Abstract: Techniques are described to provide efficient protection for a virtual private network. In one example, a method is provided that includes obtaining a packet at a first network entity; determining that the packet is a packet type of an authentication type; determining whether authentication content for the packet matches known good criteria for the packet type of the authentication type; based on determining that the authentication content for the packet does not match the known good criteria, performing at least one of dropping the packet and generating an alarm; and based on determining that the authentication content for the packet does match the known good criteria, processing the packet at the first network entity or forwarding the packet toward a second network entity.

Abstract: A method is described and in one embodiment includes identifying at an initiator element a list of Internet protocol (“IP”) prefixes corresponding to routes designated as interesting routes, wherein the IP prefixes are included in a Routing Information Base (“RIB”) of the initiator; monitoring the RIB for a change in the list of IP prefixes; and, responsive to detection of a change in the list of IP prefixes, injecting at least a portion of the changed list of IP prefixes into a payload of an IKEv2 NOTIFY message and sending the IKEv2 NOTIFY message to a responder element peered with the initiator element, wherein the responder element updates an RIB of the responder element using the IP prefixes included in the received IKEv2 NOTIFY message.

Abstract: Techniques are described to provide efficient protection for a virtual private network. In one example, a method is provided that includes obtaining a packet at a first network entity; determining that the packet is a packet type of an authentication type; determining whether authentication content for the packet matches known good criteria for the packet type of the authentication type; based on determining that the authentication content for the packet does not match the known good criteria, performing at least one of dropping the packet and generating an alarm; and based on determining that the authentication content for the packet does match the known good criteria, processing the packet at the first network entity or forwarding the packet toward a second network entity.

Abstract: A method is described and in one embodiment includes identifying at an initiator element a list of Internet protocol (“IP”) prefixes corresponding to routes designated as interesting routes, wherein the IP prefixes are included in a Routing Information Base (“RIB”) of the initiator; monitoring the RIB for a change in the list of IP prefixes; and, responsive to detection of a change in the list of IP prefixes, injecting at least a portion of the changed list of IP prefixes into a payload of an IKEv2 NOTIFY message and sending the IKEv2 NOTIFY message to a responder element peered with the initiator element, wherein the responder element updates an RIB of the responder element using the IP prefixes included in the received IKEv2 NOTIFY message.

Abstract: A method of managing access to a key. The method comprises associating the key with an encrypted data object, the key being required to decrypt the data object; generating a number of fragments of the key, the number of fragments corresponding to a number of parties subject to a fragmentation agreement; and encrypting each fragment with a public key corresponding to each of the parties. The method further comprises encrypting each encrypted fragment with a public key of a trusted party; and storing the encrypted fragments with the encrypted data object on a server of the trusted party.

Abstract: The present application relates to a method of installing a pre-cast pile in the ground which involves applying an enlarged head forming tool to the ground until a volume of soil has been displaced or removed so as to form a void at the surface of the ground. The pre-cast pile is then driven into the ground to a predetermined depth below the void and the void is then filled with concrete or grout to form a cast-in-situ pile head. The diameter of the pile head is greater than the diameter of the pile shaft.

Abstract: The present application relates to a method of installing a pre-cast pile in the ground which involves applying an enlarged head forming tool to the ground until a volume of soil has been displaced or removed so as to form a void at the surface of the ground. The pre-cast pile is then driven into the ground to a predetermined depth below the void and the void is then filled with concrete or grout to form a cast-in-situ pile head. The diameter of the pile head is greater than the diameter of the pile shaft.