Lenovo (singapore) Pte. Ltd.

Lenovo Global Technology (united States) Inc.

Keysight Technologies, Inc.

Bogdan-Cosmin Chifor

Radu Mihai Iorga

Corneliu-Ilie Calciu

George-Andrei Stanescu

Peter Joseph Marsico

Anda-Maria Nicolae

Crina-elena Untea

Eduard Pavel

A method for injecting a test plugin into a user-space network protocol stack executing on a device under test (DUT) and executing the test plugin during testing of the DUT includes transmitting, from a test system and to a first DUT, a first test plugin. The method further includes injecting the first test plugin into a user-space network protocol stack executing on the first DUT while the user-space network protocol stack is executing. The method further includes executing the first test plugin. The method further includes, while the first test plugin is executing, transmitting test packets to the DUT and receiving packets from the DUT. The method further includes reporting, from the DUT and to the test system, results generated from execution of the first test plugin.

Methods, systems, and computer readable media for injecting test plugins into user-space network protocol stack executing on device under test (DUT) and executing test plugins during testing of DUT

Covert monitoring of an attacker host in a software defined perimeter network, includes: authenticating, by an SDP controller, a first and second host in the SDP network, where the first and second host, after authentication, establish an end-to-end encryption communication session; detecting, by the SDP controller, that the first host is an attacker host and the second host is a victim host; establishing, by the SDP controller as a copy of the victim host, a mimic host; and redirecting, by the SDP controller, communication from the attacker host to the mimic host including migrating, without disruption detectable by the attacker host, the communication session from the victim host to the mimic host, where the mimic host monitors communications with the attacker host.

Covert monitoring of an attacker host in a software defined perimeter network

A method includes receiving, at an unmanaged switch, a link-aggregation control protocol ('LACP') protocol data unit (“PDU”) on each port of two or more connections to be in a link-aggregation group (“LAG”). The ports are in the unmanaged switch, which is unconfigured for LACP and is connected over the connections to a managed switch configured for LACP. The method includes, in response to the ports that received an LACP PDU being unconfigured for LACP, configuring each port receiving an LACP PDU for LACP, creating a LAG that includes the connections of the ports that received the LACP PDUs, and starting an LACP timer. The method includes, in response to determining that the LACP timer has expired, clearing the LACP configuration of the ports configured for LACP. The LACP timer expires in response to the ports in the LAG not receiving additional LACP PDUs prior to expiration of a timer period.

Self-configuring link aggregation control protocol

Secure updating of strong passwords in a composable system, includes: during deployment of the composable system, requesting, by a central controller in the composable system, device information from a device vendor, the device information specifying a number of expected devices for the composable system; checking, by the central controller, a number of discovered devices against the number of expected devices; only upon discovering all the expected devices, updating, by the central controller, a password for all the devices in the composable system; and upon discovering fewer than the total number of expected devices, halting, by the central controller, deployment of the composable system.

Secure updating of strong passwords in a composable system

Methods, apparatuses, and computer program products for fast resumption of dormant sessions on a client device are disclosed. A client device receives a push notification from a push notification server, the push notification having a payload that includes a datagram packet from an application server that initiated the push notification. A push notification process on the client device extracts the datagram packet from the push notification and injects the datagram packet into a communications protocol stack for at least one application on the client device. The application is awakened from a dormant state and reads the datagram packet. The application may then send a response to the datagram packet to the application server.

Fast resumption of dormant sessions on a client device

Methods, apparatuses, and computer program products for edge device assisted mitigation of publish-subscribe denial of service (DoS) attacks are disclosed. An edge device hosts a virtualized copy of an Internet-of-Things (IoT) device subscribed to one or more publish-subscribe topics. When the edge device receives an indication to activate the virtualized copy of the IoT device, for example, during a DoS attack on the IoT device, the edge device activates the virtualized copy of the IoT device, which receives traffic from the publish-subscribe topic. The virtualized copy of the IoT device applies security policies to incoming traffic received from the subscription topics and transmits to the IoT device sanitized traffic obtained from the received incoming subscription content traffic.

Edge device assisted mitigation of publish-subscribe denial of service (DoS) attacks

Methods, apparatuses, and computer programs products for connection parameter awareness in an authenticated link-layer network session are disclosed. A client sends, to a network access server (NAS), an initiation packet announcing the initiation of an authentication session. The client establishes an authenticated link-layer session with the NAS. The client receives, from the NAS, a network policy packet including a network policy defined by one or more connection parameters for the link-layer session. The client then enforces the network policy.

Growing community of inventors

Bucharest, Romania

Bogdan-Cosmin Chifor