Abstract: Techniques for replacing an advertisement in a webpage from a website with another advertisement are disclosed. A response including the webpage is intercepted in a network device deployed in an in-line fashion, preferably at a data traffic point along a network. When it is determined that the webpage includes an advertisement that is replaceable, a preferable advertisement more correlated to the interests of a user is embedded in data packets to replace those for the original advertisement. Subsequently, the preferable advertisement is served when the webpage is displayed.

Abstract: A method of identifying a distributed denial of service attack is described in which a rate profile is determined, where the rate profile corresponds to information transfer rates at which information is received from a network. A burst magnitude threshold based on this rate profile is then established. A burst duration profile characterizing periods of time during which the information transfer rate exceeds this burst magnitude threshold is also calculated, and a burst duration threshold is then defined based upon this burst duration profile. A distributed denial of service attack is identified when the information transfer rate exceeds the burst magnitude threshold for a period of time exceeding the burst duration threshold.

Abstract: A network device is deployed in an in-line fashion, preferably at a data traffic point along a network. Depending on the constraints of data packets in a data packet sequence from a website, the network device is configured to modify some of the data packets or fabricate new data packets to embed the selected data in the data packet sequence. By keeping the headers of the data packets substantially identical, changes to a data packet or addition of a new data packet become transparent to users as well as to the website.

Abstract: Techniques for replacing an advertisement in a webpage from a website with another advertisement are disclosed. A response including the webpage is intercepted in a network device deployed in an in-line fashion, preferably at a data traffic point along a network. When it is determined that the webpage includes an advertisement that is replaceable, a preferable advertisement more correlated to the interests of a user is embedded in data packets to replace those for the original advertisement. Subsequently, the preferable advertisement is served when the webpage is displayed.

Abstract: Techniques for embedding selected data in a data packet sequence are disclosed. Accordingly to one embodiment, a network device is deployed in an in-line fashion, preferably at a data traffic point along a network. Depending on the constraints of data packets in a data packet sequence from a website, the network device is configured to modify some of the data packets or fabricate new data packets to embed the selected data in the data packet sequence. By keeping the headers of the data packets substantially identical, changes to a data packet or addition of a new data packet become transparent to users as well as to the website.

Abstract: A method of adaptively classifying information using a binary tree comprises establishing a binary tree including a set of binary sequences each representing one or more network addresses. Once network traffic is received having identifiers describing network traffic sources, the identifiers are correlated to binary sequences within the binary tree. A revision metric is formed based on this correlating, and the binary tree is then revised according to this revision metric. A method of blocking a DDOS attack comprises establishing a binary tree including a set of binary sequences, each of these binary sequences representing one or more network addresses. When network traffic is received having identifiers describing network traffic sources, the identifiers are correlated to binary sequences within the binary tree. Once a DDOS attack notification signal is received, a selected binary tree path within the binary tree is identified as a low cost blocking path within the binary tree.