Abstract: An electrostatic sensing system configured to sense an electrostatic information of a fluid inside a fluid distribution component and including an electrostatic sensing assembly, a signal amplifier and an analog-to-digital converter. The electrostatic sensing assembly includes a sensing component, and a shield. The sensing component is configured to be disposed at the fluid distribution component. The sensing component is disposed through the fluid distribution component so as to be partially located in the fluid distribution component. The shield surrounds a part of the sensing component that is located in the fluid distribution component. At least part of the shield is located on an upstream side of the sensing component. The signal amplifier is electrically connected to the sensing component. The analog-to-digital converter is electrically connected to the signal amplifier. The shield has an opening spaced apart from the sensing component.

Abstract: A communication device which is configured to receive a data flow includes a monitor port and a packet processor. The monitor port is configured to receive a packet of the data flow. The packet processor is coupled to the monitor port, and the packet processor is configured to compute a digest value of the packet and compute an identification code of the packet according to the digest value of the packet, and the packet processor searches a status value associated with the identification code in a lookup table so as to determine whether a dropping event of the data flow is recorded.

Abstract: Methods and apparatus for detecting, in a gateway device configured for facilitating communication between an intranet and an external network, the existence of an unauthorized wireless access point in the intranet. The method includes determining whether a packet received at the gateway originates from one of the wireless devices. If a received at the gateway originates from a wireless device, the method includes determining whether a source MAC address associated with the packet is one of the set of known MAC addresses. If not, the method further includes taking a remedial action to prevent the unauthorized wireless access point from accessing one of the intranet and the external network.

Abstract: A communication device which is configured to receive a data flow includes a monitor port and a packet processor. The monitor port is configured to receive a packet of the data flow. The packet processor is coupled to the monitor port, and the packet processor is configured to compute a digest value of the packet and compute an identification code of the packet according to the digest value of the packet, and the packet processor searches a status value associated with the identification code in a lookup table so as to determine whether a dropping event of the data flow is recorded.

Abstract: A network device includes a packet classifying unit and a packet processing unit. The packet processing unit includes processors coupled in series. Each processor includes a storage unit and an operating unit. Data packets are classified into packet types corresponding to different pipelines by the packet classifying unit. The storage unit stores characteristic values and operation data corresponding to different pipelines. The operating unit processes data packets output from the previous stage (e.g., classified data packets) in accordance with their packet types, characteristic values and the corresponding operation data.

Abstract: The present invention discloses a communication device applicable to a stacking communication system. The communication device comprises: a plurality of communication ports operable to constitute a part of an internal transmission path of the stacking communication system; a storage unit operable to store a reference path table; and a controller operable to receive a frame and then determine whether the frame should be forwarded, wherein if the frame should be forwarded, the controller is operable to choose one among the communication ports according to the reference path table and the content of the frame to forward the frame or a frame derived therefrom to the internal transmission path of the stacking communication system.

Abstract: A network device includes a packet classifying unit and a packet processing unit. The packet processing unit includes processors coupled in series. Each processor includes a storage unit and an operating unit. Data packets are classified into packet types corresponding to different pipelines by the packet classifying unit. The storage unit stores characteristic values and operation data corresponding to different pipelines. The operating unit processes data packets output from the previous stage (e.g., classified data packets) in accordance with their packet types, characteristic values and the corresponding operation data.

Abstract: The present invention discloses a communication device applicable to a stacking communication system. The communication device comprises: a plurality of communication ports operable to constitute a part of an internal transmission path of the stacking communication system; a storage unit operable to store a reference path table; and a controller operable to receive a frame and then determine whether the frame should be forwarded, wherein if the frame should be forwarded, the controller is operable to choose one among the communication ports according to the reference path table and the content of the frame to forward the frame or a frame derived therefrom to the internal transmission path of the stacking communication system.

Abstract: An executing apparatus coupled to a main control unit for managing an access control list (ACL) is provided. The executing apparatus is utilized for receiving a specific command transmitted from the main control unit and managing a plurality of rule information of the ACL stored in a storage circuit according to the specific command received.

Abstract: Techniques for efficiently determining the boundary between files and for ascertaining the difference between a HEAD response and a GET response. Embodiments of the invention only need to check the responses from the server, instead of having to check to both the responses from the server and the requests from the client, in order to ascertain the boundary between files and to ascertain whether a response from the server is a HEAD response or a GET response.

Abstract: Multi-behavior matching in a computer system is performed in order to identify suspicious sequences of activities. System behavior is captured using driver hooks. A behavior monitoring system determines the process to which the system behavior belongs by processing a table. This includes using the process ID and thread ID of the system behavior as lookups into the table. A multi-behavior matching algorithm is applied to determine if there is any matching suspicious behavior by matching sets of rules (a policy) to system events caused by a particular process. A state machine is used to keep track of matching policies. Options to the rules and policies (such as “offset,” “depth,” “distance,” “within,” “ordered” and “occurrence/interval”) are used to refine when a rule or policy is allowed to produce a positive match, reducing false positives.

Abstract: A program installed on a computer system registers and is placed on an installed program list or an uninstall software list. A check of the uninstall software list (USL) is added as a secondary verification mechanism to a behavior monitoring engine. A signature-based malware scan engine may be used. If the scan engine does not flag the file as malware, then the behavior monitoring engine monitors the activities performed by the underlying application. When the behavior monitoring engine flags an activity as potentially suspicious, the USL is checked to determine if the application running the process is on the USL. If so, then the process is treated as legitimate and there is no need to alert the user. Only if both the behavior is flagged as suspicious and the application performing the behavior is not on the USL will the user receive an alert as to the potential malware.