Cisco Technology, Inc.

Matthew Richard Gnagy

James Anthony Aviani, Jr

Jean-Philippe Champagne

Frederick Juergens Baker

Kenneth Earl Mueller, Ii

David Eric Swanson

Bruce Arthur Lueckenhoff

James W O'Toole, Jr

Michael Todd Hall

Ravishankar Ganesh Ithal

A method is provided in one example and includes receiving video data captured by a camera at a location; comparing a portion of the video data to security information characteristics stored in a policy; and identifying a violation of the policy when the portion of the video data does not match at least one of the security information characteristics stored in the policy. In more particular instances, the method can include triggering an alert when the violation of the policy is identified.

System and method for validating video security information

A method and system for preventing the detection of an operating system by an intruder, the operating system installed on a host in a network, is provided. The intruder transmits a network probe for operating system detection. The network probe is identified and a response is generated to the network probe, generated by the operating system, is modified. The modified response provides the intruder with false information related to the operating system, thereby misleading the intruder about the type of operating system.

Method and system for preventing operating system detection

The technique of the present invention provides a solution to the problem of routing or redirecting a given client to a replica or proxy server which has a relatively shortest propagation delay to the client. According to the technique of the present invention, a network device referred to as an intercept server sits in front of a host server, and intercepts packets routed to the host server. When desired, packets which are intercepted by the intercept server are replicated, encapsulated and tunneled to selected client servers in the overlay network. The tunneled packets are received and processed by each of the selected client servers, whereupon each of the selected client servers generates a respective spoofed response to the source device identified in the header of the originally intercepted packet. Further, according to the technique of the present invention, each of the selected client servers transmits its respective spoofed response to the identified source device at substantially the same time. The client server associated with the spoofed response which is first received at the identified source device is considered to have the relatively shortest propagation delay to the identified source device, and is identified as the successful client server. Thereafter, the source device will be directed or redirected to communicate directly with the successful client server when subsequently attempting to access information from the host server.

Distributed network traffic load balancing technique implemented without gateway router

A method of communicating an encrypted data broadcast to a plurality of virtual private network receivers is disclosed. A first communication channel is established between a first one of the receivers and a network node. A private data stream is communicated to the first receiver on the first channel. A request is received from the first receiver to join a broadcast data stream that is directed to a plurality of receivers by a broadcast server. A second encrypted communication channel is established between the first receiver and the network node for purposes of carrying the broadcast data stream. Decryption information, which the first receiver can use to decrypt information that is sent on the second channel, is sent to the first receiver through the first channel. The broadcast data stream is then communicated to the first receiver on the second channel. As a result, a particular receiver can receive an encrypted broadcast that is encrypted as part of a single session for a large plurality of other receivers, without impacting separate, private encrypted communications conducted by the particular receiver.

Method and apparatus for communicating an encrypted broadcast to virtual private network receivers

A URL re-writing system and method in a network examines and modifies HTML data and its embedded URLs. The re-writing system can be implemented in a router and can replace URLs found in the HTML data in order to accomplish more efficient routing for example to a close mirror site or for content routing. The re-writing system can also use URL replacement to insert important or emergency information to data received by users on a Web-based network.

Growing community of inventors

Sacramento, CA, United States of America

Matthew Richard Gnagy