Patents Assigned to Crossbeam Systems, Inc.
  • Patent number: 8402540
    Abstract: A flow processing facility, which uses a set of artificial neurons for pattern recognition, such as a self-organizing map, in order to provide security and protection to a computer or computer system supports unified threat management based at least in part on patterns relevant to a variety of types of threats that relate to computer systems, including computer networks. Flow processing for switching, security, and other network applications, including a facility that processes a data flow to address patterns relevant to a variety of conditions are directed at internal network security, virtualization, and web connection security. A flow processing facility for inspecting payloads of network traffic packets detects security threats and intrusions across accessible layers of the IP-stack by applying content matching and behavioral anomaly detection techniques based on regular expression matching and self-organizing maps.
    Type: Grant
    Filed: October 24, 2007
    Date of Patent: March 19, 2013
    Assignee: Crossbeam Systems, Inc.
    Inventors: Harsh Kapoor, Moisey Akerman, Stephen D. Justus, JC Ferguson, Yevgeny Korsunsky, Paul S. Gallo, Charles Ching Lee, Timothy M. Martin, Chunsheng Fu, Weidong Xu
  • Patent number: 8135657
    Abstract: A flow processing facility, which uses a set of artificial neurons for pattern recognition, such as a self-organizing map, in order to provide security and protection to a computer or computer system supports unified threat management based at least in part on patterns relevant to a variety of types of threats that relate to computer systems, including computer networks. Flow processing for switching, security, and other network applications, including a facility that processes a data flow to address patterns relevant to a variety of conditions are directed at internal network security, virtualization, and web connection security. A flow processing facility for inspecting payloads of network traffic packets detects security threats and intrusions across accessible layers of the IP-stack by applying content matching and behavioral anomaly detection techniques based on regular expression matching and self-organizing maps.
    Type: Grant
    Filed: August 24, 2011
    Date of Patent: March 13, 2012
    Assignee: Crossbeam Systems, Inc.
    Inventors: Harsh Kapoor, Moisey Akerman, Stephen D. Justus, John C. Ferguson, Yevgeny Korsunsky, Paul S. Gallo, Charles Ching Lee, Timothy M. Martin, Chunsheng Fu, Weidong Xu
  • Patent number: 8046465
    Abstract: A method and system for distributing flows between a multiple processors. The flows can be received from an external source such as a network, by a front-end processor that recognizes the flow and the associated request, and identifies at least one internal applications processor to process the request/flow. The front-end processor utilizes a flow scheduling vector related to the identified applications processor(s), and the flow scheduling vector can be based on intrinsic data from the applications processor(s) that can include CPU utilization, memory utilization, packet loss, and queue length or buffer occupation. In some embodiments, applications processors can be understood to belong to a group, wherein applications processors within a group can be configured identically. A flow schedule vector can be computed for the different applications processor groups.
    Type: Grant
    Filed: July 1, 2005
    Date of Patent: October 25, 2011
    Assignee: Crossbeam Systems, Inc.
    Inventors: John C. Ferguson, Yevgeny Korsunsky
  • Patent number: 8010469
    Abstract: Methods and systems for flow processing and switching, security, and other network applications, including a facility that processes a data flow to address patterns relevant to a variety of conditions are directed at internal network security, virtualization, and web connection security are described. Such flow processing facilities may be used for inspecting network traffic packet payloads to detect security threats and intrusions across accessible layers of the network IP stack by applying content matching and behavioral anomaly detection techniques based on regular expression matching and self-organizing maps. Exposing threats and intrusions within packet payload at or near real-time rates enhances network security from both external and internal sources while ensuring security policy is rigorously applied to data and system resources.
    Type: Grant
    Filed: October 29, 2007
    Date of Patent: August 30, 2011
    Assignee: Crossbeam Systems, Inc.
    Inventors: Harsh Kapoor, Moisey Akerman, Stephen D. Justus, JC Ferguson, Yevgeny Korsunsky, Paul S. Gallo, Charles Ching Lee, Timothy M. Martin, Chunsheng Fu, Weidong Xu
  • Patent number: 7979368
    Abstract: A flow processing facility, which uses a set of artificial neurons for pattern recognition, such as a self-organizing map, in order to provide security and protection to a computer or computer system supports unified threat management based at least in part on patterns relevant to a variety of types of threats that relate to computer systems, including computer networks. Flow processing for switching, security, and other network applications, including a facility that processes a data flow to address patterns relevant to a variety of conditions are directed at internal network security, virtualization, and web connection security. A flow processing facility for inspecting payloads of network traffic packets detects security threats and intrusions across accessible layers of the IP-stack by applying content matching and behavioral anomaly detection techniques based on regular expression matching and self-organizing maps.
    Type: Grant
    Filed: October 29, 2007
    Date of Patent: July 12, 2011
    Assignee: Crossbeam Systems, Inc.
    Inventors: Harsh Kapoor, Moisey Akerman, Stephen D. Justus, John C. Ferguson, Yevgeny Korsunsky, Paul S. Gallo, Charles Ching Lee, Timothy M. Martin, Chunsheng Fu, Weidong Xu
  • Patent number: 7836443
    Abstract: An apparatus and method to distribute applications and services throughout a network, including switch functionality and the ability to apply applications and services to received data according to subscriber profiles. Network Processor Modules (NPMs) receive and recognize data flows from subscribers, extract profile information for the subscribers, and utilize flow scheduling techniques to forward the data to Flow Processor Modules (FPMs). The FPMs utilize resident applications to process data received from the NPMs. A Control Processor Module facilitates applications processing and maintains connections to the NPMs, FPMs, local and remote storage devices, and a Management Server (MS) module that can monitor the health and maintenance of the various modules. The MS can download and otherwise control applications on the FPMs to provide an open architecture for downloading, executing, modifying, and otherwise managing applications.
    Type: Grant
    Filed: July 1, 2005
    Date of Patent: November 16, 2010
    Assignee: Crossbeam Systems, Inc.
    Inventors: Moisey Akerman, Stephen D. Justus
  • Publication number: 20100042565
    Abstract: A mezzanine adapter based data processing facility provides in-depth data analysis that is presented as a digest of advanced statistics and network measures including latency data, content analysis, bidirectional flow related characteristics, multiple flow related statistics over a count of connections or over a period of time, and the like.
    Type: Application
    Filed: August 11, 2009
    Publication date: February 18, 2010
    Applicant: Crossbeam Systems, Inc.
    Inventor: Moisey AKERMAN
  • Publication number: 20060143499
    Abstract: A method and system for distributing flows between a multiple processors. The flows can be received from an external source such as a network, by a front-end processor that recognizes the flow and the associated request, and identifies at least one internal applications processor to process the request/flow. The front-end processor utilizes a flow scheduling vector related to the identified applications processor(s), and the flow scheduling vector can be based on intrinsic data from the applications processor(s) that can include CPU utilization, memory utilization, packet loss, and queue length or buffer occupation. In some embodiments, applications processors can be understood to belong to a group, wherein applications processors within a group can be configured identically. A flow schedule vector can be computed for the different applications processor groups.
    Type: Application
    Filed: July 1, 2005
    Publication date: June 29, 2006
    Applicant: Crossbeam Systems, Inc.
    Inventors: J.C. Ferguson, Yevgeny Korsunsky
  • Publication number: 20060010207
    Abstract: An apparatus and method to distribute applications and services in and throughout a network. The apparatus includes the functionality of a switch with the ability to apply applications and services to received data according to respective subscriber profiles. Front-end processors, or Network Processor Modules (NPMs), receive and recognize data flows from subscribers, extract profile information for the respective subscribers, utilize flow scheduling techniques to forward the data to applications processors, or Flow Processor Modules (FPMs). The FPMs utilize resident applications to process data received from the NPMs. A Control Processor Module (CPM) facilitates applications processing and maintains connections to the NPMs, FPMs, local and remote storage devices, and a Management Server (MS) module that can monitor the health and maintenance of the various modules.
    Type: Application
    Filed: July 1, 2005
    Publication date: January 12, 2006
    Applicant: Crossbeam Systems, Inc.
    Inventors: Moisey Akerman, Stephen Justus
  • Publication number: 20020165947
    Abstract: An apparatus and method to distribute applications and services in and throughout a network. The apparatus includes the functionality of a switch with the ability to apply applications and services to received data according to respective subscriber profiles. Front-end processors, or Network Processor Modules (NPMs), receive and recognize data flows from subscribers, extract profile information for the respective subscribers, utilize flow scheduling techniques to forward the data to applications processors, or Flow Processor Modules (FPMs). The FPMs utilize resident applications to process data received from the NPMS. A Control Processor Module (CPM) facilitates applications processing and maintains connections to the NPMs, FPMs, local and remote storage devices, and a Management Server (MS) module that can monitor the health and maintenance of the various modules.
    Type: Application
    Filed: February 21, 2001
    Publication date: November 7, 2002
    Applicant: Crossbeam Systems, Inc.
    Inventors: Moisey Akerman, Stephen D. Justus