Other

Caci, Inc. - Federal

Michael Jau Chen

Tavaris Jason Thomas

John A Borak

Eric W Hsiung

The present application describes a method including one or more steps. One step of the method includes receiving, at a gateway including an encrypted pathway, traffic from a third party originating outside a multi-hop network intended for a client inside the network. Another step of the method includes determining, using a trained machine learning model, a probe of the received traffic attempting to obtain confidential information about the multi-hop network. Yet another step of the method includes flagging the third party based on determined probe.

System and methods of determining and managing probes in a multi-hop network

The present application is directed a computer-implemented technique for enhancing security and preventing cyber-attacks on a network. The technique includes receiving information from user equipment, selecting a first VPN server from a VPN service provider based upon a traffic-type of the user equipment, creating a policy to prevent cyber-attacks such that traffic associated with the received information of the user equipment is routed to the first VPN server, provisioning the first VPN server to last a predetermined amount of time based on the policy, coordinating the policy with a router on the network, with the traffic being sent to the VPN server via the router, and sending, after a predetermined condition is met, a request to the VPN service provider to transmit a second VPN server, and where the first VPN server terminates.

Methods and systems for enhancing cyber security in networks

The present application is directed to a non-transitory computer readable medium. The medium includes program instructions that, upon being executed by a processor, effectuate detecting a virtual private network (VPN) provider in a network. The program instructions also effectuate receiving, from the VPN provider, server credentials for a VPN. The program instructions further effectuate generating a security policy based upon a type or pattern of network traffic associated with the VPN. The program instructions even further effectuate converting the security policy to a table interpretable by a node in the network.

Methods and systems for establishment of VPN security policy by SDN application

The present application is directed to a computer readable medium. The computer readable medium contains program instructions for managing traffic in a network that, when executed by a processor, causes the processor to determine, from among plural users, information of a user in the network. The program instructions also include reviewing selection criteria of plural, dynamic, virtual private network (VPN) cloud servers in the network. The program instructions also include ranking efficiency of the plural, dynamic, virtual VPN cloud servers in the network. The program instructions further include controlling content displayed on a graphical user interface (GUI) including a dynamically changing list of users from the plural users matched with respective VPN cloud servers. The program instructions yet even further include matching the user with one of the plural, dynamic VPN cloud servers based on the ranked efficiency and the determined information of the user. The program instructions even further including communicating with the matched dynamic VPN cloud server to continue an active session of the user until a predetermined condition is met.

Methods and systems for controlling traffic to VPN servers

The present application is directed a computer-implemented methods and systems implementing Virtual Private Network (VPN) policies created or modified by Software Defined Network (SDN) applications. The VPN policies can be provided to SDN controllers for implementation. An SDN application can handle a request to establish a VPN by transmitting the request to a VPN provider, obtaining credentials for the VPN, and providing a security policy to an SDN controller.

The present application is directed to a method for enhancing security. The method includes a step of sending a request to a cloud provider to create a server on a cloud. The method also includes a step of receiving a notification from the cloud provider that the requested server is available on the cloud. The method also includes a step of embedding the server with a VPN service. The method further includes a step of sending a credential of the server to an entity on the network. Yet further, the method includes a step of reviewing a list of servers created by the cloud provider. Yet even further, the method includes a step of evaluating progress of server generation by the cloud provider and one or more additional cloud providers. The application is also directed to system for enhancing security on a cloud server.

Methods and systems for securing VPN cloud servers

The present application is directed a computer-implemented method for for managing traffic in a network. The method includes a step of providing, at a computer including a graphical user interface (GUI), a request from a user to access the internet. The method also includes a step of determining information of the user including a security access in the network. The method further includes a step of reviewing, via the GUI, selection criteria of plural, dynamic, virtual private network (VPN) cloud servers in the network. The method even further includes a step of ranking efficiency of the plural, dynamic, virtual VPN cloud servers in the network. The method yet even further includes a step of matching the user request with one of the plural, dynamic VPN cloud servers based on the ranked efficiency and the determined information. The active session of the one of the plural, dynamic VPN cloud servers lasts until a predetermined condition is met. Moreover, the GUI displays a current, dynamically changing list of users matched with respective VPN cloud servers. Still further, the GUI displays a current, dynamically changing queue list of other users still to be matched with VPN cloud servers.

The present application is directed a computer-implemented method for enhancing security and preventing cyber-attacks on a network. The method includes a step of receiving, from a user equipment on the network, information including a source IP address and a destination IP address. The method also includes a step of selecting a first VPN server from a VPN service provider based upon a traffic-type of the user equipment. The method also includes a step of creating, via a graphical user interface, a policy to prevent cyber-attacks such that traffic associated with the information of the user equipment is routed to the first VPN server. The method further includes a step of sending the traffic of the user equipment to the VPN server. The method even further includes a step of provisioning the first VPN server to last a predetermined amount of time base on the created policy. The method yet even further includes a step of coordinating the created policy with a router on the network, with the traffic being sent to the first VPN server via the router. The method yet even further includes a step of sending, after a predetermined condition is met, a request to the VPN service provider to transmit a second VPN server, where the first VPN server terminates when the predetermined condition is met. The application is also directed to a system and method for securing web traffic preventing cyber-attacks on a network.

The present application is directed a computer-implemented methods and systems implementing Virtual Private Network (VPN) policies created or modified by Software Defined Network (SDN) applications. The VPN policies can be provided to SDN controllers for implementation.

Growing community of inventors

Livingston, NJ, United States of America

Michael Jau Chen