Patents by Inventor Boris Yanovsky
Boris Yanovsky has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Publication number: 20140150082Abstract: A local gateway device receives email across the internet from a sender of the email and forwards it across the internet to an email filtering system. The email filtering system analyzes the email to determine whether it is spam, phishing or contains a virus and sends it back to the local gateway device along with the filtered determination. The local gateway device forwards the received email and the filtered determination to a local junk store which handles the email appropriately. For example, if the email has been determined to be spam, phishing or containing a virus, the junk store can quarantine the email and if the email has been determined to be non-spun and/or not phishing and/or not containing a virus, the junk store can forward the email to a local mail server for delivery.Type: ApplicationFiled: January 28, 2014Publication date: May 29, 2014Applicant: SONICWALL, INC.Inventors: Scott Eikenberry, John Gmuender, Akbal Singh Karlcut, Michael Carl Y. Uy, Boris Yanovsky
-
Publication number: 20140089249Abstract: Techniques for data pattern analysis using deterministic finite automaton are described herein. In one embodiment, a number of transitions from a current node to one or more subsequent nodes representing one or more sequences of data patterns is determined, where each of the current node and subsequent nodes is associated with a deterministic finite automaton (DFA) state. A data structure is dynamically allocated for each of the subsequent nodes for storing information associated with each of the subsequent nodes, where data structures for the subsequent nodes are allocated in an array maintained by a data structure corresponding to the current node if the number of transitions is greater than a predetermined threshold. Other methods and apparatuses are also described.Type: ApplicationFiled: December 4, 2013Publication date: March 27, 2014Applicant: SONICWALL, INC.Inventors: Aleksandr Dubrovsky, Justin Michael Brady, Roman Yanovsky, Boris Yanovsky
-
Patent number: 8676759Abstract: A continuous data backup using real time delta storage has been presented. A backup appliance receives a backup request from a backup agent running on a computing machine to back up data on the computing machine. The computing machine is communicatively coupled to the backup appliance. Then the backup appliance performs block-based real-time backup of the data on the computing machine. The backup appliance stores backup data of the computing machine in a computer-readable storage device in the backup appliance.Type: GrantFiled: September 30, 2009Date of Patent: March 18, 2014Assignee: SonicWALL, Inc.Inventors: Shunhui Zhu, Boris Yanovsky, William Dunn, Matthew W. Cotton
-
Patent number: 8671447Abstract: A local gateway device receives email across the internet from a sender of the email and forwards it across the internet to an email filtering system. The email filtering system analyzes the email to determine whether it is spam, phishing or contains a virus and sends it back to the local gateway device along with the filtered determination. The local gateway device forwards the received email and the filtered determination to a local junk store which handles the email appropriately. For example, if the email has been determined to be spam, phishing or containing a virus, the junk store can quarantine the email and if the email has been determined to be non-spun and/or not phishing and/or not containing a virus, the junk store can forward the email to a local mail server for delivery.Type: GrantFiled: June 8, 2011Date of Patent: March 11, 2014Assignee: SonicWALL, Inc.Inventors: Scott Eikenberry, John Gmuender, Akbal Singh Karlcut, Michael Carl Y. Uy, Boris Yanovsky
-
Publication number: 20140059681Abstract: A method and an apparatus to perform multiple packet payload analysis have been disclosed. In one embodiment, the method includes receiving a plurality of data packets, each of the plurality of data packets containing a portion of a data pattern, determining whether each of the plurality of data packets is out of order, and making and storing a local copy of the corresponding data packet if the corresponding data packet is out of order. Other embodiments have been claimed and described.Type: ApplicationFiled: November 4, 2013Publication date: February 27, 2014Applicant: SonicWALL, Inc.Inventors: Aleksandr Dubrovsky, Roman Yanovsky, Scott Aaron More, Boris Yanovsky
-
Publication number: 20140053264Abstract: A method and apparatus for identifying data patterns of a file are described herein. In one embodiment, an exemplary process includes, but is not limited to, receiving a data packet of a data stream containing a file segment of a file originated from an external host and destined to a protected host of a local area network (LAN), the file being transmitted via multiple file segments contained in multiple data packets of the data stream, and performing a data pattern analysis on the received data packet to determine whether the received data packet contains a predetermined data pattern, without waiting for a remainder of the data stream to arrive. Other methods and apparatuses are also described.Type: ApplicationFiled: October 28, 2013Publication date: February 20, 2014Applicant: SonicWALL, Inc.Inventors: Aleksandr Dubrovsky, John Everett Gmuender, Boris Yanovsky, Roman Yanovsky, Shunhui Zhu
-
Patent number: 8626689Abstract: Techniques for data pattern analysis using deterministic finite automaton are described herein. In one embodiment, a number of transitions from a current node to one or more subsequent nodes representing one or more sequences of data patterns is determined, where each of the current node and subsequent nodes is associated with a deterministic finite automaton (DFA) state. A data structure is dynamically allocated for each of the subsequent nodes for storing information associated with each of the subsequent nodes, where data structures for the subsequent nodes are allocated in an array maintained by a data structure corresponding to the current node if the number of transitions is greater than a predetermined threshold. Other methods and apparatuses are also described.Type: GrantFiled: August 2, 2011Date of Patent: January 7, 2014Assignee: SonicWALL, Inc.Inventors: Aleksandr Dubrovsky, Justin Michael Brady, Roman Yanovsky, Boris Yanovsky
-
Publication number: 20130339006Abstract: Some embodiments of an efficient string search have been presented. In one embodiment, a string of bytes representing content written in a non-delimited language is received, wherein the content has been classified into a predetermined category. In a single pass through the string of bytes, a set of N-grams is searched for simultaneously. Statistical information on occurrences of the N-grams, if any, in the string of bytes is collected. In some embodiments, a model is generated based on the statistical information, where the model is usable by a content filter to classify content.Type: ApplicationFiled: August 22, 2013Publication date: December 19, 2013Applicant: SonicWall, Inc.Inventors: Thomas E. Raffill, Shunhui Zhu, Roman Yanovsky, Boris Yanovsky, John Gmuender
-
Publication number: 20130332552Abstract: A global response network collects, analyzes, and distributes “cross-vector” threat-related information between security systems to allow for an intelligent, collaborative, and comprehensive real-time response.Type: ApplicationFiled: August 14, 2013Publication date: December 12, 2013Applicant: SonicWALL, Inc.Inventors: Boris Yanovsky, Scott D. Eikenberry, Bhuvan Racham, Nick Bilogorskiy, Gayatri Bhimaraju
-
Patent number: 8584238Abstract: A method and apparatus for identifying data patterns of a file are described herein. In one embodiment, an exemplary process includes, but is not limited to, receiving a data packet of a data stream containing a file segment of a file originated from an external host and destined to a protected host of a local area network (LAN), the file being transmitted via multiple file segments contained in multiple data packets of the data stream, and performing a data pattern analysis on the received data packet to determine whether the received data packet contains a predetermined data pattern, without waiting for a remainder of the data stream to arrive. Other methods and apparatuses are also described.Type: GrantFiled: August 16, 2012Date of Patent: November 12, 2013Assignee: SonicWALL, Inc.Inventors: Aleksandr Dubrovsky, John Everett Gmuender, Boris Yanovsky, Roman Yanovsky, Shunhui Zhu
-
Patent number: 8577669Abstract: Some embodiments of an efficient string search have been presented. In one embodiment, a string of bytes representing content written in a non-delimited language is received, wherein the content has been classified into a predetermined category. In a single pass through the string of bytes, a set of N-grams is searched for simultaneously. Statistical information on occurrences of the N-grams, if any, in the string of bytes is collected. In some embodiments, a model is generated based on the statistical information, where the model is usable by a content filter to classify content.Type: GrantFiled: December 22, 2011Date of Patent: November 5, 2013Assignee: SonicWALL, Inc.Inventors: Thomas E. Raffill, Shunhui Zhu, Roman Yanovsky, Boris Yanovsky, John Gmuender
-
Patent number: 8578489Abstract: A method and an apparatus to perform multiple packet payload analysis have been disclosed. In one embodiment, the method includes receiving a plurality of data packets, each of the plurality of data packets containing a portion of a data pattern, determining whether each of the plurality of data packets is out of order, and making and storing a local copy of the corresponding data packet if the corresponding data packet is out of order. Other embodiments have been claimed and described.Type: GrantFiled: June 7, 2012Date of Patent: November 5, 2013Assignee: SonicWALL, Inc.Inventors: Aleksandr Dubrovsky, Roman Yanovsky, Scott Aaron More, Boris Yanovsky
-
Publication number: 20130275423Abstract: Some embodiments of on-the-fly pattern recognition with configurable bounds have been presented. In one embodiment, a pattern matching engine is configured based on user input, which may include values of one or more user configurable bounds on searching. Then the configured pattern matching engine is used to search for a set of features in an incoming string. A set of scores is updated based on the presence of any of the features in the string while searching for the features. Each score may indicate a likelihood of the content of the string being in a category. The search is terminated if the end of the string is reached or if the user configurable bounds are met. After terminating the search, the scores are output.Type: ApplicationFiled: February 5, 2013Publication date: October 17, 2013Inventors: Thomas E. Raffill, Shunhui Zhu, Roman Yanovsky, Boris Yanovsky, John Gmuender
-
Patent number: 8522347Abstract: A global response network collects, analyzes, and distributes “cross-vector” threat-related information between security systems to allow for an intelligent, collaborative, and comprehensive real-time response.Type: GrantFiled: March 16, 2010Date of Patent: August 27, 2013Assignee: SonicWALL, Inc.Inventors: Boris Yanovsky, Scott D. Eikenberry, Bhuvan Racham, Nick Bilogorskiy, Gayatri Bhimaraju
-
Publication number: 20130191914Abstract: Some embodiments of cloud-based gateway security scanning have been presented. In one embodiment, some data packets are received sequentially at a gateway device. The data packets constitute at least a part of a file being addressed to a client machine coupled to the gateway device. The gateway device forwards an identification of the file to a remote datacenter in parallel with forwarding the data packets to the client machine. The datacenter performs signature matching on the identification and returns a result of the signature matching to the gateway device. The gateway device determining whether to block the file from the client machine based on the result of the signature matching from the datacenter.Type: ApplicationFiled: September 25, 2012Publication date: July 25, 2013Inventors: Aleksandr Dubrovsky, Senthilkumar G. Cheetancheri, Boris Yanovsky
-
Patent number: 8370374Abstract: Some embodiments of on-the-fly pattern recognition with configurable bounds have been presented. In one embodiment, a pattern matching engine is configured based on user input, which may include values of one or more user configurable bounds on searching. Then the configured pattern matching engine is used to search for a set of features in an incoming string. A set of scores is updated based on the presence of any of the features in the string while searching for the features. Each score may indicate a likelihood of the content of the string being in a category. The search is terminated if the end of the string is reached or if the user configurable bounds are met. After terminating the search, the scores are output.Type: GrantFiled: August 2, 2011Date of Patent: February 5, 2013Assignee: SonicWALL, Inc.Inventors: Thomas E. Raffill, Shunhui Zhu, Roman Yanovsky, Boris Yanovsky, John Gmuender
-
Publication number: 20120311703Abstract: Information concerning a plurality of identified threats provided by a plurality of preselected sources is stored in memory. An e-mail message may be received over a communication network. The received e-mail message is separated into a plurality of components. The stored information is searched to identify a reputation score associated with each of the plurality of components. It is then determined whether the e-mail is a threat based on the identified reputation score of each of the plurality of components. The determination is sent to a designated recipient.Type: ApplicationFiled: August 15, 2011Publication date: December 6, 2012Inventors: Boris Yanovsky, Scott Eikenberry
-
Patent number: 8321939Abstract: A method and an apparatus to perform multiple packet payload analysis have been disclosed. In one embodiment, the method includes receiving a plurality of data packets, each of the plurality of data packets containing a portion of a data pattern, determining whether each of the plurality of data packets is out of order, and making and storing a local copy of the corresponding data packet if the corresponding data packet is out of order. Other embodiments have been claimed and described.Type: GrantFiled: August 26, 2009Date of Patent: November 27, 2012Assignee: SonicWALL, Inc.Inventors: Aleksandr Dubrovsky, Roman Yanovsky, Scott Aaron More, Boris Yanovsky
-
Patent number: 8276202Abstract: Some embodiments of cloud-based gateway security scanning have been presented. In one embodiment, some data packets are received sequentially at a gateway device. The data packets constitute at least a part of a file being addressed to a client machine coupled to the gateway device. The gateway device forwards an identification of the file to a remote datacenter in parallel with forwarding the data packets to the client machine. The datacenter performs signature matching on the identification and returns a result of the signature matching to the gateway device. The gateway device determining whether to block the file from the client machine based on the result of the signature matching from the datacenter.Type: GrantFiled: July 27, 2009Date of Patent: September 25, 2012Inventors: Aleksandr Dubrovsky, Senthilkumar G. Cheetancheri, Boris Yanovsky
-
Patent number: 8272057Abstract: A method and apparatus for identifying data patterns of a file are described herein. In one embodiment, an exemplary process includes, but is not limited to, receiving a data packet of a data stream containing a file segment of a file originated from an external host and destined to a protected host of a local area network (LAN), the file being transmitted via multiple file segments contained in multiple data packets of the data stream, and performing a data pattern analysis on the received data packet to determine whether the received data packet contains a predetermined data pattern, without waiting for a remainder of the data stream to arrive. Other methods and apparatuses are also described.Type: GrantFiled: October 27, 2010Date of Patent: September 18, 2012Assignee: SonicWall, Inc.Inventors: Aleksandr Dubrovsky, John Everett Gmuender, Boris Yanovsky, Roman Yanovsky, Shunhui Zhu