Paradyne Corporation

Raytheon Company

Raytheon Bbn Technologies Corp.

Suzanne P Hassell

Paul F Beraud, Iii

Gangadhar Ganga

Alen Cruz

Stephen Patrick Marra

Stephen R Martin

Eric K Vallone

Brian J Mastropietro

Vincent Ciletti

Peter Calderon

Richard A Mundwiler

Christopher R Eck

Juan E Sandoval

Michael J Cripps

Nicholas I Sapankevych

Edward W Landis

Jeff Davis

Justin W Toennies

Theodore E Heeren

Louis F Villarosa, Jr

Patrick A McCabe

Jeffrey E Conner

David A Johnson

Armando J Santos

Jason M Surprise

Kristina L Stewart

Frank Pietryka

Charles J Mele

Niraj K Srivastava

David A Hyde

Warren M Bartlett

Ledford J Meadows, Iii

Roopali S Paranjpe

Michael McFarland

Travis C Hester

Jeanette M Moody

Paul F Beraud Iii

Gangahar Ganga

Embodiments of a system and method for a cyber modeling and simulation framework arc generally described herein. In some embodiments, an interface () for ingest of network and vulnerability data associated with a node of a targeted network, a network visualization device () for presenting the network data and the vulnerability data, and for creating a network model based on the network and vulnerability data, a threat analysis simulator () for launching threat attacks on the targeted network and for applying modeled defenses against the threat attacks, the threat analysis simulator producing simulation results () and a data farming module for performing data fanning on the simulation results using different scenarios to generate a farm of data for use in designing anti-cyber-attack strategies () for the targeted network.

Method and device for simulating network resiliance against attacks

A system and method of deploying a network hopping adaptor is disclosed. In some embodiments, a network hopping adaptor may be configured to manipulate network traffic so as to change at least one network characteristic of the network traffic, and at least one network interface of a machine selected from a group of machines may be configured to send the network traffic to the network hopping adaptor. The network hopping adaptor may manipulate such characteristics as an IP address, a port number, an encryption algorithm or a compression algorithm. The group of machines may be deployed as virtual machines being executed by a virtualization server, and the network hopping adaptor may be implemented on another virtual machine being executed by the virtualization server. Alternatively, or in addition, the group of machines or the network hopping adaptor may be implemented as physical machines.

Adaptor implementation for internet protocol address and port hopping

Generally discussed herein are systems, apparatuses, or processes to recognize that a cyber threat exists or predict a future track of a cyber threat in a network. According to an example, a process for recognizing a cyber threat can include (1) determining a network layout of a network based on received network layout data, (2) receiving cyber sensor data indicating actions performed on the network, (3) calculating a first score associated with the cyber sensor data indicating that a cyber threat is present in the network by comparing a cyber threat profile of the cyber threat that details actions performed by the cyber threat to actions indicated by the cyber sensor data, (4) determining whether the calculated first score is greater than a specified threshold, or (5) determining that the cyber threat is present in response to determining the calculated first score is greater than the specified threshold.

Probabilistic cyber threat recognition and prediction

In certain embodiments, analyzing cyber attacks includes receiving cyber attack parameters. A cyber attack parameter describes a performance attribute of a cyber attack scenario. The cyber attack parameters comprises at least one temporal parameter describing a temporal feature of the cyber attack scenario. The following is performed for each cyber defense of one or more cyber defenses to yield one or more sets of cyber attack metrics: simulating the cyber attack operating with a cyber defense; and determining a set of cyber attack metrics describing the cyber attack operating with the cyber defense. The cyber defenses are evaluated in accordance with the sets of cyber attack metrics.

Cyber attack analysis

In accordance with certain embodiments of the present disclosure, specifying integration points of a system-of-systems includes identifying an integration point that associates interfaces of system components. The integration point is characterized according to the identification to generate a set of attributes describing the interfaces. The integration point is specified according to the set of attributes.

Specifying integration points of a system-of-systems

A troubleshooting portal method for providing connectivity between a first communication device and a second communication device. The second communication device resides in an access provider communication system. One embodiment comprises receiving a specification from a user by the first communication device, the specification comprising at least one predefined identifier that identifies the second communication device, and receiving a request to establish connectivity between the user and the second communication device; associating the predefined identifier with said second communication device; establishing connectivity between the first communication device and the second communication device based upon the specified predefined identifier; receiving at least troubleshooting data and a test from the user; and communicating the received troubleshooting data and the test to the second device.

System and method for a trouble shooting portal to allow temporary management access to a communication device

A data delivery analysis report is generated by collecting various network performance parameters from a plurality of communication devices connected to a communication network. Logic located at a network management system collects and presents the network performance information to a network administrator in a graphical format such that the network administrator may determine whether reduced network performance is attributable to the network or to the traffic characteristics of a particular network user.

System and method for the collection and display of network performance data in a communication network

A virtual circuit (PVC) to switched virtual circuit (SVC) conversion system and method are used for communication across SVC in parallel with VCs or in place of VCs set up to other sites on a network when communication problems exist such as congestion, node-to-node failures or any other instances in which increased bandwidth is needed or service pricing justifies it. The VC to SVC conversion system is used in a communications access device to allow Carriers providing SVC service to avoid having to upgrade or replace the customer's existing premises equipment to support SVCs. The system comprises logic which maps a VC to an SVC configured by the user during configuration, based on the VC address contained in the data link control identification in the frame layout of the data. This logic exists in the memory of the communications access device and is executed on a processor which may or may not be located inside the communications access device which controls a communications switch in accordance with criteria from the network management system. Use of the present invention will increase efficiency and cost effectiveness of communications access.

System and method for connecting equipment that supports only permanent virtual circuits to a switched virtual circuit network

A system for providing robust and secure communications connections in a telecommunications network is disclosed. The system includes an apparatus supporting functions directed to the establishment of a backup link in the event of a network fault, security, and network connection prioritization. Each of these features are uniquely achieved by utilizing caller identification information associated with the calling party when users are interconnected via private branch exchanges to local area networks. The features of the invention are uniquely achieved by retrieving and utilizing data-link connection identifiers or Internet protocol addresses associated with the accessing user when users are connected to the network via frame relay routers. The apparatus establishes a backup link for rerouting data in a network by establishing a primary network link between a calling party and a called party, by examining call/link setup information at the called party to identify the calling party. The apparatus stores and accesses user identification information associated with each calling party. Thereafter, upon identifying a fault condition in the network link between the calling party and the called party, the apparatus retrieves the stored user identification information associated with the calling party from the called party. Using the retrieved user identification information, the apparatus establishes a backup network connection between the initial calling party and the called party.

System and apparatus for enhancing a network link

A system and method for the detection of permanent virtual circuit failures in a communication network determines and classifies failures based upon physical or logical criteria. Upon detection of a physical failure or a logical failure the virtual circuit backup logic will establish an alternate path in order to selectively reroute information avoiding the failed primary path. Once the primary path is again available, the logic of the present invention will restore the communication from the alternate path to the primary path. The virtual circuit backup logic will selectively provide an alternate path for communication traffic on a per data link connection identifier (DLCI) basis, thus enabling a single link to be backed up over multiple links.

System and method for virtual circuit backup in a communication network

A system and method providing robust and secure communications connection in a telecommunication network are disclosed. The system and method include aspects directed to the establishment of a backup link in the event of a network fault, security, and call prioritization. Each of these features are uniquely achieved by utilizing caller identification information identifying the calling party. The method for establishing a backup communications link for rerouting data in a telecommunication network includes the steps of establishing a primary communications link between a calling party and a called party, and examining call setup information at the called party to identify the telephone number of the calling party. Thereafter, the method stores the telephone number of the calling party, and identifies a fault condition in the communication link between the calling party and the called party. It then retrieves the stored telephone number of the calling party by the called party. Using the retrieved telephone number to dial the calling party back, the method then establishes a backup communications link.

System and method for enhancing a communication link

The present invention is a hardware implementation of frame relay switching functions which provides for real time concurrent multiple processes by implementing the processes in dedicated hardware logic operating in parallel, whereas in a typical software implementation the processes are sequentially processed. While data structures in software based implementations are accessed on some multiple of a byte regardless of the logical structure of the data, in the hardware implementation of the present invention the physical widths and the logical widths of the data structure elements are identical. This allows direct access of the logical structure by the operating process.

Circuit for performing high-speed, low latency frame relay switching with support for fragmentation and reassembly and channel multiplexing

Growing community of inventors

Clearwater, FL, United States of America

Suzanne P Hassell