Method and apparatus for distributed intrusion protection system for ultra high bandwidth networks

Goranson, Craig A.; Burnette, John R.; Greitzer, Frank L.; McMillan, Bryan H.

Title: Method and apparatus for distributed intrusion protection system for ultra high bandwidth networks

Full Record
Other Related Research

Abstract

A method for providing security to a network having a data stream with a plurality of portions of data, each having differing levels of sensitivity. The data stream is interrogated to determine the presence of predetermined characteristics associated with at least one of the portions of data within the data stream. At least one of the portions of data is then characterized, based upon the portion of data exhibiting a predetermined combination of characteristics, wherein the predetermined combination of characteristics is related to the sensitivity of the portion of data. The portions of the data stream are then distributed into a plurality of different channels, each of the channels associated with different level of sensitivity.

Inventors:: Goranson, Craig A.; Burnette, John R.; Greitzer, Frank L.; McMillan, Bryan H.

Issue Date:: 2013-10-15

Research Org.:: Pacific Northwest National Lab. (PNNL), Richland, WA (United States)

Sponsoring Org.:: USDOE

OSTI Identifier:: 1176531

Patent Number(s):: 8561189

Application Number:: 11/473,634

Assignee:: Battelle Memorial Institute (Richland, WA)

Patent Classifications (CPCs):: H - ELECTRICITY H04 - ELECTRIC COMMUNICATION TECHNIQUE H04L - TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION

Show more

H - ELECTRICITY H04 - ELECTRIC COMMUNICATION TECHNIQUE H04L - TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
H04L63/0218 - {Distributed architectures, e.g. distributed firewalls}
H04L63/1416 - {Event detection, e.g. attack signature detection}

Show less

DOE Contract Number:: AC06-76RL01830

Resource Type:: Patent

Resource Relation:: Patent File Date: 2006 Jun 23

Country of Publication:: United States

Language:: English

Subject:: 97 MATHEMATICS AND COMPUTING

Citation Formats


                    Goranson, Craig A., Burnette, John R., Greitzer, Frank L., and McMillan, Bryan H. Method and apparatus for distributed intrusion protection system for ultra high bandwidth networks.  United States: N. p., 2013. 
        Web.

Copy to clipboard


                    Goranson, Craig A., Burnette, John R., Greitzer, Frank L., & McMillan, Bryan H. Method and apparatus for distributed intrusion protection system for ultra high bandwidth networks.  United States.

Copy to clipboard


                    Goranson, Craig A., Burnette, John R., Greitzer, Frank L., and McMillan, Bryan H. Tue .  
        "Method and apparatus for distributed intrusion protection system for ultra high bandwidth networks".  United States.  https://www.osti.gov/servlets/purl/1176531.

Copy to clipboard


                    
@article{osti_1176531,

  title        = {Method and apparatus for distributed intrusion protection system for ultra high bandwidth networks},

  author       = {Goranson, Craig A. and Burnette, John R. and Greitzer, Frank L. and McMillan, Bryan H.},

  abstractNote = {A method for providing security to a network having a data stream with a plurality of portions of data, each having differing levels of sensitivity. The data stream is interrogated to determine the presence of predetermined characteristics associated with at least one of the portions of data within the data stream. At least one of the portions of data is then characterized, based upon the portion of data exhibiting a predetermined combination of characteristics, wherein the predetermined combination of characteristics is related to the sensitivity of the portion of data. The portions of the data stream are then distributed into a plurality of different channels, each of the channels associated with different level of sensitivity.},

  doi          = {},

  journal      = {},
number       = ,

  volume       = ,

  place        = {United States},

  year         = {2013},

  month        = {10}

}

Copy to clipboard

Patent:

Save / Share:

Export Metadata

Save to My Library

Similar Records in DOE Patents and OSTI.GOV collections:

Method and apparatus for providing high bandwidth, low noise mechanical I/O for computer systems

Patent Rosenberg, Louis B [Pleasanton, CA]

A method and apparatus for providing high bandwidth and low noise mechanical input and output for computer systems. A gimbal mechanism provides two revolute degrees of freedom to an object about two axes of rotation. A linear axis member is coupled to the gimbal mechanism at the intersection of the two axes of rotation. The linear axis member is capable of being translated along a third axis to provide a third degree of freedom. The user object is coupled to the linear axis member and is thus translatable along the third axis so that the object can be moved alongmore » « less
Full Text Available
Apparatus and method for fusion of compute and switching functions of exascale system into a single component by using configurable network-on-chip fabric with distributed dual mode input-output ports and programmable network interfaces

Patent Khare, Surhud; Somasekhar, Dinesh; More, Ankit; ...

Described is an apparatus which comprises: a Network-On-Chip fabric using crossbar switches, having distributed ingress and egress ports; and a dual-mode network interface coupled to at least one crossbar switch, the dual-mode network interface is to include: a dual-mode circuitry; a controller operable to: configure the dual-mode circuitry to transmit and receive differential signals via the egress and ingress ports, respectively, and configure the dual-mode circuitry to transmit and receive signal-ended signals via the egress and ingress ports, respectively.
Full Text Available
Co-scheduling of network resource provisioning and host-to-host bandwidth reservation on high-performance network and storage systems

Patent Yu, Dantong; Katramatos, Dimitrios; Sim, Alexander; ...

A cross-domain network resource reservation scheduler configured to schedule a path from at least one end-site includes a management plane device configured to monitor and provide information representing at least one of functionality, performance, faults, and fault recovery associated with a network resource; a control plane device configured to at least one of schedule the network resource, provision local area network quality of service, provision local area network bandwidth, and provision wide area network bandwidth; and a service plane device configured to interface with the control plane device to reserve the network resource based on a reservation request and themore » « less
Full Text Available
System, apparatus and methods to implement high-speed network analyzers

Patent Ezick, James; Lethin, Richard; Ros-Giralt, Jordi; ...

Systems, apparatus and methods for the implementation of high-speed network analyzers are provided. A set of high-level specifications is used to define the behavior of the network analyzer emitted by a compiler. An optimized inline workflow to process regular expressions is presented without sacrificing the semantic capabilities of the processing engine. An optimized packet dispatcher implements a subset of the functions implemented by the network analyzer, providing a fast and slow path workflow used to accelerate specific processing units. Such dispatcher facility can also be used as a cache of policies, wherein if a policy is found, then packet manipulationsmore » « less
Full Text Available
Method and apparatus for routing data in an inter-nodal communications lattice of a massively parallel computer system by employing bandwidth shells at areas of overutilization

Patent Archer, Charles Jens; Musselman, Roy Glenn; Peters, Amanda; ...

A massively parallel computer system contains an inter-nodal communications network of node-to-node links. An automated routing strategy routes packets through one or more intermediate nodes of the network to reach a final destination. The default routing strategy is altered responsive to detection of overutilization of a particular path of one or more links, and at least some traffic is re-routed by distributing the traffic among multiple paths (which may include the default path). An alternative path may require a greater number of link traversals to reach the destination node.
Full Text Available

Similar Records