Abstract: A link controller that is capable of asymmetric network traffic multiplexing. A typical link controller treats all provisioned links as being equal (i.e., traffic is symmetrically multiplexed or distributed between all provisioned links) except when a link failure is detected. Our link controller is capable of modifying the multiplexing behavior of the link controller based on a wide range of parameters including but not limited to link characteristics, network traffic type, source and/or destination address, link saturation and overall network load.

Abstract: An intrusion protection system that fuses a network instrumentation classification with a packet payload signature matching system. Each of these kinds of systems is independently capable of being effectively deployed as an anomaly detection system. By employing sensor fusion techniques to combine the instrumentation classification approach with the signature matching approach, the present invention provides an intrusion protection system that is uniquely capable of detecting both well known and newly developed threats while having an extremely low false positive rate.