Source: http://www.google.es/patents/US9450975
Timestamp: 2017-12-13 20:38:14
Document Index: 379790940

Matched Legal Cases: ['application No. 05773540', 'application No. 06837333', 'Application No. 2685292', 'Application No. 2007', 'application No. 05773501', 'Application No. 05773501', 'application No. 2007', 'application No. 2007']

Patente US9450975 - Target-based SMB and DCE/RPC processing for an intrusion detection system or ... - Google Patentes
A method performed in a processor of an intrusion detection/prevention system (IDS/IPS) checks for valid packets in an SMB named pipe in a communication network. In a processor configured as an IDS/IPS, a packet in a transmission is received and a kind of application of a target of the packet is determined....http://www.google.es/patents/US9450975?utm_source=gb-gplus-sharePatente US9450975 - Target-based SMB and DCE/RPC processing for an intrusion detection system or intrusion prevention system
Número de publicación US9450975 B2
Número de solicitud US 14/706,383
Fecha de presentación 7 May 2015
También publicado como US8272055, US9055094, US20100088767, US20120246728, US20150237060, WO2010045089A1
Número de publicación 14706383, 706383, US 9450975 B2, US 9450975B2, US-B2-9450975, US9450975 B2, US9450975B2
Inventores Kenneth Todd Wease
Citas de patentes (256), Otras citas (202), Clasificaciones (8)
US 9450975 B2
US4570157 6 Dic 1983 11 Feb 1986 Uro Denski Kogyo, K.K. Infrared intrusion alarm system capable of preventing false signals
US5193192 23 Ago 1990 9 Mar 1993 Supercomputer Systems Limited Partnership Vectorized LR parsing of computer programs
US5404488 1 Oct 1993 4 Abr 1995 Lotus Development Corporation Realtime data feed engine for updating an application with the most currently received data from multiple data feeds
US5459841 28 Dic 1993 17 Oct 1995 At&T Corp. Finite state machine with minimized vector processing
US5870554 1 Abr 1996 9 Feb 1999 Advanced Micro Devices, Inc. Server selection method where a client selects a server according to address, operating system and found frame for remote booting
US5917821 21 Dic 1994 29 Jun 1999 Newbridge Networks Corporation Look-up engine for packet-based network
US5987473 29 Dic 1997 16 Nov 1999 Beologic A/S Interactive configuration via network
US6240452 12 Ago 1998 29 May 2001 Intel Corporation Method and apparatus for monitoring file transfers and logical connections in a computer database featuring a file transfer record database
US6320848 30 Abr 1999 20 Nov 2001 Hewlett-Packard Company Methods of altering dynamic decision trees
US6343362 21 Ene 1999 29 Ene 2002 Networks Associates, Inc. System and method providing custom attack simulation language for testing networks
US6539381 21 Abr 1999 25 Mar 2003 Novell, Inc. System and method for synchronizing database information
US6678824 2 Nov 1999 13 Ene 2004 Agere Systems Inc. Application usage time limiter
US6983323 12 Ago 2002 3 Ene 2006 Tippingpoint Technologies, Inc. Multi-level packet screening with dynamically selected filtering criteria
US6993706 15 Ene 2002 31 Ene 2006 International Business Machines Corporation Method, apparatus, and program for a state machine framework
US7058821 17 Ene 2002 6 Jun 2006 Ipolicy Networks, Inc. System and method for detection of intrusion attacks on packets transmitted on a network
US7076803 28 Ene 2002 11 Jul 2006 International Business Machines Corporation Integrated intrusion detection services
US7174566 * 1 Feb 2002 6 Feb 2007 Intel Corporation Integrated network intrusion detection
US7305708 8 Mar 2004 4 Dic 2007 Sourcefire, Inc. Methods and systems for intrusion detection
US7310688 29 Ago 2000 18 Dic 2007 Ciena Corporation Relative addressing for network elements
US7313695 23 Mar 2004 25 Dic 2007 Sourcefire, Inc. Systems and methods for dynamic threat assessment
US7317693 12 May 2004 8 Ene 2008 Sourcefire, Inc. Systems and methods for determining the network topology of a network
US7350077 17 Abr 2003 25 Mar 2008 Cisco Technology, Inc. 802.11 using a compressed reassociation exchange to facilitate fast handoff
US7365872 3 Ene 2003 29 Abr 2008 Microsoft Corporation Client computer system, method and computer readable medium comprising executable instructions for rendering printable documents in a native printer language on the network
US7467205 14 Nov 2005 16 Dic 2008 Sourcefire, Inc. Systems and methods for identifying the client applications of a network
US7467410 15 May 2007 16 Dic 2008 International Business Machines Corporation System and method for preventing network misuse
US7493388 19 Ago 2005 17 Feb 2009 Bdna Corporation Method and/or system for identifying information appliances
US7580370 21 Jun 2002 25 Ago 2009 International Business Machines Corporation Method and structure for autoconfiguration of network destinations
US7644275 15 Abr 2003 5 Ene 2010 Microsoft Corporation Pass-thru for client authentication
US7701945 10 Ago 2006 20 Abr 2010 Sourcefire, Inc. Device, system and method for analysis of segments in a transmission control protocol (TCP) session
US7756885 19 Abr 2007 13 Jul 2010 Sourcefire, Inc. Methods and systems for multi-pattern searching
US7805482 30 Dic 2005 28 Sep 2010 Senactive It-Dienstleistungs Gmbh Method of correlating events in data packet streams
US7831522 28 Sep 2006 9 Nov 2010 Symantec Corporation Evaluating relying parties
US7904942 22 Feb 2008 8 Mar 2011 Inventec Corporation Method of updating intrusion detection rules through link data packet
US7996424 31 Ene 2008 9 Ago 2011 Sourcefire, Inc. Methods and systems for multi-pattern searching
US8150039 15 Abr 2008 3 Abr 2012 Apple Inc. Single security model in booting a computing device
US20020035639 16 Ago 2001 21 Mar 2002 Wei Xu Systems and methods for a packet director
US20020065924 * 12 Jun 2001 30 May 2002 Barrall Geoffrey S. Apparatus and method for hardware implementation or acceleration of operating system functions
US20020087716 4 Dic 2000 4 Jul 2002 Shakeel Mustafa System and method for transmitting customized multi priority services on a single or multiple links over data link layer frames
US20020123995 11 Ene 2002 5 Sep 2002 Tetsuo Shibuya Pattern search method, pattern search apparatus and computer program therefor, and storage medium thereof
US20020144142 3 Abr 2001 3 Oct 2002 Dalia Shohat Automatic creation of roles for a role-based access control system
US20020168082 7 Mar 2001 14 Nov 2002 Ravi Razdan Real-time, distributed, transactional, hybrid watermarking method to provide trace-ability and copyright protection of digital content in peer-to-peer networks
US20030014662 13 Jun 2002 16 Ene 2003 Gupta Ramesh M. Protocol-parsing state machine and method of using same
US20030065817 28 Sep 2001 3 Abr 2003 Uri Benchetrit Extended internet protocol network address translation system
US20030229726 18 Mar 2003 11 Dic 2003 Daseke Michael J. Default device configuration system and method for thin devices
US20040010684 10 Jun 1998 15 Ene 2004 Ibm Corporation Method and system for the exchange of digitally signed objects over an insecure network
US20040034773 19 Ago 2002 19 Feb 2004 Balabine Igor V. Establishing authenticated network connections
US20040064726 30 Sep 2002 1 Abr 2004 Mario Girouard Vulnerability management and tracking system (VMTS)
US20040073800 22 May 2003 15 Abr 2004 Paragi Shah Adaptive intrusion detection system
US20040098618 14 Ago 2003 20 May 2004 Kim Hyun Joo System and method for defending against distributed denial-of-service attack on active network
US20040123153 11 Abr 2003 24 Jun 2004 Michael Wright Administration of protection of data accessible by a mobile device
US20040210756 15 Abr 2003 21 Oct 2004 Microsoft Corporation Pass-thru for client authentication
US20040221176 29 Abr 2003 4 Nov 2004 Cole Eric B. Methodology, system and computer readable medium for rating computer system vulnerabilities
US20040250032 6 Jun 2003 9 Dic 2004 Minwen Ji State machine and system for data redundancy
US20050005169 9 Abr 2004 6 Ene 2005 Samir Gurunath Kelekar System for real-time network-based vulnerability assessment of a host/device via real-time tracking, vulnerability assessment of services and a method thereof
US20050022010 * 6 Jun 2003 27 Ene 2005 Microsoft Corporation Multi-layered firewall architecture
US20050044422 31 Ago 2004 24 Feb 2005 Craig Cantrell Active network defense system and method
US20050076066 7 Oct 2003 7 Abr 2005 International Business Machines Corporation Method, system, and program for retaining versions of files
US20050108554 30 Ago 2004 19 May 2005 Moshe Rubin Method and system for adaptive rule-based content scanners
US20050108573 10 Sep 2004 19 May 2005 Detica Limited Real-time network monitoring and security
US20050114700 13 Ago 2003 26 May 2005 Sensory Networks, Inc. Integrated circuit apparatus and method for high throughput signature based network applications
US20050172019 11 Ene 2005 4 Ago 2005 Williamson Matthew M. Network management
US20050188079 24 Feb 2004 25 Ago 2005 Covelight Systems, Inc. Methods, systems and computer program products for monitoring usage of a server application
US20050229255 21 Dic 2004 13 Oct 2005 Gula Ronald J System and method for scanning a network
US20050240604 27 Abr 2004 27 Oct 2005 International Business Machines Corporation Method and system for compressing a search tree structure used in rule classification
US20050268331 25 May 2004 1 Dic 2005 Franck Le Extension to the firewall configuration protocols and features
US20050268332 2 Jul 2004 1 Dic 2005 Franck Le Extensions to filter on IPv6 header
US20050273673 19 May 2005 8 Dic 2005 Paul Gassoway Systems and methods for minimizing security logs
US20050273857 29 Mar 2005 8 Dic 2005 Check Point Software Technologies, Inc. System and Methodology for Intrusion Detection and Prevention
US20060288053 21 Jun 2005 21 Dic 2006 Apple Computer, Inc. Apparatus and method for peer-to-peer N-way synchronization in a decentralized environment
US20060294588 24 Jun 2005 28 Dic 2006 International Business Machines Corporation System, method and program for identifying and preventing malicious intrusions
US20070058631 12 Ago 2005 15 Mar 2007 Microsoft Corporation Distributed network management
US20070150948 24 Dic 2004 28 Jun 2007 Kristof De Spiegeleer Method and system for identifying the content of files in a network
US20070162463 18 Ene 2007 12 Jul 2007 Websense, Inc. System and method of monitoring and controlling application files
US20070192863 13 Dic 2006 16 Ago 2007 Harsh Kapoor Systems and methods for processing data flows
US20070195797 23 Feb 2006 23 Ago 2007 Patel Alpesh S Network device that determines application-level network latency by monitoring option values in a transport layer message
US20070288579 7 Sep 2006 13 Dic 2007 Schunemann Alan J Network asset tracker for identifying users of networked computers
US20080196102 5 Oct 2007 14 Ago 2008 Sourcefire, Inc. Device, system and method for use of micro-policies in intrusion detection/prevention
US20080263197 23 Abr 2007 23 Oct 2008 The Mitre Corporation Passively attributing anonymous network events to their associated users
US20080289040 27 Abr 2004 20 Nov 2008 Ravishankar Ganesh Ithal Source/destination operating system type-based IDS virtualization
US20090028147 28 Sep 2008 29 Ene 2009 Russell Paul F Segmenting data packets for over-network transmission at adjustable fragment boundary
US20090041020 7 Ago 2007 12 Feb 2009 Avaya Technology Llc Clock management between two endpoints
US20090097662 15 Oct 2007 16 Abr 2009 Scott Olechowski Processing encrypted electronic documents
US20090164517 21 Dic 2007 25 Jun 2009 Thomas Clay Shields Automated forensic document signatures
US20090171981 12 Feb 2009 2 Jul 2009 Gary Stephen Shuster Computer network storage environment with file tracking
US20090182864 15 Ene 2008 16 Jul 2009 Faud Khan Method and apparatus for fingerprinting systems and operating systems in a network
US20090262659 28 Ago 2008 22 Oct 2009 Sourcefire, Inc. Speed and memory optimization of intrusion detection system (IDS) and intrusion prevention system (IPS) rule processing
US20090271696 28 Abr 2008 29 Oct 2009 Microsoft Corporation Conflict Resolution
US20090307776 14 Mar 2007 10 Dic 2009 Jon Curnyn Method and apparatus for providing network security by scanning for viruses
US20090320138 1 Sep 2009 24 Dic 2009 C/O Ncircle Network Security, Inc. Network security system having a device profiler communicatively coupled to a traffic monitor
US20100027430 4 Sep 2007 4 Feb 2010 Netwitness Corporation Apparatus and Method for Network Analysis
US20100050260 10 Ago 2009 25 Feb 2010 Hitachi Information Systems, Ltd. Attack node set determination apparatus and method, information processing device, attack dealing method, and program
US20100077483 23 Sep 2009 25 Mar 2010 Stolfo Salvatore J Methods, systems, and media for baiting inside attackers
US20100088767 8 Oct 2009 8 Abr 2010 Sourcefire, Inc. Target-based smb and dce/rpc processing for an intrusion detection system or intrusion prevention system
US20100161795 22 Dic 2009 24 Jun 2010 Kindsight Apparatus and method for multi-user nat session identification and tracking
US20100205675 15 Ene 2010 12 Ago 2010 Sourcefire, Inc. Systems and methods for modifying network map attributes
US20100257267 22 Nov 2007 7 Oct 2010 Electronics And Telecommunications Research Institute Apparatus and method for visualizing network state by using geographic information
US20100268834 16 Abr 2010 21 Oct 2010 Empirix Inc. Method For Embedding Meta-Commands in Normal Network Packets
US20110258702 14 Abr 2011 20 Oct 2011 Sourcefire, Inc. System and method for near-real time network attack detection, and system and method for unified detection via detection routing
US20110307600 11 Jun 2010 15 Dic 2011 Sourcefire, Inc. System and method for assigning network blocks to sensors
US20110314143 22 Jun 2010 22 Dic 2011 Sourcefire, Inc. System and method for resolving operating system or service identity conflicts
US20130173790 28 Feb 2013 4 Jul 2013 Sourcefire, Inc. System and method for assigning network blocks to sensors
US20140007233 29 Ago 2013 2 Ene 2014 Sourcefire, Inc. System and method for real time data awareness
GB2432933A Título no disponible
WO2004100011A1 30 Abr 2003 18 Nov 2004 Threatguard, Inc. System and method for network security scanning
WO2005064884A1 24 Dic 2004 14 Jul 2005 Veritas Software Corporation Method and system for identifyingthe content of files in a network
WO2006025050A2 24 Ago 2005 9 Mar 2006 Finjan Software Ltd. Method and system for adaptive rule-based content scanners
2 "Snort(TM) Users Manual 2.2.0RC1," The Snort Project, Jun. 28, 2004, Retrieved from the Internet: URL:http://cvs.snort.org/viewcvs.cgi/*checkout*/snort/doc/snort-manual.pdf?rev=1.25&content-type=application/pdf [retrieved on Nov. 18, 2010] (XP002610157).
4 "Snort™ Users Manual 2.2.0RC1," The Snort Project, Jun. 28, 2004, Retrieved from the Internet: URL:http://cvs.snort.org/viewcvs.cgi/*checkout*/snort/doc/snort-manual.pdf?rev=1.25&content-type=application/pdf [retrieved on Nov. 18, 2010] (XP002610157).
8 Advisory Action issued by the U.S. Patent Office on Aug. 3, 2010 in connection with related U.S. Appl. No. 10/843,374.
9 Advisory Action issued by the U.S. Patent Office on Dec. 2, 2009 in connection with related U.S. Appl. No. 10/843,398.
10 Advisory Action issued by the U.S. Patent Office on Feb. 24, 2010 in connection with related U.S. Appl. No. 11/272,035.
11 Advisory Action issued by the U.S. Patent Office on Nov. 28, 2011 in connection with related U.S. Appl. No. 12/230,338.
12 Advisory Action issued by the U.S. Patent Office on Sep. 29, 2009 in connection with parent U.S. Appl. No. 10/843,459.
13 Aho et al., "Efficient String Matching: An Aid to Bibliographic Search," Communications from the ACM (Jun. 1975), vol. 18, No. 6, pp. 333-340.
14 Auffret, Patrice. "SinFP, unification of active and passive operating system fingerprinting." Journal in Computer Virology 6.3 (2010): 197-205.
15 B. Krishnamurthy, "Web Protocols and Practice," (May 1, 2001), pp. 518-520.
16 D. Joseph, et al., "A Policy-aware Switching Layer for Data Centers," SIGCOMM, Aug. 17-22, 2008, pp. 51-62.
17 D. Roekler, "HTTP IDS Evasions Revisited," Jan. 8, 2003, Retrieved from the Internet: URL:http://docs.idsreseareh.org/http-ids-evasions.pdf [Nov. 18, 2010] (XP002610155).
18 D. Roelker, "HTTP IDS Evasions Revisited" (Aug. 1, 2003) [online] (retrieved on Nov. 9, 2006). Retrieved from the Internet .
19 D. Roelker, "HTTP IDS Evasions Revisited" (Aug. 1, 2003) [online] (retrieved on Nov. 9, 2006). Retrieved from the Internet <URL: http://docs.idsresearch.org/http-ids-evasions.pdf>.
20 De Montigny-Leboef, Annie. "A multi-packet signature approach to passive operating system detection." Defense Technical Information Center, 2005.
21 Etienne, Loic et al., "Malicious Traffic Detection in Local Networks with Snort", 2009, pp. 1-34 .
22 Etienne, Loic et al., "Malicious Traffic Detection in Local Networks with Snort", 2009, pp. 1-34 <http://infoscience.epfl.ch/record/141022>.
25 European Search Report issued by the European Patent Office on Dec. 6, 2010 in connection with European patent application No. 05773540.9-2413, which corresponds to related U.S. Pat. No. 7,496,962.
28 Extended European Search Report issued by the European Patent Office on Jul. 19, 2011 in connection with European patent application No. 06837333.1-2413, which corresponds to related U.S. Pat. No. 7,733,803.
29 Final Office Action issued by the U.S. Patent Office on Apr. 18, 2013 in connection with related U.S. Appl. No. 12/969,682.
30 Final Office Action issued by the U.S. Patent Office on Aug. 19, 2008 in connection with related U.S. Appl. No. 10/843,373.
31 Final Office Action issued by the U.S. Patent Office on Aug. 20, 2008 in connection with related U.S. Appl. No. 10/843,353.
32 Final Office Action issued by the U.S. Patent Office on Aug. 6, 2008 in connection with related U.S. Appl. No. 10/843,375.
33 Final Office Action issued by the U.S. Patent Office on Dec. 8, 2009 in connection with related U.S. Appl. No. 11/272/034.
34 Final Office Action issued by the U.S. Patent Office on Dec. 9, 2009 in connection with related U.S. Appl. No. 11/272,035.
35 Final Office Action issued by the U.S. Patent Office on Dec. 9, 2011 in connection with related U.S. Appl. No. 12/688,400.
36 Final Office Action issued by the U.S. Patent Office on Jul. 17, 2008 in connection with parent U.S. Appl. No. 10/843,459.
37 Final Office Action issued by the U.S. Patent Office on Jun. 10, 2013 in connection with related U.S. Appl. No. 13/046,127.
42 Final Office Action issued by the U.S. Patent Office on Mar. 5, 2012 in connection with related U.S. Appl. No. 12/969,682.
43 Final Office Action issued by the U.S. Patent Office on May 13, 2009 in connection with related U.S. Appl. No. 10/843,374.
44 Final Office Action issued by the U.S. Patent Office on May 29, 2012 in connection with related U.S. Appl. No. 12/230,338.
45 Final Office Action issued by the U.S. Patent Office on May 9, 2008 in connection with related U.S. Appl. No. 10/843,353.
46 Final Office Action issued by the U.S. Patent Office on Nov. 24, 2010 in connection with related U.S. Appl. No. 12/010,900.
47 Final Office Action issued by the U.S. Patent Office on Nov. 4, 2010 in connection with related U.S. Appl. No. 10/843,459.
48 Final Office Action issued by the U.S. Patent Office on Oct. 25, 2010 in connection with related U.S. Appl. No. 11/272,035.
49 Final Office Action issued by the U.S. Patent Office on Oct. 29, 2009 in connection with related U.S. Appl. No. 11/501,776.
50 Final Office Action issued by the U.S. Patent Office on Sep. 14, 2011 in connection with related U.S. Appl. No. 12/230,338.
51 Final Office Action issued by the U.S. Patent Office on Sep. 17, 2010 in connection with related U.S. Appl. No. 11/711,876.
52 Final Office Action issued by the U.S. Patent Office on Sep. 30, 2010 in connection with related U.S. Appl. No. 11/493,934.
53 Final Office Action issued by the U.S. Patent Office on Sep. 8, 2010 in connection with parent U.S. Appl. No. 10/843,459.
54 Francois Gagnon et al.: "A Hybrid Approach to Operating System Discovery using Answer Set Programming", Integrated Network Management, 2007. IM'07, 10TH IFIP/IEEE International Symposium on, IEEEE, PI, May 1, 2007, pp. 391-400, XP031182713, ISBN: 978-1-4244-0798-9, p. 293, 394-397.
55 Full Band and Matrix Algorithms (Jun. 9, 2004), http://web.archive.org/web20040109154658/http://www.netlib.org/utk/Isi/pcwLSI/text/node150.html.
56 G. Lyon, "Remote OS detection via TCP/IP Stack Fingerprinting"(Jun. 30, 2002), pp. 1-12, obtained from: http://web.archive.org/web20021017063625/www.insecure.org/nmap/nmap-fingerprinting-article.html.
57 Gupta, Anurag, Li, Dongqiao, "Common Internet File System Proxy", CS739 Project Report, University of Wisconsin, May 15, 1999.
58 International Preliminary Report on Patentability and Written Opinion of the International Searching Authority mailed on Mar. 17, 2009 in connection with corresponding PCT application No. PCT/US06/43820, which corresponds to related U.S. Appl. No. 11/272,035.
59 International Preliminary Report on Patentability and Written Opinion of the International Searching Authority mailed on Mar. 3, 2009 in connection with PCT application No. PCT/US05/025584, which corresponds to U.S. Appl. No. 10/898,220.
60 International Preliminary Report on Patentability and Written Opinion of the International Searching Authority mailed on Sep. 26, 2013 in connection with PCT application No. PCT/US2012/021633, which corresponds to related U.S. Appl. No. 13/046,127.
61 International Preliminary Report on Patentability mailed by the International Bureau of WIPO on Jan. 10, 2013, in connection with corresponding PCT international application No. PCT/US2011/035874, which corresponds to related U.S. Appl. No. 12/820,227.
62 International Preliminary Report on Patentability mailed by the International Bureau of WIPO on Oct. 26, 2012, in connection with corresponding PCT application No. PCT/US2011/032489, which corresponds to related U.S. Appl. No. 13/086,819.
63 International Preliminary Report on Patentability mailed on Apr. 7, 2009 in connection with PCT application No. PCT/US07/021351, which corresponds to U.S. Appl. No. 11/905,980.
64 International Preliminary Report on Patentability mailed on May 22, 2008 in connection with PCT application No. PCT/US06/43800, which corresponds to U.S. Appl. No. 11/272,034.
65 International Preliminary Report on Patentability mailed on Nov. 12, 2009 in connection with PCT application No. PCT/US08/005466, which corresponds to U.S. Appl. No. 12/149,196.
66 International Preliminary Report on Patentability mailed on Oct. 19, 2010 in connection with PCT application No. PCT/US2009/02210, which corresponds to U.S. Appl. No. 12/230,338.
67 International Preliminary Report on Patentability mailed on Sep. 11, 2009 in connection with PCT application No. PCT/US08/002454, which corresponds to U.S. Appl. No. 11/711,876.
68 International Search Report and Written Opinion of the International Searching Authority issued on Apr. 25, 2012 in connection with PCT application No. PCT/US2012/021633, which corresponds to related U.S. Appl. No. 13/046,127.
69 International Search Report and Written Opinion of the International Searching Authority issued on Aug. 18, 2008 in connection with PCT application No. PCT/US08/05466, which corresponds to U.S. Appl. No. 12/149,196.
70 International Search Report and Written Opinion of the International Searching Authority issued on Dec. 5, 2007 in connection with PCT application No. PCT/US05/25583, which corresponds to U.S. Appl. No. 10/951,796.
71 International Search Report and Written Opinion of the International Searching Authority issued on Jul. 2, 2008 in connection with PCT application No. PCT/US08/02454, which corresponds to U.S. Appl. No. 11/711,876.
72 International Search Report and Written Opinion of the International Searching Authority issued on Jul. 28, 2011 in connection with PCT application No. PCT/US2011/032489, which corresponds to U.S. Appl. No. 13/086,819.
73 International Search Report and Written Opinion of the International Searching Authority issued on Jul. 7, 2008 in connection with PCT application No. PCT/US06/43820, which corresponds to U.S. Appl. No. 11/272,035.
74 International Search Report and Written Opinion of the International Searching Authority issued on Jun. 19, 2008 in connection with PCT application No. PCT/US05/25584, which corresponds to U.S. Appl. No. 10/898,220.
75 International Search Report and Written Opinion of the International Searching Authority issued on Jun. 30, 2008 in connection with PCT application No. PCT/US07/21351, which corresponds to U.S. Appl. No. 11/905,980.
76 International Search Report and Written Opinion of the International Searching Authority issued on Mar. 16, 2010 in connection with PCT application No. PCT/US09/59965, which corresponds to U.S. Appl. No. 12/575,612.
77 International Search Report and Written Opinion of the International Searching Authority issued on Oct. 9, 2007 in connection with PCT application No. PCT/US06/43800, which corresponds to U.S. Appl. No. 11/272,034.
78 International Search Report and Written Opinion of the International Searching Authority issued on Sep. 1, 2011 in connection with PCT application No. PCT/US2011/035874, which corresponds to U.S. Appl. No. 12/820,227.
79 International Search Report and Written Opinion of the International Searching Authority mailed on May 27, 2009 in connection with PCT application No. PCT/US09/02210, which corresponds to U.S. Appl. No. 12/230,338.
80 J. Howe, "An Environment for "Sniffing" DCE-RPC Traffic," CITI Technical Report 93-4, Jun. 21, 1993, 12 pages total.
81 J. Novak et al., "Target-Based TCP Stream Reassembly" (Aug. 3, 2007), Revision 1.0, pp. 1-23, obtained from: http://www.snort/org/docs/stream5-modelAUg032007.pdf.
82 J. Novak, "Target-Based Fragmentation Reassembly" (Apr. 2005), Revision 2.0, pp. 1-32.
83 Kipp, James et al., "Using Snort as an IDS and Network Monitor in Linux", 2009, 4 pp. .
84 Kipp, James et al., "Using Snort as an IDS and Network Monitor in Linux", 2009, 4 pp. <http://citeseerx.ist.psu.edu/viewdoc.download?doi=10.1.1.3.616&rep1&type=pdf>.
85 L. Spitzner, "Passive Fingerprinting," FOCUS on Intrusion Detection: Passive Fingerprinting (May 3, 2000), pp. 1-4; obtained from: http://www.stillhq.com/pdfdb/000183/data.pdf.
86 Li, Zhichun, et al. Netshield: Matching with a large vulnerability signature ruleset for high performance network defense. Technical Report NWU-EECS-08-07, Northwestern University, Aug. 2010.
87 M. Norton, "Optimizing Pattern Matching for Intrusion Detection" (Jul. 4, 2004) [online] (retrieved on Nov. 9, 2006). Retrieved from the Internet .
88 M. Norton, "Optimizing Pattern Matching for Intrusion Detection" (Jul. 4, 2004) [online] (retrieved on Nov. 9, 2006). Retrieved from the Internet <URL: http://docs.idsresearch.org/OptimizingPatternMatchingForIDS.pdf>.
89 M. Norton, et al., "The New Snort," Computer Security Journal, CSI Security Institute, XIX, No. 3 (Jan. 1, 2003), pp. 37-47, ISSN: 0277-0865 (XP008039475).
90 Martin Roesch, "Snort-Lightweight Intrusion Detection for Networks", Proceedings of LISA '99: 13th System Administration Conference, Nov. 12, 1999, pp. 229-238, http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.105.6212.
91 Matthew Olney et al.: "What would you do with a pointer and a size? A New Detection Framework", Apr. 22, 2010, XP55002567, http://labs.snort.org/nrt/sfvrt-nrt.pdf (retrieved on Jul. 12, 2011) the whole document.
92 N. Brownlee, et al., "Methodology for Passive Analysis of a University Internet Link," PAM2001 Passive and Active Measurement Workshop, Apr. 2001 (7 pp.).
93 N. Chase, "Active Server Pages 3.0 from Scratch" (Dec. 1999), Searching for products section, 13 pp.
94 Norton et al., "Multi-Patten Search Engine Aho-Corasick State Machine" (Mar. 17, 2004), Version 2.0, 36 pp.
95 Norton et al., "Sourcefire Optimizing Pattern Matching for Intrusion Detection" (Sep. 2004), 14 pp.
96 Notice of Allowance issued by the Canadian Intellectual Property Office on Apr. 19, 2013 in connection with Canada Patent Application No. 2685292, which corresponds to related U.S. Appl. No. 12/820,227.
97 Notice of Allowance issued by the Japanese Patent Office on Sep. 30, 2011 in connection with Japanese Patent Application No. 2007-523640, which corresponds to related U.S. Appl. No. 10/898,220, now U.S. Pat. No. 7,539,681.
98 Notice of Allowance issued by the U.S. Patent Office on Apr. 6, 2011 in connection with related U.S. Appl. No. 12/010,900.
99 Notice of Allowance issued by the U.S. Patent Office on Aug. 13, 2013 in connection with related U.S. Appl. No. 13/046,127.
100 Notice of Allowance issued by the U.S. Patent Office on Aug. 18, 2008 in connection with related U.S. Appl. No. 11/272,033.
101 Notice of Allowance issued by the U.S. Patent Office on Dec. 8, 2009 in connection with related U.S. Appl. No. 11/501,776.
102 Notice of Allowance issued by the U.S. Patent Office on Feb. 24, 2011 in connection with related U.S. Appl. No. 11/493,934.
103 Notice of Allowance issued by the U.S. Patent Office on Feb. 5, 2010 in connection with related U.S. Appl. No. 11/272,034.
104 Notice of Allowance issued by the U.S. Patent Office on Jan. 21, 2009 in connection with related U.S. Appl. No. 10/898,220.
105 Notice of Allowance issued by the U.S. Patent Office on Jan. 24, 2011 in connection with related U.S. Appl. No. 10/843,459.
106 Notice of Allowance issued by the U.S. Patent Office on Jan. 7, 2010 in connection with related U.S. Appl. No. 10/843,353.
107 Notice of Allowance issued by the U.S. Patent Office on Jan. 8, 2010 in connection with related U.S. Appl. No. 10/843,373.
108 Notice of Allowance issued by the U.S. Patent Office on Jan. 9, 2013 in connection with related U.S. Appl. No. 12/813,859.
109 Notice of Allowance issued by the U.S. Patent Office on Jul. 12, 2013 in connection with related U.S. Appl. No. 12/969,682.
110 Notice of Allowance issued by the U.S. Patent Office on Jul. 22, 2011 in connection with related U.S. Appl. No. 11/711,876.
111 Notice of Allowance issued by the U.S. Patent Office on Jun. 11, 2009 in connection with related U.S. Appl. No. 10/843,373.
112 Notice of Allowance issued by the U.S. Patent Office on Jun. 22, 2011 in connection with related U.S. Appl. No. 11/272,035.
113 Notice of Allowance issued by the U.S. Patent Office on Jun. 25, 2012 in connection with related U.S. Appl. No. 12/688,400.
114 Notice of Allowance issued by the U.S. Patent Office on Mar. 14, 2013 in connection with related U.S. Appl. No. 12/230,338.
115 Notice of Allowance issued by the U.S. Patent Office on Mar. 5, 2010 in connection with related U.S. Appl. No. 11/785,609.
116 Notice of Allowance issued by the U.S. Patent Office on May 24, 2010 in connection with related U.S. Appl. No. 10/843,398.
117 Notice of Allowance issued by the U.S. Patent Office on May 30, 2012 in connection with related U.S. Appl. No. 12/575,612.
118 Notice of Allowance issued by the U.S. Patent Office on Nov. 7, 2013 in connection with related U.S. Appl. No. 13/086,819.
119 Notice of Allowance issued by the U.S. Patent Office on Oct. 15, 2008 in connection with related U.S. Appl. No. 10/951,796.
120 Notice of Allowance issued by the U.S. Patent Office on Oct. 21, 2008 in connection with related U.S. Appl. No. 10/843,375.
121 Notice of Allowance issued by the U.S. Patent Office on Oct. 28, 2011 in connection with related U.S. Appl. No. 12/149,196.
122 Notice of Allowance issued by the U.S. Patent Office on Oct. 30, 2013 in connection with related U.S. Appl. No. 12/820,227.
123 Notice of Allowance issued by the U.S. Patent Office on Oct. 5, 2007 in connection with related U.S. Appl. No. 10/793,887.
124 Notice of Allowance issued by the U.S. Patent Office on Oct. 5, 2010 in connection with related U.S. Appl. No. 10/843,374.
125 Notice of Allowance issued by the U.S. Patent Office on Sep. 6, 2007 in connection with related U.S. Appl. No. 10/843,376.
126 Office Action issued by the European Patent Office on Jan. 15, 2010 in connection with European patent application No. 05773501.1-2201, which corresponds to related U.S. Appl. Nos. 10/898,220, 11/785,609 and 12/010,900.
127 Office Action issued by the European Patent Office on Mar. 20, 2013 in connection with European Patent Application No. 05773501.1-1952 which corresponds to related U.S. Appl. No. 10/898,220 (now U.S. Pat. No. 7,539,631).
128 Office Action issued by the U.S. Patent Office on Apr. 13, 2011 in connection with related U.S. Appl. No. 12/230,338.
129 Office Action issued by the U.S. Patent Office on Apr. 15, 2010 in connection with related U.S. Appl. No. 12/010,900.
130 Office Action issued by the U.S. Patent Office on Apr. 21, 2010 in connection with parent U.S. Appl. No. 10/843,459.
131 Office Action issued by the U.S. Patent Office on Apr. 28, 2009 in connection with related U.S. Appl. No. 11/501,776.
132 Office Action issued by the U.S. Patent Office on Apr. 6, 2011 in connection with related U.S. Appl. No. 11/711,876.
133 Office Action issued by the U.S. Patent Office on Apr. 7, 2010 in connection with related U.S. Appl. No. 11/711,876.
134 Office Action issued by the U.S. Patent Office on Aug. 20, 2009 in connection with related U.S. Appl. No. 10/843,374.
135 Office Action issued by the U.S. Patent Office on Dec. 17, 2008 in connection with related U.S. Appl. No. 10/843,398.
136 Office Action issued by the U.S. Patent Office on Dec. 17, 2009 in connection with related U.S. Appl. No. 11/493,934.
137 Office Action issued by the U.S. Patent Office on Dec. 22, 2010 in connection with related U.S. Appl. No. 11/905,908.
138 Office Action issued by the U.S. Patent Office on Dec. 23, 2008 in connection with related U.S. Appl. No. 11/272,034.
139 Office Action issued by the U.S. Patent Office on Feb. 15, 2012 in connection with related U.S. Appl. No. 12/230,338.
140 Office Action issued by the U.S. Patent Office on Feb. 15, 2012 in connection with related U.S. Appl. No. 12/820,227.
141 Office Action issued by the U.S. Patent Office on Feb. 2, 2012 in connection with related U.S. Appl. No. 12/688,400.
142 Office Action issued by the U.S. Patent Office on Feb. 21, 2008 in connection with related U.S. Appl. No. 11/272,033.
143 Office Action issued by the U.S. Patent Office on Feb. 4, 2009 in connection with related U.S. Appl. No. 10/843,373.
144 Office Action issued by the U.S. Patent Office on Feb. 5, 2008 in connection with related U.S. Appl. No. 10/843,375.
145 Office Action issued by the U.S. Patent Office on Feb. 8, 2013 in connection with related U.S. Appl. No. 13/046,127.
146 Office Action issued by the U.S. Patent Office on Feb. 9, 2009 in connection with parent U.S. Appl. No. 10/843,459.
147 Office Action issued by the U.S. Patent Office on Jan. 10, 2008 in connection with related U.S. Appl. No. 10/843,373.
148 Office Action issued by the U.S. Patent Office on Jan. 10, 2013 in connection with related U.S. Appl. No. 12/969,682.
149 Office Action issued by the U.S. Patent Office on Jan. 15, 2014 in connection with related U.S. Appl. No. 13/779,851.
150 Office Action issued by the U.S. Patent Office on Jan. 16, 2009 in connection with related U.S. Appl. No. 10/843,353.
151 Office Action issued by the U.S. Patent Office on Jan. 21, 2009 in connection with related U.S. Appl. No. 11/493,934.
152 Office Action issued by the U.S. Patent Office on Jul. 11, 2008 in connection with related U.S. Appl. No. 11/272,034.
153 Office Action issued by the U.S. Patent Office on Jul. 16, 2007 in connection with related U.S. Appl. No. 10/898,220.
154 Office Action issued by the U.S. Patent Office on Jul. 28, 2009 in connection with related U.S. Appl. No. 10/843,353.
155 Office Action issued by the U.S. Patent Office on Jul. 30, 2009 in connection with related U.S. Appl. No. 11/493,934.
156 Office Action issued by the U.S. Patent Office on Jul. 6, 2009 in connection with parent U.S. Appl. No. 10/843,459.
157 Office Action issued by the U.S. Patent Office on Jul. 7, 2009 in connection with related U.S. Appl. No. 10/843,398.
158 Office Action issued by the U.S. Patent Office on Jun. 1, 2009 in connection with related U.S. Appl. No. 11/272,035.
159 Office Action issued by the U.S. Patent Office on Jun. 23, 2009 in connection with related U.S. Appl. No. 11/785,609.
160 Office Action issued by the U.S. Patent Office on Mar. 12, 2008 in connection with parent U.S. Appl. No. 10/843,459.
161 Office Action issued by the U.S. Patent Office on Mar. 16, 2010 in connection with related U.S. Appl. No. 11/272,035.
162 Office Action issued by the U.S. Patent Office on Mar. 19, 2012 in connection with related U.S. Appl. No. 12/813,859.
163 Office Action issued by the U.S. Patent Office on Mar. 20, 2008 in connection with related U.S. Appl. No. 10/843,374.
164 Office Action issued by the U.S. Patent Office on Mar. 22, 2010 in connection with related U.S. Appl. No. 11/493,934.
165 Office Action issued by the U.S. Patent Office on May 12, 2011 in connection with related U.S. Appl. No. 12/149,196.
166 Office Action issued by the U.S. Patent Office on May 14, 2009 in connection with related U.S. Appl. No. 11/272,034.
167 Office Action issued by the U.S. Patent Office on May 31, 2011 in connection with related U.S. Appl. No. 12/688,400.
168 Office Action issued by the U.S. Patent Office on May 6, 2013 in connection with related U.S. Appl. No. 12/820,227.
169 Office Action issued by the U.S. Patent Office on May 8, 2013 in connection with related U.S. Appl. No. 13/086,819.
170 Office Action issued by the U.S. Patent Office on Nov. 19, 2010 in connection with parent U.S. Appl. No. 10/843,459.
171 Office Action issued by the U.S. Patent Office on Nov. 21, 2007 in connection with related U.S. Appl. No. 10/843,398.
172 Office Action issued by the U.S. Patent Office on Nov. 6, 2012 in connection with related U.S. Appl. No. 12/820,227.
173 Office Action issued by the U.S. Patent Office on Oct. 15, 2012 in connection with related U.S. Appl. No. 12/230,338.
174 Office Action issued by the U.S. Patent Office on Oct. 21, 2011 in connection with related U.S. Appl. No. 12/969,682.
175 Office Action issued by the U.S. Patent Office on Oct. 4, 2007 in connection with related U.S. Appl. No. 10/951,796.
176 Office Action issued by the U.S. Patent Office on Oct. 6, 2008 in connection with related U.S. Appl. No. 10/843,374.
177 Office Action issued by the U.S. Patent Office on Sep. 26, 2007 in connection with related U.S. Appl. No. 10/843,353.
178 Office Action issued by the U.S. Patent Office on Sep. 6, 2007 in connection with related U.S. Appl. No. 10/843,374.
179 Office Action mailed Mar. 1, 2011 from the Japan Patent Office for Japanese patent application No. 2007-523640 in connection with related U.S. Appl. No. 10/898,220, now U.S. Pat. No. 7,539,681, U.S. Appl. No. 11/785,609, now U.S. Pat. No. 7,756,885, and U.S. Appl. No. 12/010,900 (English translation enclosed).
180 Office Action mailed Sep. 7, 2010 from the Japan Patent Office for Japanese patent application No. 2007-523639 in connection with related U.S. Appl. No. 10/951,796, now U.S. Pat. No. 7,496,962 (English translation enclosed).
181 PCT International Preliminary Report on Patentability mailed on Apr. 21, 2011 by the International Bureau of WIPO in connection with PCT patent application No. PCT/US2009/059965, which corresponds to U.S. Appl. No. 12/575,612.
182 Press Release, "FaceTime Protects Enterprises from Information Leaks over Collaborative Suites like Microsoft OCS and IBM Sametime", issued by FaceTime Communications, Belmont, California, Jul. 14, 2008, retrieved from www.facetime.com/pr/pr080714.aspx , Dec. 1, 2009.
183 R. Deraison, et al., "Nessus Network Auditing," Sungress Publishing, Jul. 20, 2004, pp. 1-13.
184 R. Deraison, et al., "Passive Vulnerability Scanning: Introduction to NeVO," Tenable Network Security, May 30, 2004, pp. 1-13.
185 R. Gula, "Passive Vulnerability Detection. Techniques to passively find network security vulnerabilities," Sep. 9, 1999 (5 pp.).
186 R. Hiyoshi, "Practical Guide to Intrusion Detection System: Snort & Tripwire," Japan, Apr. 25, 2004, pp. 57-230 (concise English explanation of relevance attached).
187 R.P. Lippmann et al., "Passive Operating System Identification from TCP/IP Packet Headers," Proceedings Workshop on Data Mining for Computer Security (DMSEC), Nov. 2003 (10 pp.).
188 S.Siddharth, "Evading NIDS, revisited" (Dec. 12, 2005).
189 T. Ptacek, et al., "Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection", Jan. 1998, pp. 1-63.
190 Taleck, Greg. "Ambiguity Resolution via Passive OS Fingerprinting." Recent Advances in Intrusion Detection. Springer-Verlag Berlin Heidelberg, 2003.
191 Tarjan, et al., "Storing a Sparse Table," Communications of the ACM (Nov. 1979), vol. 2, No. 11, pp. 606-620.
192 Tools, "Intrusion Detection Systems", Information Assurance Tools Report; 6th Edition, Sep. 25, 2009, pp. 1-87 .
193 Tools, "Intrusion Detection Systems", Information Assurance Tools Report; 6th Edition, Sep. 25, 2009, pp. 1-87 <http://iac.dtic.mil/csiac/download/intrusion-detection.pdf>.
194 Tu, William, et al. "Automated Service Discovery for Enterprise Network Management." Mar. 8, 2009.
195 U. Shankar and V. Paxson, Active Mapping: Resisting NIDS Evasion Without Altering Traffic, Proc. IEEE Symposium on Security and Privacy. May 2003, pp. 1-18.
196 U.S. Appl. No. 12/969,682, filed Dec. 2010, Roesch et al., Systems and Methods for Determining Characteristics of a Network and Enforcing Policy.
197 U.S. Appl. No. 13/046,127, filed Mar. 2011, Roesch, System and Method for Real Time Data Awareness.
198 U.S. Appl. No. 13/779,851, filed Feb. 28, 2013, Polley et al.
199 U.S. Appl. No. 14/013,344, filed Aug. 29, 2013, Roesch.
200 V. Jacobson, et al., Request for Comments: 1323, "TCP Extensions for High Performance," May 1992 (35 pages).
201 V. Yegneswaran, et al., "Internet Sieve: An Architecture for Generating Resilient Signatures," May 2004, Retrieved from the Internet: URL:http://www.cc.gatech.edu/~giffin/papers/tr1507/tr1507.pdf [retrieved on Nov. 18, 2010] (XP002610154).
202 V. Yegneswaran, et al., "Internet Sieve: An Architecture for Generating Resilient Signatures," May 2004, Retrieved from the Internet: URL:http://www.cc.gatech.edu/˜giffin/papers/tr1507/tr1507.pdf [retrieved on Nov. 18, 2010] (XP002610154).
Clasificación cooperativa H04L63/1433, H04L63/1408, H04L63/1441, H04L63/1425, H04L63/0254, H04L63/1416, H04L63/1466