Patents by Inventor Ronald A. Dempster

Ronald A. Dempster has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Systems and methods for determining characteristics of a network and enforcing policy
    Patent number: 8578002
    Abstract: A packet transmitted on a network is read and decoded. A network device and its operating system are identified by analyzing the decoded packet. If more than one operating system is identified from the decoded packet, the operating system is selecting by comparing confidence values assigned to the operating systems identified. A service running on the network device is identified from the decoded packet or subsequent packets that are read, decoded and analyzed. The network topology of a network is determined by reading, decoding, and analyzing a plurality of packets. A flow between two network devices is determined by reading, decoding, and analyzing a plurality of packets. Vulnerabilities are assigned to operating systems and services identified by reading, decoding, and analyzing packets. Network configuration policy is enforced on operating systems and services identified by reading, decoding, and analyzing packets.
    Type: Grant
    Filed: December 16, 2010
    Date of Patent: November 5, 2013
    Assignee: Sourcefire, Inc.
    Inventors: Martin Roesch, Ronald A. Dempster, Andrew Baker, Eric Gustafson
  • Systems and methods for determining characteristics of a network and enforcing policy
    Patent number: 7949732
    Abstract: A packet transmitted on a network is read and decoded. A network device and its operating system are identified by analyzing the decoded packet. If more than one operating system is identified from the decoded packet, the operating system is selecting by comparing confidence values assigned to the operating systems identified. A service running on the network device is identified from the decoded packet or subsequent packets that are read, decoded and analyzed. The network topology of a network is determined by reading, decoding, and analyzing a plurality of packets. A flow between two network devices is determined by reading, decoding, and analyzing a plurality of packets. Vulnerabilities are assigned to operating systems and services identified by reading, decoding, and analyzing packets. Network configuration policy is enforced on operating systems and services identified by reading, decoding, and analyzing packets.
    Type: Grant
    Filed: May 12, 2004
    Date of Patent: May 24, 2011
    Assignee: Sourcefire, Inc.
    Inventors: Martin Roesch, Ronald A. Dempster, Andrew Baker, Eric Gustafson
  • Systems and methods for determining characteristics of a network based on flow analysis
    Patent number: 7885190
    Abstract: A packet transmitted on a network is read and decoded. A network device and its operating system are identified by analyzing the decoded packet. If more than one operating system is identified from the decoded packet, the operating system is selecting by comparing confidence values assigned to the operating systems identified. A service running on the network device is identified from the decoded packet or subsequent packets that are read, decoded and analyzed. The network topology of a network is determined by reading, decoding, and analyzing a plurality of packets. A flow between two network devices is determined by reading, decoding, and analyzing a plurality of packets. Vulnerabilities are assigned to operating systems and services identified by reading, decoding, and analyzing packets. Network configuration policy is enforced on operating systems and services identified by reading, decoding, and analyzing packets.
    Type: Grant
    Filed: May 12, 2004
    Date of Patent: February 8, 2011
    Assignee: Sourcefire, Inc.
    Inventors: Martin Roesch, Ronald A. Dempster
  • Systems and methods for determining characteristics of a network
    Patent number: 7801980
    Abstract: A packet transmitted on a network is read and decoded. A network device and its operating system are identified by analyzing the decoded packet. If more than one operating system is identified from the decoded packet, the operating system is selecting by comparing confidence values assigned to the operating systems identified. A service running on the network device is identified from the decoded packet or subsequent packets that are read, decoded and analyzed. The network topology of a network is determined by reading, decoding, and analyzing a plurality of packets. A flow between two network devices is determined by reading, decoding, and analyzing a plurality of packets. Vulnerabilities are assigned to operating systems and services identified by reading, decoding, and analyzing packets. Network configuration policy is enforced on operating systems and services identified by reading, decoding, and analyzing packets.
    Type: Grant
    Filed: May 12, 2004
    Date of Patent: September 21, 2010
    Assignee: Sourcefire, Inc.
    Inventors: Martin Roesch, Ronald A. Dempster, Judy Novak
  • Systems and methods for identifying the services of a network
    Patent number: 7730175
    Abstract: A packet transmitted on a network is read and decoded. A network device and its operating system are identified by analyzing the decoded packet. If more than one operating system is identified from the decoded packet, the operating system is selecting by comparing confidence values assigned to the operating systems identified. A service running on the network device is identified from the decoded packet or subsequent packets that are read, decoded and analyzed. The network topology of a network is determined by reading, decoding, and analyzing a plurality of packets. A flow between two network devices is determined by reading, decoding, and analyzing a plurality of packets. Vulnerabilities are assigned to operating systems and services identified by reading, decoding, and analyzing packets. Network configuration policy is enforced on operating systems and services identified by reading, decoding, and analyzing packets.
    Type: Grant
    Filed: May 12, 2004
    Date of Patent: June 1, 2010
    Assignee: Sourcefire, Inc.
    Inventors: Martin Roesch, Ronald A. Dempster
  • Systems and methods for determining characteristics of a network and assessing confidence
    Patent number: 7496662
    Abstract: A packet transmitted on a network is read and decoded. A network device and its operating system are identified by analyzing the decoded packet. If more than one operating system is identified from the decoded packet, the operating system is selecting by comparing confidence values assigned to the operating systems identified. A service running on the network device is identified from the decoded packet or subsequent packets that are read, decoded and analyzed. The network topology of a network is determined by reading, decoding, and analyzing a plurality of packets. A flow between two network devices is determined by reading, decoding, and analyzing a plurality of packets. Vulnerabilities are assigned to operating systems and services identified by reading, decoding, and analyzing packets. Network configuration policy is enforced on operating systems and services identified by reading, decoding, and analyzing packets.
    Type: Grant
    Filed: May 12, 2004
    Date of Patent: February 24, 2009
    Assignee: Sourcefire, Inc.
    Inventors: Martin Roesch, Ronald A. Dempster
  • Systems and methods for identifying the client applications of a network
    Patent number: 7467205
    Abstract: A packet transmitted on a network is read and decoded. A network device and its operating system are identified by analyzing the decoded packet. If more than one operating system is identified from the decoded packet, the operating system is selecting by comparing confidence values assigned to the operating systems identified. A client application running on the network device is identified from the decoded packet or subsequent packets that are read, decoded and analyzed. The network topology of a network is determined by reading, decoding, and analyzing a plurality of packets. A flow between two network devices is determined by reading, decoding, and analyzing a plurality of packets. Vulnerabilities are assigned to operating systems and client applications identified by reading, decoding, and analyzing packets. Network configuration policy is enforced on operating systems and client applications identified by reading, decoding, and analyzing packets.
    Type: Grant
    Filed: November 14, 2005
    Date of Patent: December 16, 2008
    Assignee: Sourcefire, Inc.
    Inventors: Ronald A. Dempster, Nigel Houghton