Belden Inc.

Sonicwall Inc.

Jeffrey Caldwell

Divij Agarwal

Ashish Mathur

Raja Chhabra

Akbal Singh Karlcut

Aria Eslambolchizadeh

Gourav Rustogi

Gourav Rastogi

Systems and methods of the disclosure can implement intrusion radiation protection (IRP) to prevent malicious IP traffic in a secure network. The IRP system can receive an IP packet, determine that a protocol of the IP packet matches a predetermined policy of a plurality of predetermined policies, classify the IP packet based on the predetermined policy and a size of the IP packet, inspect a payload of the IP packet responsive to the classification to determine features of the IP packet, determine that one of the features of the IP packet is improper based on the classification, and flag the IP packet as suspect based on the determination. The IRP system can log and/or drop the flagged IP packet. The IRP system can additionally replace a payload of the IP packet with a second payload, and transmit the IP packet with the second payload to its destination.

Method and protection apparatus to prevent malicious information communication in IP networks by exploiting benign networking protocols

A method and an apparatus to perform dynamic secure re-routing of data flows for public services are disclosed. In one embodiment, the method includes receiving at a first security appliance a public service message from a second security appliance via a public network. The public service message being associated with a session between the first and the second security appliances, being destined to a first network device coupled to the first security appliance, and including one of a public service request and a public service response. In response to the public service message, the method may further include determining whether a secure communication path exists between the first and the second security appliances. If the secure communication path exists between the first and the second security appliances, the method may further include re-routing the session data to the secure communication path, splitting control signals of the session from the data of the session, and using the secure communication path to transmit data of the session. Other embodiments have been claimed and described.

Method and an apparatus to perform dynamic secure re-routing of data flows for public services

Growing community of inventors

Sunnyvale, CA, United States of America

Jeffrey Caldwell