Source: http://www.google.de/patents/US7948988
Timestamp: 2013-05-22 04:21:42
Document Index: 104815393

Matched Legal Cases: ['application No. 07', 'application No. 07015003', 'application No. 05773540', 'application No. 07014575', 'application No. 05773501', 'application No. 05773501', 'application No. 2007']

Patent US7948988 - Device, system and method for analysis of fragments in a fragment train - Google PatenteSuche Bilder Maps Play YouTube News Gmail Drive Mehr » Erweiterte Patentsuche | Webprotokoll | Anmelden Erweiterte Patentsuche PatenteFragment trains in a communication network are analyzed. A fragment train includes fragments in the same fragment train and associated with the same target system. One or more fragment reassembly policies are identified out of several fragment reassembly policies, where the fragment reassembly policy...http://www.google.de/patents/US7948988?utm_source=gb-gplus-sharePatent US7948988 - Device, system and method for analysis of fragments in a fragment train Ver�ffentlichungsnummerUS7948988 B2PublikationstypErteilung Anmeldenummer11/493,934 Ver�ffentlichungsdatum24. Mai 2011Eingetragen27. Juli 2006 Priorit�tsdatum27. Juli 2006Auch ver�ffentlicht unterEP1883200A1US20080127342 ErfinderJudy Hollis NovakMartin Frederick RoeschSteven SturgesUrspr�nglich Bevollm�chtigterSourcefire, Inc. US-Klassifikation370/394Internationale KlassifikationH04L12/28 UnternehmensklassifikationH04L63/1408H04L63/0227 Europ�ische KlassifikationH04L63/02BH04L63/14AReferenzenPatentzitate (103)Nichtpatentzitate (149)Externe LinksUSPTO USPTO-Zuordnung EspacenetDevice, system and method for analysis of fragments in a fragment trainUS 7948988 B2 Zusammenfassung Fragment trains in a communication network are analyzed. A fragment train includes fragments in the same fragment train and associated with the same target system. One or more fragment reassembly policies are identified out of several fragment reassembly policies, where the fragment reassembly policy corresponds to a target system associated with fragments in a fragment train. The data in the fragments in the fragment train are provided in an order indicated by the fragment reassembly policy. The fragment reassembly policy can include determining the order responsive to an offset and a more fragments indication in the fragments, and/or indicating an order specific to overlapped fragments such as comprehensively overlapped fragments.
Patentzitate Zitiertes PatentEingetragen Ver�ffentlichungsdatum Antragsteller TitelUS455043626. Juli 198329. Okt. 1985At&T Bell LaboratoriesParallel text matching methods and apparatusUS45701576. Dez. 198311. Febr. 1986Uro Denski Kogyo, K.K.Infrared intrusion alarm system capable of preventing false signalsUS485791227. Juli 198815. Aug. 1989The United States Of America As Represented By The Secretary Of The NavyIntelligent security assessment systemUS491274823. Sept. 198827. M�rz 1990Matsushita Electric Works, Ltd.Infrared intrusion detector with a plurality of infrared ray detecting elementsUS498586330. Juli 199015. Jan. 1991Hitachi, Ltd.Document storage and retrieval systemUS519319223. Aug. 19909. M�rz 1993Supercomputer Systems Limited PartnershipVectorized LR parsing of computer programsUS522208128. Juni 199122. Juni 1993Universal Data Systems, Inc.Method of performing an autobaud function using a state flow machineUS54044881. Okt. 19934. Apr. 1995Lotus Development CorporationRealtime data feed engine for updating an application with the most currently received data from multiple data feedsUS543084229. Mai 19924. Juli 1995Hewlett-Packard CompanyInsertion of network data checksums by a network adapterUS545984128. Dez. 199317. Okt. 1995At&T Corp.Finite state machine with minimized vector processingUS549540928. Okt. 199427. Febr. 1996Matsushita Electric Industrial Co., Ltd.Constructing method of finite-state machine performing transitions according to a partial type of success function and a failure functionUS549746325. Sept. 19925. M�rz 1996Bull Hn Information Systems Inc.Ally mechanism for interconnecting non-distributed computing environment (DCE) and DCE systems to operate in a network systemUS560491017. Okt. 198918. Febr. 1997Hitachi, Ltd.Method of and vector processor for searching text for key words based on candidate character strings obtained from the text using parallel processingUS56662933. Juli 19959. Sept. 1997Bell Atlantic Network Services, Inc.Downloading operating system software through a broadcast channelUS579694221. Nov. 199618. Aug. 1998Computer Associates International, Inc.Method and apparatus for automated network-wide surveillance and security breach interventionUS58705541. Apr. 19969. Febr. 1999Advanced Micro Devices, Inc.Server selection method where a client selects a server according to address, operating system and found frame for remote bootingUS590130722. Juli 19964. Mai 1999International Business Machines CorporationProcessor having a selectively configurable branch prediction unit that can access a branch prediction utilizing bits derived from a plurality of sourcesUS591782121. Dez. 199429. Juni 1999Newbridge Networks CorporationLook-up engine for packet-based networkUS59192578. Aug. 19976. Juli 1999Novell, Inc.Networked workstation intrusion detection systemUS596394224. Dez. 19965. Okt. 1999Fujitsu LimitedPattern search apparatus and methodUS598747329. Dez. 199716. Nov. 1999Beologic A/SInteractive configuration via networkUS59959634. M�rz 199730. Nov. 1999Fujitsu LimitedApparatus and method of multi-string matching based on sparse state transition listUS59999376. Juni 19977. Dez. 1999Madison Information Technologies, Inc.System and method for converting data between data setsUS600242715. Sept. 199714. Dez. 1999Sitka Spruce Security LlcSecurity system with proximity sensing for an electronic deviceUS614168623. Juni 199831. Okt. 2000Deterministic Networks, Inc.Client-side application-classifier gathering network-traffic statistics and application and user names using extensible-service provider plugin for policy-based network controlUS61991819. Sept. 19986. M�rz 2001Perfecto Technologies Ltd.Method and system for maintaining restricted operating environments for application programs or operating systemsUS62197869. Sept. 199817. Apr. 2001Surfcontrol, Inc.Method and system for monitoring and controlling network accessUS632084830. Apr. 199920. Nov. 2001Hewlett-Packard CompanyMethods of altering dynamic decision treesUS63213389. Nov. 199820. Nov. 2001Sri InternationalNetwork surveillanceUS632465630. Juni 199827. Nov. 2001Cisco Technology, Inc.System and method for rules-driven multi-phase network vulnerability assessmentUS633412112. M�rz 199925. Dez. 2001Virginia Commonwealth UniversityUsage pattern based user authenticatorUS634336221. Jan. 199929. Jan. 2002Networks Associates, Inc.System and method providing custom attack simulation language for testing networksUS639347431. Dez. 199821. Mai 20023Com CorporationDynamic policy management apparatus and method using active network devicesUS641532129. Dez. 19982. Juli 2002Cisco Technology, Inc.Domain mapping method and systemUS647764823. M�rz 19975. Nov. 2002Novell, Inc.Trusted workstation in a networked client/server computing systemUS648766615. Jan. 199926. Nov. 2002Cisco Technology, Inc.Intrusion detection signature analysis using regular expressions and logical operatorsUS649910729. Dez. 199824. Dez. 2002Cisco Technology, Inc.Method and system for adaptive network security using intelligent packet analysisUS653938121. Apr. 199925. M�rz 2003Novell, Inc.System and method for synchronizing database informationUS654649330. Nov. 20018. Apr. 2003Networks Associates Technology, Inc.System, method and computer program product for risk assessment scanning based on detected anomalous eventsUS658787624. Aug. 19991. Juli 2003Hewlett-Packard Development CompanyGrouping targets of management policiesUS65908859. Juli 19998. Juli 2003Malibu Networks, Inc.IP-flow characterization in a wireless point to multi-point (PTMP) transmission systemUS667873413. Nov. 199913. Jan. 2004Ssh Communications Security Ltd.Method for intercepting network packets in a computing deviceUS66788242. Nov. 199913. Jan. 2004Agere Systems Inc.Application usage time limiterUS668433210. Juni 199827. Jan. 2004International Business Machines CorporationMethod and system for the exchange of digitally signed objects over an insecure networkUS671112731. Juli 199823. M�rz 2004General Dynamics Government Systems CorporationSystem for intrusion detection and vulnerability analysis in a telecommunications signaling networkUS675482631. M�rz 199922. Juni 2004International Business Machines CorporationData processing system and method including a network access connector for limiting access to the networkUS676632024. Aug. 200020. Juli 2004Microsoft CorporationSearch engine with natural language-based robust parsing for user query and relevance feedback learningUS677219627. Juli 20003. Aug. 2004Propel Software Corp.Electronic mail filtering system and methodsUS678920215. Okt. 19997. Sept. 2004Networks Associates Technology, Inc.Method and apparatus for providing a policy-driven intrusion detection systemUS685106124. Aug. 20001. Febr. 2005Networks Associates, Inc.System and method for intrusion detection data collection using a network protocol stack multiplexorUS695734810. Jan. 200118. Okt. 2005Ncircle Network Security, Inc.Interoperability of vulnerability and intrusion detection systemsUS698332312. Aug. 20023. Jan. 2006Tippingpoint Technologies, Inc.Multi-level packet screening with dynamically selected filtering criteriaUS699370615. Jan. 200231. Jan. 2006International Business Machines CorporationMethod, apparatus, and program for a state machine frameworkUS69999984. Okt. 200114. Febr. 2006Hewlett-Packard Development Company, L.P.Shared memory coupling of network infrastructure devicesUS703211430. Aug. 200018. Apr. 2006Symantec CorporationSystem and method for using signatures to detect computer intrusionsUS705493026. Okt. 200030. Mai 2006Cisco Technology, Inc.System and method for propagating filtersUS705882117. Jan. 20026. Juni 2006Ipolicy Networks, Inc.System and method for detection of intrusion attacks on packets transmitted on a networkUS706565730. Aug. 200020. Juni 2006Symantec CorporationExtensible intrusion detection systemUS707319825. Aug. 20004. Juli 2006Ncircle Network Security, Inc.Method and system for detecting a vulnerability in a networkUS707680328. Jan. 200211. Juli 2006International Business Machines CorporationIntegrated intrusion detection servicesUS709650329. Juni 200122. Aug. 2006Mcafee, Inc.Network-based risk-assessment tool for remotely detecting local computer vulnerabilitiesUS711378924. Sept. 200126. Sept. 2006Bellsouth Intellectual Property CorporationMethod and system for tracking facilities related informationUS713391628. Juli 20037. Nov. 2006Etelemetry, Inc.Asset tracker for identifying user of current internet protocol addresses within an organization's communications networkUS713414112. Juni 20017. Nov. 2006Hewlett-Packard Development Company, L.P.System and method for host and network based intrusion detection and responseUS715210515. Jan. 200219. Dez. 2006Mcafee, Inc.System and method for network vulnerability detection and reportingUS71745661. Febr. 20026. Febr. 2007Intel CorporationIntegrated network intrusion detectionUS71817696. Juni 200320. Febr. 2007Ncircle Network Security, Inc.Network security system having a device profiler communicatively coupled to a traffic monitorUS725763010. M�rz 200314. Aug. 2007Mcafee, Inc.System and method for network vulnerability detection and reportingUS73057088. M�rz 20044. Dez. 2007Sourcefire, Inc.Methods and systems for intrusion detectionUS731068829. Aug. 200018. Dez. 2007Ciena CorporationRelative addressing for network elementsUS731369523. M�rz 200425. Dez. 2007Sourcefire, Inc.Systems and methods for dynamic threat assessmentUS731580114. Jan. 20001. Jan. 2008Secure Computing CorporationNetwork security modeling system and methodUS731769312. Mai 20048. Jan. 2008Sourcefire, Inc.Systems and methods for determining the network topology of a networkUS735007717. Apr. 200325. M�rz 2008Cisco Technology, Inc.802.11 using a compressed reassociation exchange to facilitate fast handoffUS73636563. Nov. 200322. Apr. 2008Mazu Networks, Inc.Event detection/anomaly correlation heuristicsUS759680714. Okt. 200329. Sept. 2009Arbor Networks, Inc.Method and system for reducing scope of self-propagating attack code in networkUS764427515. Apr. 20035. Jan. 2010Microsoft CorporationPass-thru for client authenticationUS2001002748529. M�rz 20014. Okt. 2001Ddi CorporationMethod for collecting statistical traffic dataUS2001003484727. M�rz 200125. Okt. 2001Network Security Systems, Inc.Internet/network security method and system for checking security of a client from a remote facilityUS2002003563916. Aug. 200121. M�rz 2002Spontaneous Networks, Inc.Systems and methods for a packet directorUS2002006603421. Sept. 200130. Mai 2002Schlossberg Barry J.Distributed network security deception systemUS2002008334427. Juni 200127. Juni 2002Sooriya Networks, Inc.Integrated intelligent inter/intra networking deviceUS200200877164. Dez. 20004. Juli 2002Mustafa ShakeelSystem and method for transmitting customized multi priority services on a single or multiple links over data link layer framesUS2002011218526. Febr. 200115. Aug. 2002Oracle International CorporationIntrusion threat detectionUS2002012399511. Jan. 20025. Sept. 2002Shibuya TetsuoPattern search method, pattern search apparatus and computer program therefor, and storage medium thereofUS2002016570726. Febr. 20017. Nov. 2002Call Charles G.Methods and apparatus for storing and processing natural language text data as a sequence of fixed length integersUS2003000969913. Juni 20029. Jan. 2003Mcafee, Inc.Method and apparatus for detecting intrusions on a computer systemUS2003001466213. Juni 200216. Jan. 2003Mcafee, Inc.Protocol-parsing state machine and method of using sameUS200300463884. Sept. 20026. M�rz 2003Raytheon Bbn Technologies Corp.Systems and methods for network performance measurement using packet signature collectionUS2003006581728. Sept. 20013. Apr. 2003Qualcomm IncorporatedExtended internet protocol network address translation systemUS2003008384731. Okt. 20011. Mai 2003Anderson Craig D.User interface for presenting data for an intrusion protection systemUS2003009351731. Okt. 200115. Mai 2003Tarquini Richard P.System and method for uniform resource locator filteringUS2003010135331. Okt. 200129. Mai 2003Hewlett-Packard Development Company L.P.Method, computer-readable medium, and node for detecting exploits based on an inbound signature of the exploit and an outbound signature in response theretoUS200301402507. M�rz 200224. Juli 2003Kabushikigaisha TeamgiaMethod and system of monitoring vulnerabilitiesUS200301958747. M�rz 200316. Okt. 2003Fujitsu LimitedSearch apparatus and method using order pattern including repeating patternUS2003021291028. M�rz 200313. Nov. 2003Cisco Technology, Inc.Method and system for reducing the false alarm rate of network intrusion detection systemsUS200302172833. Juni 200220. Nov. 2003Airdefense, Inc.Method and system for encrypted network management and intrusion detectionUS2003022972618. M�rz 200311. Dez. 2003Wyse Technology Inc.Default device configuration system and method for thin devicesUS2004001068410. Juni 199815. Jan. 2004Ibm CorporationMethod and system for the exchange of digitally signed objects over an insecure networkUS2004001572810. M�rz 200322. Jan. 2004Cole David M.System and method for network vulnerability detection and reportingUS2004003477319. Aug. 200219. Febr. 2004Balabine Igor V.Establishing authenticated network connectionsUS2004006472630. Sept. 20021. Apr. 2004Hewlett-Packard Development Company, L.P.Vulnerability management and tracking system (VMTS)US2004007380022. Mai 200315. Apr. 2004Trustwave Holdings, Inc.Adaptive intrusion detection systemNichtpatentzitateReferenz1"Snort(TM) Users Manual 2.6.0," The Snort Project, May 23, 2006, pp. 1-126.2"TaoSecurity-Dedicated to FreeBSD, network security monitoring, incident response, and network forensics," (Oct. 1, 2007), obtained from: http://taosecurity.blogspot.com/2005/02/shmoocon-concludes-shmoocon-finished.html.3"toupper( )-convert lowercase character to uppercase," http://www.mkssoftware.com, printed on Sep. 20, 2008 from http://web.archive.org, archive date Jun. 30, 2006, 2 pp.4"Snort� Users Manual 2.6.0," The Snort Project, May 23, 2006, pp. 1-126.5"Snort�Users Manual 2.2.0RC1," The Snort Project, Jun. 28, 2004, Retrieved from the Internet: URL:http://cvs.snort.org/viewcvs.cgi/*checkout*/snort/doc/snort�manual.pdf?rev=1.25&content-type=application/pdf [retrieved on Nov. 18, 2010] (XP002610157).6"TaoSecurity�Dedicated to FreeBSD, network security monitoring, incident response, and network forensics," (Oct. 1, 2007), obtained from: http://taosecurity.blogspot.com/2005/02/shmoocon-concludes-shmoocon-finished.html.7"toupper( )�convert lowercase character to uppercase," http://www.mkssoftware.com, printed on Sep. 20, 2008 from http://web.archive.org, archive date Jun. 30, 2006, 2 pp.8Advisory Action issued by the U.S. Patent Office on Aug. 3, 2010 in connection with related U.S. Appl. No. 10/843,374.9Advisory Action issued by the U.S. Patent Office on Dec. 2, 2009 in connection with related U.S. Appl. No. 10/843,398.10Advisory Action issued by the U.S. Patent Office on Feb. 24, 2010 in connection with related U.S. Appl. No. 11/272,035.11Advisory Action issued by the U.S. Patent Office on Sep. 29, 2009 in connection with related U.S. Appl. No. 10/843,459.12Aho et al., "Efficient String Matching: An Aid to Bibliographic Search," Communications from the ACM (Jun. 1975), vol. 18, No. 6, pp. 333-340.13B. Krishnamurthy, "Web Protocols and Practice," (May 1, 2001), pp. 518-520.14D. Joseph, et al., "A Policy-aware Switching Layer for Data Centers," SIGCOMM, Aug. 17-22, 2008, pp. 51-62.15D. Roekler, "HTTP IDS Evasions Revisited," Jan. 8, 2003, Retrieved from the Internet: URL:http://docs.idsresearch.org/http�ids�evasions.pdf [Nov. 18, 2010](XP002610155).16D. Roelker, "HTTP IDS Evasions Revisited" (Aug. 1, 2003) [online] (retrieved on Nov. 9, 2006). Retrieved from the Internet .17D. Roelker, "HTTP IDS Evasions Revisited" (Aug. 1, 2003) [online] (retrieved on Nov. 9, 2006). Retrieved from the Internet <URL: http://docs.idsresearch.org/http�ids�evasions.pdf>.18European Office Action issued by the European Patent Office on Nov. 28, 2008 in connection with European patent application No. 07 015 003.2-2413, which corresponds to related U.S. Appl. No. 11/501,776.19European Search Report issued by the European Patent Office on Dec. 27, 2007 in connection with European patent application No. 07015003.2-2413, which corresponds to related U.S. Appl. No. 11/501,776.20European Search Report issued by the European Patent Office on Dec. 6, 2010 in connection with European patent application No. 05773540.9-2413, which corresponds to related U.S. Patent No. 7,496,962.21European Search Report issued by the European Patent Office on Nov. 22, 2007 in connection with corresponding European patent application No. 07014575.0-1244.22European Search Report issued by the European Patent Office on Oct. 12, 2009 in connection with European patent application No. 05773501.1-2201, which corresponds to related U.S. Appl. Nos. 10/898,220, 11/785,609 and 12/010,900.23Final Office Action issued by the U.S. Patent Office on Aug. 19, 2008 in connection with related U.S. Appl. No. 10/843,373.24Final Office Action issued by the U.S. Patent Office on Aug. 20, 2008 in connection with related U.S. Appl. No. 10/843,353.25Final Office Action issued by the U.S. Patent Office on Aug. 6, 2008 in connection with related U.S. Appl. No. 10/843,375.26Final Office Action issued by the U.S. Patent Office on Dec. 8, 2009 in connection with related U.S. Appl. No. 11/272,034.27Final Office Action issued by the U.S. Patent Office on Dec. 9, 2009 in connection with related U.S. Appl. No. 11/272,035.28Final Office Action issued by the U.S. Patent Office on Jul. 17, 2008 in connection with related U.S. Appl. No. 10/843,459.29Final Office Action issued by the U.S. Patent Office on Jun. 26, 2008 in connection with related U.S. Appl. No. 10/898,220.30Final Office Action issued by the U.S. Patent Office on Jun. 4, 2008 in connection with related U.S. Appl. No. 10/843,398.31Final Office Action issued by the U.S. Patent Office on Mar. 17, 2010 in connection with related U.S. Appl. No. 10/843,374.32Final Office Action issued by the U.S. Patent Office on May 13, 2009 in connection with related U.S. Appl. No. 10/843,374.33Final Office Action issued by the U.S. Patent Office on May 9, 2008 in connection with related U.S. Appl. No. 10/843,353.34Final Office Action issued by the U.S. Patent Office on Nov. 24, 2010 in connection with related U.S. Appl. No. 12/010,900.35Final Office Action issued by the U.S. Patent Office on Nov. 4, 2010 in connection with related U.S. Appl. No. 10/843,459.36Final Office Action issued by the U.S. Patent Office on Oct. 25, 2010 in connection with related U.S. Appl. No. 11/272,035.37Final Office Action issued by the U.S. Patent Office on Oct. 29, 2009 in connection with related U.S. Appl. No. 11/501,776.38Final Office Action issued by the U.S. Patent Office on Sep. 17, 2010 in connection with related U.S. Appl. No. 11/711,876.39Final Office Action issued by the U.S. Patent Office on Sep. 8, 2010 in connection with related U.S. Appl. No. 10/843,459.40Full Band and Matrix Algorithms (Jun. 9, 2004), http://web.archive.org/web20040109154658/http://www.netlib.org/utk/Isi/pewLSI/text/node150.html.41International Preliminary Report on Patentability and Written Opinion of the International Searching Authority mailed on Mar. 17, 2009 in connection with corresponding PCT application No. PCT/US06/43820, which corresponds to related U.S. Appl. No. 11/272,035.42International Preliminary Report on Patentability and Written Opinion of the International Searching Authority mailed on Mar. 3, 2009 in connection with PCT application No. PCT/US05/025584, which corresponds to related U.S. Appl. No. 10/898,220.43International Preliminary Report on Patentability mailed on Apr. 7, 2009 in connection with PCT application No. PCT/US07/021351, which corresponds to U.S. Appl No. 11/905/980.44International Preliminary Report on Patentability mailed on May 22, 2008 in connection with PCT application No. PCT/US06/43800, which corresponds to U.S. Appl No. 11/272,034.45International Preliminary Report on Patentability mailed on Nov. 12, 2009 in connection with PCT application No. PCT/US08/005466, which corresponds to U.S. Appl. No. 12/149,196.46International Preliminary Report on Patentability mailed on Oct. 19, 2010 in connection with PCT application No. PCT/US2009/02210, which corresponds to U.S. Appl. No. 12/230,338.47International Preliminary Report on Patentability mailed on Sep. 11, 2009 in connection with PCT application No. PCT/US08/002454, which corresponds to U.S. Appl. No. 11/711,876.48International Search Report and Written Opinion of the International Searching Authority issued on Aug. 18, 2008 in connection with PCT application No. PCT/US08/05466, which corresponds to U.S. Appl. No. 12/149,196.49International Search Report and Written Opinion of the International Searching Authority issued on Dec. 5, 2007 in connection with PCT application No. PCT/US05/25583, which corresponds to U.S. Appl. No. 10/951,796.50International Search Report and Written Opinion of the International Searching Authority issued on Jul. 2, 2008 in connection with PCT application No. PCT/US08/02454, which corresponds to U.S. Appl. No. 11/711,876.51International Search Report and Written Opinion of the International Searching Authority issued on Jul. 7, 2008 in connection with PCT application No. PCT/US06/43820, which corresponds to U.S. Appl. No. 11/272,035.52International Search Report and Written Opinion of the International Searching Authority issued on Jun. 19, 2008 in connection with PCT application No. PCT/US05/25584, which corresponds to U.S. Appl. No. 10/898,220.53International Search Report and Written Opinion of the International Searching Authority issued on Jun. 30, 2008 in connection with PCT application No. PCT/US07/21351, which corresponds to U.S. Appl No. 11/905,980.54International Search Report and Written Opinion of the International Searching Authority issued on Mar. 16, 2010 in connection with PCT application No. PCT/US09/59965, which corresponds to U.S. Appl. No. 12/575,612.55International Search Report and Written Opinion of the International Searching Authority issued on Oct. 9, 2007 in connection with PCT application No. PCT/US06/43800, which corresponds to U.S. Appl. No. 11/272,034.56International Search Report and Written Opinion of the International Searching Authority mailed on May 27, 2009 in connection with PCT application No. PCT/US09/02210, which corresponds to U.S. Appl. No. 12/230,338.57J. Howe, "An Environment for "Sniffing" DCE-RPC Traffic," CITI Technical Report 93-4, Jun. 21, 1993, 12 pages total.58J. Novak et al., "Target-Based TCP Stream Reassembly" (Aug. 3, 2007), Revision 1.0, pp. 1-23, obtained from: http://www.snort/org/docs/stream5-modelAUg032007.pdf.59Judy Novak, "Target-Based Fragmentation Reassembly," Revision 2.0, Apr. 2005, pp. 1-32.60Lyon, Gordon; Remote OS detection via TCP/IP Stack Fingerprinting, Jun. 30, 2002; pp. 1-12; obtained from: http://web.archive.org/web/20021017063625/www.insecure.org/nmap/nmap-fingerprinting-article.html.61M. Norton, "Optimizing Pattern Matching for Intrusion Detection" (Jul. 4, 2004) [online] (retrieved on Nov. 9, 2006). Retrieved from the Internet .62M. Norton, "Optimizing Pattern Matching for Intrusion Detection" (Jul. 4, 2004) [online] (retrieved on Nov. 9, 2006). Retrieved from the Internet <URL: http://docs.idsresearch.org/OptimizingPatternMatchingForIDS.pdf>.63M. Norton, et al., "The New Snort," Computer Security Journal, CSI Security Institute, XIX, No. 3 (Jan. 1, 2003), pp. 37-47, ISSN: 0277-0865 (XP008039475).64N. Brownlee, et al., "Methodology for Passive Analysis of a University Internet Link," PAM2001 Passive and Active Measurement Workshop, Apr. 2001 (7 pp.).65N. Chase, "Active Server pp. 3.0 from Scratch" (Dec. 1999), Searching for products section, 13 pp.66Norton et al., "Multi-Patten Search Engine Aho-Corasick State Machine" (Mar. 17, 2004), Version 2.0, 36 pp.67Norton et al., "Sourcefire Optimizing Pattern Matching for Intrusion Detection" (Sep. 2004), 14 pp.68Notice of Allowance issued by the U.S. Patent Office on Aug. 18, 2008 in connection with related U.S. Appl. No. 1/272,033.69Notice of Allowance issued by the U.S. Patent Office on Dec. 8, 2009 in connection with related U.S. Appl. No. 11/501,776.70Notice of Allowance issued by the U.S. Patent Office on Feb. 5, 2010 in connection with related U.S. Appl. No. 11/272,034.71Notice of Allowance issued by the U.S. Patent Office on Jan. 21, 2009 in connection with related U.S. Appl. No. 10/898,220.72Notice of Allowance issued by the U.S. Patent Office on Jan. 24, 2011 in connection with related U.S. Appl. No. 10/843,459.73Notice of Allowance issued by the U.S. Patent Office on Jan. 7, 2010 in connection with related U.S. Appl. No. 10/843,353.74Notice of Allowance issued by the U.S. Patent Office on Jan. 8, 2010 in connection with related U.S. Appl. No. 10/843,373.75Notice of Allowance issued by the U.S. Patent Office on Jun. 11, 2009 in connection with related U.S. Appl. No. 10/843,373.76Notice of Allowance issued by the U.S. Patent Office on Mar. 5, 2010 in connection with related U.S. Appl. No. 11/785,609.77Notice of Allowance issued by the U.S. Patent Office on May 24, 2010 in connection with related U.S. Appl. No. 10/843,398.78Notice of Allowance issued by the U.S. Patent Office on Oct. 15, 2008 in connection with related U.S. Appl. No. 10/951,796.79Notice of Allowance issued by the U.S. Patent Office on Oct. 21, 2008 in connection with related U.S. Appl. No. 10/843,375.80Notice of Allowance issued by the U.S. Patent Office on Oct. 5, 2007 in connection with related U.S. Appl. No. 10/793,887.81Notice of Allowance issued by the U.S. Patent Office on Oct. 5, 2010 in connection with related U.S. Appl. No. 10/843,374.82Notice of Allowance issued by the U.S. Patent Office on Sep. 6, 2007 in connection with related U.S. Appl. No. 10/843,376.83Office Action issued by the European Patent Office on Jan. 15, 2010 in connection with European patent application No. 05773501.1-2201, which corresponds to related U.S. Appl. Nos. 10/898,220, 11/785,609 and 12/010,900.84Office Action issued by the U.S. Patent Office on Apr. 15, 2010 in connection with related U.S. Appl. No. 12/010,900.85Office Action issued by the U.S. Patent Office on Apr. 21, 2010 in connection with related U.S. Appl. No. 10/843,459.86Office Action issued by the U.S. Patent Office on Apr. 28, 2009 in connection with related U.S. Appl. No. 11/501,776.87Office Action issued by the U.S. Patent Office on Apr. 7, 2010 in connection with related U.S. Appl. No. 11/711,876.88Office Action issued by the U.S. Patent Office on Aug. 20, 2009 in connection with related U.S. Appl. No. 10/843,374.89Office Action issued by the U.S. Patent Office on Dec. 17, 2008 in connection with related U.S. Appl. No. 10/843,398.90Office Action issued by the U.S. Patent Office on Dec. 22, 2010 in connection with related U.S. Appl. No. 11/905,980.91Office Action issued by the U.S. Patent Office on Dec. 23, 2008 in connection with related U.S. Appl. No. 11/272,034.92Office Action issued by the U.S. Patent Office on Feb. 21, 2008 in connection with related U.S. Appl. No. 11/272,033.93Office Action issued by the U.S. Patent Office on Feb. 4, 2009 in connection with related U.S. Appl. No. 10/843,373.94Office Action issued by the U.S. Patent Office on Feb. 9, 2009 in connection with related U.S. Appl. No. 10/843,459.95Office Action issued by the U.S. Patent Office on Jan. 10, 2008 in connection with related U.S. Appl. No. 10/843,373.96Office Action issued by the U.S. Patent Office on Jan. 16, 2009 in connection with related U.S. Appl. No. 10/843,353.97Office Action issued by the U.S. Patent Office on Jul. 11, 2008 in connection with related U.S. Appl. No. 11/272,034.98Office Action issued by the U.S. Patent Office on Jul. 16, 2007 in connection with related U.S. Appl. No. 10/898,220.99Office Action issued by the U.S. Patent Office on Jul. 28, 2009 in connection with related U.S. Appl. No. 10/843,353.100Office Action issued by the U.S. Patent Office on Jul. 6, 2009 in connection with related U.S. Appl. No. 10/843,459.101Office Action issued by the U.S. Patent Office on Jul. 7, 2009 in connection with related U.S. Appl. No. 10/843,398.102Office Action issued by the U.S. Patent Office on Jun. 1, 2009 in connection with related U.S. Appl. No. 11/272,035.103Office Action issued by the U.S. Patent Office on Jun. 23, 2009 in connection with related U.S. Appl. No. 11/785,609.104Office Action issued by the U.S. Patent Office on Mar. 12, 2008 in connection with related U.S. Appl. No. 10/843,459.105Office Action issued by the U.S. Patent Office on Mar. 16, 2010 in connection with related U.S. Appl. No. 11/272,035.106Office Action issued by the U.S. Patent Office on Mar. 20, 2008 in connection with related U.S. Appl. No. 10/843,374.107Office Action issued by the U.S. Patent Office on May 14, 2009 in connection with related U.S. Appl. No. 11/272,034.108Office Action issued by the U.S. Patent Office on Nov. 19, 2010 in connection with related U.S. Appl. No. 10/843,459.109Office Action issued by the U.S. Patent Office on Nov. 21, 2007 in connection with related U.S. Appl. No. 10/843,398.110Office Action issued by the U.S. Patent Office on Oct. 4, 2007 in connection with related U.S. Appl. No. 10/951,796.111Office Action issued by the U.S. Patent Office on Oct. 6, 2008 in connection with related U.S. Appl. No. 10/843,374.112Office Action issued by the U.S. Patent Office on Sep. 26, 2007 in connection with related U.S. Appl. No. 10/843,353.113Office Action issued by the U.S. Patent Office on Sep. 6, 2007 in connection with related U.S. Appl. No. 10/843,374.114Office Action issued on Feb. 5, 2008 in connection with the related U.S. Appl. No. 10/843,375.115Office Action mailed Sep. 7, 2010 from the Japan Patent Office for Japanese patent application No. 2007-523639 in connection with related U.S. Appl. No. 10/951,796, now U.S. patent No. 7,496,962 (English translation enclosed).116R. Deraison, et al., "Nessus Network Auditing," Sungress Publishing, Jul. 20, 2004, pp. 1-13.117R. Deraison, et al., "Passive Vulnerability Scanning: Introduction to NeVO," Tenable Network Security, May 30, 2004, pp. 1-13.118R. Gula, "Passive Vulnerability Detection. Techniques to passively find network security vulnerabilities," Sep. 9, 1999 (5 pp.).119R. Hiyoshi, "Practical Guide to Intrusion Detection System: Snort & Tripwire," Japan, Apr. 25, 2004, pp. 57-230 (concise English explanation of relevance attached).120R.P. Lippmann et al., "Passive Operating System Identification from TCP/IP Packet Headers," Proceedings Workshop on Data Mining for Computer Security (DMSEC), Nov. 2003 (10 pp.).121Spitzner, Lance; Passive Fingerprinting, May 3, 2003; Focus on Intrusion Detection; pp. 1-4; obtained from http://www.ctillhq.com/pdfdb/000183/data.pdf.122Summit Siddharth, "Evading NIDS, revisited," Dec. 12, 2005.123T. Ptacek, et al., "Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection," Jan. 1998.124Tarjan, et al., "Storing a Sparse Table," Communications of the ACM (Nov. 1979), vol. 2, No. 11, pp. 606-620.125Thomas H Ptacek et al., Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection, Jan. 1998, pp. 1-63.126U. Shankar and V. Paxson, Active Mapping: Resisting NIDS Evasion Without Altering Traffic, Proc. IEEE Symposium on Security and Privacy. May 2003, pp. 1-18.127U. Shankar, et al., "Active Mapping: Resisting NIDS Evasion Without Altering Traffic," Proceedings of the 2003 IEEE Symposium on Security and Privacy, 2003, pp. 1-18.128U.S. Appl. No. 10/843,353, filed May 2004, Roesch et al., System and Method for Determining Characteristics of a Network and Analyzing Vulnerabilities.129U.S. Appl. No. 10/843,373, filed May 2004, Roesch et al., Systems and Methods for Identifying the Services of a Network.130U.S. Appl. No. 10/843,374, filed May 2004, Roesch et al., System and Methods for Determining Characteristics of a Network Based on Flow Analysis.131U.S. Appl. No. 10/843,375, filed May 2004, Roesch et al., Systems and Methods for Determining Characteristics of a Network and Assessing Confidence.132U.S. Appl. No. 10/843,398, filed May 2004, Roesch et al., Systems and Methods for Determining Characteristics of a Network.133U.S. Appl. No. 10/843,459, filed May 2004, Roesch et al., Systems and Methods for Determining Characteristics of a Network and Enforcing Policy.134U.S. Appl. No. 10/898,220, filed Jul. 2004, Norton et al., Methods and Systems for Multi-Pattern Searching.135U.S. Appl. No. 10/951,796, filed Sep. 2004, Roelker et al., Intrusion Detection Strategies for Hypertext Transport Protocol.136U.S. Appl. No. 11/272,033, filed Nov. 2005, Dempster et al., Systems and Methods for Identifying the Client Applications of a Network.137U.S. Appl. No. 11/272,034, filed Nov. 2005, Vogel, III et al., Systems and Methods for Modifying Network Map Attributes.138U.S. Appl. No. 11/272,035, filed Nov. 2005, Gustafson et al., Intrusion Event Correlation with Network Discovery Information.139U.S. Appl. No. 11/501,776, filed Aug. 2006, Roesch et al., Device, System and Method for Analysis of Segments in a Transmission Control Protocol (TCP) Session.140U.S. Appl. No. 11/711,876, filed Feb. 2007, Sturges et al., Device, System and Method for Timestamp Analysis of Segments in a Transmission Control Protocol (TCP) Session.141U.S. Appl. No. 11/785,069, filed Apr. 2007, Norton et al., Methods and Systems for Multi-Pattern Searching.142U.S. Appl. No. 11/905,980, filed Oct. 2007, Roesch, Device, System and Method for Use of Micro-Policies in Intrusion Detection/Prevention.143U.S. Appl. No. 12/010,900, filed Jan. 2008, Norton et al., Methods and Systems for Multi-Pattern Searching.144U.S. Appl. No. 12/149,196, filed Apr. 2008, Ritterman, Real-Time User Awareness for a Computer Network.145U.S. Appl. No. 12/230,338, filed Aug. 2008, Sturges et al., Speed and Memory Optimization of Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) Rule Processing.146U.S. Appl. No. 12/813,859, filed Jun. 2010, Polley et al.147U.S. Appl. No. 12/969,682, filed Dec. 2010, Roesch et al.148V. Jacobson, et al., Request for Comments: 1323, "TCP Extensions for High Performance," May 1992 (35 pages).149V. Yegneswaran, et al., "Internet Sieve: An Architecture for Generating Resilient Signatures," May 2004, Retrieved from the Internet: URL:http://www.cc.gatech.edu/�giffin/papers/tr1507.pdf [retrieved on Nov. 18, 2010] (XP002610154).DrehenOriginalbildGoogle-Startseite - Sitemap - USPTO-Bulk-Downloads - Datenschutzerkl�rung - Nutzungsbedingungen - �ber Google Patente - Feedback gebenDaten bereitgestellt von IFI CLAIMS Patent Services.© 2012 Google