公开(公告)号：US10469451B2

公开(公告)日：2019-11-05

申请号：US15396440

申请日：2016-12-31

Applicant: Intel Corporation

Inventor： Kapil Sood ,  Mesut A. Ergin ,  John R. Fastabend ,  Shinae Woo ,  Jeffrey B. Shaw ,  Brian J. Skerry

IPC: H04L29/06 ,  G06F21/55

Abstract: Technologies for distributed detection of security anomalies include a computing device to establish a trusted relationship with a security server. The computing device reads one or more packets of at least one of an inter-virtual network function network or an inter-virtual network function component network in response to establishing the trusted relationship and performs a security threat assessment of the one or more packets. The computing device transmits the security threat assessment to the security server.

公开(公告)号：US20190004929A1

公开(公告)日：2019-01-03

申请号：US15635867

申请日：2017-06-28

Applicant: Intel Corporation

Inventor： John R. Fastabend ,  Eric W. Multanen ,  Patrick L. Connor ,  Calin Gherghe

IPC: G06F11/36 ,  G06F12/0897 ,  G06F12/0875

Abstract: Devices and methods for debugging software or detecting malicious software on a compute node are described herein. A device can include an interface to a central processing unit (CPU) of a compute node. The device can include processing circuitry. During execution of a software application of the CPU, the processing circuitry can process CPU operational metrics received over the interface, wherein values of the CPU operational metrics vary with execution of the software application. Based on the values, the processing circuitry can determine an operational status of the software application and provide an indicator of an error condition of the software application responsive to detection of an error based on any criteria. Other embodiments are also described.

公开(公告)号：US20180234516A1

公开(公告)日：2018-08-16

申请号：US15878966

申请日：2018-01-24

Applicant: Intel Corporation

Inventor： Daniel Daly ,  John R. Fastabend ,  Matthew Vick ,  Brian J. Skerry ,  Marco Varlese ,  Jing Mark Chen ,  Danny Y. Zhou

IPC: H04L29/08 ,  H04L12/931 ,  H04L29/06

CPC classification number: H04L67/2804 ,  H04L49/70 ,  H04L69/22 ,  H04L69/324

Abstract: Devices and techniques for accelerated packet processing are described herein. The device can match an action to a portion of a network data packet and accelerate the packet-processing pipeline for the network data packet through the machine by processing the action.

公开(公告)号：US20170111382A1

公开(公告)日：2017-04-20

申请号：US15396440

申请日：2016-12-31

Applicant: Intel Corporation

Inventor： Kapil Sood ,  Mesut A. Ergin ,  John R. Fastabend ,  Shinae Woo ,  Jeffrey B. Shaw ,  Brian J. Skerry

IPC: H04L29/06

CPC classification number: H04L63/0272 ,  G06F21/554 ,  H04L63/0428 ,  H04L63/061 ,  H04L63/1408 ,  H04L63/1425 ,  H04L63/1433 ,  H04L63/20

Abstract: Technologies for distributed detection of security anomalies include a computing device to establish a trusted relationship with a security server. The computing device reads one or more packets of at least one of an inter-virtual network function network or an inter-virtual network function component network in response to establishing the trusted relationship and performs a security threat assessment of the one or more packets. The computing device transmits the security threat assessment to the security server.

公开(公告)号：USRE48411E1

公开(公告)日：2021-01-26

申请号：US16053289

申请日：2018-08-02

Applicant: INTEL CORPORATION

Inventor： Kapil Sood ,  Jeffrey B. Shaw ,  John R. Fastabend

IPC: H04L29/06 ,  H04L9/08 ,  H04L9/32

Abstract: Technologies for secure inter-virtual network function communication include a computing device to determine a cryptographic key for secure communication over at least one of an inter-virtual network function (VNF) network, an inter-virtual network function component (VNFC) network, or a VNF-VNFC network based on a security policy of the computing device; and. The computing device securely communicates over at least one of the inter-VNF, inter-VNFC, or VNF-VNFC network based on the determined cryptographic key.

公开(公告)号：US10432745B2

公开(公告)日：2019-10-01

申请号：US15878966

申请日：2018-01-24

Applicant: Intel Corporation

Inventor： Daniel Daly ,  John R. Fastabend ,  Matthew Vick ,  Brian J. Skerry ,  Marco Varlese ,  Jing Mark Chen ,  Danny Y. Zhou

IPC: H04L29/08 ,  H04L29/06 ,  H04L12/931

Abstract: Devices and techniques for accelerated packet processing are described herein. The device can match an action to a portion of a network data packet and accelerate the packet-processing pipeline for the network data packet through the machine by processing the action.

公开(公告)号：US11010273B2

公开(公告)日：2021-05-18

申请号：US15635867

申请日：2017-06-28

Applicant: Intel Corporation

Inventor： John R. Fastabend ,  Eric W. Multanen ,  Patrick L. Connor ,  Calin Gherghe

IPC: G06F11/00 ,  G06F11/36 ,  G06F12/0897 ,  G06F12/0875 ,  G06F12/126 ,  G06F11/30 ,  G06F11/32 ,  G06F21/52 ,  G06F11/07

Abstract: Devices and methods for debugging software or detecting malicious software on a compute node are described herein. A device can include an interface to a central processing unit (CPU) of a compute node. The device can include processing circuitry. During execution of a software application of the CPU, the processing circuitry can process CPU operational metrics received over the interface, wherein values of the CPU operational metrics vary with execution of the software application. Based on the values, the processing circuitry can determine an operational status of the software application and provide an indicator of an error condition of the software application responsive to detection of an error based on any criteria. Other embodiments are also described.