Source: http://www.google.com/patents/US8069352?dq=6004266
Timestamp: 2015-07-04 18:31:53
Document Index: 462136532

Matched Legal Cases: ['application No. 07', 'application No. 07015003', 'application No. 05773540', 'application No. 07014575', 'application No. 05773501', 'application No. 06837333', 'application No. 05773501', 'application No. 2007', 'application No. 2007']

Patent US8069352 - Device, system and method for timestamp analysis of segments in a ... - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign inAdvanced Patent SearchPatentsA method performed in an intrusion detection/prevention system, a system or a device for determining whether a transmission control protocol (TCP) segment in a TCP connection in a communication network is acceptable. The TCP connection can include TCP segments beginning with a three way handshake. A...http://www.google.com/patents/US8069352?utm_source=gb-gplus-sharePatent US8069352 - Device, system and method for timestamp analysis of segments in a transmission control protocol (TCP) sessionAdvanced Patent SearchPublication numberUS8069352 B2Publication typeGrantApplication numberUS 11/711,876Publication dateNov 29, 2011Filing dateFeb 28, 2007Priority dateFeb 28, 2007Also published asUS20080209518, WO2008106084A1Publication number11711876, 711876, US 8069352 B2, US 8069352B2, US-B2-8069352, US8069352 B2, US8069352B2InventorsSteven Sturges, Judy Hollis NovakOriginal AssigneeSourcefire, Inc.Export CitationBiBTeX, EndNote, RefManPatent Citations (112), Non-Patent Citations (165), Referenced by (2), Classifications (5), Legal Events (2) External Links: USPTO, USPTO Assignment, EspacenetDevice, system and method for timestamp analysis of segments in a transmission control protocol (TCP) session
Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS4550436Jul 26, 1983Oct 29, 1985At&T Bell LaboratoriesParallel text matching methods and apparatusUS4570157Dec 6, 1983Feb 11, 1986Uro Denski Kogyo, K.K.Infrared intrusion alarm system capable of preventing false signalsUS4857912Jul 27, 1988Aug 15, 1989The United States Of America As Represented By The Secretary Of The NavyIntelligent security assessment systemUS4912748Sep 23, 1988Mar 27, 1990Matsushita Electric Works, Ltd.Infrared intrusion detector with a plurality of infrared ray detecting elementsUS4985863Jul 30, 1990Jan 15, 1991Hitachi, Ltd.Document storage and retrieval systemUS5193192Aug 23, 1990Mar 9, 1993Supercomputer Systems Limited PartnershipVectorized LR parsing of computer programsUS5222081Jun 28, 1991Jun 22, 1993Universal Data Systems, Inc.Method of performing an autobaud function using a state flow machineUS5404488Oct 1, 1993Apr 4, 1995Lotus Development CorporationRealtime data feed engine for updating an application with the most currently received data from multiple data feedsUS5430842May 29, 1992Jul 4, 1995Hewlett-Packard CompanyInsertion of network data checksums by a network adapterUS5459841Dec 28, 1993Oct 17, 1995At&T Corp.Finite state machine with minimized vector processingUS5495409Oct 28, 1994Feb 27, 1996Matsushita Electric Industrial Co., Ltd.Constructing method of finite-state machine performing transitions according to a partial type of success function and a failure functionUS5497463Sep 25, 1992Mar 5, 1996Bull Hn Information Systems Inc.Ally mechanism for interconnecting non-distributed computing environment (DCE) and DCE systems to operate in a network systemUS5604910Oct 17, 1989Feb 18, 1997Hitachi, Ltd.Method of and vector processor for searching text for key words based on candidate character strings obtained from the text using parallel processingUS5666293Jul 3, 1995Sep 9, 1997Bell Atlantic Network Services, Inc.Downloading operating system software through a broadcast channelUS5796942Nov 21, 1996Aug 18, 1998Computer Associates International, Inc.Method and apparatus for automated network-wide surveillance and security breach interventionUS5870554Apr 1, 1996Feb 9, 1999Advanced Micro Devices, Inc.Server selection method where a client selects a server according to address, operating system and found frame for remote bootingUS5901307Jul 22, 1996May 4, 1999International Business Machines CorporationProcessor having a selectively configurable branch prediction unit that can access a branch prediction utilizing bits derived from a plurality of sourcesUS5917821Dec 21, 1994Jun 29, 1999Newbridge Networks CorporationLook-up engine for packet-based networkUS5919257Aug 8, 1997Jul 6, 1999Novell, Inc.Networked workstation intrusion detection systemUS5963942Dec 24, 1996Oct 5, 1999Fujitsu LimitedPattern search apparatus and methodUS5987473Dec 29, 1997Nov 16, 1999Beologic A/SInteractive configuration via networkUS5995963Mar 4, 1997Nov 30, 1999Fujitsu LimitedApparatus and method of multi-string matching based on sparse state transition listUS5999937Jun 6, 1997Dec 7, 1999Madison Information Technologies, Inc.System and method for converting data between data setsUS6002427Sep 15, 1997Dec 14, 1999Kipust; Alan J.Security system with proximity sensing for an electronic deviceUS6141686Jun 23, 1998Oct 31, 2000Deterministic Networks, Inc.Client-side application-classifier gathering network-traffic statistics and application and user names using extensible-service provider plugin for policy-based network controlUS6199181Sep 9, 1998Mar 6, 2001Perfecto Technologies Ltd.Method and system for maintaining restricted operating environments for application programs or operating systemsUS6219786Sep 9, 1998Apr 17, 2001Surfcontrol, Inc.Method and system for monitoring and controlling network accessUS6320848Apr 30, 1999Nov 20, 2001Hewlett-Packard CompanyMethods of altering dynamic decision treesUS6321338Nov 9, 1998Nov 20, 2001Sri InternationalNetwork surveillanceUS6324656Jun 30, 1998Nov 27, 2001Cisco Technology, Inc.System and method for rules-driven multi-phase network vulnerability assessmentUS6334121Mar 12, 1999Dec 25, 2001Virginia Commonwealth UniversityUsage pattern based user authenticatorUS6343362Jan 21, 1999Jan 29, 2002Networks Associates, Inc.System and method providing custom attack simulation language for testing networksUS6393474Dec 31, 1998May 21, 20023Com CorporationDynamic policy management apparatus and method using active network devicesUS6415321Dec 29, 1998Jul 2, 2002Cisco Technology, Inc.Domain mapping method and systemUS6477648Mar 23, 1997Nov 5, 2002Novell, Inc.Trusted workstation in a networked client/server computing systemUS6487666Jan 15, 1999Nov 26, 2002Cisco Technology, Inc.Intrusion detection signature analysis using regular expressions and logical operatorsUS6499107Dec 29, 1998Dec 24, 2002Cisco Technology, Inc.Method and system for adaptive network security using intelligent packet analysisUS6539381Apr 21, 1999Mar 25, 2003Novell, Inc.System and method for synchronizing database informationUS6546493Nov 30, 2001Apr 8, 2003Networks Associates Technology, Inc.System, method and computer program product for risk assessment scanning based on detected anomalous eventsUS6587876Aug 24, 1999Jul 1, 2003Hewlett-Packard Development CompanyGrouping targets of management policiesUS6590885Jul 9, 1999Jul 8, 2003Malibu Networks, Inc.IP-flow characterization in a wireless point to multi-point (PTMP) transmission systemUS6678734Nov 13, 1999Jan 13, 2004Ssh Communications Security Ltd.Method for intercepting network packets in a computing deviceUS6678824Nov 2, 1999Jan 13, 2004Agere Systems Inc.Application usage time limiterUS6684332 *Jun 10, 1998Jan 27, 2004International Business Machines CorporationMethod and system for the exchange of digitally signed objects over an insecure networkUS6711127Jul 31, 1998Mar 23, 2004General Dynamics Government Systems CorporationSystem for intrusion detection and vulnerability analysis in a telecommunications signaling networkUS6754826Mar 31, 1999Jun 22, 2004International Business Machines CorporationData processing system and method including a network access connector for limiting access to the networkUS6766320Aug 24, 2000Jul 20, 2004Microsoft CorporationSearch engine with natural language-based robust parsing for user query and relevance feedback learningUS6772196Jul 27, 2000Aug 3, 2004Propel Software Corp.Electronic mail filtering system and methodsUS6789202Oct 15, 1999Sep 7, 2004Networks Associates Technology, Inc.Method and apparatus for providing a policy-driven intrusion detection systemUS6816973Nov 13, 2002Nov 9, 2004Cisco Technology, Inc.Method and system for adaptive network security using intelligent packet analysisUS6851061Aug 24, 2000Feb 1, 2005Networks Associates, Inc.System and method for intrusion detection data collection using a network protocol stack multiplexorUS6957348Jan 10, 2001Oct 18, 2005Ncircle Network Security, Inc.Interoperability of vulnerability and intrusion detection systemsUS6983323Aug 12, 2002Jan 3, 2006Tippingpoint Technologies, Inc.Multi-level packet screening with dynamically selected filtering criteriaUS6993706Jan 15, 2002Jan 31, 2006International Business Machines CorporationMethod, apparatus, and program for a state machine frameworkUS6999998Oct 4, 2001Feb 14, 2006Hewlett-Packard Development Company, L.P.Shared memory coupling of network infrastructure devicesUS7032114Aug 30, 2000Apr 18, 2006Symantec CorporationSystem and method for using signatures to detect computer intrusionsUS7054930Oct 26, 2000May 30, 2006Cisco Technology, Inc.System and method for propagating filtersUS7058821Jan 17, 2002Jun 6, 2006Ipolicy Networks, Inc.System and method for detection of intrusion attacks on packets transmitted on a networkUS7065657Aug 30, 2000Jun 20, 2006Symantec CorporationExtensible intrusion detection systemUS7073198Aug 25, 2000Jul 4, 2006Ncircle Network Security, Inc.Method and system for detecting a vulnerability in a networkUS7076803Jan 28, 2002Jul 11, 2006International Business Machines CorporationIntegrated intrusion detection servicesUS7096503Jun 29, 2001Aug 22, 2006Mcafee, Inc.Network-based risk-assessment tool for remotely detecting local computer vulnerabilitiesUS7113789Sep 24, 2001Sep 26, 2006Bellsouth Intellectual Property CorporationMethod and system for tracking facilities related informationUS7133916Jul 28, 2003Nov 7, 2006Etelemetry, Inc.Asset tracker for identifying user of current internet protocol addresses within an organization's communications networkUS7134141Jun 12, 2001Nov 7, 2006Hewlett-Packard Development Company, L.P.System and method for host and network based intrusion detection and responseUS7152105Jan 15, 2002Dec 19, 2006Mcafee, Inc.System and method for network vulnerability detection and reportingUS7174566Feb 1, 2002Feb 6, 2007Intel CorporationIntegrated network intrusion detectionUS7181769Jun 6, 2003Feb 20, 2007Ncircle Network Security, Inc.Network security system having a device profiler communicatively coupled to a traffic monitorUS7257630Mar 10, 2003Aug 14, 2007Mcafee, Inc.System and method for network vulnerability detection and reportingUS7305708Mar 8, 2004Dec 4, 2007Sourcefire, Inc.Methods and systems for intrusion detectionUS7310688Aug 29, 2000Dec 18, 2007Ciena CorporationRelative addressing for network elementsUS7313695Mar 23, 2004Dec 25, 2007Sourcefire, Inc.Systems and methods for dynamic threat assessmentUS7315801Jan 14, 2000Jan 1, 2008Secure Computing CorporationNetwork security modeling system and methodUS7317693 *May 12, 2004Jan 8, 2008Sourcefire, Inc.Systems and methods for determining the network topology of a networkUS7346922Jul 26, 2004Mar 18, 2008Netclarity, Inc.Proactive network security system to protect against hackersUS7350077 *Apr 17, 2003Mar 25, 2008Cisco Technology, Inc.802.11 using a compressed reassociation exchange to facilitate fast handoffUS7363656Nov 3, 2003Apr 22, 2008Mazu Networks, Inc.Event detection/anomaly correlation heuristicsUS7467202Sep 10, 2003Dec 16, 2008Fidelis Security SystemsHigh-performance network content analysis platformUS7596807Oct 14, 2003Sep 29, 2009Arbor Networks, Inc.Method and system for reducing scope of self-propagating attack code in networkUS7644275 *Apr 15, 2003Jan 5, 2010Microsoft CorporationPass-thru for client authenticationUS20010027485Mar 29, 2001Oct 4, 2001Tomohiko OgishiMethod for collecting statistical traffic dataUS20010034847Mar 27, 2001Oct 25, 2001Gaul,Jr. Stephen E.Internet/network security method and system for checking security of a client from a remote facilityUS20020035639Aug 16, 2001Mar 21, 2002Wei XuSystems and methods for a packet directorUS20020066034Sep 21, 2001May 30, 2002Schlossberg Barry J.Distributed network security deception systemUS20020083344Jun 27, 2001Jun 27, 2002Vairavan Kannan P.Integrated intelligent inter/intra networking deviceUS20020087716Dec 4, 2000Jul 4, 2002Shakeel MustafaSystem and method for transmitting customized multi priority services on a single or multiple links over data link layer framesUS20020112185Feb 26, 2001Aug 15, 2002Hodges Jeffrey D.Intrusion threat detectionUS20020123995Jan 11, 2002Sep 5, 2002Tetsuo ShibuyaPattern search method, pattern search apparatus and computer program therefor, and storage medium thereofUS20020165707Feb 26, 2001Nov 7, 2002Call Charles G.Methods and apparatus for storing and processing natural language text data as a sequence of fixed length integersUS20030009699Jun 13, 2002Jan 9, 2003Gupta Ramesh M.Method and apparatus for detecting intrusions on a computer systemUS20030014662Jun 13, 2002Jan 16, 2003Gupta Ramesh M.Protocol-parsing state machine and method of using sameUS20030046388Sep 4, 2002Mar 6, 2003Milliken Walter ClarkSystems and methods for network performance measurement using packet signature collectionUS20030065817Sep 28, 2001Apr 3, 2003Uri BenchetritExtended internet protocol network address translation systemUS20030083847Oct 31, 2001May 1, 2003Schertz Richard L.User interface for presenting data for an intrusion protection systemUS20030093517Oct 31, 2001May 15, 2003Tarquini Richard P.System and method for uniform resource locator filteringUS20030101353Oct 31, 2001May 29, 2003Tarquini Richard PaulMethod, computer-readable medium, and node for detecting exploits based on an inbound signature of the exploit and an outbound signature in response theretoUS20030126472Dec 31, 2002Jul 3, 2003Banzhof Carl E.Automated computer vulnerability resolution systemUS20030140250Mar 7, 2002Jul 24, 2003Yoshihito TaninakaMethod and system of monitoring vulnerabilitiesUS20030195874Mar 7, 2003Oct 16, 2003Fujitsu LimitedSearch apparatus and method using order pattern including repeating patternUS20030212910Mar 28, 2003Nov 13, 2003Rowland Craig H.Method and system for reducing the false alarm rate of network intrusion detection systemsUS20030217283Jun 3, 2002Nov 20, 2003Scott HrastarMethod and system for encrypted network management and intrusion detectionUS20030229726Mar 18, 2003Dec 11, 2003Daseke Michael J.Default device configuration system and method for thin devicesUS20040010684 *Jun 10, 1998Jan 15, 2004Ibm CorporationMethod and system for the exchange of digitally signed objects over an insecure networkUS20040015728Mar 10, 2003Jan 22, 2004Cole David M.System and method for network vulnerability detection and reportingUS20040210756 *Apr 15, 2003Oct 21, 2004Microsoft CorporationPass-thru for client authenticationUS20040218532 *Apr 29, 2003Nov 4, 2004Stanislav KhirmanMethod and system for transport protocol reconstruction and timer synchronization for non-intrusive capturing and analysis of packets on a high-speed distributed networkUS20040250032 *Jun 6, 2003Dec 9, 2004Minwen JiState machine and system for data redundancyUS20050076066 *Oct 7, 2003Apr 7, 2005International Business Machines CorporationMethod, system, and program for retaining versions of filesUS20050273673 *May 19, 2005Dec 8, 2005Paul GassowaySystems and methods for minimizing security logsUS20070027913 *Jul 26, 2005Feb 1, 2007Invensys Systems, Inc.System and method for retrieving information from a supervisory control manufacturing/production databaseUS20070195797 *Feb 23, 2006Aug 23, 2007Patel Alpesh SNetwork device that determines application-level network latency by monitoring option values in a transport layer messageUS20090041020 *Aug 7, 2007Feb 12, 2009Avaya Technology LlcClock management between two endpoints* Cited by examinerNon-Patent CitationsReference1"Snort(TM) Users Manual 2.6.0," The Snort Project (May 23, 2006), pp. 1-126.2"TaoSecurity-Dedicated to FreeBSD, network security monitoring, incident response, and network forensics," (Oct. 1, 2007), obtained from: http://taosecurity.blogspot.com/2005/02/shmoocon-concludes-shmoocon-finished.html.3"toupper()-convert lowercase character to uppercase," http://www.mkssoftware.com, printed on Sep. 20, 2008 from http://web.archive.org, archive date Jun. 30, 2006, 2 pp.4"Enhanced Operating System Identification with Nessus," Tenable Network Security (2007), obtained from: http://blog.tenablesecurity.com/2009/02/enhanced—operat.html, posted by R. Gula on Feb. 16, 2009 (3 pp. total).5"Snort™ Users Manual 2.2.0RC1," The Snort Project, Jun. 28, 2004, Retrieved from the Internet: URL:http://cvs.snort.org/viewcvs.cgi/*checkout*/snort/doc/snort—manual.pdf?rev=1.25&content-type=application/pdf [retrieved on Nov. 18, 2010] (XP002610157).6"Snort™ Users Manual 2.6.0," The Snort Project (May 23, 2006), pp. 1-126.7"TaoSecurity—Dedicated to FreeBSD, network security monitoring, incident response, and network forensics," (Oct. 1, 2007), obtained from: http://taosecurity.blogspot.com/2005/02/shmoocon-concludes-shmoocon-finished.html.8"toupper()—convert lowercase character to uppercase," http://www.mkssoftware.com, printed on Sep. 20, 2008 from http://web.archive.org, archive date Jun. 30, 2006, 2 pp.9Advisory Action issued by the U.S. Patent Office on Aug. 3, 2010 in connection with related U.S. Appl. No. 10/843,374.10Advisory Action issued by the U.S. Patent Office on Dec. 2, 2009 in connection with related U.S. Appl. No. 10/843,398.11Advisory Action issued by the U.S. Patent Office on Feb. 24, 2010 in connection with related U.S. Appl. No. 11/272,035.12Advisory Action issued by the U.S. Patent Office on Sep. 29, 2009 in connection with related U.S. Appl. No. 10/843,459.13Aho et al., "Efficient String Matching: An Aid to Bibliographic Search," Communications from the ACM (Jun. 1975), vol. 18, No. 6, pp. 333-340.14B. Krishnamurthy, "Web Protocols and Practice," (May 1, 2001), pp. 518-520.15D. Joseph, et al., "A Policy-aware Switching Layer for Data Centers," SIGCOMM, Aug. 17-22, 2008, pp. 51-62.16D. Roekler, "HTTP IDS Evasions Revisited," Jan. 8, 2003, Retrieved from the Internet: URL:http://docs.idsresearch.org/http—ids—evasions.pdf [Nov. 18, 2010] (XP002610155).17D. Roelker, "HTTP IDS Evasions Revisited" (Aug. 1, 2003) [online] (retrieved on Nov. 9, 2006). Retrieved from the Internet .18D. Roelker, "HTTP IDS Evasions Revisited" (Aug. 1, 2003) [online] (retrieved on Nov. 9, 2006). Retrieved from the Internet <URL: http://docs.idsresearch.org/http—ids—evasions.pdf>.19European Office Action issued by the European Patent Office on Nov. 28, 2008 in connection with European patent application No. 07 015 003.2-2413, which corresponds to related U.S. Appl. No. 11/501,776.20European Search Report issued by the European Patent Office on Dec. 27, 2007 in connection with European patent application No. 07015003.2-2413, which corresponds to related U.S. Appl. No. 11/501,776.21European Search Report issued by the European Patent Office on Dec. 6, 2010 in connection with European patent application No. 05773540.9-2413, which corresponds to related U.S. Patent No. 7,496,962.22European Search Report issued by the European Patent Office on Nov. 22, 2007 in connection with European patent application No. 07014575.0-1244, which corresponds to related U.S. Appl. No. 11/493,934.23European Search Report issued by the European Patent Office on Oct. 12, 2009 in connection with European patent application No. 05773501.1-2201, which corresponds to related U.S. Appl. Nos. 10/898,220, 11/785,609 and 12/010,900.24Extended European Search Report issued by the European Patent Office on Jul. 19, 2011 in connection with European patent application No. 06837333.1-2413, which corresponds to related U.S. Patent No. 7,733,803.25Final Office Action issued by the U.S. Patent Office on Aug. 19, 2008 in connection with related U.S. Appl. No. 10/843,373.26Final Office Action issued by the U.S. Patent Office on Aug. 20, 2008 in connection with related U.S. Appl. No. 10/843,353.27Final Office Action issued by the U.S. Patent Office on Aug. 6, 2008 in connection with related U.S. Appl. No. 10/843,375.28Final Office Action issued by the U.S. Patent Office on Dec. 8, 2009 in connection with related U.S. Appl. No. 11/272,034.29Final Office Action issued by the U.S. Patent Office on Dec. 9, 2009 in connection with related U.S. Appl. No. 11/272,035.30Final Office Action issued by the U.S. Patent Office on Jul. 17, 2008 in connection with related U.S. Appl. No. 10/843,459.31Final Office Action issued by the U.S. Patent Office on Jun. 26, 2008 in connection with related U.S. Appl. No. 10/898,220.32Final Office Action issued by the U.S. Patent Office on Jun. 4, 2008 in connection with related U.S. Appl. No. 10/843,398.33Final Office Action issued by the U.S. Patent Office on Mar. 17, 2010 in connection with related U.S. Appl. No. 10/843,374.34Final Office Action issued by the U.S. Patent Office on May 13, 2009 in connection with related U.S. Appl. No. 10/843,374.35Final Office Action issued by the U.S. Patent Office on May 9, 2008 in connection with related U.S. Appl. No. 10/843,353.36Final Office Action issued by the U.S. Patent Office on Nov. 24, 2010 in connection with related U.S. Appl. No. 12/010,900.37Final Office Action issued by the U.S. Patent Office on Nov. 4, 2010 in connection with related U.S. Appl. No. 10/843,459.38Final Office Action issued by the U.S. Patent Office on Oct. 25, 2010 in connection with related U.S. Appl. No. 11/272,035.39Final Office Action issued by the U.S. Patent Office on Oct. 29, 2009 in connection with related U.S. Appl. No. 11/501,776.40Final Office Action issued by the U.S. Patent Office on Sep. 30, 2010 in connection with related U.S. Appl. No. 11/493,934.41Final Office Action issued by the U.S. Patent Office on Sep. 8, 2010 in connection with related U.S. Appl. No. 10/843,459.42Full Band and Matrix Algorithms (Jun. 9, 2004), http://web.archive.org/web20040109154658/http://www.netlib.org/utk/Isi/pcwLSI/text/node150.html.43International Preliminary Report on Patentability and Written Opinion of the International Searching Authority mailed on Mar. 17, 2009 in connection with corresponding PCT application No. PCT/US06/43820, which corresponds to related U.S. Appl. No. 11/272,035.44International Preliminary Report on Patentability and Written Opinion of the International Searching Authority mailed on Mar. 3, 2009 in connection with PCT application No. PCT/US05/025584, which corresponds to related U.S. Appl. No. 10/898,220.45International Preliminary Report on Patentability mailed on Apr. 7, 2009 in connection with PCT application No. PCT/US07/021351, which corresponds to U.S. Appl. No. 11/905,980.46International Preliminary Report on Patentability mailed on May 22, 2008 in connection with PCT application No. PCT/US06/43800, which corresponds to U.S. Appl. No. 11/272,034.47International Preliminary Report on Patentability mailed on Nov. 12, 2009 in connection with PCT application No. PCT/US08/005466, which corresponds to U.S. Appl. No. 12/149,196.48International Preliminary Report on Patentability mailed on Oct. 19, 2010 in connection with PCT application No. PCT/US2009/02210, which corresponds to U.S. Appl. No. 12/230,338.49International Preliminary Report on Patentability mailed on Sep. 11, 2009 in connection with corresponding PCT application No. PCT/US08/002454.50International Search Report and Written Opinion of the International Searching Authority issued on Aug. 18, 2008 in connection with PCT application No. PCT/US08/05466, which corresponds to U.S. Appl. No. 12/149,196.51International Search Report and Written Opinion of the International Searching Authority issued on Dec. 5, 2007 in connection with PCT application No. PCT/US05/25583, which corresponds to U.S. Appl. No. 10/951,796.52International Search Report and Written Opinion of the International Searching Authority issued on Jul. 2, 2008 in connection with corresponding PCT application No. PCT/US08/02454.53International Search Report and Written Opinion of the International Searching Authority issued on Jul. 28, 2011 in connection with PCT application No. PCT/US2011/032489, which corresponds to U.S. Appl. No. 13/086,819.54International Search Report and Written Opinion of the International Searching Authority issued on Jul. 7, 2008 in connection with PCT application No. PCT/US06/43820, which corresponds to U.S. Appl. No. 11/272,035.55International Search Report and Written Opinion of the International Searching Authority issued on Jun. 19, 2008 in connection with PCT application No. PCT/US05/25584, which corresponds to U.S. Appl. No. 10/898,220.56International Search Report and Written Opinion of the International Searching Authority issued on Jun. 30, 2008 in connection with PCT application No. PCT/US07/21351, which corresponds to U.S. Appl. No. 11/905,980.57International Search Report and Written Opinion of the International Searching Authority issued on Mar. 16, 2010 in connection with PCT application No. PCT/US09/59965, which corresponds to U.S. Appl. No. 12/575,612.58International Search Report and Written Opinion of the International Searching Authority issued on Oct. 9, 2007 in connection with PCT application No. PCT/US06/43800, which corresponds to U.S. Appl. No. 11/272,034.59International Search Report and Written Opinion of the International Searching Authority mailed on May 27, 2009 in connection with PCT application No. PCT/US09/02210, which corresponds to U.S. Appl. No. 12/230,338.60J. Howe, "An Environment for "Sniffing" DCE-RPC Traffic," CITI Technical Report 93-4, Jun. 21, 1993, 12 pages total.61J. Novak et al., "Target-Based TCP Stream Reassembly" (Aug. 3, 2007), Revision 1.0, pp. 1-23, obtained from: http://www.snort/org/docs/stream5-modelAUg032007.pdf.62J. Novak, "Target-Based Fragmentation Reassembly" (Apr. 2005), Revision 2.0, pp. 1-32.63Lyon, Gordon; Remote OS detection via TCP/IP Stack Fingerprinting, Jun. 30, 2002; pp. 1-12; obtained from: http://web.archive.org/web/20021017063625/www.insecure.org/nmap/nmap-fingerprinting-article.html.64M. Norton, "Optimizing Pattern Matching for Intrusion Detection" (Jul. 4, 2004) [online] (retrieved on Nov. 9, 2006). Retrieved from the Internet .65M. Norton, "Optimizing Pattern Matching for Intrusion Detection" (Jul. 4, 2004) [online] (retrieved on Nov. 9, 2006). Retrieved from the Internet <URL: http://docs.idsresearch.org/OptimizingPatternMatchingForIDS.pdf>.66M. Norton, et al., "The New Snort," Computer Security Journal, CSI Security Institute, XIX, No. 3 (Jan. 1, 2003), pp. 37-47, ISSN: 0277-0865 (XP008039475.67Matthew Olney et al.: "What would you do with a pointer and a size? A New Detection Framework", Apr. 22, 2010, XP55002567, http://labs.snort.org/nrt/sfvrt-nrt.pdf (retrieved on Jul. 12, 20111) the whole document.68N. Brownlee, et al., "Methodology for Passive Analysis of a University Internet Link," PAM2001 Passive and Active Measurement Workshop, Apr. 2001 (7 pp.).69N. Chase, "Active Server Pages 3.0 from Scratch" (Dec. 1999), Searching for products section, 13 pp.70 *Network Working Group Request for Comments: 1323 Obsoletes: RFC 1072, RFC 1185 V. Jacobson LBL, R. Braden ISI, D. Borman Cray Reseach May 1992.71Norton et al., "Multi-Patten Search Engine Aho-Corasick State Machine" (Mar. 17, 2004), Version 2.0, 36 pp.72Norton et al., "Sourcefire Optimizing Pattern Matching for Intrusion Detection" (Sep. 2004), 14 pp.73Notice of Allowance issued by the U.S. Patent Office on Apr. 6, 2011 in connection with related U.S. Appl. No. 12/010,900.74Notice of Allowance issued by the U.S. Patent Office on Aug. 18, 2008 in connection with related U.S. Appl. No. 11/272,033.75Notice of Allowance issued by the U.S. Patent Office on Dec. 8, 2009 in connection with related U.S. Appl. No. 11/501,776.76Notice of Allowance issued by the U.S. Patent Office on Feb. 24, 2011 in connection with related U.S. Appl. No. 11/493,934.77Notice of Allowance issued by the U.S. Patent Office on Feb. 5, 2010 in connection with related U.S. Appl. No. 11/272,034.78Notice of Allowance issued by the U.S. Patent Office on Jan. 21, 2009 in connection with related U.S. Appl. No. 10/898,220.79Notice of Allowance issued by the U.S. Patent Office on Jan. 24, 2011 in connection with related U.S. Appl. No. 10/843,459.80Notice of Allowance issued by the U.S. Patent Office on Jan. 7, 2010 in connection with related U.S. Appl. No. 10/843,353.81Notice of Allowance issued by the U.S. Patent Office on Jan. 8, 2010 in connection with related U.S. Appl. No. 10/843,373.82Notice of Allowance issued by the U.S. Patent Office on Jun. 11, 2009 in connection with related U.S. Appl. No. 10/843,373.83Notice of Allowance issued by the U.S. Patent Office on Jun. 22, 2011 in connection with related U.S. Appl. No. 11/272,035.84Notice of Allowance issued by the U.S. Patent Office on Mar. 5, 2010 in connection with related U.S. Appl. No. 11/785,609.85Notice of Allowance issued by the U.S. Patent Office on May 24, 2010 in connection with related U.S. Appl. No. 10/843,398.86Notice of Allowance issued by the U.S. Patent Office on Oct. 15, 2008 in connection with related U.S. Appl. No. 10/951,796.87Notice of Allowance issued by the U.S. Patent Office on Oct. 21, 2008 in connection with related U.S. Appl. No. 10/843,375.88Notice of Allowance issued by the U.S. Patent Office on Oct. 5, 2007 in connection with related U.S. Appl. No. 10/793,887.89Notice of Allowance issued by the U.S. Patent Office on Oct. 5, 2010 in connection with related U.S. Appl. No. 10/843,374.90Notice of Allowance issued by the U.S. Patent Office on Sep. 6, 2007 in connection with related U.S. Appl. No. 10/843,376.91Office Action issued by the European Patent Office on Jan. 15, 2010 in connection with European patent application No. 05773501.1-2201, which corresponds to related U.S. Appl. Nos. 10/898,220, 11/785,609 and 12/010,900.92Office Action issued by the U.S. Patent Office on Apr. 13, 2011 in connection with related U.S. Appl. No. 12/230,338.93Office Action issued by the U.S. Patent Office on Apr. 15, 2010 in connection with related U.S. Appl. No. 12/010,900.94Office Action issued by the U.S. Patent Office on Apr. 21, 2010 in connection with related U.S. Appl. No. 10/843,459.95Office Action issued by the U.S. Patent Office on Apr. 28, 2009 in connection with related U.S. Appl. No. 11/501,776.96Office Action issued by the U.S. Patent Office on Aug. 20, 2009 in connection with related U.S. Appl. No. 10/843,374.97Office Action issued by the U.S. Patent Office on Dec. 17, 2008 in connection with related U.S. Appl. No. 10/843,398.98Office Action issued by the U.S. Patent Office on Dec. 17, 2009 in connection with related U.S. Appl. No. 11/493,934.99Office Action issued by the U.S. Patent Office on Dec. 22, 2010 in connection with related U.S. Appl. No. 11/905,980.100Office Action issued by the U.S. Patent Office on Dec. 23, 2008 in connection with related U.S. Appl. No. 11/272,034.101Office Action issued by the U.S. Patent Office on Feb. 21, 2008 in connection with related U.S. Appl. No. 11/272,033.102Office Action issued by the U.S. Patent Office on Feb. 4, 2009 in connection with related U.S. Appl. No. 10/843,373.103Office Action issued by the U.S. Patent Office on Feb. 9, 2009 in connection with related U.S. Appl. No. 10/843,459.104Office Action issued by the U.S. Patent Office on Jan. 10, 2008 in connection with related U.S. Appl. No. 10/843,373.105Office Action issued by the U.S. Patent Office on Jan. 16, 2009 in connection with related U.S. Appl. No. 10/843,353.106Office Action issued by the U.S. Patent Office on Jan. 21, 2009 in connection with related U.S. Appl. No. 11/493,934.107Office Action issued by the U.S. Patent Office on Jul. 11, 2008 in connection with related U.S. Appl. No. 11/272,034.108Office Action issued by the U.S. Patent Office on Jul. 16, 2007 in connection with related U.S. Appl. No. 10/898,220.109Office Action issued by the U.S. Patent Office on Jul. 28, 2009 in connection with related U.S. Appl. No. 10/843,353.110Office Action issued by the U.S. Patent Office on Jul. 30, 2009 in connection with related U.S. Appl. No. 11/493,934.111Office Action issued by the U.S. Patent Office on Jul. 6, 2009 in connection with related U.S. Appl. No. 10/843,459.112Office Action issued by the U.S. Patent Office on Jul. 7, 2009 in connection with related U.S. Appl. No. 10/843,398.113Office Action issued by the U.S. Patent Office on Jun. 1, 2009 in connection with related U.S. Appl. No. 11/272,035.114Office Action issued by the U.S. Patent Office on Jun. 23, 2009 in connection with related U.S. Appl. No. 11/785,609.115Office Action issued by the U.S. Patent Office on Mar. 12, 2008 in connection with related U.S. Appl. No. 10/843,459.116Office Action issued by the U.S. Patent Office on Mar. 16, 2010 in connection with related U.S. Appl. No. 11/272,035.117Office Action issued by the U.S. Patent Office on Mar. 20, 2008 in connection with related U.S. Appl. No. 10/843,374.118Office Action issued by the U.S. Patent Office on Mar. 22, 2010 in connection with related U.S. Appl. No. 11/493,934.119Office Action issued by the U.S. Patent Office on May 12, 2011 in connection with related U.S. Appl. No. 12/149,196.120Office Action issued by the U.S. Patent Office on May 14, 2009 in connection with related U.S. Appl. No. 11/272,034.121Office Action issued by the U.S. Patent Office on May 31, 2011 in connection with related U.S. Appl. No. 12/688,400.122Office Action issued by the U.S. Patent Office on Nov. 19, 2010 in connection with related U.S. Appl. No. 10/843,459.123Office Action issued by the U.S. Patent Office on Nov. 21, 2007 in connection with related U.S. Appl. No. 10/843,398.124Office Action issued by the U.S. Patent Office on Oct. 4, 2007 in connection with related U.S. Appl. No. 10/951,796.125Office Action issued by the U.S. Patent Office on Oct. 6, 2008 in connection with related U.S. Appl. No. 10/843,374.126Office Action issued by the U.S. Patent Office on Sep. 26, 2007 in connection with related U.S. Appl. No. 10/843,353.127Office Action issued by the U.S. Patent Office on Sep. 6, 2007 in connection with related U.S. Appl. No. 10/843,374.128Office Action issued on Feb. 5, 2008 in connection with the related U.S. Appl. No. 10/843,375.129Office Action mailed Mar. 1, 2011 from the Japan Patent Office for Japanese patent application No. 2007-523640 in connection with related U.S. Appl. No. 10/898,220, now U.S. patent No. 7,539,681, U.S. Appl. No. 11/785,609, now U.S. patent No. 7,756,885, and U.S. Appl. No. 12/010,900 (English translation enclosed).130Office Action mailed Sep. 7, 2010 from the Japan Patent Office for Japanese patent application No. 2007-523639 in connection with related U.S. Appl. No. 10/951,796, now U.S. patent No. 7,496,962 (English translation enclosed).131PCT International Preliminary Report on Patentability mailed on Apr. 21, 2011 by the International Bureau of WIPO in connection with PCT patent application No. PCT/US2009/059965, which corresponds to U.S. Appl. No. 12/575,612.132Press Release, "FaceTime Protects Enterprises from Information Leaks over Collaborative Suites like Microsoft OCS and IBM Sametime", issued by FaceTime Communications, Belmont, California, Jul. 14, 2008, retrieved from www.facetime.com/pr/pr080714.aspx , Dec. 1, 2009.133R. Deraison, et al., "Nessus Network Auditing," Sungress Publishing, Jul. 20, 2004, pp. 1-13.134R. Deraison, et al., "Passive Vulnerability Scanning. Introduction to NeVO," Tenable Network Security, May 30, 2004, pp. 1-13.135R. Gula, "Passive Vulnerability Detection. Techniques to passively find network security vulnerabilities," Sep. 9, 1999 (5 pp.).136R. Hiyoshi, "Practical Guide to Intrusion Detection System: Snort & Tripwire," Japan, Apr. 25, 2004, pp. 57-230 (concise English explanation of relevance attached).137R.P. Lippmann et al., "Passive Operating System Identification from TCP/IP Packet Headers," Proceedings Workshop on Data Mining for Computer Security (DMSEC), Nov. 2003, (10 pp.).138S.Siddharth, "Evading NIDS, revisited" (Dec. 12, 2005).139Spitzner, Lance; Passive Fingerprinting, May 3, 2003; Focus on Intrusion Detection; pp. 1-4; obtained from http://www.ctillhq.com/pdfdb/000183/data.pdf.140T. Ptacek, et al., "Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection", Jan. 1998, pp. 1-63.141Tarjan, et al., "Storing a Sparse Table," Communications of the ACM (Nov. 1979), vol. 2, No. 11, pp. 606-620.142U. Shankar and V. Paxson, Active Mapping: Resisting NIDS Evasion Without Altering Traffic, Proc. IEEE Symposium on Security and Privacy. May 2003, pp. 1-18.143U.S. Appl. No. 10/843,353, May 2004, Roesch et al., System and Method for Determining Characteristics of a Network and Analyzing Vulnerabilities.144U.S. Appl. No. 10/843,373, May 2004, Roesch et al., Systems and Methods for Identifying the Services of a Network.145U.S. Appl. No. 10/843,374, May 2004, Roesch et al., System and Methods for Determining Characteristics of a Network Based on Flow Analysis.146U.S. Appl. No. 10/843,375, May 2004, Roesch et al., Systems and Methods for Determining Characteristics of a Network and Assessing Confidence.147U.S. Appl. No. 10/843,398, May 2004, Roesch et al., Systems and Methods for Determining Characteristics of a Network.148U.S. Appl. No. 10/843,459, May 2004, Roesch et al., Systems and Methods for Determining Characteristics of a Network and Enforcing Policy.149U.S. Appl. No. 10/898,220, Jul. 2004, Norton et al., Methods and Systems for Multi-Pattern Searching.150U.S. Appl. No. 10/951,796, Sep. 2004, Roelker et al., Intrusion Detection Strategies for Hypertext Transport Protocol.151U.S. Appl. No. 11/272,033, Nov. 2005, Dempster et al., Systems and Methods for Identifying the Client Applications of a Network.152U.S. Appl. No. 11/272,034, Nov. 2005, Vogel III et al., Systems and Methods for Modifying Network Map Attributes.153U.S. Appl. No. 11/272,035, Nov. 2005, Gustafson et al., Intrusion Event Correlation with Network Discovery Information.154U.S. Appl. No. 11/493,934, Jul. 2006, Roesch et al., Device, System and Method for Analysis of Fragments in a Fragment Train.155U.S. Appl. No. 11/501,776, Aug. 2006, Roesch et al., Device, System and Method for Analysis of Segments in a Transmission Control Protocol (TCP) Session.156U.S. Appl. No. 11/785,609, Apr. 2007, Norton et al., Methods and Systems for Multi-Pattern Searching.157U.S. Appl. No. 11/905,980, Oct. 2007, Roesch, Device, System and Method for Use of Micro-Policies in Intrusion Detection/Prevention.158U.S. Appl. No. 12/010,900, Jan. 2008, Norton et al., Methods and Systems for Multi-Pattern Searching.159U.S. Appl. No. 12/149,196, Apr. 2008, Rittermann, Real-Time User Awareness for a Computer Network.160U.S. Appl. No. 12/230,338, Aug. 2008, Sturges et al., Speed and Memory Optimization of Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) Rule Processing.161U.S. Appl. No. 12/813,859, filed Jun. 2010, Polley et al.162U.S. Appl. No. 12/969,682, filed Dec. 2010, Roesch et al.163U.S. Appl. No. 13/046,127, filed Mar. 11, 2011, Roesch.164U.S. Appl. No. 13/086,819, filed Apr. 4, 2011, Olney et al.165V. Yegneswaran, et al., "Internet Sieve: An Architecture for Generating Resilient Signatures," May 2004, Retrieved from the Internet: URL:http://www.cc.gatech.edu/˜giffin/papers/tr1507/tr1507.pdf [retrieved on Nov. 18, 2010] (XP002610154).* Cited by examinerReferenced byCiting PatentFiling datePublication dateApplicantTitleUS8683264 *Apr 6, 2011Mar 25, 2014International Business Machines CorporationProcessing execution requests within different computing environmentsUS20110252279 *Apr 6, 2011Oct 13, 2011International Business Machines CorporationProcessing execution requests within different computing environments* Cited by examinerClassifications U.S. Classification713/178, 726/3International ClassificationH04L9/32Cooperative ClassificationH04L63/1408European ClassificationH04L63/14ALegal EventsDateCodeEventDescriptionJun 14, 2007ASAssignmentFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:STURGES, STEVEN;NOVAK, JUDY HOLLIS;REEL/FRAME:019459/0276Owner name: SOURCEFIRE, INC., MARYLANDOwner name: SOURCEFIRE, INC., MARYLANDFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:STURGES, STEVEN;NOVAK, JUDY HOLLIS;REEL/FRAME:019459/0276Effective date: 20070227Owner name: SOURCEFIRE, INC.,MARYLANDFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:STURGES, STEVEN;NOVAK, JUDY HOLLIS;US-ASSIGNMENT DATABASE UPDATED:20100329;REEL/FRAME:19459/276Effective date: 20070227Owner name: SOURCEFIRE, INC.,MARYLANDFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:STURGES, STEVEN;NOVAK, JUDY HOLLIS;REEL/FRAME:019459/0276Effective date: 20070227Mar 24, 2014ASAssignmentOwner name: SOURCEFIRE LLC, DELAWAREFree format text: CHANGE OF NAME;ASSIGNOR:SOURCEFIRE, INC.;REEL/FRAME:032513/0481Effective date: 20131009Owner name: CISCO TECHNOLOGY, INC., CALIFORNIAFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:SOURCEFIRE LLC;REEL/FRAME:032513/0513Effective date: 20140320RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services