Patents by Inventor Shalabh Mohan
Shalabh Mohan has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 11949707Abstract: Isolating suspicious email links is described. An email security service receives an email that includes a link that refers to an external resource. A first suspicious link determination is performed to determine whether the link is suspicious. If the link is suspicious, the link is rewritten to refer to the email security and the email is delivered to the recipient. A request from a client device is received responsive to the link being opened. A second suspicious link determination is performed to determine whether the link is suspicious. If the link is suspicious, an interstitial page is transmitted to the client device that includes an option that, when selected, causes the first link to be opened in a remote browser isolation session.Type: GrantFiled: July 28, 2023Date of Patent: April 2, 2024Assignee: CLOUDFARE, INC.Inventors: Philip Syme, Michelle Chen, Jeremy Michael Eckman, Michael J. Flester, Shalabh Mohan, Timothy Obezuk
-
Publication number: 20140279320Abstract: A method and apparatus for allocating and pricing virtual resources is provided. According to one aspect, pricing information is obtained for a plurality of virtual resources offered by a plurality of providers. A set of selected virtual resources is determined for a first customer. An expected quantity is determined for at least one virtual resource for the first customer. A fixed charge is determined based on the pricing information, the set of selected virtual resources and at least one expected quantity. At least one unit rate is determined for at least one virtual resource based on the pricing information. The first customer is provided access to the set of selected virtual resources during a billing period, wherein the fixed charge is billed for the billing period. An overflow charge, if any, is determined the at least one unit rate and an actual usage during the billing period.Type: ApplicationFiled: March 15, 2013Publication date: September 18, 2014Applicant: BRACKET COMPUTING, INC.Inventors: James A. Scheinblum, Shalabh Mohan, Jason A. Lango, Thomas B. Gillis, Robert K. Van Zant, Jr.
-
Patent number: 8087082Abstract: A data processing apparatus, comprising at least one processor and a traffic monitor comprising logic which, when executed by the processor, causes the processor to perform: creating, using forward Domain Name System (DNS) lookups, a mapping of domain names to Internet Protocol (IP) addresses; determining whether a particular domain in the mapping requires handling data traffic to or from the particular domain by performing a particular action; based on the mapping, determining one or more IP addresses that are associated with the particular domain; generating policy for a firewall that instructs the firewall to perform the particular action upon receiving a particular request; wherein the particular request specifies a particular IP address that is within the particular domain.Type: GrantFiled: December 3, 2010Date of Patent: December 27, 2011Assignee: Ironport Systems, Inc.Inventors: Eric Bloch, Shalabh Mohan, Rajendraprasad R. Pagaku, Doug Moore, Mark Krentel, Bruce Thompson, Julian R. Elischer, Brandon L. Golm
-
Publication number: 20110078309Abstract: A data processing apparatus, comprising at least one processor and a traffic monitor comprising logic which, when executed by the processor, causes the processor to perform: creating, using forward Domain Name System (DNS) lookups, a mapping of domain names to Internet Protocol (IP) addresses; determining whether a particular domain in the mapping requires handling data traffic to or from the particular domain by performing a particular action; based on the mapping, determining one or more IP addresses that are associated with the particular domain; generating policy for a firewall that instructs the firewall to perform the particular action upon receiving a particular request; wherein the particular request specifies a particular IP address that is within the particular domain.Type: ApplicationFiled: December 3, 2010Publication date: March 31, 2011Inventors: Eric Bloch, Shalabh Mohan, Rajendraprasad R. Pagaku, Doug Moore, Mark Krentel, Bruce Thompson, J.R. Elischer, Brandon L. Golm
-
Patent number: 7849507Abstract: A data processing apparatus can perform HTTP traffic monitoring and filtering of HTTP requests from clients and responses from servers. Example apparatus comprises a processor; a first network interface to a protected network; a second network interface to an external network; a core hypertext transfer protocol (HTTP) proxy coupled to the processor and coupled to a content cache, wherein the HTTP proxy is configured to receive an HTTP request from a client computer in the protected network, send the request to a network resource in the external network on behalf of the client, and receive an HTTP response from the network resource on behalf of the client computer; and a plurality of spyware scanning engines (SSEs), wherein each of the SSEs is coupled to stored content signatures, and wherein each of the SSEs is configured to detect a particular kind of malicious software in an HTTP response.Type: GrantFiled: April 30, 2007Date of Patent: December 7, 2010Assignee: Ironport Systems, Inc.Inventors: Eric Bloch, Shalabh Mohan, Rajendraprasad R. Pagaku, Doug Moore, Mark Krentel, Bruce Thompson, Julian R. Elischer, Brandon L. Golm
-
Patent number: 7849502Abstract: A data processing apparatus can perform HTTP traffic monitoring and filtering of HTTP requests from clients and responses from servers. Example apparatus comprises a processor, a first network interface to a protected network, a second network interface to an external network, and a traffic monitor having an address-domain name database, a firewall rules manager, and a DNS snooper. The traffic monitor accesses a blacklist and can perform receiving, from a client computer, a request to access a resource in the external network; blocking the request to the resource when a user agent of the client is in the blacklist as malicious software or when a file extension in a response to the request is in the blacklist; requesting, from a web reputation service, and receiving a reputation score indicating a reputation of the resource; blocking sending the request to the resource when the reputation is below a specified threshold.Type: GrantFiled: April 30, 2007Date of Patent: December 7, 2010Assignee: Ironport Systems, Inc.Inventors: Eric Bloch, Shalabh Mohan, Rajendraprasad R. Pagaku, Doug Moore, Mark Krentel, Bruce Thompson, Julian R. Elischer, Brandon L. Golm
-
Publication number: 20080082662Abstract: Access to network resources is controlled based on reputation of the network resources. In an embodiment, a data processing apparatus is coupled to a first protected network and to a second network, and comprises logic configured to cause receiving a client request that includes a particular network resource identifier; retrieving, from a database that associates a plurality of network resource indicators with attributes of the network resource identifiers, values of particular attributes that are associated with the particular network resource identifier; determining a reputation score value for the particular network resource identifier based on the particular attributes; and performing a responsive action for the client request based on the reputation score value.Type: ApplicationFiled: May 15, 2007Publication date: April 3, 2008Inventors: Richard Dandliker, Shalabh Mohan, Ambika Gadre, Jed Lau