Raytheon Bbn Technologies Corp.

Verizon Corporate Services Group Inc.

Verizon Patent and Licensing Inc.

Bbn Technologies Corporation

Verizon Corporate Services Group Inc. & Raytheon Bbn Technologies Corp.

Christine Elaine Jones

William Timothy Strayer

Regina Rosales Hain

Isidro Marcos Castineyra

Gregory Donald Troxel

Daniel Joseph Ellard

David Patrick Mankins

Josh Forrest Karlin

Alden Warren Jackson

Victoria Ursula Manfredi

Rajesh Krishnan

Walter Clark Milliken

Subramanian Ramanathan

Prithwish Basu

Richard Earl Hansen

Systems and methods for protecting a network including providing a mapping between internal addresses as seen by devices of the protected network and external addresses; providing devices with a mapped address for a destination in response to a lookup request; rewriting, at a gateway, destination addresses of packets exiting the protected network based on the mapping; and rewriting, at the destination-network gateway, source addresses of packets entering the protected network based on the mapping. Embodiments include a gateway coupled to a protected network, an external network, and a name server. The name server, in response to a hostname lookup request, configured to provide a network device with the internal address; and the gateway with a mapping including the internal address, the addresses of the device, and the hostname. The gateway configured to rewrite destination addresses of outbound packets, and source addresses of inbound packets, based on the mapping.

Destination address rewriting to block peer-to-peer communications

Systems and methods for protecting a network including preventing data traffic from exiting the network unless a domain name request has been performed by a device attempting to transmit the data traffic. In an embodiment, a device within the protected network attempting to send data outside the protected network requests an address for a destination outside the protected network from a domain name server (DNS). In response, the DNS provides an address of the destination to the device and a gateway. In response to receiving the address, the gateway temporarily allows access to the address. In an embodiment, a DNS is coupled to a protected network and the gateway, the DNS provides an external address to a device in response to a request; and a mapping to the gateway; the gateway, coupled to a protected network and an external network, allows traffic according to the mapping.

Destination address control to limit unauthorized communications

This disclosure relates to methods and systems for queuing traffic in packet-switched networks. In one of many possible embodiments, a queue management system includes a plurality of queues and a priority module configured to assign incoming packets to the queues based on priorities associated with the incoming packets. The priority module is further configured to drop at least one of the packets already contained in the queues. The priority module is configured to operate across multiple queues when determining which of the packets contained in the queues to drop. Some embodiments provide for hybrid queue management that considers both classes and priorities of packets.

Systems and methods for queue management in packet-switched networks

The systems and methods described herein include adaptive routing processes for packet-based wireless communication networks. This routing approach works both in MANETs (when a contemporaneous end-to-end path is available) and in DTNs (when a contemporaneous end to end path is not available, but one of formed over space and time). In particular, the methods include adaptively selecting a routing process for transmitting a packet through a node in the network based on available information on the network topology and/or the contents of the packet.

Systems and methods for adaptive routing in mobile ad-hoc networks and disruption tolerant networks

A method of determining correlated flows in a network may include obtaining times of arrival and corresponding flows for data units in the network () and assigning weights to a set of data units based on respective times between the set of data units and one data unit (). A probability matrix representing interflow connections in the network may be updated based on the assigned weights ().

Method and system for detecting attack path connections in a computer network using state-space correlation

A method and system is provided for detecting correlated connections in an extended connection. A plurality of stepping stone detection algorithms are executed in parallel (), each of the plurality of stepping stone detection algorithms generating a result. The results are scored for each of the plurality of stepping stone detection algorithms (). A consensus attack path is generated based upon the scored results ().

Method and system for aggregating algorithms for detecting linked interactive network connections

A system and method for determining the point of entry of a malicious packet into a network is disclosed. An intrusion detection system detects entry of the malicious packet into the network (). A stepping stone detection system identifies stepping stones in extended connections within the network (). A traceback engine isolates the malicious packet in response to operation of the intrusion detection system (), wherein the traceback engine utilizes the identified stepping stones to determine the point of entry of the malicious packet.

Method and system for integrated computer networking attack attribution

Systems and methods are disclosed in which one or more cells are buffered in a communication system. In one embodiment, the method includes receiving a cell; classifying the cell as one of a set of flows; transmitting the cell to one of a set of queues of static memory, such that the queue corresponds to one of a set of banks of dynamic memory; and writing the cell to the corresponding one of the set of banks.

Growing community of inventors

Spokane Valley, WA, United States of America

Christine Elaine Jones