公开(公告)号：JP2004355624A

公开(公告)日：2004-12-16

申请号：JP2004156293

申请日：2004-05-26

Applicant: Internatl Business Mach Corp ,  インターナショナル・ビジネス・マシーンズ・コーポレーションInternational Business Maschines Corporation

Inventor： KEOHANE SUSANN ,  MCBREARTY GERALD F ,  MULLEN SHAWN P ,  MURILLO JESSICA KELLEY ,  SHIEH JOHNNY M

IPC: G06F13/10 ,  G06F3/06 ,  G06F9/445 ,  G06F12/00 ,  G06F15/16 ,  G06F15/177 ,  H04L12/24 ,  H04L29/08

CPC classification number: H04L41/0806 ,  G06F9/4416 ,  H04L41/0893 ,  H04L67/1097

Abstract: PROBLEM TO BE SOLVED: To provide a method for configuring a set of devices relating to a prescribed machine connected to a storage area network.
SOLUTION: Initial program load firmware and network adapter firmware of each machine on the storage area network are modified to query a storage area network appliance for lists of devices. The storage area network appliance can be identified by a world wide name and can store lists of boot devices, root volume group devices, primary devices, and secondary devices for each machine on the storage area network. The storage area network appliance waits for reception of a query and returns the appropriate list of devices on the basis of the query type and/or boot type. The boot type for a machine can be set to normal boot, maintenance boot, or installation boot.
COPYRIGHT: (C)2005,JPO&NCIPI

公开(公告)号：AT488945T

公开(公告)日：2010-12-15

申请号：AT08736291

申请日：2008-04-16

Applicant: IBM

Inventor： KEOHANE SUSANN ,  MCBREARTY GERALD ,  MULLEN SHAWN ,  MURILLO JESSICA ,  SHIEH JOHNNY

IPC: H04L29/06 ,  H04L12/22

Abstract: A computer implemented method, apparatus, and computer program product for port scan protection. A reply data packet having a modified transmission control protocol header is generated to form a modified reply data packet, in response to detecting a port scan. The modified reply data packet will elicit a response from a recipient of the modified data packet. The reply data packet is sent to a first Internet protocol address associated with the port scan. A second Internet protocol address is identified from a header of the response to the modified reply data packet. The second Internet protocol address is an actual Internet protocol address of a source of the port scan. All network traffic from the second Internet protocol address may be blocked to prevent an attack on any open ports from the source of the port scan.

公开(公告)号：SG143953A1

公开(公告)日：2008-07-29

申请号：SG2004025359

申请日：2004-05-03

Applicant: IBM

Inventor： KEOHANE SUSANN ,  MCBREARTY GERALD FRANCIS ,  MULLEN SHAWN PATRICK ,  MURILLO JESSICA KELLEY ,  SHIEH JOHNNY MENG-HAN

IPC: G06F3/06 ,  G06F13/10 ,  G06F9/445 ,  G06F12/00 ,  G06F15/16 ,  G06F15/177 ,  H04L12/24 ,  H04L29/08

Abstract: METHOD, APPARATUS, AND PROGRAM FOR PERFORMING BOOT, MAINTENANCE, OR INSTALL OPERATIONS ON A STORAGE AREA NETWORK A mechanism is provided for configuring a set of devices for a given machine attached to a storage area network (102). The initial program load firmware and network adapter firmware for each machine (104-108) on the storage area network (102) are modified to query a storage area network appliance (120) for lists of devices. The storage area network appliance (120) may be identified by a world wide name and may store lists of boot devices, root volume group devices, primary devices, and secondary devices for each machine on the storage area network. The storage area network appliance (120) then listens for queries and returns the appropriate list of devices based on query type and/or boot type. The boot type for a machine may be set to normal boot, maintenance boot, or install boot.