Corero Networks Security, Inc.

F5 Networks, Inc.

Thomas J Teixeira

David G Porter

Chin-Cheng Wu

Thomas Courtenay Porcher

Daniel J Dietterich

Jc Ferguson

Michael J Homberg

Michael A Berger

Benjamin E McCann

Jonathan C Nicklin

Bryan T Whitmore

Christopher T Pacejo

Suchi Raman

Craig S Rasmussen

Michael J Soha

Marcos Szydlo

Robert T Curley

Leonard F Wisniewski

In a system for detecting and optionally blocking packets from an attacker, an improved multi-hash process, in which rate information for one or more packet signatures is computed by individual modules, where each module corresponds to a different hash function, and is shared across the modules to determine maximum observed rates for the signatures within a specified observation window. A moving average of the maximum rates can be computed across several observation windows, to optimize false negative and false positive detections. The modules may designate certain packets as potentially harmful and/or may block such packets, according to a corresponding maximum rate and specified threshold.

Systems and methods for monitoring and mitigating network attacks

A Dynamic Adaptive Machine (DAM) classifies a received packet into a packet group and selects an initial level of processing for that group based on, at least in part, a measure of load of the system for processing the packet. The DAM continues to monitor the system load and re-computes the load measure, and increases or decreases the processing level according to the load measure. The DAM considers one or more processing states and, after an increase in the processing level, ignores for a certain grace period any errors generated at the higher level of processing, to minimize false positive errors.

Systems and methods for dynamic adaptive machine

An interface description language (IDL) compiler generates a descriptor for invoking a method implemented by a software component or a target unit by source units, where the descriptor customizes the invocation by one or more source units based on, at least in part, whether a respective source unit and the target unit are mapped to the same core or to different cores, as specified by a unit-core map. Additionally or in the alternative, the invocation may depend on whether the method is synchronous, asynchronous, or unspecified. Using the unit-core map, a channel associated with a method may be monitored efficiently by avoiding monitoring of the source units that are mapped to the same core as the target unit is.

Systems and methods of interface description language (IDL) compilers

Methods and apparatus provide an adaptive load balancer that presents a virtual data system to client computer systems. The virtual data system provides access to an aggregated set of data, such as files or web service objects, available from a plurality of server data systems respectively operating within a plurality of server computer systems. The adaptive load balancer receives a client data access transaction from a client computer system that specifies a data access operation to be performed relative to the virtual data system presented to the client computer system. The adaptive load balancer processes the client data access transaction in relation to metadata associated with the virtual data system to provide access to the file or service object within a server computer system, or to access the metadata. The adaptive load balancer can work in conjunction with other adaptive load balancers to dynamically adjust to demands for access to data by replicating and migrating data such as files or service objects as needed between the server computer systems to accommodate data access demands.

Method and apparatus for adaptive services networking

Growing community of inventors

Harvard, MA, United States of America

Thomas J Teixeira