Abstract: A packet-filtering network appliance such as a threat intelligence gateway (TIG) protects TCP/IP networks from Internet threats by enforcing certain policies on in-transit packets that are crossing network boundaries. The policies are composed of packet filtering rules derived from cyber threat intelligence (CTI). Logs of rule-matching packets and their associated flows are sent to cyberanalysis applications located at security operations centers (SOCs) and operated by cyberanalysts. Some cyber threats/attacks, or incidents, are composed of many different flows occurring at a very high rate, which generates a flood of logs that may overwhelm computer, storage, network, and cyberanalysis resources, thereby compromising cyber defenses.

Abstract: A packet-filtering network appliance such as a threat intelligence gateway (TIG) protects TCP/IP networks from Internet threats by enforcing certain policies on in-transit packets that are crossing network boundaries. The policies are composed of packet filtering rules derived from cyber threat intelligence (CTI). Logs of rule-matching packets and their associated flows are sent to cyberanalysis applications located at security operations centers (SOCs) and operated by cyberanalysts. Some cyber threats/attacks, or incidents, are composed of many different flows occurring at a very high rate, which generates a flood of logs that may overwhelm computer, storage, network, and cyberanalysis resources, thereby compromising cyber defenses.

Abstract: A packet-filtering network appliance such as a threat intelligence gateway (TIG) protects TCP/IP networks from Internet threats by enforcing certain policies on in-transit packets that are crossing network boundaries. The policies are composed of packet filtering rules derived from cyber threat intelligence (CTI). Logs of rule-matching packets and their associated flows are sent to cyberanalysis applications located at security operations centers (SOCs) and operated by cyberanalysts. Some cyber threats/attacks, or incidents, are composed of many different flows occurring at a very high rate, which generates a flood of logs that may overwhelm computer, storage, network, and cyberanalysis resources, thereby compromising cyber defenses.

Abstract: A packet-filtering network appliance such as a threat intelligence gateway (TIG) protects TCP/IP networks from Internet threats by enforcing certain policies on in-transit packets that are crossing network boundaries. The policies are composed of packet filtering rules derived from cyber threat intelligence (CTI). Logs of rule-matching packets and their associated flows are sent to cyberanalysis applications located at security operations centers (SOCs) and operated by cyberanalysts. Some cyber threats/attacks, or incidents, are composed of many different flows occurring at a very high rate, which generates a flood of logs that may overwhelm computer, storage, network, and cyberanalysis resources, thereby compromising cyber defenses.

Abstract: A packet-filtering network appliance such as a threat intelligence gateway (TIG) protects TCP/IP networks from Internet threats by enforcing certain policies on in-transit packets that are crossing network boundaries. The policies are composed of packet filtering rules derived from cyber threat intelligence (CTI). Logs of rule-matching packets and their associated flows are sent to cyberanalysis applications located at security operations centers (SOCs) and operated by cyberanalysts. Some cyber threats/attacks, or incidents, are composed of many different flows occurring at a very high rate, which generates a flood of logs that may overwhelm computer, storage, network, and cyberanalysis resources, thereby compromising cyber defenses.

Abstract: A packet-filtering network appliance protects networks from threats by enforcing policies on in-transit packets crossing network boundaries. The policies are composed of packet filtering rules derived from cyber threat intelligence (CTI). Logs of rule-matching packets and their flows are sent to cyberanalysis applications located at security operations centers (SOCs). Some cyber threats/attacks, or incidents, are composed of many different flows occurring at a very high rate, generating a flood of logs that may overwhelm computer, storage, network, and cyberanalysis resources, thereby compromising cyber defenses. The present disclosure describes incident logging that efficiently incorporates logs of many flows that comprise the incident, potentially reducing resource consumption while improving the informational/cyberanalytical value for cyberanalysis when compared to the component flow logs. Incident logging vs. flow logging can be automatically and adaptively switched on or off.

Abstract: A packet-filtering network appliance protects networks from threats by enforcing policies on in-transit packets crossing network boundaries. The policies are composed of packet filtering rules derived from cyber threat intelligence (CTI). Logs of rule-matching packets and their flows are sent to cyberanalysis applications located at security operations centers (SOCs). Some cyber threats/attacks, or incidents, are composed of many different flows occurring at a very high rate, generating a flood of logs that may overwhelm computer, storage, network, and cyberanalysis resources, thereby compromising cyber defenses. The present disclosure describes incident logging that efficiently incorporates logs of many flows that comprise the incident, potentially reducing resource consumption while improving the informational/cyberanalytical value for cyberanalysis when compared to the component flow logs. Incident logging vs. flow logging can be automatically and adaptively switched on or off.

Abstract: Systems and methods are involved with but are not limited to a portable electronic device case including a device display receiving portion, a device keyboard receiving portion, and a spine portion extending therebetween, the spine portion having a flexibility sufficient to accommodate hinged disposition between the device display receiving portion, and the device keyboard receiving portion, the spine portion including at least one pair of stops including a first stop and a second stop being positioned to be oppositely facing when the portable electronic device case is in a closed disposition to allow for contact between the first stop and the second stop to maintain spacing between one or more portions of the device display receiving portion and one or more portions of the device keyboard receiving portion. In addition, other aspects are described in the claims, drawings, and text forming a part of the present disclosure.

Abstract: Systems and methods are involved with but are not limited to a portable electronic device case including a device display receiving portion, a device keyboard receiving portion, and a spine portion extending therebetween, the spine portion having a flexibility sufficient to accommodate hinged disposition between the device display receiving portion, and the device keyboard receiving portion, the spine portion including at least one pair of stops including a first stop and a second stop being positioned to be oppositely facing when the portable electronic device case is in a closed disposition to allow for contact between the first stop and the second stop to maintain spacing between one or more portions of the device display receiving portion and one or more portions of the device keyboard receiving portion. In addition, other aspects are described in the claims, drawings, and text forming a part of the present disclosure.

Abstract: Systems and methods are involved with but are not limited to a semiflexible plastic piece including a device display receiving portion, a device keyboard receiving portion, and a spine portion extending therebetween, the device display receiving portion sized and shaped to receivably couple along one or more edges of a display portion of a portable electronic device, the device keyboard receiving portion sized and shaped to receivably couple along one or more edges of a keyboard portion of the portable electronic device, the semiflexible plastic piece having flexibility sufficient for the spine portion to accommodate hinged disposition between the display portion and the keyboard portion of the portable electronic device as received by the portable electronic device case. In addition, other aspects are described in the claims, drawings, and text forming a part of the present disclosure.

Abstract: Systems and methods are involved with but are not limited to: a housing sized to receive a tablet shaped electronic device, the housing including a recessed back; and a stand assembly movably coupled to the housing for adjustment of the stand assembly between one or more open dispositions and a closed disposition having a collapsed configuration, the recessed back sized to receive the stand assembly in the collapsed configuration. In addition to the foregoing, other aspects are described in the claims, drawings, and text forming a part of the present disclosure.

Abstract: Systems and methods are involved with but are not limited to a semiflexible plastic piece including a device display receiving portion, a device keyboard receiving portion, and a spine portion extending therebetween, the device display receiving portion sized and shaped to receivably couple along one or more edges of a display portion of a portable electronic device, the device keyboard receiving portion sized and shaped to receivably couple along one or more edges of a keyboard portion of the portable electronic device, the semiflexible plastic piece having flexibility sufficient for the spine portion to accommodate hinged disposition between the display portion and the keyboard portion of the portable electronic device as received by the portable electronic device case. In addition, other aspects are described in the claims, drawings, and text forming a part of the present disclosure.