Amazon Technologies, Inc.

Ol Security Limited Liability Company

Tekla Pehr LLC

Mci Communications Services, Inc.

Network Security Technologies, Inc.

Verizon Patent and Licensing Inc.

Ozmo Licensing LLC

Elaine Harvey

Matthew Walnock

Jason T Wright

Wayne A Mitzen

Lawrence A Wimble

John M Sleggs

Techniques for deriving system architecture from security group relationships are described. One or more security group rules can be obtained for an application, the one or more security group rules controlling communication of one or more security groups. The one or more security group rules can be analyzed to determine placement data for the one or more security groups. The placement data can be provided to a placement service, and the placement service can be caused to deploy at least one virtual machine using the placement data.

Deriving system architecture from security group relationships

A method for detecting spoofing by wireless access devices. In some embodiments, spoofing can be detected based on locations for a wireless access device having an identifier at first and second times. The locations are compared to determine whether the wireless access device could access the particular network at the locations in the time period between the first and second times. In several embodiments, spoofing can be detected by tracking the activity of wireless access devices and identifying events that that are prohibited by one or more policy elements of the particular network.

Spoofing detection

Spoofing detection for a wireless system

Methods are described herein useful for detecting spoofing by wireless access devices. In some embodiments, spoofing can be detected based on locations for a wireless access device having an identifier at first and second times. The locations are compared to determine whether the wireless access device could access the particular network at the locations in the time period between the first and second times. In several embodiments, spoofing can be detected by tracking the activity of wireless access devices and identifying events that that are prohibited by one or more policy elements of the particular network.

A wireless access device in a wireless network, whether a known or unknown entity, can be located using a geolocation system according to the present invention. A signal strength is determined by a wireless intrusion detection system (WIDS) node in a wireless network for each wireless access device that it detects. Based on the signal strength, an approximate distance from the node is determined, which, in one embodiment corresponds to a radius of a circle around the node. To account for error, an approximation band of the circle is calculated that will allow a user to determine the approximate location of the device within the wireless network.

Method and system for locating a wireless access device in a wireless network

Characteristics about one or more wireless access devices in a wireless network, whether known or unknown entities, can be determined using a system and method according to the present invention. An observation is made of the activity over a Wireless Area Network (WLAN). Based on this activity, changes in state of wireless access devices within the WLAN can be observed and monitored. These changes in state could be indicative of normal operation of the WLAN, or they may indicate the presence of an unauthorized user. In the latter case, an alert can be sent so that appropriate action may be taken. Additionally, ad hoc networks can be detected that may be connected to a wireless access point.

Method and system for detecting characteristics of a wireless network

A system including a transmitter, a receiver, and a conduit is provided. The transmitter is within a first network, and is in communication with at least one other device within the first network. The receiver is within a second network, and is in communication with at least one other device within the second network. The conduit is formed between the transmitter and the receiver, and is capable of carrying a signal transmitted from the transmitter to the receiver. To maintain the unidirectional nature of the conduit, either the transmitter is incapable of receiving any signal via the conduit or the receiver is incapable of transmitting any signal via the conduit.

Method and system for providing secure one-way transfer of data

A wireless access device in a wireless network, whether a known or unknown entity, can be located using a geolocation system. A signal strength is determined by a wireless intrusion detection system (WIDS) node in a wireless network for each wireless access device that it detects. Based on the signal strength, an approximate distance from the node is determined, which, in one embodiment corresponds to a radius of a circle around the node. To account for error, an approximation band of the circle is calculated that will allow a user to determine the approximate location of the device within the wireless network.

Growing community of inventors

Oakton, VA, United States of America

Elaine Harvey