Sun Microsystems, Inc.

Xangati, Inc

Rangaswamy Vasudevan

Caveh Jalali

Jagan Jagannathan

Rosanna K Lee

The invention provides apparatus and methods for defending against attacks in a distributed computing environment, including (1) distinguishing attack traffic patterns from legitimate traffic patterns, (2) responsive to nature of message patterns; (3) attack traffic has few origination points, and does not divide further from target device; (4) detectors of illegitimate traffic can cooperate to confirm the suspected attack, with the effect of providing more information to each other.

Defenses against software attacks in distributed computing environments

A system and method allow client applications to invoke remote procedures on a server application using any of a plurality of remote procedure mechanisms, by selecting a remote procedure call mechanism at runtime. The system and method uses client and server stubs in the application that include an mechanism-independent canonical specification of each procedure interface. The specification defines the form of the interface and arguments, but not does include conventional mechanism-specific marshalling arguments for marshalling the arguments. The resulting compiled stubs may be used with any remote procedure call engine. Such remote procedure call engines receive the specification of the procedure interface and the arguments passed by the client application to the server, and determine at runtime the particular marshalling routines to use, according to the canonical specification. This defers selection of the marshalling routines, and hence allows a single compiled client application binary code to be used with any of a variety of remote procedure call engines and marshalling routines. Deferring selection of marshalling routines further allows optimization of data types where the client and server computers share architectural characteristics. The system includes a interface definition language compiler that produces the client and server stubs having the canonical specification of the procedure interfaces, a virtual remote procedure library that selects a remote procedure call engine for a client, and plurality of remote procedure call engines.

Remote procedure call system and method for RPC mechanism independent client and server interfaces interoperable with any of a plurality of remote procedure call backends

Remote procedure call system and method for RPC mechanism independent

The present invention provides an improved Federated Naming Framework System which includes a Federated Naming Service Provider Interface ('FN SPI') for four (4) kinds of Name Services (Atomic Name, Compound Name, Partial Composite Name and Composite Name) along with a mechanism, designated the 'FN Framework', which sits between the Client application and these Name Services and supports the translation and administration of calls for resolution of composite names to allow Client applications to make appropriate use of the available FN SPIs (there may be more than one FN SPI in any given system). The improved Federated Naming Framework System provides mechanisms to define and process strong and weak separation in the determination of naming system boundaries. Moreover, the present invention allows system implementors to install new naming services either statically or dynamically without disruption of the Client applications.

System and method for allowing disparate naming service providers to

In a distributed computing environment, an apparatus and method for a federated Naming System which can resolve Composite Names comprised of Names from an arbitrary number of disparate Naming Systems. A syntax for Composite Names is defined as well as necessary operations to directly resolve such Composite Names without the need for customized agents or gateways.

Growing community of inventors

Los Altos Hills, CA, United States of America

Rangaswamy Vasudevan