Sonicwall Inc.

Alcatel Lucent

Dell Software Inc.

Sonicwall US Holdings Inc.

Hui Ling

Zhong Chen

Cuiping Yu

Haibo Wen

Zheng Liang

Shuigen Yang

Zunping Cheng

The present disclosure relates to a system, a method, and a non-transitory computer readable storage medium for deep packet inspection scanning at an application layer of a computer. A method of the presently claimed invention may scan pieces of data received out of order without reassembly at an application layer from a first input state generating one or more output states for each piece of data. The method may then identify that the first input state includes one or more characters that are associated with malicious content. The method may then identify that the data set may include malicious content when the first input state combined with one or more output states matches a known piece of malicious content.

Reassembly free deep packet inspection for peer to peer networks

The present disclosure relates to systems, methods, and non-transitory computer readable storage medium for detecting a tunnel routing loop attack on a computer network. A method of the presently claimed invention receives a packet of data over an automatic tunnel. When the received packet includes an Internet protocol version 6 (IPv6) packet headers in the received packet may be extracted from the received packet. When an extracted header is a tunnel routing loop attack (TRLA) header, address information included in the TRLA header may be matched to a destination address that the IPv6 packet is about to be tunneled through. When the address information included in the TRLA header matches the destination address that the IPv6 packet is about to be tunneled through the IPv6 packet is dropped because the match indicates that that a loop is about to be formed.

Automatic tunnels routing loop attack defense

Systems and methods for blind data leak prevention are provided. A first computer can determine if encrypted data matches a rule even without the encryption key used to encrypt the data. The first computer may encrypt the rule with a second encryption key and send the encrypted rule to a second computer, which may then encrypt the rule with the first encryption key&#x2014;that is inaccessible to the first computer&#x2014;and send the doubly encrypted rule back to the first computer. The first computer can then partially decrypt the rule using the second encryption key. The second computer can then encrypt data with the first encryption key and send to the first computer. The first computer can then determine if the partially encrypted rule matches the encrypted data.

Blind cloud data leak protection

The present invention relates to a method and system for performing deep packet inspection of messages transmitted through a network switch in a Software Defined Network (SDN). Embodiments of the invention include a network switch, a controller, and a firewall in a software defined networking environment. In the present invention, the network switch is a simple network switch that is physically separate from the controller and the firewall. The invention may include a plurality of physically distinct network switches communicating with one or more controllers and firewalls. In certain instances, communications between the network switch, the controller, and the firewall are performed using the Open Flow standard communication protocol.

Method to enable deep packet inspection (DPI) in openflow-based software defined network (SDN)

Systems and methods are directed towards network data leakage prevention (DLP). More specifically, the systems and methods are directed towards using TCP (Transmission Control Protocol) data packets in conjunction with the DLP monitor. The network DLP utilizes TCP data packets to carry source user identity. With the source user identity, the DLP monitor can determine if sensitive data can be transmitted based on the provided user information and corresponding DLP policies for each user. Furthermore, the DLP monitor can determine if sensitive data can also be transmitted for particular users in situations where multiple users share the same IP address.

Unified source user checking of TCP data packets for network data leakage prevention

In a CN access network with a virtual node for at least one third party, the virtual node being used for bearing and operating the function defined by the third party, the UE accesses from a fixed access network; and the access network provides the UE with the communication connection between the UE and the virtual node of the third network/service operator. According to the embodiment the access network accommodates the virtual node to operate the function related to the third party, and improves the function topology architecture of the network, to provide users with better user experience quality.

Method operating in a fixed access network and UEs

A method for checking connectivity between a first device and a second device on a bidirectional Label Switched Path LSP, includes the first device sends, to the second device, an echo request including a reply mode and a return address, the reply mode requesting an echo reply to be delivered through backward LSP, and the return address being the unique ID of the first device; the first device receives an echo reply from the second device, the echo reply including the unique ID of the first device and return code related to connectivity of the backward LSP; and the first device correlates the echo reply with the echo request to verify connectivity between the two devices on the bidirectional Label Switched Paths.

Growing community of inventors

Shanghai, China

Hui Ling