公开(公告)号：US09654446B2

公开(公告)日：2017-05-16

申请号：US14793640

申请日：2015-07-07

Applicant: Dell Software Inc.

Inventor： Thomas E. Raffill ,  Shunhui Zhu ,  Roman Yanovsky ,  Boris Yanovsky ,  John Gmuender

IPC: G06F17/30 ,  H04L29/06 ,  G06F7/02 ,  G06F3/0481

CPC classification number: G06F17/30598 ,  G06F3/0481 ,  G06F7/02 ,  G06F17/30011 ,  G06F17/3053 ,  G06F17/30595 ,  G06F17/3071 ,  G06F17/30867 ,  G06F17/30985 ,  G06F2207/025 ,  G06N5/02 ,  H04L63/0236 ,  H04L63/0263

Abstract: Some embodiments of on-the-fly pattern recognition with configurable bounds have been presented. In one embodiment, a pattern matching engine is configured based on user input, which may include values of one or more user configurable bounds on searching. Then the configured pattern matching engine is used to search for a set of features in an incoming string. A set of scores is updated based on the presence of any of the features in the string while searching for the features. Each score may indicate a likelihood of the content of the string being in a category. The search is terminated if the end of the string is reached or if the user configurable bounds are met. After terminating the search, the scores are output.

公开(公告)号：US20170163604A1

公开(公告)日：2017-06-08

申请号：US15435917

申请日：2017-02-17

Applicant: DELL SOFTWARE INC.

Inventor： Aleksandr Dubrovsky ,  John Everett Gmuender ,  Boris Yanovsky ,  Roman Yanovsky ,  Shunhui Zhu

IPC: H04L29/06 ,  H04L12/801

CPC classification number: H04L63/0245 ,  H04L12/2874 ,  H04L47/34 ,  H04L47/365 ,  H04L63/0254 ,  H04L63/1416 ,  H04L63/1425 ,  H04L63/145 ,  H04L67/06

Abstract: A method and apparatus for identifying data patterns of a file are described herein. In one embodiment, an exemplary process includes, but is not limited to, receiving a data packet of a data stream containing a file segment of a file originated from an external host and destined to a protected host of a local area network (LAN), the file being transmitted via multiple file segments contained in multiple data packets of the data stream, and performing a data pattern analysis on the received data packet to determine whether the received data packet contains a predetermined data pattern, without waiting for a remainder of the data stream to arrive. Other methods and apparatuses are also described.

公开(公告)号：US09582756B2

公开(公告)日：2017-02-28

申请号：US14096866

申请日：2013-12-04

Applicant: Dell Software Inc.

Inventor： Aleksandr Dubrovsky ,  Justin Michael Brady ,  Roman Yanovsky ,  Boris Yanovsky

IPC: G06N5/00 ,  G06F1/00 ,  G06N5/02 ,  G06F21/55 ,  H04L29/06

CPC classification number: G06N5/02 ,  G06F17/30958 ,  G06F21/552 ,  G06N5/00 ,  H04L63/02 ,  H04L63/1416

Abstract: Techniques for data pattern analysis using deterministic finite automaton are described herein. In one embodiment, a number of transitions from a current node to one or more subsequent nodes representing one or more sequences of data patterns is determined, where each of the current node and subsequent nodes is associated with a deterministic finite automaton (DFA) state. A data structure is dynamically allocated for each of the subsequent nodes for storing information associated with each of the subsequent nodes, where data structures for the subsequent nodes are allocated in an array maintained by a data structure corresponding to the current node if the number of transitions is greater than a predetermined threshold. Other methods and apparatuses are also described.

Abstract translation: 本文描述了使用确定性有限自动机进行数据模式分析的技术。 在一个实施例中，确定从当前节点到表示一个或多个数据模式序列的一个或多个后续节点的多个转换，其中当前节点和后续节点中的每一个与确定性有限自动机（DFA）状态相关联。 为每个后续节点动态分配数据结构，用于存储与每个后续节点相关联的信息，其中后续节点的数据结构被分配在由与当前节点对应的数据结构维护的阵列中，如果转换次数 大于预定阈值。 还描述了其它方法和装置。

公开(公告)号：US20160323323A1

公开(公告)日：2016-11-03

申请号：US15209125

申请日：2016-07-13

Applicant: Dell Software Inc.

Inventor： Boris Yanovsky ,  Roman Yanovsky

IPC: H04L29/06

CPC classification number: H04L63/205 ,  H04L41/0893 ,  H04L63/101 ,  H04L63/104 ,  H04L63/20

Abstract: A method and apparatus for centralized policy programming and distributive policy enforcement is described. A method comprises centrally maintaining a plurality of policy definitions for one or more subscribers, generating policy configurations using the plurality of policy definitions, each of the policy configurations being specific to one of the plurality of policy definitions, and disseminating the policy configurations to the appropriate ones of the subscribers' networks.

Abstract translation: 描述了用于集中策略编程和分配策略实施的方法和装置。 一种方法包括集中地维护一个或多个订户的多个策略定义，使用多个策略定义生成策略配置，每个策略配置特定于多个策略定义之一，并将策略配置传播到适当的 用户网络中的一个。

公开(公告)号：US20160182597A1

公开(公告)日：2016-06-23

申请号：US15057747

申请日：2016-03-01

Applicant: DELL SOFTWARE INC.

Inventor： Roman Yanovsky ,  Igor Korsunsky ,  John Gmuender ,  Boris Yanovsky

IPC: H04L29/06 ,  H04L29/08

CPC classification number: H04L65/608 ,  G06F16/00 ,  G06F16/4393 ,  H04L65/605 ,  H04L65/80 ,  H04L67/10

Abstract: Method and apparatus for multimedia content filtering are described herein. In one embodiment, an example of a network access device, in response to multimedia content transmitted from a source over a first network and destined to a destination over a second network, opens the multimedia content within the network access device interfacing the first and second networks. A content rating operation is performed on the opened multimedia content to determine whether the multimedia content should be transmitted to the destination over the second network. Other methods and apparatuses are also described.

Abstract translation: 本文描述了用于多媒体内容过滤的方法和装置。 在一个实施例中，网络接入设备的示例响应于通过第一网络从源发送并且通过第二网络发往目的地的多媒体内容，打开在与第一和第二网络接口的网络接入设备内的多媒体内容 。 对打开的多媒体内容执行内容评级操作，以确定是否应通过第二网络将多媒体内容发送到目的地。 还描述了其它方法和装置。

公开(公告)号：US20150358286A1

公开(公告)日：2015-12-10

申请号：US14793640

申请日：2015-07-07

Applicant: Dell Software Inc.

Inventor： Thomas E. Raffill ,  Shunhui Zhu ,  Roman Yanovsky ,  Boris Yanovsky ,  John Gmuender

IPC: H04L29/06 ,  G06F17/30

CPC classification number: G06F17/30598 ,  G06F3/0481 ,  G06F7/02 ,  G06F17/30011 ,  G06F17/3053 ,  G06F17/30595 ,  G06F17/3071 ,  G06F17/30867 ,  G06F17/30985 ,  G06F2207/025 ,  G06N5/02 ,  H04L63/0236 ,  H04L63/0263

Abstract: Some embodiments of on-the-fly pattern recognition with configurable bounds have been presented. In one embodiment, a pattern matching engine is configured based on user input, which may include values of one or more user configurable bounds on searching. Then the configured pattern matching engine is used to search for a set of features in an incoming string. A set of scores is updated based on the presence of any of the features in the string while searching for the features. Each score may indicate a likelihood of the content of the string being in a category. The search is terminated if the end of the string is reached or if the user configurable bounds are met. After terminating the search, the scores are output.

公开(公告)号：US20170147565A1

公开(公告)日：2017-05-25

申请号：US15403047

申请日：2017-01-10

Applicant: DELL SOFTWARE INC.

Inventor： Thomas E. Raffill ,  Shunhui Zhu ,  Roman Yanovsky ,  Boris Yanovsky ,  John Gmuender

IPC: G06F17/28 ,  G06F17/30 ,  G06F17/27

CPC classification number: G06F17/2863 ,  G06F16/90344 ,  G06F17/2705 ,  G06F17/28

Abstract: Some embodiments of an efficient string search have been presented. In one embodiment, a string of bytes representing content written in a non-delimited language is received, wherein the content has been classified into a predetermined category. In a single pass through the string of bytes, a set of N-grams is searched for simultaneously. Statistical information on occurrences of the N-grams, if any, in the string of bytes is collected. In some embodiments, a model is generated based on the statistical information, where the model is usable by a content filter to classify content.

公开(公告)号：US20170134409A1

公开(公告)日：2017-05-11

申请号：US15414321

申请日：2017-01-24

Applicant: Dell Software Inc.

Inventor： Aleksandr Dubrovsky ,  Roman Yanovsky ,  Scott Aaron More ,  Boris Yanovsky

IPC: H04L29/06

CPC classification number: H04L63/1416 ,  G06F21/55 ,  G06F21/56 ,  G06F21/562 ,  G06F21/564 ,  H04L47/34 ,  H04L63/0245 ,  H04L63/0254 ,  H04L63/1408 ,  H04L63/1433 ,  H04L63/145 ,  H04L69/22

Abstract: A method and an apparatus to perform multiple packet payload analysis have been disclosed. In one embodiment, the method includes receiving a plurality of data packets, each of the plurality of data packets containing a portion of a data pattern, determining whether each of the plurality of data packets is out of order, and making and storing a local copy of the corresponding data packet if the corresponding data packet is out of order. Other embodiments have been claimed and described.

公开(公告)号：US20170093894A1

公开(公告)日：2017-03-30

申请号：US15285106

申请日：2016-10-04

Applicant: DELL SOFTWARE INC.

Inventor： Aleksandr Dubrovsky ,  Igor Korsunsky ,  Roman Yanovsky ,  Boris Yanovsky

IPC: H04L29/06

CPC classification number: H04L63/1416 ,  G06F21/56 ,  G06F21/561 ,  G06F21/562 ,  G06F2221/2119 ,  H04L63/1425 ,  H04L63/145

Abstract: Techniques for notification of reassembly-free file scanning are described herein. According to one embodiment, a first request for accessing a document provided by a remote node is received from a client. In response to the first request, it is determined whether a second request previously for accessing the document of the remote node indicates that the requested document from the remote node contains offensive data. If the requested document contains offensive data, a message is returned to the client, without accessing the requested document of the remote node, indicating that the requested document is not delivered to the client.

公开(公告)号：US09553883B2

公开(公告)日：2017-01-24

申请号：US14818215

申请日：2015-08-04

Applicant: Dell Software Inc.

Inventor： Aleksandr Dubrovsky ,  Roman Yanovsky ,  Scott Aaron More ,  Boris Yanovsky

IPC: H04L29/06 ,  H04L12/801 ,  G06F21/56 ,  G06F21/55

CPC classification number: H04L63/1416 ,  G06F21/55 ,  G06F21/56 ,  G06F21/562 ,  G06F21/564 ,  H04L47/34 ,  H04L63/0245 ,  H04L63/0254 ,  H04L63/1408 ,  H04L63/1433 ,  H04L63/145 ,  H04L69/22

Abstract: A method and an apparatus to perform multiple packet payload analysis have been disclosed. In one embodiment, the method includes receiving a plurality of data packets, each of the plurality of data packets containing a portion of a data pattern, determining whether each of the plurality of data packets is out of order, and making and storing a local copy of the corresponding data packet if the corresponding data packet is out of order. Other embodiments have been claimed and described.

Abstract translation: 已经公开了执行多个分组有效载荷分析的方法和装置。 在一个实施例中，所述方法包括接收多个数据分组，所述多个数据分组中的每一个包含数据模式的一部分，确定所述多个数据分组中的每一个是否失序，以及制作和存储本地副本 如果对应的数据分组出现故障，则对应的数据分组。 已经要求和描述了其它实施例。