公开(公告)号：US09331992B2

公开(公告)日：2016-05-03

申请号：US13967208

申请日：2013-08-14

Applicant: Dell Software Inc.

Inventor： Clifford Lee Hannel ,  Anthony May

IPC: G06F17/30 ,  H04L29/06 ,  G06F21/62

CPC classification number: H04L63/105 ,  G06F21/6227 ,  H04L63/0272 ,  H04L63/0428 ,  H04L63/0471 ,  H04L63/08 ,  H04L63/20

Abstract: A scalable access filter that is used together with others like it in a virtual private network to control access by users at clients in the network to information resources provided by servers in the network. Each access filter uses a local copy of an access control data base to determine whether an access request is made by a user. Each user belongs to one or more user groups and each information resource belongs to one or more information sets. Access is permitted or denied according to access policies which define access in terms of the user groups and information sets. The first access filter in the path performs the access check, encrypts and authenticates the request; the other access filters in the path do not repeat the access check. The interface used by applications to determine whether a user has access to an entity is now an SQL entity. The policy server assembles the information needed for the response to the query from various information sources, including source external to the policy server.

Abstract translation: 可扩展访问过滤器，与虚拟专用网络中的其他人一起使用，以控制网络中客户端的用户对网络中的服务器提供的信息资源的访问。 每个访问过滤器使用访问控制数据库的本地副本来确定用户是否进行访问请求。 每个用户属于一个或多个用户组，每个信息资源属于一个或多个信息集。 根据访问策略允许或拒绝访问，这些访问策略根据用户组和信息集来定义访问。 路径中的第一个访问过滤器执行访问检查，对请求进行加密和验证; 路径中的其他访问过滤器不重复访问检查。 应用程序用于确定用户是否可以访问实体的界面现在是SQL实体。 策略服务器将来自各种信息源的查询响应所需的信息组合起来，包括策略服务器外部的源。

公开(公告)号：US09288060B1

公开(公告)日：2016-03-15

申请号：US14073823

申请日：2013-11-06

Applicant: Dell Software Inc.

Inventor： Jan Henrik Jonsson

IPC: G06F21/00 ,  H04L9/32

CPC classification number: H04L9/3247 ,  H04L63/126 ,  H04L63/168 ,  H04W12/06 ,  H04W12/10

Abstract: In one embodiment, a method includes enrolling a supplicant device as an authentication factor for a user. The enrolling includes storing a public key of an asymmetric key pair generated by an authentication application on the supplicant device. The method also includes receiving, from an access device, a request to access a service using an identity of the user. In addition, the method includes, responsive to the receiving, publishing an authentication code to the access device. The method further includes receiving an authentication package from the authentication application without contacting the authentication application. The authentication package includes a digital signature of the authentication code. The method additionally includes validating the digital signature using the public key. Moreover, the method includes, responsive to a determination that the validating is successful, allowing the access device to access the service.

Abstract translation: 在一个实施例中，一种方法包括将请求者设备注册为用户的认证因子。 注册包括将由认证应用生成的非对称密钥对的公开密钥存储在请求者设备上。 该方法还包括从访问设备接收使用用户身份访问服务的请求。 此外，该方法包括响应于接收向认证设备发布认证码。 所述方法还包括在不接触所述认证应用的情况下从所述认证应用接收认证包。 认证包包括认证码的数字签名。 该方法另外包括使用公钥验证数字签名。 此外，该方法包括响应于验证成功的确定，允许访问设备访问该服务。

公开(公告)号：US09231767B2

公开(公告)日：2016-01-05

申请号：US14581717

申请日：2014-12-23

Applicant: Dell Software Inc.

Inventor： Sijie Yu

IPC: H04L29/06 ,  H04L9/32 ,  G06Q10/10 ,  H04L12/58 ,  G06F17/30

CPC classification number: H04L67/06 ,  G06F17/30011 ,  G06F17/3025 ,  G06F17/30253 ,  G06F17/30528 ,  G06F17/30598 ,  G06F17/30705 ,  G06F17/30867 ,  G06F21/554 ,  G06F21/606 ,  G06F2221/2119 ,  G06Q10/107 ,  H04L9/3247 ,  H04L51/12

Abstract: Systems and methods for identifying content in electronic messages are provided. An electronic message may include certain content. The content is detected and analyzed to identify any metadata. The metadata may include a numerical signature characterizing the content. A thumbprint is generated based on the numerical signature. The thumbprint may then be compared to thumbprints of previously received messages. The comparison allows for classification of the electronic message as spam or not spam.

公开(公告)号：US09215241B2

公开(公告)日：2015-12-15

申请号：US14472234

申请日：2014-08-28

Applicant: Dell Software Inc.

Inventor： Boris Yanovsky ,  Scott Eikenberry

IPC: G06F11/00 ,  G06F12/14 ,  G06F12/16 ,  G08B23/00 ,  H04L29/06 ,  G06F21/55

CPC classification number: H04L63/1416 ,  G06F17/30876 ,  G06F21/552 ,  H04L51/22 ,  H04L63/1408 ,  H04L63/1425

Abstract: Information concerning a plurality of identified threats provided by a plurality of preselected sources is stored in memory. An e-mail message may be received over a communication network. The received e-mail message is separated into a plurality of components. The stored information is searched to identify a reputation score associated with each of the plurality of components. It is then determined whether the e-mail is a threat based on the identified reputation score of each of the plurality of components. The determination is sent to a designated recipient.

Abstract translation: 关于由多个预先选择的源提供的多个识别的威胁的信息被存储在存储器中。 可以通过通信网络接收电子邮件消息。 接收到的电子邮件消息被分成多个组件。 搜索存储的信息以识别与多个组件中的每一个相关联的信誉评分。 然后，基于所识别的多个组件中的每一个的信誉分数来确定电子邮件是否是威胁。 确定将发送给指定的收件人。

公开(公告)号：US20150341264A1

公开(公告)日：2015-11-26

申请号：US14816900

申请日：2015-08-03

Applicant: Dell Software Inc.

Inventor： Jonathan J. Oliver ,  David A. Koblas

IPC: H04L12/741 ,  H04L12/933 ,  H04L29/06

CPC classification number: H04L45/74 ,  H04L29/12066 ,  H04L29/12132 ,  H04L47/40 ,  H04L49/15 ,  H04L51/12 ,  H04L61/1511 ,  H04L61/1552 ,  H04L63/101 ,  H04L63/1466 ,  H04L63/1483 ,  H04L69/22

Abstract: A technique for determining a boundary IP address is disclosed. The technique includes processing a header to extract candidate IP address, locating a gateway IP address, and selecting the boundary IP address based on the location of the gateway IP address.

Abstract translation: 公开了一种用于确定边界IP地址的技术。 该技术包括处理报头以提取候选IP地址，定位网关IP地址，以及基于网关IP地址的位置来选择边界IP地址。

公开(公告)号：US09195823B1

公开(公告)日：2015-11-24

申请号：US14153607

申请日：2014-01-13

Applicant: Dell Software Inc.

Inventor： Alessandro Binotto ,  Anton Gostev ,  Ivan Sergeevich Andreyev ,  Agafonov Artyom

IPC: G06F3/00 ,  G06F21/54 ,  G06F9/54

CPC classification number: G06F21/54 ,  G06F9/54 ,  G06F9/545 ,  G06F21/51 ,  G06F2209/542 ,  G06F2221/2101 ,  G06F2221/2141 ,  G06F2221/2149

Abstract: A system for detecting creation of a program instance includes an interceptor routine that obtains a parameter corresponding to a characteristic of a program instance and an interceptor module that can be injected into a native operating system process. In certain examples, the interceptor module can replace an address of a selected routine in an address table with an address to the interceptor routine, such that the native operating system process can call the interceptor routine in place of the selected routine. Additionally, the system can include a comparison module that compares the parameter to a set of identified programs to determine whether the program instance corresponds to at least one of the identified programs. The system can also include a security module that can modify execution of the program instance based at least in part on a determination that the program instance corresponds to at least one identified program.

Abstract translation: 用于检测程序实例的创建的系统包括获取对应于程序实例的特性的参数的拦截器例程和可以被注入到本机操作系统进程的拦截器模块。 在某些示例中，拦截器模块可以使用拦截器例程的地址替换地址表中的选定例程的地址，从而本地操作系统进程可以调用拦截器例程来代替所选择的例程。 另外，该系统可以包括比较模块，该比较模块将参数与一组所识别的程序进行比较，以确定程序实例是否对应于所识别的程序中的至少一个。 该系统还可以包括可以至少部分地基于确定程序实例对应于至少一个所识别的程序来修改程序实例的执行的安全模块。

公开(公告)号：US09183272B1

公开(公告)日：2015-11-10

申请号：US14073822

申请日：2013-11-06

Applicant: Dell Software Inc.

Inventor： Jan Henrik Jonsson ,  Debbie M. Peabody ,  Aleksey Mikhailovich Bazhenov

IPC: G06F17/00 ,  G06F17/30

CPC classification number: G06F17/30592 ,  G06F17/30292 ,  G06F17/30389 ,  G06F17/30418 ,  G06F17/30424 ,  G06F17/30477 ,  G06F17/30563 ,  G06F17/30864 ,  G06F17/30982

Abstract: In one embodiment, a method includes defining a slice of a dimensional database. The slice includes at least one dimension and at least one measurement and is expressable as a table. The method further includes building, in a structured query language (SQL) dialect, a single query that queries the slice and one or more non-dimensional databases. The SQL dialect represents the at least one dimension, the at least one measurement, and data attributes of the one or more non-dimensional databases. In addition, the method includes parsing the single query. The parsing includes generating a dimensional query for the dimensional database and a non-dimensional query for each of the one or more non-dimensional databases. Furthermore, the method includes executing the dimensional query on the dimensional database. Moreover, the method includes, for each non-dimensional database of the one or more non-dimensional databases, executing the non-dimensional query on the non-dimensional database.

Abstract translation: 在一个实施例中，一种方法包括定义维数据库的切片。 切片包括至少一个维度和至少一个测量值，并且可表示为表格。 该方法还包括以结构化查询语言（SQL）方言构建查询片和一个或多个非维数据库的单个查询。 SQL方言表示一个或多个非维数据库的至少一个维度，至少一个测量值和数据属性。 此外，该方法包括解析单个查询。 解析包括为维度数据库生成维度查询和为一个或多个非维数据库中的每一个生成非维度查询。 此外，该方法包括在维数据库上执行维度查询。 此外，对于一个或多个非维数据库的每个非维数据库，该方法包括在非维数据库上执行无量纲查询。

公开(公告)号：US09098624B1

公开(公告)日：2015-08-04

申请号：US13713424

申请日：2012-12-13

Applicant: Dell Software Inc.

Inventor： Steven Eric Feuerstein ,  Leonid Khukhlovich

IPC: G06F9/44 ,  G06F11/36

CPC classification number: G06F11/3624

Abstract: A method for accessing variables in an application is described. The method includes accessing application source code and parsing the application source code to identify a set of variables. For each variable from the set of variables, the method can include determining a variable type of the variable. In response to determining that the variable type is a complex variable, the method can include parsing the complex variable, which can include repeating the method for each variable of the complex variable. In response to determining that the variable is associated with a database, the method can include resolving a variable name and determining whether the variable exists in a data dictionary associated with the database. The method can further include determining metadata associated with the variable based, at least in part, on the variable type. The variable type and metadata of the variable can then be presented to a user.

Abstract translation: 描述了一种在应用程序中访问变量的方法。 该方法包括访问应用程序源代码和解析应用程序源代码以识别一组变量。 对于变量集合中的每个变量，该方法可以包括确定变量的变量类型。 响应于确定变量类型是复杂变量，该方法可以包括解析复变量，其可以包括对复数变量的每个变量重复该方法。 响应于确定变量与数据库相关联，该方法可以包括解析变量名称并确定该变量是否存在于与数据库相关联的数据字典中。 该方法还可以包括至少部分地基于变量类型确定与该变量相关联的元数据。 然后可以将变量的变量类型和元数据呈现给用户。

公开(公告)号：US09077583B2

公开(公告)日：2015-07-07

申请号：US14047562

申请日：2013-10-07

Applicant: Dell Software Inc.

Inventor： Peter E. Ghostine

IPC: H04L29/06 ,  H04L29/08 ,  H04L12/58 ,  H04W8/30 ,  H04W48/08 ,  H04W76/00

CPC classification number: H04L29/06047 ,  H04L51/046 ,  H04L67/327 ,  H04W8/30 ,  H04W48/08 ,  H04W76/40

Abstract: A system for provisioning, allocating, and managing virtual and physical desktop computers in an enterprise network computing environment allows for these physical and desktop computers to be grouped logically based on personnel, organizational, or networking efficiencies without regard to the hardware or server that will ultimately run the virtual machine terminal once it is accessed. A connection broker connects incoming connections to one desktop in a desktop group, based on information relating to that incoming connection.

公开(公告)号：US08898136B1

公开(公告)日：2014-11-25

申请号：US14010314

申请日：2013-08-26

Applicant: Dell Software Inc.

Inventor： Ariel Nissim Weil ,  Douglas Chrystall ,  Patrick Joseph O'Keeffe

IPC: G06F17/30

CPC classification number: G06F17/30306

Abstract: A database statement categorization system can enable DBAs or other users to more easily find tunable database statements by categorizing the database statements. The database categorization system can analyze a DBMS to identify the types of database statements executed on the DBMS and can then categorize the statements automatically, outputting the categorization for presentation to a DBA (or other user). This categorization can advantageously separate less relevant statements that warrant less tuning or investigation from more relevant statements that may have a measurable impact on the performance of the database. By allowing users to focus on statements that are more likely to warrant attention, in certain embodiments the database categorization system streamlines the tuning process.

Abstract translation: 数据库语句分类系统可以使DBA或其他用户通过对数据库语句进行分类来更轻松地查找可调参数数据库语句。 数据库分类系统可以分析DBMS以识别在DBMS上执行的数据库语句的类型，然后可以自动对语句进行分类，将分类显示给DBA（或其他用户）。 这种分类可以有利地将较不相关的声明分开，这些声明可能减少可能对数据库性能产生可测量影响的更相关语句的调整或调查。 通过允许用户专注于更有可能引起关注的语句，在某些实施例中，数据库分类系统简化了调整过程。