Hewlett-packard Development Company, L.p.

Hewlett Packard Enterprise Development LP

David Andrew Graves

Parvathi Nair

Vikram Ramesh

Margaret Mary Bertsch

Philip John Day

Narendra Lakshminarasimha

Marco Casassa Mont

Edward M Reynolds

Simon Ian Arnell

Brian John O'Keefe

Ted T Nguyen

Mark A Pearson

John P Armington

Sajeev Madhavan

George Tomlinson

Julie Wing

Rob Shomo

Niall Lawrence Saunders

Pallavi Gadepalli

Examples relate to detecting network anomalies. In one example, a computing device may: receive, from each of a plurality of packet capture devices of a private network, domain name system (DNS) query packets that were sent by a particular client computing device operating on the private network, each DNS query packet specifying i) a destination DNS server, ii) a query domain name, and iii) a source address that specifies the particular client computing device; provide at least one of the DNS query packets to a DNS traffic analyzer that is trained to identify DNS anomalies based on characteristics of the DNS query packets; receive anomaly output from the DNS traffic analyzer, the anomaly output indicating a DNS anomaly that was identified for the DNS query packets; and in response to receiving the anomaly output, provide a user device with data specifying the identified DNS anomaly.

Network anomaly detection

According to one example of the present invention, there is provided, a method of accessing a service. The method comprising: receiving, from a requesting user, a request for a number of accessing users to have access to the service, generating service access data associated with the service, providing, to the requesting user, the generated service access data for distribution to the accessing users, receiving, from an accessing user, service access data, determining, based in part on the received service access data, whether the service can be provided, and where it is so determined, providing the service to the accessing.

System and method for accessing a service

A method of accessing a service includes receiving, from a requesting user, a request for a number of accessing users to have access to the service; generating service access data associated with the service; providing, to the requesting user, the generated service access data for distribution to the accessing users; receiving service access data from an accessing user; determining, based in part on the received service access data, whether the service can be provided; and where it is so determined, providing the service to the accessing user.

According to one aspect of an example, there is provided a transaction gateway in a first network for receiving a transaction from the first network and for sending the transaction to a transaction processor in a second network. The transaction gateway is arranged to identify restricted data in the transaction, to modify the received transaction by replacing identified restricted data with replacement data different to the identified restricted data, and to send the modified transaction to the transaction processor in the second network.

Transaction gateway

Embodiments of the invention provide a method and an apparatus for automatic verification of a network access control construct for a network switch. In one method embodiment, the present invention accesses an actual network access control construct on a network switching device, the actual network access control construct for defining the device actually coupled with the network switching device. Additionally, a machine-readable map of the network is accessed, the map providing a pre-determined network access control construct defining the device which should be coupled with the network switching device. A validation is performed, wherein the validation verifies that the actual network access control construct on the network switching device correlates with the pre-determined network access control construct defined by the machine-readable map.

Method and apparatus for automatic verification of a network access control construct for a network switch

According to one embodiment, virtual machine attributes are verified. Information () about attributes for a virtual machine () is obtained () from a host machine () that the virtual machine () executes on. Actual virtual machine attributes () are obtainedfrom the virtual machine (). Discrepancies between the information () about the attributes and the actual virtual machine attributes () are determined () by comparing the information () about the attributes to the actual virtual machine attributes ().

Verifying virtual machines

Embodiments of the invention provide a method and an apparatus for automatic verification of a machine-readable map of networked devices. In one method embodiment, the present invention accesses a machine-readable map. Additionally, validation rules are accessed in a machine-readable format. A validation step is performed, wherein the validation step comprises comparing the validation rules in machine-readable format with the machine-readable map. A report of a result of the validation step is then generated. In so doing, a verification of a machine-readable map of networked devices occurs automatically.

Method and apparatus for automatic verification of a machine-readable map of networked devices

The present invention provides a method and an apparatus for creating visual representations of farms that enables connecting farms securely. In one embodiment, a visual representation of a first farm and a visual representation of a second farm are created. A visual representation of a secure connection is created. The visual representation of the first farm is associated with a first end of the visual representation of the secure connection. The visual representation of the second farm is associated with the second end of the visual representation of the secure connection.

Method and an apparatus for creating visual representations of farms that enables connecting farms securely

Embodiments of the invention provide a method and an apparatus for automatic verification of a zone configuration of a plurality of network switches. In one method embodiment, the present invention accesses an actual network access control construct and an actual zone configuration for a plurality of network switching devices. Additionally, a machine-readable map of the network is accessed, the map providing a pre-determined network access control construct defining the device which should be coupled with the network switching device and a pre-determined zone configuration defining the switching devices which should be part of the zone. An automatic verification is performed, wherein the verification verifies that the actual network access control construct and the actual zone configuration of network switching devices correlates with the pre-determined network access control construct and zone configuration defined by the machine-readable map.

Method and apparatus for automatic verification of a zone configuration and network access control construct for a plurality of network switches

The present invention provides a method and an apparatus for automatic creation of secure connections between segmented resource farms in a utility computing environment. According to one embodiment, farms are automatically created using visual representations of the farms as a specification. A shared subnet is created as the basis of a secure connection, visual representations of one or more farms are associated with the shared subnet to form the secure connection between the one or more farms.

Method and an apparatus for automatic creation of secure connections between segmented resource farms in a utility computing environment

In one embodiment, a map describing a correct configuration attribute for communicatively coupling a storage area network device with another device is accessed. An actual configuration attribute of the storage area network device is requested. The actual configuration attribute of the storage area network device is then compared to the correct configuration of the storage area network device and a result is generated in response to the comparing.

Method for verifying a storage area network configuration

Embodiments of the invention provide a method and an apparatus for automatic verification of a zone configuration of a plurality of network switches. In one method embodiment, the present invention accesses an actual zone configuration comprising a plurality of network switching devices, the actual zone configuration for defining the switching devices which are actually part of the zone. Additionally, a machine-readable map of the network is accessed, the map providing a pre-determined zone configuration defining the switching devices which should be part of the zone. An automatic verification is performed, wherein the verification verifies that the actual zone configuration of network switching devices correlates with the pre-determined zone configuration defined by the machine-readable map.

Method and apparatus for automatic verification of a zone configuration of a plurality of network switches

Embodiments of the invention provide a method and an apparatus for generating a security document for a farm in a utility computing environment. In one method embodiment, the present invention accesses a farm specification in a utility computing environment (UCE) repository. In addition, information related to each device in the farm is accessed. Information criticality types and attributes are then collected for the farm, the information criticality matrix comprising information criticality types and attributes for each the device in the farm. The information criticality types and attributes are then combined with an abstract of a security plan to provide a complete farm security document.

Method and apparatus for generating a security document for a farm in a utility computing environment

A system for automatically deploying a VPN device comprises a resource abstraction layer coupled to the VPN device, for providing the device with a configuration specific to it, and a uniform interface coupled to the RAL, for providing the VPN device with a configuration that is not specific to the device.

Method for deploying a virtual private network

Methods and systems for verifying that devices in a network are properly connected physically are described. A listing is received from a device in the network. The listing identifies other devices coupled to the device and also identifies which communication port of the device each of the other devices is coupled to. The listing is compared against reference information representing the design of the network. Discrepancies between the listing and the reference information are identified.

Growing community of inventors

Monte Sereno, CA, United States of America

David Andrew Graves