Abstract: A computerized device transmits an access request to a data communications device of a network in an attempt to access network resources within the network. The data communications device, in response and in real-time, transmits a challenge request to the computerized device that directs the computerized device to retrieve configuration, or posture, credentials associated with the computerized device. A policy server receives the challenge response and, based upon a real-time analysis of the posture credentials of the computerized device, determines a security state of the computerized device and either provides some level or denies the computerized device access to the network resources based upon the analysis of posture.

Abstract: A method and apparatus for real-time insertion of services into an IP telephony call session are disclosed. A client initiates a service request message to a second server. The service request message includes the client identity and a requested service available from a second server. The first server determines if the client is authorized to use the requested service. If the client is authorized to use the requested service, the second server delivers the requested service to the client.

Abstract: The invention describes a system and method for arranging to provide power to a power monitor device. The disclosure describes the system and method receiving a request for power for at least one device specified by a power monitor device. The disclosure describes receiving at least one proposal from an entity desiring to supply power according to the request for power. A best proposal of the at least one proposal is determined. And the system and method command the power monitor device to supply power in accordance with the best proposal.

Abstract: In a communications system, a network provides multiple physical paths for communicating packets between participants of communication sessions. During a communication session, elements of the network route packets such that the packets are separated for communication to a destination using multiple physical paths.

Abstract: A method for detecting an infective element in a network environment is provided that includes detecting, by a first computer, an infective element within a second computer. A signal is generated and communicated that identifies the second computer as being associated with the infective element. The signal includes an address associated with the second computer. The signal is received and, in response to the signal, a communicating capability of the second computer is disabled.

Abstract: The invention describes a system and method for arranging to provide power to a power monitor device. The disclosure describes the system and method receiving a request for power for at least one device specified by a power monitor device. The disclosure describes receiving at least one proposal from an entity desiring to supply power according to the request for power. A best proposal of the at least one proposal is determined. And the system and method command the power monitor device to supply power in accordance with the best proposal.

Abstract: According to one embodiment of the invention, a computerized method for addressing intrusion attacks directed at a computer includes receiving a data stream corresponding to a potential attack on the computer and calculating an event risk rating for the data stream. Calculating the event risk rating includes determining at least one component risk rating. In one embodiment, the component risk ratings are: a signature fidelity rating indicative of the likelihood the potential attack will affect the computer in the absence of knowledge regarding the computer, an attack relevance rating indicative of the relevance of the potential attack to the computer, and a target value rating indicative of the perceived value of the computer. The method also includes responding to the potential attack based on the calculated risk rating.

Abstract: A method and apparatus for real-time insertion of services into an IP telephony call session are disclosed. A client initiates a service request message to a second server. The service request message includes the client identity and a requested service available from a second server. The first server determines if the client is authorized to use the requested service. If the client is authorized to use the requested service, the second server delivers the requested service to the client.

Abstract: A method and apparatus for real-time insertion of services into an IP telephony call session are disclosed. A client initiates a service request message to a second server. The service request message includes the client identity and a requested service available from a second server. The first server determines if the client is authorized to use the requested service. If the client is authorized to use the requested service, the second server delivers the requested service to the client.

Abstract: The invention describes a system and method for arranging to provide power to a power monitor device. The disclosure describes the system and method receiving a request for power for at least one device specified by a power monitor device. The disclosure describes receiving at least one proposal from an entity desiring to supply power according to the request for power. A best proposal of the at least one proposal is determined. And the system and method command the power monitor device to supply power in accordance with the best proposal.

Abstract: A method for detecting an infective element in a network environment is provided that includes detecting, by a first computer, an infective element within a second computer. A signal is generated and communicated that identifies the second computer as being associated with the infective element. The signal includes an address associated with the second computer. The signal is received and, in response to the signal, a communicating capability of the second computer is disabled.

Abstract: A method for adaptively improving voice quality during a communication session includes monitoring voice quality parameters associated with a communication session at one or more network components of a communication network. At least one of the network components is selected to perform packet replication, if a value of the voice quality parameters deviates from a predetermined range. In accordance with a particular embodiment, replicated packets are transmitted from the selected network component along an alternate communication path. In accordance with another embodiment, an improvement in performance associated with transmission of the replicated communication packets along the alternate communication path is assessed. Transmission of the replicated communication packets may be discontinued if the improvement is below a predetermined minimum.

Abstract: A communication system includes an endpoint that performs codec selection based on at least one network parameter. In a particular embodiment, a communication session exchanges voice information, and the codec selection improves the overall voice quality of the communication session.

Abstract: A method and system for mapping a network domain provides a centralized repository for network information to support network devices, including an intrusion detection system. A domain mapping device includes an acquisition engine for acquiring network information, hypercube storage for storing network information, and a query engine for responding to queries from network devices for network information. The acquisition engine acquires network information by active scanning of network devices, passive scanning of network devices, polling of network devices, or receiving network information pushed from network devices. The network information includes device type, operating system, service and vulnerability information. The query engine provides network information in response to queries from network devices, such as intrusion detection devices that use the data to detect attacks on the vulnerabilities of the network.

Abstract: In a communications system, a network provides multiple physical paths for communicating packets between participants of communication sessions. During a communication session, elements of the network route packets such that the packets are separated for communication to a destination using multiple physical paths.

Abstract: A communications system provides packet-based communications between two or more remote devices. During the session, at least one of the devices may monitor quality parameters and request enhancement of the session based on those quality parameters. Responsive to the request, a DSP pool allocates DSP resources for the session and enhances packets for the communication session using the allocated DSP resources.

Abstract: A method and system for adaptive network security using intelligent packet analysis are provided. The method comprises monitoring network data traffic. The network data traffic is analyzed to assess network information. A plurality of analysis tasks are prioritized based upon the network information. The analysis tasks are to be performed on the monitored network data traffic in order to identify attacks upon the network.

Abstract: A method for detecting an infective element in a network environment is provided that includes detecting, by a first computer, an infective element within a second computer. A signal is generated and communicated that identifies the second computer as being associated with the infective element. The signal includes an address associated with the second computer. The signal is received and, in response to the signal, a communicating capability of the second computer is disabled.

Abstract: A method and system for adaptive network security using intelligent packet analysis are provided. The method comprises monitoring network data traffic. The network data traffic is analyzed to assess network information. A plurality of analysis tasks are prioritized based upon the network information. The analysis tasks are to be performed on the monitored network data traffic in order to identify attacks upon the network.

Abstract: A method and system for mapping a network domain provides a centralized repository for network information to support network devices, including an intrusion detection system. A domain mapping device includes an acquisition engine for acquiring network information, hypercube storage for storing network information, and a query engine for responding to queries from network devices for network information. The acquisition engine acquires network information by active scanning of network devices, passive scanning of network devices, polling of network devices, or receiving network information pushed from network devices. The network information includes device type, operating system, service and vulnerability information. The query engine provides network information in response to queries from network devices, such as intrusion detection devices that use the data to detect attacks on the vulnerabilities of the network.