Efficient packet forwarding using cyber-security aware policies
Abstract
For balancing load, a forwarder can selectively direct data from the forwarder to a processor according to a loading parameter. The selective direction includes forwarding the data to the processor for processing, transforming and/or forwarding the data to another node, and dropping the data. The forwarder can also adjust the loading parameter based on, at least in part, feedback received from the processor. One or more processing elements can store values associated with one or more flows into a structure without locking the structure. The stored values can be used to determine how to direct the flows, e.g., whether to process a flow or to drop it. The structure can be used within an information channel providing feedback to a processor.
- Inventors:
- Issue Date:
- Research Org.:
- Significs and Elements, LLC., New York, NY (United States)
- Sponsoring Org.:
- USDOE
- OSTI Identifier:
- 1404917
- Patent Number(s):
- 9798588
- Application Number:
- 13/870,814
- Assignee:
- Significs and Elements, LLC (New York, NY)
- Patent Classifications (CPCs):
-
H - ELECTRICITY H04 - ELECTRIC COMMUNICATION TECHNIQUE H04L - TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
G - PHYSICS G06 - COMPUTING G06F - ELECTRIC DIGITAL DATA PROCESSING
- DOE Contract Number:
- SC0004400; SC0006343
- Resource Type:
- Patent
- Resource Relation:
- Patent File Date: 2013 Apr 25
- Country of Publication:
- United States
- Language:
- English
- Subject:
- 97 MATHEMATICS AND COMPUTING
Citation Formats
Ros-Giralt, Jordi. Efficient packet forwarding using cyber-security aware policies. United States: N. p., 2017.
Web.
Ros-Giralt, Jordi. Efficient packet forwarding using cyber-security aware policies. United States.
Ros-Giralt, Jordi. Wed .
"Efficient packet forwarding using cyber-security aware policies". United States. https://www.osti.gov/servlets/purl/1404917.
@article{osti_1404917,
title = {Efficient packet forwarding using cyber-security aware policies},
author = {Ros-Giralt, Jordi},
abstractNote = {For balancing load, a forwarder can selectively direct data from the forwarder to a processor according to a loading parameter. The selective direction includes forwarding the data to the processor for processing, transforming and/or forwarding the data to another node, and dropping the data. The forwarder can also adjust the loading parameter based on, at least in part, feedback received from the processor. One or more processing elements can store values associated with one or more flows into a structure without locking the structure. The stored values can be used to determine how to direct the flows, e.g., whether to process a flow or to drop it. The structure can be used within an information channel providing feedback to a processor.},
doi = {},
journal = {},
number = ,
volume = ,
place = {United States},
year = {2017},
month = {10}
}
Save to My Library
You must Sign In or Create an Account in order to save documents to your library.
Works referenced in this record:
A practical automatic polyhedral parallelizer and locality optimizer
conference, January 2008
- Bondhugula, Uday; Hartono, Albert; Ramanujam, J.
- Proceedings of the 2008 ACM SIGPLAN conference on Programming language design and implementation - PLDI '08
Method and apparatus for using ternary and binary content-addressable memory stages to classify packets
patent, February 2006
- Cheriton, David R.
- US Patent Document 7,002,965
Parallel processing of distributed arrays and optimum data distribution
patent, August 2012
- Luszczek, Piotr R.; Little, John N.; Martin, Jocelyn Luke
- US Patent Document 8,250,550
Pipelined Processor and Compiler/Scheduler for Variable Number Branch Delay Slots
patent-application, February 2010
- Van De Waerdt, Jan-Willem; Roos, Steven
- US Patent Application 12/518485; 20100050164
Speculative Code Motion for Memory Latency Hiding
patent-application, February 2009
- Li, Long; Dai, Jinquan; Lv, Zhiyuan
- US Patent Application 10/582519; 20090037889
Loop allocation for optimizing compilers
patent, November 2003
- Archambault, Roch Georges; Blainey, Robert James
- US Patent Document 6,651,246
Information management and retrieval
patent, January 2002
- Weeks, Richard
- US Patent Document 6,338,057
Parallel programming computing system to dynamically allocate program portions
patent, January 2012
- Little, John N.; Hicklin, Joseph F.; Martin, Jocelyn Luke
- US Patent Document 8,108,845
Non-literal textual search using fuzzy finite-state linear non-deterministic automata
patent, January 2000
- Hunter, Kenneth M.
- US Patent Document 6,018,735
System and method for creating systolic solvers
patent, August 2006
- Cronquist, Darren C.; Schlansker, Michael S.
- US Patent Document 7,086,038
Reducing Data Read Latency in a Network Communications Processor Architecture
patent-application, September 2011
- Pollock, Steven; Burroughs, William; Mital, Deepak
- US Patent Application 12/975823; 20110225588
Integrated circuit apparatus and method for high throughput signature based network applications
patent-application, May 2005
- Barrie, Robert Matthew; Gould, Stephen; Williams, Darren
- US Patent Application 10/640870; 20050114700
System and method for identifying matches of query patterns to document text in a document textbase
patent, October 2000
- Masand, Brij
- US Patent Document 6,131,092
Scalable Tensor Decompositions for Multi-aspect Data Mining
conference, December 2008
- Kolda, Tamara G.; Sun, Jimeng
- 2008 Eighth IEEE International Conference on Data Mining (ICDM)
System and Method for Domain Stretching for an Advanced Dual-Representation Polyhedral Loop Transformation Framework
patent-application, December 2009
- Eichenberger, Alexandre E.; O'Brien, John K. P.; O'Brien, Kathryn M.
- US Patent Application 11/861503; 20090307673
Systems and Methods for Efficient Detection of Fingerprinted Data and Information
patent-application, February 2011
- Barkan, Roy; Lazarov, David; Menaker, Yevgeny
- US Patent Application 12/786284; 20110035805
Systems and Methods of Data Processing Using an FPGA-Implemented Hash Function
patent-application, December 2013
- Stroud, Jonathan; Cook, Brent Aaron
- US Patent Application 13/529289; 20130343181
System and method for controlling updates of a data structure
patent, November 2014
- Sathe, Satish; Marulkar, Rajendra; Vaishampayan, Sagar
- US Patent Document 8,898,204
System and method for regular expression matching using index
patent, June 2004
- Cho, Junghoo; Rajagopalan, Sridhar
- US Patent Document 6,754,650
Method and Apparatus for Detecting Application
patent-application, July 2015
- Seol, Jae-Young; Rho, Sang-Ig; Lee, Ho-Cheol
- US Patent Application 14/592540; 20150195155
Selective code generation optimization for an advanced dual-representation polyhedral loop transformation framework
patent, December 2011
- Eichenberger, Alexandre E.; O'Brien, John K. P.; O'Brien, Kathryn M.
- US Patent Document 8,087,010
Conversion of control dependence to data dependence
conference, January 1983
- Allen, J. R.; Kennedy, Ken; Porterfield, Carrie
- Proceedings of the 10th ACM SIGACT-SIGPLAN symposium on Principles of programming languages - POPL '83
System, Apparatus and Methods to Implement High-Speed Network Analyzers
patent-application, November 2010
- Ros-Giralt, Jordi; Szilagyi, Peter; Ezick, James
- US Patent Application 12/770649; 20100281160
Method and apparatus for demultiplexing a shared data channel into a multitude of separate data streams, restoring the original CBR
patent, February 2004
- Brunheroto, Jose; Laemen, Frans; Nogima, Julio
- US Patent Document 6,690,683
Sparsity in higher order methods for unconstrained optimization
journal, April 2012
- Gundersen, Geir; Steihaug, Trond
- Optimization Methods and Software, Vol. 27, Issue 2
Latency tolerant risc-based multiple processor with event driven locality managers resulting from variable tagging
patent, August 1995
- Casavant, Thomas L.; Fineberg, Samuel A.
- US Patent Document 5,442,797
Solution and Optimization of Systems of Pseudo-Boolean Constraints
journal, October 2007
- Aloul, Fadi A.; Ramani, Arathi; Sakallah, Karem A.
- IEEE Transactions on Computers, Vol. 56, Issue 10
Method for execution of query to search strings of characters that match pattern with a target string utilizing bit vector
patent, August 2004
- Fritchman, Barry Lynn
- US Patent Document 6,785,677
Efficient representation scheme for multidimensional array operations
journal, March 2002
- Chun-Yuan Lin,
- IEEE Transactions on Computers, Vol. 51, Issue 3
Loop optimization with mapping code on an architecture
patent, August 2004
- Danckaert, Koen; Catthoor, Francky
- US Patent Document 6,772,415
System and method for performing regular expression matching with high parallelism
patent, May 2007
- Gai, Silvano; Malagrino, Dante
- US Patent Document 7,225,188
Network surveillance using long-term and short-term statistical profiles to determine suspicious network activity
patent, September 2009
- Porras, Phillip Andrew; Valdes, Alfonso
- US Patent Document 7,594,260
Method and apparatus for improving performance of a program using a loop interchange, loop distribution, loop interchange sequence
patent, March 2000
- Schooler, Richard
- US Patent Document 6,038,398
Locality manager having memory and independent code, bus interface logic, and synchronization components for a processing element for intercommunication in a latency tolerant multiple processor
patent, March 1997
- Casavant, Thomas L.; Fineberg, Samuel A.; Bright, Devin L.
- US Patent Document 5,613,136
Memory manager for heterogeneous memory control
patent-application, February 2007
- Sakarda, Premanand; Brandt, Todd; Wu, Hai Hua
- US Patent Application 11/196959; 20070033367
Real-time document collection search engine with phrase indexing
patent, July 1999
- Kirsch, Steven T.; Chang, William I.; Miller, Ed R.
- US Patent Document 5,920,854
Full regular expression search of network traffic
patent, October 2005
- Mathur, Alok; Beylin, Boris
- US Patent Document 6,952,694
Simultaneously searching for a plurality of patterns definable by complex expressions, and efficiently generating data for such searching
patent, August 2007
- Cheng, Paul C.; Chien, Fangli
- US Patent Document 7,260,558
Generating efficient parallel code using partitioning, coalescing, and degenerative loop and guard removal
patent, July 2010
- Liao, Shih-wei; Du, Zhao Hui; Cheng, Bu Qi
- US Patent Document 7,757,222
Method and system for reordering the instructions of a computer program to optimize its execution
patent, December 1999
- Heisch, Randall Ray
- US Patent Document 6,006,033
Scanning polyhedra with DO loops
journal, July 1991
- Ancourt, Corinne; Irigoin, François
- ACM SIGPLAN Notices, Vol. 26, Issue 7
Variance Analysis for Translating Cuda code for Execution by a General Purpose Processor
patent-application, October 2009
- Grover, Vinod; Aarts, Bastiaan Joannes Matheus; Murphy, Michael
- US Patent Application 12/415090; 20090259997
Methods and Systems for Load Balancing Using Forecasting and Overbooking Techniques
patent-application, March 2011
- Desai, Nitin; Dillon, Steve; Stone, David
- US Patent Application 12/827610; 20110078318
Binary state machine system and method for REGEX processing of a data stream in an intrusion detection system
patent, April 2005
- Carter, Earl T.
- US Patent Document 6,880,087
Whole program path profiling
patent, December 2001
- Larus, James R.; Fraser, Christopher W.
- US Patent Document 6,327,699
Tiling Imperfectly-nested Loop Nests
conference, January 2000
- Ahmed, N.; Mateev, N.; Pingali, K.
- ACM/IEEE SC 2000 Conference (SC'00)
Programmable packet processor with flow resolution logic
patent, July 2006
- Cathey, Jim; Michels, Timothy S.
- US Patent Document 7,075,926
Configurable string matching hardware for speeding up intrusion detection
journal, March 2005
- Aldwairi, Monther; Conte, Thomas; Franzon, Paul
- ACM SIGARCH Computer Architecture News, Vol. 33, Issue 1
Methods And Systems To Detect An Evasion Attack
patent-application, August 2007
- Varghese, George; Bonomi, Flavio; Fingerhut, John
- US Patent Application 11/552025; 20070192861
Automatic Enterprise Service Bus Deployment at the Level of Individual Services
patent-application, November 2011
- Vecera, Martin; Pechanec, Jiri
- US Patent Application 12/785054; 20110289206
Adaptively weighted, partitioned context edit distance string matching
patent-application, February 2002
- Richardson, Alvin Charles; Davis, Charles Michael; Miranker, Daniel P.
- US Patent Application 09/915603; 20020021838
System and Method for Advanced Polyhedral Loop Transformations of Source Code in a Compiler
patent-application, March 2009
- Eichenberger, Alexandre E.; O'Brien, John K. P.; O'Brien, Kathryn M.
- US Patent Application 11/861449; 20090083724
Bi-Directional Communication in a Parallel Processing Environment
patent-application, May 2009
- Stefansson, Halldor Narfi; Dean, Loren; Lurie, Roy
- US Patent Application 11/841861; 20090119677
Method and apparatus for a generic language interface to apply loop optimization transformations
patent-application, March 2006
- Blainey, Robert James; Tal, Arie
- US Patent Application 10/926601; 20060048121
Collecting and analyzing graphical data flow web application results from multiple users
patent, November 2012
- Austin, Paul F.; Kudukoli, Ramprasad
- US Patent Document 8,307,347
Stateful packet content matching mechanisms
patent, August 2010
- Balakrishnan, Santosh; Ramakrishna, Venkatraman
- US Patent Document 7,784,094
Minimum-cost network hardening
patent-application, April 2006
- Noel, Steven E.; Jajodia, Sushil; O'Berry, Brian C.
- US Patent Application 11/250449; 20060085858
Towards automatic generation of vulnerability-based signatures
conference, January 2006
- Brumley, D.; Newsome, J.; Song, D.
- 2006 IEEE Symposium on Security and Privacy (S&P'06)
Execution of hardware description language (HDL) programs
patent, July 2012
- Eng, Tommy Kinming
- US Patent Document 8,230,408
Modification of swing modulo scheduling to reduce register usage
patent-application, March 2006
- Martin, Allan Russell
- US Patent Application 10/930039; 20060048123
Adaptive transaction manager for complex transactions and business process
patent-application, April 2004
- McGoveran, David O.
- US Patent Application 10/263589; 20040068501
Fast and Robust Classification Algorithm for Vein Recognition Using Infrared Images
patent-application, October 2013
- Shiell, Derek; Xiao, Jing
- US Patent Application 13/443615; 20130268563
Event Detection Method
patent-application, January 2008
- Cao, Bin; Wang, Yong
- US Patent Application 11/691155; 20080010680
Automatic memory layout transformations to optimize spatial locality in parameterized loop nests
journal, March 2000
- Clauss, Philippe; Meister, Benoît
- ACM SIGARCH Computer Architecture News, Vol. 28, Issue 1
Background memory allocation for multi-dimensional signal processing
patent, April 1998
- Balasa, Florin; Catthoor, Francky; De Man, Hugo
- US Patent Document 5,742,814
Media for performing parallel processing of distributed arrays
patent, August 2012
- Luszczek, Piotr R.; Little, John N.; Martin, Jocelyn Luke
- US Patent Document 8,255,890
Internetworking apparatus for load balancing plural networks
patent, November 1999
- Tsuchiya, Kazuaki; Sako, Yoshihito; Oura, Tetsuo
- US Patent Document 5,978,844
Method and system for memory management optimization
patent, October 2005
- Schreiber, Robert S.
- US Patent Document 6,952,821
Distribution of flows in a flow-based multi-processor system
patent, May 2008
- Sinha, Amit
- US Patent Document 7,369,557
Method and system for memory management optimization
patent-application, February 2004
- Schreiber, Robert S.
- US Patent Application 10/223224; 20040034754
Solving SAT and SAT Modulo Theories: From an abstract Davis--Putnam--Logemann--Loveland procedure to DPLL(
journal, November 2006
- Nieuwenhuis, Robert; Oliveras, Albert; Tinelli, Cesare
- Journal of the ACM, Vol. 53, Issue 6
An accurate cost model for guiding data locality transformations
journal, September 2005
- Vera, Xavier; Abella, Jaume; Llosa, Josep
- ACM Transactions on Programming Languages and Systems, Vol. 27, Issue 5
Searching for patterns in encrypted data
patent, August 1995
- Arnold, William C.; Chess, David M.; Kephart, Jeffrey O.
- US Patent Document 5,442,699
Search apparatus and method using order pattern including repeating pattern
patent, June 2005
- Akaboshi, Naoki
- US Patent Document 6,912,526
Data transformations for streaming applications on multiprocessors
patent-application, March 2007
- Liao, Shih-wei; Du, Zhaohui; Wu, Gansha
- US Patent Application 11/234484; 20070074195
Fast and robust classification algorithm for vein recognition using infrared images
patent, March 2015
- Shiell, Derek; Xiao, Jing
- US Patent Document 8,977,648
Dynamic signature inspection-based network intrusion detection
patent, August 2001
- Vaidya, Vimal
- US Patent Document 6,279,113
Efficient data compression methods for multidimensional sparse array operations based on the ekmr scheme
journal, December 2003
- Chun-Yuan Lin,
- IEEE Transactions on Computers, Vol. 52, Issue 12
Arrangement in a network for passing control of distributed data between network nodes for optimized client access based on locality
patent, December 2009
- Turner, Bryan C.; Toebes, John
- US Patent Document 7,634,566
Cross-Product Refactoring Apparatus and Method
patent-application, June 2010
- Huang, Wei; Klicnik, Vladimir; Lo, Grace Hai Yan
- US Patent Application 12/339615; 20100162225
System, apparatus and methods to implement high-speed network analyzers
patent, November 2015
- Ezick, James; Lethin, Richard A.; Ros-Giralt, Jordi
- US Patent Document 9,185,020
Parallel Sparse Matrix-Matrix Multiplication and Indexing: Implementation and Experiments
journal, January 2012
- Buluç, Aydin; Gilbert, John R.
- SIAM Journal on Scientific Computing, Vol. 34, Issue 4
Systems and methods for detecting malicious network content
patent, September 2014
- Staniford, Stuart Gresley; Aziz, Ashar
- US Patent Document 8,850,571
Two Fast Algorithms for Sparse Matrices: Multiplication and Permuted Transposition
journal, September 1978
- Gustavson, Fred G.
- ACM Transactions on Mathematical Software, Vol. 4, Issue 3
Method of, system for, and computer program product for minimizing loop execution time by optimizing block/tile sizes
patent, September 1999
- Megiddo, Nimrod; Sarkar, Vivek
- US Patent Document 5,953,531
Intrusion detection signature analysis using regular expressions and logical operators
patent, September 2004
- Shanklin, Steven D.; Bernhard, Thomas E.; Lathem, Gerald S.
- US Patent Document 6,792,546
System and method for optimizing operations via dataflow analysis
patent, February 2007
- Scales, Daniel J.
- US Patent Document 7,185,327