Gilat Satellite Networks Ltd.

Verisign, Inc.

Steven Bowers

Hanny Kadrichu

Aditya N Chatterjee

Roberto G Rodrigues

Richard Louis Nelson

Suresh Bhogavilli

Yujie Zhao

Sivasankar Subramanian

Anand Jagannathan

Yaron Reshef

Alan Schneider

Roberto Guimaraes

In one embodiment, a rule optimization application optimizes a rule set that a firewall applies to protect web applications from on-line attacks. The rule optimization application identifies a completed filtering operation that is associated with applying a rule to a request to access a web application received from a client. The rule optimization application then estimates a quality score for the rule based on the completed filtering operation and a reputation value for the client that indicates a likelihood that the client is legitimate. Subsequently, the rule optimization application determines that the quality score does not satisfy a predetermined quality criterion and disables the rule in the rule set to generate a updated, optimized rule set for the web application. Advantageously, the quality criterion may configure the rule optimization application to automatically update the rule set to reduce the number of legitimate requests that are blocked by the rule set.

Automatically optimizing web application firewall rule sets

A broadband communication system with improved latency is disclosed. The system employs acceleration of secure web-based communications over a satellite communication network. In accordance with aspects of the invention, secure protocol acceleration is employed such that required protocol signals transmitted from a computer employing a web browser may be intercepted by a remote terminal. To insure that the browser will continue transmitting data, the remote terminal generates required acknowledgment and security signals to continue the secure communication, which may then transmitted back to the computer. Meanwhile, the received protocol signals may be converted by the remote terminal for transmission through the satellite communications system in a format appropriate for that communication medium. Aspects of the invention further include a hub or similar device for communicating with the satellite communications system.

System and method for acceleration of a secure transmission over satellite

A broadband communication system with improved latency is disclosed. The system employs acceleration of secure web-based communications over a satellite communication network. In accordance with aspects of the invention, secure protocol acceleration is employed such that required protocol signals transmitted from a computer employing a web browser may be intercepted by a remote terminal. To insure that the browser will continue transmitting data, the remote terminal generates required acknowledgment and security signals to continue the secure communication, which may then transmitted back to the computer. Meanwhile, the received protocol signals may be converted by the remote terminal for transmission through the satellite communications system in a format appropriate for that communication medium. Aspects of the invention further include a hub or similar device for communicating with the satellite communications system, and a secure connection between that device and the web server may be maintained by similarly simulating a continuous secure connection between the computer and the web server. Transmissions from the web server to the browser may be preformed in a similar manner. Further aspects of the invention related to distributed certificate sharing which may involve the generation of multiple certificates for the various links between the components employed in the communication system and the manual and/or automatic addition of a certificate authority.

A broadband communication system with improved latency is disclosed. The system employs distributed caching techniques to assemble data objects at locations proximate to a source to avoid latency over delayed links. The assembled data objects are then multicast to one or more remote terminals in response to a request for the objects, thus reducing unnecessary data flow across the satellite link.

System and method for internet page acceleration including multicast transmissions

Growing community of inventors

Herndon, VA, United States of America

Steven Bowers