Verisign, Inc.

Paolo Maresca

Daniel Schonfeld

Various embodiments of the invention disclosed herein provide techniques for transforming and distributing data in a distributed computing system. New data types are created on-demand by deriving, transforming, and aggregating data from already existing data sources. A data transformation engine identifies a first subscription request received from a first subscriber for a first resource included in a plurality of resources. The data transformation engine determines that the first resource is not available from any publisher included in a plurality of publishers. The data transformation engine generates a transformation rule that transforms a set of second resources available from a set of first publishers included in the plurality of publishers into the first resource. The data transformation engine transforms the set of second resources into the first resource based on the inferred transformation rule. The data transformation engine publishes the first resource to the first subscriber.

Feeding networks of message brokers with compound data elaborated by dynamic sources

A parallelized method for authenticating and/or signing a DNS query using DNSSEC is disclosed. The method provides for obtaining, at a validating DNSSEC-aware DNS client, a DNS query for a resource record for a fully qualified domain name (FQDN); segmenting the FQDN into more than one specific sub-FQDN; providing, in parallel, a DNS query for a DNSSEC-related resource record for each of the more than one specific sub-FQDN to a respective authoritative name server or recursive resolver; obtaining, in parallel, the DNSSEC-related resource record for each of the more than one specific sub-FQDN; validating, in parallel, the DNSSEC-related resource record for each of the more than one specific sub-FQDN; combining each of the DNSSEC-related resource record for each of the more than one specific sub-FQDN; and verifying a chain-of-trust of the DNSSEC-related resource records.

Method and system for parallel validation of domain name system security extension records

A publish-subscribe network includes a network infrastructure configured to support the exchange of data. An intrusion detection system is coupled to the network infrastructure and configured to process signals received from that infrastructure in order to detect malicious attacks on the network infrastructure. The intrusion detection system includes an evaluator that generates a set of indicators based on the received signals. The evaluator models these indicators as stochastic processes, and then predicts an attack probability for each indicator based on a predicted future state of each such indicator. The evaluator combines the various attack probabilities and determines an overall attack level for the network infrastructure. Based on the attack level, the intrusion detection system dispatches a specific handler to prevent or mitigate attacks.

Growing community of inventors

Fribourg, Switzerland

Paolo Maresca