Sourcefire, Inc.

Other

Judy Hollis Novak

Martin Frederick Roesch

Steven Sturges

Ronald A Dempster

Phillip Odenwelder

A multiple temperature storage assembly includes a sleeve that has an opening therein for accessing an interior of the sleeve and to receive food items for storage. The sleeve is comprised of a thermally insulating material to retain the food items at a selected temperature. A door is hingedly coupled to the sleeve for opening and closing the opening. A disk is slidably positioned within the sleeve such that the disk defines an upper section of the sleeve and a lower section of the sleeve. The disk is comprised of a thermally insulating material to inhibit thermal communication between the upper and lower sections. Thus, each of the upper and lower sections can store a respective one of warm food items and cold food items. A tube is slidably coupled to the sleeve. The tube has a chamber therein that is fluidly discrete from the sleeve when the tube is slidably coupled to the sleeve for storing dry objects.

Multiple temperature storage assembly

A method performed in an intrusion detection/prevention system, a system or a device for determining whether a transmission control protocol (TCP) segment in a TCP connection in a communication network is acceptable. The TCP connection can include TCP segments beginning with a three way handshake. A TCP segment can include a field for a timestamp. A timestamp policy of plural timestamp policies is identified, the timestamp policy corresponding to a target associated with the segments in a TCP connection. A baseline timestamp is identified based on a three way handshake in the TCP connection. Segments in the TCP connection are monitored. The segments in the TCP connection are filtered as indicated in the timestamp policy corresponding to the target, the timestamp policy indicating whether the segments are to be filtered out or forwarded to the target by comparing the timestamp of the segments to the baseline timestamp.

Device, system and method for timestamp analysis of segments in a transmission control protocol (TCP) session

Fragment trains in a communication network are analyzed. A fragment train includes fragments in the same fragment train and associated with the same target system. One or more fragment reassembly policies are identified out of several fragment reassembly policies, where the fragment reassembly policy corresponds to a target system associated with fragments in a fragment train. The data in the fragments in the fragment train are provided in an order indicated by the fragment reassembly policy. The fragment reassembly policy can include determining the order responsive to an offset and a more fragments indication in the fragments, and/or indicating an order specific to overlapped fragments such as comprehensively overlapped fragments.

Device, system and method for analysis of fragments in a fragment train

A packet transmitted on a network is read and decoded. A network device and its operating system are identified by analyzing the decoded packet. If more than one operating system is identified from the decoded packet, the operating system is selecting by comparing confidence values assigned to the operating systems identified. A service running on the network device is identified from the decoded packet or subsequent packets that are read, decoded and analyzed. The network topology of a network is determined by reading, decoding, and analyzing a plurality of packets. A flow between two network devices is determined by reading, decoding, and analyzing a plurality of packets. Vulnerabilities are assigned to operating systems and services identified by reading, decoding, and analyzing packets. Network configuration policy is enforced on operating systems and services identified by reading, decoding, and analyzing packets.

Systems and methods for determining characteristics of a network

A method performed in an intrusion detection/prevention system, a system or a device for analyzing segments in a transmission in a communication network. The transmission includes segments in the same transmission control protocol (TCP) session. Segments in a transmission are monitored. Data in the segments in the transmission are reassembled in an order indicated by a segment reassembly policy, the segment reassembly policy indicating an order specific to at least comprehensively overlapped segments.

Growing community of inventors

Marriotsville, MD, United States of America

Judy Hollis Novak