Mcafee, Inc.

Networks Associates Technology, Inc.

Robert N M Watson

Olafur Gudmundsson

Darrell Kindred

Brian Niebuhr

Ed Lewis

A system and method for negotiating multi-path connections between a plurality of intermediary devices, such as boundary controllers, in a networked computing environment is described. A client-side communications session is established between a requesting client and an intermediary device available from a plurality of intermediary devices on a primary communications channel in accordance with a connection-oriented network protocol. A server-side communications session is established between the intermediary device and the requested server on a primary communications channel in accordance with the connection-oriented network protocol. Differences in routing parameters defined for the client-side communications session and the server-side communications session are determined. The routing parameter differences are communicated to at least one other such intermediary device over an out-of-band communications channel.

System and method for negotiating multi-path connections through boundary controllers in a networked computing environment

A system and method for transacting a validated application session in a networked computing environment is described. A hierarchical protocol stack having a plurality of interfaced protocol layers is defined. A connection-based session protocol layer is included. A session is opened with a requesting client responsive to a request packet containing a source address of uncertain trustworthiness. A client connection with the requesting client is negotiated. A stateless validation of the source address contained in the request packet is performed using encoded information obtained from the request packet headers. A server connection is negotiated with a responding server upon successful validation of the requesting client. The session is facilitated by translating packets independently exchanged over the client connection and the server connection. The session is closed through a controlled termination of each of the client connection and the server connection.

System and method for transacting a validated application session in a networked computing environment

A system and method for preventing a spoofed remote procedure call denial of service attack in a networked computing environment is described. A hierarchical protocol stack defines a plurality of communicatively interfaced protocol layers. At least one protocol layer provides a client service via a remote procedure call interface. A request packet sent from a requesting client is intercepted. The request packet contains a service request being sent to a remote server via a remote procedure call. A token uniquely identifying the request packet is generated using data contained therein. The token is included with the request packet. The request packet and the included token is forwarded to the remote server indicated in the remote procedure call. A response packet containing a response sent from a remote server via the remote procedure call interface for the provided client service is received. The response packet is analyzed to determine whether the response packet includes a token uniquely identifying the response packet as having originated from the requesting client for the provided client service.

Growing community of inventors

Bethesda, MD, United States of America

Robert N M Watson