Abstract: Systems and methods are described herein to provide for host virtual memory reconstitution.

Abstract: A tamper-proof access monitor monitors accesses by software executing on a host processor to memory-mapped regions of memory that control input/output resources.

Abstract: A heuristic agent in a tamper resistant partition monitors network traffic flow for undesirable worm scanning activity. If the undesired scanning activity is detected, the output of an associated network controller may be throttled or ultimately disabled from the network.

Abstract: Multiple traffic management nodes may be coupled with separate networks and with a connecting network. The traffic management nodes monitor and classify traffic passing through the connecting network. Current paths through the connecting network are identified and used to build detour paths through the connecting network using traffic management nodes as detour nodes. The detour paths may be shortened, thereby excluding the detour nodes from each detour path. The traffic management nodes and the detour paths may be used to create a traffic engineered system for traffic passing through the connecting network.

Abstract: A hash table randomly populated with byte patterns is used in finding the byte patterns in a sequence of bytes. A hash function is applied to information associated with a substring of the sequence of bytes to generate a key value. The key value is compared to the keys of the hash table, and if a match is found, the information associated with the substring is compared to corresponding information associated with a substring of a byte pattern stored in the hash table. If a match is found, the substring of the sequence of bytes is compared to the substring of the byte pattern. If a match is found, the substring is compared to the byte pattern.

Abstract: In one embodiment, a method is provided. The method of this embodiment provides receiving one or more packets that are addressed to an alternate IP (Internet Protocol) address and that include a LADLC (local application data link control) address in a system having an operating system-independent processor (“service processor”) associated with the alternate IP address and an alternate DLC address, and an embedded network stack (“ENS”) of the service processor associated with a primary IP address; performing filtering to determine if the LADLC address matches the alternate DLC address; and if the LADLC address matches the alternate DLC address, then replacing the alternate IP address of the one or more packets with the primary IP address, and forwarding the one or more packets to the ENS.

Abstract: Hardware correlation of software performance statistics. Software may gather data relating to performance of a hardware resource. A hardware component of the system of the hardware resource may obtain data relating to the performance of the hardware resource from a hardware component and the gathered software data, and correlate the software and hardware data. A level of correlation may be determined, and remedial action may be taken based on the correlation of the software and hardware data.

Abstract: A combination of more frequent and less frequent security monitoring may be used to defeat worm or virus attacks. At periodic intervals, a risk assessment scan may be implemented to determine whether or not a worm attack has occurred. Prior thereto, an intermediate detection by an anomaly detection agent may determine whether or not a worm attack may have occurred. If a potential worm attack may have occurred, intermediate action, such as throttling of traffic, may occur. Then, at the next risk assessment scan, a determination may be made as to whether the attack is actually occurring and, if so, more effective and performance altering techniques may be utilized to counter the attack.

Abstract: The present invention provides for a method of congestion control for multicast transmission that is entirely managed at the source of the transmission. The various types of filters as well as round trip time estimators (130) that are used in the invention to determine when the rate of the multicast transmission should be reduced to alleviate congestion. The source of the transmission adjusts the rate of transmission based on loss indications that the receivers would otherwise transmit.

Abstract: A technique for self-isolation of a network device that has been identified as potentially harmful. The network device may be isolated from the network except for an out-of-band communication channel that can be used for management purposes to restore or repair the device prior to the network connection being re-established.

Abstract: A system and method are provided to preserve the confidentiality and/or integrity of a sensitive communication from its source to its destination whether locally on the platform, between platforms, or even the same program over time.

Abstract: A system and method are provided to preserve the confidentiality and/or integrity of a sensitive communication from its source to its destination whether locally on the platform, between platforms, or even the same program over time.

Abstract: According to one embodiment a computer system is disclosed. The computer system includes a central processing unit (CPU), a memory control device coupled to the CPU, a main memory device coupled to the memory control device, a bus coupled to the memory control device, and one or more devices, coupled to the bus. A physical segment of the main memory device is remapped to a bus device region of the main memory for exclusive use by the one or more devices.

Abstract: A context-aware firewall and intrusion detection system receives a definition of a Protocol State Machine (PSM) that defines the expected behavior of any protocol (FTP, HTTP, etc.). The PSM provides rules for detecting flows that deviate from the defined protocol behavior and taking appropriate actions. PSMs are comprised of rule groups define behavior of a protocol. The rules include conditions and actions that may be executed if the conditions are satisfied, The actions include dynamically adding filters to be applied to the network flow, saving results for use in later executed rules, and activating and deactivating rules. Thus, these firewalls are capable of selective and intelligent Processing based on flow state information and control payload.

Abstract: An apparatus and method for a generic, extensible and efficient data manager for virtual peripheral component interconnect devices (VPCIDs). The apparatus includes a data manager and a data repository, where the data manager utilizes the data repository to maintain information for at least one virtual machine (VM). The VM data structure contains elements to associate the VM with zero or more instances of multiple VPCIDs.

Abstract: In some embodiments, a method includes generating a prefix trie for a set of patterns, generating a suffix trie for the set of patterns, and establishing respective links between nodes of the prefix trie and respective corresponding nodes of the suffix trie. In some embodiments, a method includes adding a suffix to a suffix tree, so that the suffix (which is at least a portion of a pattern) is represented in the tree by a path that begins at a first node and ends at a second node, and associating with at least the first node and the second node a pattern identifier that identifies the pattern.

Abstract: The present disclosure relates to the processing of a packet utilizing a generic rule based engine, and, more specifically, to the processing of a packet or stream of packets, which are transmitted across a network, utilizing a generic rule based engine that is part of a network processor.

Abstract: The present invention provides for a method of congestion control for multicast transmission that is entirely managed at the source of the transmission. The various types of filters as well as round trip time estimators (130) that are used in the invention to determine when the rate of the multicast transmission should be reduced to alleviate congestion.

Abstract: A fully automated method of providing network services on demand is disclosed. The method includes receiving a request for download traffic from a user and beginning transmission of the download traffic to the user. The user is provided with the option of requesting better service level if required for an extra cost. If the user experiences poor service quality, the user then submits a service request by simply clicking a button. The NHCC then automatically identifies the customer traffic, determines the service parameters for the download traffic. With a global view of the existing network topology and conditions, the NHCC determines if the incoming service level request can be accommodated. If the network can be provisioned to accommodate the request, the NHCC sends traffic provisioning requests to Smart Nodes. The download traffic quality then improves thereby providing the customer with better quality of service.

Abstract: A hash table randomly populated with byte patterns is used in finding the byte patterns in a sequence of bytes. A hash function is applied to information associated with a substring of the sequence of bytes to generate a key value. The key value is compared to the keys of the hash table, and if a match is found, the information associated with the substring is compared to corresponding information associated with a substring of a byte pattern stored in the hash table. If a match is found, the substring of the sequence of bytes is compared to the substring of the byte pattern. If a match is found, the substring is compared to the byte pattern.