06-14 Centripetal Networks, Inc. Methods and systems for efficient adaptive logging of cyber threat incidents
US11159546B1 (en) 2021-04-20 2021-10-26 Centripetal Networks, Inc. Methods and systems for efficient threat context-aware packet filtering for network protection
US20230077594A1 (en) * 2021-09-15 2023-03-16 Arista Networks, Inc. Goto action in network traffic policies

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6098172A (en) * 1997-09-12 2000-08-01 Lucent Technologies Inc. Methods and apparatus for a computer network firewall with proxy reflection
KR20010079361A (ko) * 2001-07-09 2001-08-22 김상욱 네트워크 상태 기반의 방화벽 장치 및 그 방법
US20050010765A1 (en) * 2003-06-06 2005-01-13 Microsoft Corporation Method and framework for integrating a plurality of network policies
US20060070122A1 (en) * 1999-06-30 2006-03-30 Bellovin Steven M Method and apparatus for a distributed firewall

Family Cites Families (41)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6484261B1 (en) * 1998-02-17 2002-11-19 Cisco Technology, Inc. Graphical network security policy management
CA2287689C (fr) 1998-12-03 2003-09-30 P. Krishnan Rearrangement adaptatif de l'ordre des regles de filtrage de paquets de donnees
EP1107140A3 (fr) * 1999-11-30 2004-01-28 Hitachi, Ltd. Méthode d'aide à la conception de systèmes de sécurité
US6662235B1 (en) * 2000-08-24 2003-12-09 International Business Machines Corporation Methods systems and computer program products for processing complex policy rules based on rule form type
US20020038339A1 (en) * 2000-09-08 2002-03-28 Wei Xu Systems and methods for packet distribution
KR100398281B1 (ko) * 2001-04-17 2003-09-19 시큐아이닷컴 주식회사 패킷 차단방식 방화벽 시스템에서의 고속 정책 판별 방법
US7227842B1 (en) 2001-04-24 2007-06-05 Tensilica, Inc. Fast IP packet classification with configurable processor
US6947983B2 (en) * 2001-06-22 2005-09-20 International Business Machines Corporation Method and system for exploiting likelihood in filter rule enforcement
US7331061B1 (en) 2001-09-07 2008-02-12 Secureworks, Inc. Integrated computer security management system and method
US7386525B2 (en) 2001-09-21 2008-06-10 Stonesoft Corporation Data packet filtering
US7107613B1 (en) 2002-03-27 2006-09-12 Cisco Technology, Inc. Method and apparatus for reducing the number of tunnels used to implement a security policy on a network
GB2387681A (en) * 2002-04-18 2003-10-22 Isis Innovation Intrusion detection system with inductive logic means for suggesting new general rules
US7363099B2 (en) * 2002-06-07 2008-04-22 Cadence Design Systems, Inc. Integrated circuit metrology
US7441262B2 (en) 2002-07-11 2008-10-21 Seaway Networks Inc. Integrated VPN/firewall system
US7263099B1 (en) 2002-08-14 2007-08-28 Juniper Networks, Inc. Multicast packet replication
FR2844415B1 (fr) 2002-09-05 2005-02-11 At & T Corp Systeme pare-feu pour interconnecter deux reseaux ip geres par deux entites administratives differentes
WO2004032445A2 (fr) 2002-10-02 2004-04-15 Richard Reiner Creation de regles pour le triage des demandes adressees a une application sur ordinateur et detection d'erreurs dans l'application
US20050125697A1 (en) * 2002-12-27 2005-06-09 Fujitsu Limited Device for checking firewall policy
US20040193943A1 (en) * 2003-02-13 2004-09-30 Robert Angelino Multiparameter network fault detection system using probabilistic and aggregation analysis
US20040177139A1 (en) 2003-03-03 2004-09-09 Schuba Christoph L. Method and apparatus for computing priorities between conflicting rules for network services
US7305708B2 (en) * 2003-04-14 2007-12-04 Sourcefire, Inc. Methods and systems for intrusion detection
US7509673B2 (en) 2003-06-06 2009-03-24 Microsoft Corporation Multi-layered firewall architecture
US7237267B2 (en) * 2003-10-16 2007-06-26 Cisco Technology, Inc. Policy-based network security management
US20050183140A1 (en) * 2003-11-20 2005-08-18 Goddard Stephen M. Hierarchical firewall load balancing and L4/L7 dispatching
US7389532B2 (en) * 2003-11-26 2008-06-17 Microsoft Corporation Method for indexing a plurality of policy filters
US20050229246A1 (en) 2004-03-31 2005-10-13 Priya Rajagopal Programmable context aware firewall with integrated intrusion detection system
EP1762079A1 (fr) * 2004-06-23 2007-03-14 Qualcomm Incorporated Classification efficace de paquets de reseau
AU2005328336B2 (en) 2004-12-22 2011-09-15 Wake Forest University Method, systems, and computer program products for implementing function-parallel network firewall
EP1864226B1 (fr) 2005-03-28 2013-05-15 Wake Forest University Procedes, systemes et produits de programmes informatiques pour l'optimisation de la politique de pare-feu d'un reseau
US7966655B2 (en) * 2006-06-30 2011-06-21 At&T Intellectual Property Ii, L.P. Method and apparatus for optimizing a firewall
US8639837B2 (en) * 2006-07-29 2014-01-28 Blue Coat Systems, Inc. System and method of traffic inspection and classification for purposes of implementing session ND content control
US7954143B2 (en) * 2006-11-13 2011-05-31 At&T Intellectual Property I, Lp Methods, network services, and computer program products for dynamically assigning users to firewall policy groups
WO2008093320A1 (fr) 2007-01-31 2008-08-07 Tufin Software Technologies Ltd. Système et procédé pour vérifier une politique de sécurité
US8209738B2 (en) * 2007-05-31 2012-06-26 The Board Of Trustees Of The University Of Illinois Analysis of distributed policy rule-sets for compliance with global policy
US8418240B2 (en) * 2007-12-26 2013-04-09 Algorithmic Security (Israel) Ltd. Reordering a firewall rule base according to usage statistics
US8490171B2 (en) * 2008-07-14 2013-07-16 Tufin Software Technologies Ltd. Method of configuring a security gateway and system thereof
US20100199346A1 (en) * 2009-02-02 2010-08-05 Telcordia Technologies, Inc. System and method for determining symantic equivalence between access control lists
US8468220B2 (en) * 2009-04-21 2013-06-18 Techguard Security Llc Methods of structuring data, pre-compiled exception list engines, and network appliances
US8588422B2 (en) * 2009-05-28 2013-11-19 Novell, Inc. Key management to protect encrypted data of an endpoint computing device
US8495725B2 (en) 2009-08-28 2013-07-23 Great Wall Systems Methods, systems, and computer readable media for adaptive packet filtering
US7890627B1 (en) * 2009-09-02 2011-02-15 Sophos Plc Hierarchical statistical model of internet reputation

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6098172A (en) * 1997-09-12 2000-08-01 Lucent Technologies Inc. Methods and apparatus for a computer network firewall with proxy reflection
US20060070122A1 (en) * 1999-06-30 2006-03-30 Bellovin Steven M Method and apparatus for a distributed firewall
KR20010079361A (ko) * 2001-07-09 2001-08-22 김상욱 네트워크 상태 기반의 방화벽 장치 및 그 방법
US20050010765A1 (en) * 2003-06-06 2005-01-13 Microsoft Corporation Method and framework for integrating a plurality of network policies

Also Published As

Publication number Publication date
AU2010297968A1 (en) 2012-03-22
AU2010297968B2 (en) 2015-06-04
US20210226920A1 (en) 2021-07-22
US20140007216A1 (en) 2014-01-02
US20220124070A1 (en) 2022-04-21
EP2471218B1 (fr) 2019-12-04
US8495725B2 (en) 2013-07-23
US20110055916A1 (en) 2011-03-03
WO2011038420A2 (fr) 2011-03-31
EP2471218A2 (fr) 2012-07-04
EP2471218A4 (fr) 2015-02-11

Similar Documents

Publication Publication Date Title
WO2011038420A3 (fr) Procédés, systèmes et supports lisibles par ordinateur pour filtrage adaptatif de paquets
WO2006105093A3 (fr) Procedes, systemes et produits de programmes informatiques pour l'optimisation de la politique de pare-feu d'un reseau
WO2012024762A8 (fr) Procédé et appareil de filtrage de données de diffusion en continu
WO2014052756A3 (fr) Appareil, système et procédé pour identifier et atténuer des menaces malveillantes sur un réseau
CN102882881B (zh) 针对dns服务的拒绝服务攻击的数据过滤方法
WO2012154674A3 (fr) Procédés, systèmes et supports de stockage lisibles par un ordinateur pour commuter un abonné entre des réseaux d'accès
WO2011003470A8 (fr) Procédé pour sélectionner une politiques de sécurité
WO2011109766A3 (fr) Filtrage de paramètre d'entrée pour sécurité d'application web
WO2012023050A3 (fr) Système et procédé de réalisation sécurisée d'applications informatiques dans le cloud
WO2013184206A3 (fr) Exploration de chemins permettant de détecter des sous-graphes anormaux et utilisation de requêtes dns et d'agents hôtes pour la détection d'ormalie/changement et la reconnaissance de la situation du réseau
CN104753863A (zh) 一种分布式拒绝服务攻击的防御方法、设备及系统
WO2010127173A3 (fr) Système, appareil et procédé de mise en oeuvre d'analyseurs de réseau à grande vitesse
WO2013128356A3 (fr) Masquage composé et entropie pour classification de paquet de données à l'aide d'une reconnaissance de formes binaires à base d'arbre
WO2009068822A3 (fr) Procede et dispositif de tri de paquets
WO2011008017A3 (fr) Appareil et procédé de séparation de réseaux à base d'hôte
WO2013152229A8 (fr) Systèmes et procédés de suppression sélective de redondances de données (sdre) pour des hôtes à ressources limitées
CN102693236A (zh) 基于内容理解的不良信息过滤方法
CN102891855A (zh) 网络数据流安全处理方法及设备
WO2009064114A3 (fr) Procédé et système de protection destinés à contrer une attaque de déni de service distribué
WO2008070549A3 (fr) Filtrage et régulation pour la protection contre les attaques entraînant un refus de service sur un réseau
WO2008063389A3 (fr) Coupure basée sur le hachage
CN102609516A (zh) 基于内容理解的不良信息过滤方法
WO2014100660A3 (fr) Identification d'éléments de circuit pour une inclusion sélective dans un traitement de poussée en vitesse dans un circuit intégré, et systèmes de circuit, appareil et supports lisibles par ordinateur associés
EP2621121A3 (fr) Codes suralimentés
WO2006091578A3 (fr) Procedes, systemes et produits de programme informatique pour realiser une correlation, un routage et une distribution d'informations extensible sur la base du profil et du contexte

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 10819667

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 2010297968

Country of ref document: AU

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: 2772630

Country of ref document: CA

WWE Wipo information: entry into national phase

Ref document number: 2010819667

Country of ref document: EP

ENP Entry into the national phase

Ref document number: 2010297968

Country of ref document: AU

Date of ref document: 20101028

Kind code of ref document: A