Bbn Technologies Corporation

Bbnt Solutions Llc.

Stragent, LLC

Interactive Technology Limited of Hk

Luis Sanchez

Walter Clark Milliken

William Timothy Strayer

Craig Partridge

Stephen Douglas Milligan

Philip R Roberts

Mukesh Sharma

Christopher Skiscim

Alex C Snoeren

A system () detects transmission of potentially malicious packets. The system () receives, or otherwise observes, packets and generates hash values based on variable-sized blocks of the packets. The system () then compares the generated hash values to hash values associated with prior packets. The system () determines that one of the received packets is a potentially malicious packet when one or more of the generated hash values associated with the received packet match one or more of the hash values associated with the prior packets.

Hash-based systems and methods for detecting and preventing transmission of polymorphic network worms and viruses

A wireless data network process and system are provided based on a network with prior network-based authentication of a connected mobile node (MN) and with a network connection to a packet gateway node (PGN). The method and system establish and use an authentication mechanism between the MN and the PGN using the network connection. An encrypted channel is then set up between the MN and the PGN based on authentication established with the authentication mechanism. Configuration data is sent from the PGN to the MN using the encrypted channel. The configuration data may then be used by the MN for communication to and from the MN with the PGN via an access point. Any network connected to the PGN via any access point may then be used.

System and method for secure network roaming

An apparatus () for archiving signatures associated with packets received at a node in a network includes a first memory (), a second memory (), a signature tap (), a multiplexer (), and a controller (). The signature tap () receives packets at the node and computes one or more signatures for each of the received packets. The multiplexer () aggregates the computed one or more signatures in the first memory () to produce one or more signature vectors. The controller () archives the one or more signature vectors in the second memory ().

Systems and methods for point of ingress traceback of a network attack

A system and method for performing source path isolation in a network. The system comprises an intrusion detection system (IDS), a source path isolation server (SS) and at least one router configured to operate as a source path isolation router (SR) operating within an autonomous system. When IDS detects a malicious packet, a message is sent to SS. SSin turn generates a query message (QM) containing at least a portion of the malicious packet. Then, QM is sent to participating routers located one hop away. SRuses the query message to determine if it has observed the malicious packet by comparing it with locally stored information about packets having passed through SR. SRsends a reply to SS, and SSuses the reply to identify the ingress point into the network of the malicious packet.

Method and apparatus for tracing packets

Growing community of inventors

Mayaguez, Puerto Rico

Luis Sanchez