Patents by Inventor Kieran G. Sherlock

Kieran G. Sherlock has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Method and apparatus for rate limiting
    Patent number: 8849993
    Abstract: A method and apparatus for a network monitor internals mechanism, which serves to translate packet data into multiple concurrent streams of encoded network event data, to contribute to enterprise management, reporting, and global mechanisms for aggregating monitors at a centralized aggregation point, and to facilitate rate limiting techniques because such monitors are not in control (i.e. cannot back pressure flow) is provided.
    Type: Grant
    Filed: March 28, 2011
    Date of Patent: September 30, 2014
    Assignee: Intel Corporation
    Inventors: Geoffrey Cooper, Kieran G. Sherlock, Mark Hoy
  • METHOD AND APPARATUS FOR RATE LIMITING
    Publication number: 20110173342
    Abstract: A method and apparatus for a network monitor internals mechanism, which serves to translate packet data into multiple concurrent streams of encoded network event data, to contribute to enterprise management, reporting, and global mechanisms for aggregating monitors at a centralized aggregation point, and to facilitate rate limiting techniques because such monitors are not in control (i.e. cannot back pressure flow) is provided.
    Type: Application
    Filed: March 28, 2011
    Publication date: July 14, 2011
    Applicant: McAfee, Inc.
    Inventors: Geoffrey Cooper, Kieran G. Sherlock, Mark Hoy
  • Method and apparatus for rate limiting
    Patent number: 7917647
    Abstract: A method and apparatus for a network monitor internals mechanism, which serves to translate packet data into multiple concurrent streams of encoded network event data, to contribute to enterprise management, reporting, and global mechanisms for aggregating monitors at a centralized aggregation point, and to facilitate rate limiting techniques because such monitors are not in control (i.e. cannot back pressure flow) is provided.
    Type: Grant
    Filed: June 2, 2003
    Date of Patent: March 29, 2011
    Assignee: McAfee, Inc.
    Inventors: Geoffrey Cooper, Kieran G. Sherlock, Mark Hoy
  • Efficient evaluation of rules
    Patent number: 7143439
    Abstract: A method and apparatus uses a proprietary algorithm for organizing network security policy rules in a way that minimizes the number of rules considered when determining the set of rules applicable to a given protocol event.
    Type: Grant
    Filed: June 8, 2001
    Date of Patent: November 28, 2006
    Assignee: Security, Inc.
    Inventors: Geoffrey Cooper, Kieran G. Sherlock, Bob Shaw, Luis Valente
  • Automated generation of an english language representation of a formal network security policy specification
    Patent number: 7047288
    Abstract: A system and method for generating a human readable, e.g. English language, description of a formal specification of network security policy that allows non-technical staff within a user's organization to comprehend the policy. The description is simple enough to be understood, yet captures salient details of the policy.
    Type: Grant
    Filed: June 8, 2001
    Date of Patent: May 16, 2006
    Assignee: Securify, Inc.
    Inventors: Geoffrey Cooper, Kieran G. Sherlock, Bob Shaw, Luis Valente
  • Credential/condition assertion verification optimization
    Patent number: 6871284
    Abstract: A method and apparatus ascertain which credential and which condition both from a network security policy best describe, respectively, information about initiator and target principals involved in an interaction, and tests performed on a state of an associated protocol event.
    Type: Grant
    Filed: June 14, 2001
    Date of Patent: March 22, 2005
    Assignee: Securify, Inc.
    Inventors: Geoffrey Cooper, Kieran G. Sherlock, Bob Shaw, Luis Valente
  • Method and apparatus for rate limiting
    Publication number: 20040042470
    Abstract: A method and apparatus for a network monitor internals mechanism, which serves to translate packet data into multiple concurrent streams of encoded network event data, to contribute to enterprise management, reporting, and global mechanisms for aggregating monitors at a centralized aggregation point, and to facilitate rate limiting techniques because such monitors are not in control (i.e. cannot back pressure flow) is provided.
    Type: Application
    Filed: June 2, 2003
    Publication date: March 4, 2004
    Inventors: Geoffrey Cooper, Kieran G. Sherlock, Mark Hoy
  • Method and apparatus for enterprise management
    Publication number: 20040015579
    Abstract: A method and apparatus for a network monitor internals mechanism, which serves to translate packet data into multiple concurrent streams of encoded network event data, to contribute to enterprise management, reporting, and global mechanisms for aggregating monitors at a centralized aggregation point, and to facilitate rate limiting techniques because such monitors are not in control (i.e. cannot back pressure flow) is provided.
    Type: Application
    Filed: June 2, 2003
    Publication date: January 22, 2004
    Inventors: Geoffrey Cooper, Kieran G. Sherlock, Luis Valente, Harry Richardson
  • System and method for security policy
    Publication number: 20030061506
    Abstract: A network security policy monitoring system and method for performing network and security assessments based on system-wide policy. Real network traffic is analyzed to identify abnormal traffic patterns, system vulnerabilities, and incorrect configuration of computer systems on a network, by listening on a network, logging events, and taking action.
    Type: Application
    Filed: June 14, 2001
    Publication date: March 27, 2003
    Inventors: Geoffrey Cooper, Bob Shaw, Luis Valente, Kieran G. Sherlock
  • User interface for a security policy system and method
    Publication number: 20020093527
    Abstract: A user interface for a network security policy monitoring system and method that performs network and security assessments based on system-wide policy, whereby real network traffic is analyzed to identify abnormalities, vulnerabilities, and incorrect configurations by listening on a network, logging events, and taking action.
    Type: Application
    Filed: April 5, 2001
    Publication date: July 18, 2002
    Inventors: Kieran G. Sherlock, Geoffrey Cooper, Luis Valente, Jose Amador, Paul Wang, Robert A. Shaw, Kevin Cornwall
  • Automated generation of an english language representation of a formal network security policy
    Publication number: 20020091942
    Abstract: A system and method for generating a human readable, e.g. English language, description of a formal specification of network security policy that allows non-technical staff within a user's organization to comprehend the policy. The description is simple enough to be understood, yet captures salient details of the policy.
    Type: Application
    Filed: June 8, 2001
    Publication date: July 11, 2002
    Inventors: Geoffrey Cooper, Kieran G. Sherlock, Bob Shaw, Luis Valente
  • Efficient evaluation of rules
    Publication number: 20020069200
    Abstract: A method and apparatus uses a proprietary algorithm for organizing network security policy rules in a way that minimizes the number of rules considered when determining the set of rules applicable to a given protocol event.
    Type: Application
    Filed: June 8, 2001
    Publication date: June 6, 2002
    Inventors: Geoffrey Cooper, Kieran G. Sherlock, Bob Shaw, Luis Valente
  • Credential/condition assertion verification optimization
    Publication number: 20020053033
    Abstract: A method and apparatus ascertain which credential and which condition both from a network security policy best describe, respectively, information about initiator and target principals involved in an interaction, and tests performed on a state of an associated protocol event.
    Type: Application
    Filed: June 14, 2001
    Publication date: May 2, 2002
    Inventors: Geoffrey Cooper, Kieran G. Sherlock, Bob Shaw, Luis Valente