Abstract: The present invention relates to methods, network devices, and machine-readable media for an integrated environment for a method of environment security validation through controlled computer network exploitation. A set of parameters is received from an operator over the network. Based on these parameters an attack campaign is performed on the environment. In the course of the campaign, vulnerable hardware and software in the attacked network are identified. In another scenario, vulnerable hardware and software are mitigated until vendors provide official patches.

Abstract: The present invention relates to methods, network devices, and machine-readable media for an integrated environment for a method of environment security validation through controlled computer network exploitation. A set of parameters is received from an operator over the network. Based on these parameters an attack campaign is performed on the environment. In the course of the campaign, vulnerable hardware and software in the attacked network are identified. In another scenario, vulnerable hardware and software are mitigated until vendors provide official patches.

Abstract: In systems and methods of detecting malicious software, a software agent comprising at least one scan module is assembled by a source system and is transferred by the source system to a target system. In response to a connection request from the software agent a connection is established to the software agent and a file is received from the target system. At the source system, a static analysis is performed on the transferred file to generate a static threat score, and a dynamic analysis is performed to generate a dynamic threat score. Based on the static threat score and the dynamic threat score an aggregate threat score is generated for the transferred file.

Abstract: An electronic device (for example, a NIC card) can perform a base function (for example, “dumb” NIC functionality) and also has specialized hardware for performing an enhanced function (for example, TCP offload functionality). Initially, the electronic device is capable of performing the base function but the enhanced function is disabled. The electronic device is priced to be price competitive with other devices that perform the base function but not the enhanced function. By this pricing, large numbers of the electronic devices are disseminated into the marketplace. Once an electronic device has been disseminated and supplied to a user, the user can make an additional payment to have the enhanced function enabled. In one embodiment, a user who pays for the enhanced functionality accesses a web-based license manager and receives a license key. The license key is usable to write a capabilities code into the electronic device that enables the enhanced function.

Abstract: An electronic device (for example, a NIC card) can perform a base function (for example, “dumb” NIC functionality) and also has specialized hardware for performing an enhanced function (for example, TCP offload functionality). Initially, the electronic device is capable of performing the base function but the enhanced function is disabled. The electronic device is priced to be price competitive with other devices that perform the base function but not the enhanced function. By this pricing, large numbers of the electronic devices are disseminated into the marketplace. Once an electronic device has been disseminated and supplied to a user, the user can make an additional payment to have the enhanced function enabled. In one embodiment, a user who pays for the enhanced functionality accesses a web-based license manager and receives a license key. The license key is usable to write a capabilities code into the electronic device that enables the enhanced function.

Abstract: A network node that implements a distributed TCP/IP network communication protocol stack, with the protocol stack including a TCP layer and an IP layer. The TCP layer includes a TCP management unit and a TCP data path unit, and the IP layer includes an IP management unit and an IP data path unit. The network node comprises a network host configured with the TCP management unit and the IP management unit, and at least one I/O adapter coupled to the network host and configured with the TCP data path unit and the IP data path unit. In this manner, the TCP data path unit and the IP data path unit are distributed onto the I/O adapter.