Abstract: A method and system for routing traffic in a communication network is disclosed that may include assigning each node in a network a first subset of route repository nodes and a second subset of route repository nodes, querying the second subset of route repository nodes in order to obtain route information that is stored in the second subset of route repository nodes, computing route information by applying a route computation algorithm to the first subset of route repository nodes, and routing traffic in the communication network based on the route information obtained from the second subset of route repository nodes and the route information computed using the first subset of route repository nodes.

Abstract: This method and system for detecting abnormal traffic in a communications network is based on classifying the traffic in risk and status categories and maintaining a service status table with this information for each service at a respective node. The risk categories are initially established based on known software vulnerabilities recognized for the respective service. An early notifier enables further processing of services suspected of malware propagation. Status categories enable segregating the traffic with a “under attack status” from the “non under attack” status, so that the intrusion detection system at the respective node only processes the “under attack” traffic. In this way, the time and amount of processing performed by the intrusion detection system is considerably reduced.

Abstract: A method and system for monitoring and controlling a power distribution system is provided. The system includes a plurality of circuit breakers and a plurality of node electronic units. Each node electronic unit is mounted remotely from an associated circuit breaker that is electrically coupled with one of the node electronic units. The system also includes a first digital network, and a first central control unit. The first central control unit and the plurality of node electronic units are communicatively coupled to the first digital network. The method includes receiving digital signals from each node electronic unit at the central control unit, determining an operational state of the power distribution system from the digital signal, and transmitting digital signals to the plurality of node electronic units such that the circuit breakers are operable from the first central control unit.

Abstract: Methods to detect rogue access points (APs) and prevent unauthorized wireless access to services provided by a communication network are provided. A mobile station (MS) reports to a serving AP the received signal strength (RSS) for all APs in the area it travels. The serving AP detect a rogue AP based on inconsistencies perceived in the RSS reports, assessed during the handover phase or whilst the communication is active.

Abstract: The invention relates to a scale having a base plate (1), a bed plate (2) located at a distance above the base plate (1) for supporting an object to be weighed, and elastic spacing elements (3) located between the base plate (1) and the bed plate (2). Said scale further comprises a weighing means for determining the weight of the object, said weighing means being at least one inductive proximity sensor (10, 20, 4). Said scale is robustly constructed and allows great flexibility in the external design of the scale.

Abstract: Methods to detect rogue access points (APs) and prevent unauthorized wireless access to services provided by a communication network are provided. A mobile station (MS) reports to a serving AP the received signal strength (RSS) for all APs in the area it travels. The serving AP detect a rogue AP based on inconsistencies perceived in the RSS reports, assessed during the handover phase or whilst the communication is active.

Abstract: A removable replaceable cartridge for use with a liquid diffusing device. The cartridge includes a venturi, a conduit extending to the venturi, a mixing area and an outlet path for atomizing and dispersing a liquid within the cartridge. A diffusion device including a removable replaceable cartridge received within a housing. The housing includes a source of compressed gas which is directed into the cartridge. A venturi head with a unitary body for use with a diffusion device.

Abstract: Methods and apparatus for improving the resilience of wireless packet-switched networks to Layer-2 attacks is provided via a lightweight mechanism for detecting spoofed frames. The mechanism enables a receiving node to detect spoofed frames from information contained in cookies sent with frames. A first cookie, containing initial information, is sent to the receiving station from the transmitting node along with the first frame of a frame set. For each received frame, spoofing detection includes applying a function to information received via a corresponding cookie received with the subject frame, the result of which function is compared with information received via a previous cookie. The validity of the subject frame is asserted if the result of applying the function to information received in the corresponding subject cookie correlates with previous or initial information received in a previous or the first cookie, respectively. An exemplary implementation includes using a one-way hashing function.

Abstract: The invention relates to scales comprising a bearing surface for supporting a load to be weighed, an electroconductive sensor plate, a flat coil arranged at a distance from the sensor plate and used for the inductive measurement of a distance between the sensor plate and the flat coil, a housing surrounding the sensor plate and the flat coil, and a push-button which protrudes out of the housing and is connected to the sensor plate. The inventive scales are easy to assemble but also versatile.

Abstract: A method and system for filtering malicious packets received at the edge of a service provider (SP) domain is provided. A protocol aware border element identifies the protocol used by any ingress packet, and then determines which domain-specific information is used in the application payload of the packet to form the source identity. If this packet pretends to come from the SP domain, and no domain entity is allowed to roam, the packet is identified as illegitimate and is subjected to a given security policy. The border element also identifies as legitimate the SP domain entities that are allowed to roam, and legitimate sources outside said SP domain that communicates customary with entities in the SP domain.

Abstract: A system and method of tracing network flows in an autonomous communications system are described. The Autonomous System may be formed of multiple subgroups depending on size and application. Each subgroup contains multiple, interconnected routers which participate in transporting data flow across the Autonomous System (AS). A Director within the AS has a full and complete vision of the network topology. When it is desired to trace a particular flow because of an identified attack, selected routers in key locations—through which that particular flow travels—mark packets with labels which enable the tracing of the path. These labels permit the source of the attack, at least in so far as it travels through the AS, to be identified. If the number of entry (or key) points to the AS is larger than the number of available labels, the AS will be divided into subgroups, the flow is traced from subgroup to subgroup.

Abstract: An assay system is provided of great sensitivity and portability where the presence of a specific target in a sample, as well as its concentration (qualification and quantification) is detected by reason of a potential or voltage in a closed circuit, built up a redox reaction. The reaction is produced by binding a capture moiety to an enzymatic redox reaction partner, allowing the capture moiety to bind to any target in the sample, and washing any such bound target. The bound target, if not immobilized, may be immobilized through use of a second capture moiety. Substrate for the enzyme is then added. The action of the enzyme upon the substrate frees electrons, creating a potential across an anode and cathode which may be separated by a membrane.

Abstract: An assay system is provided of great sensitivity and portability where the presence of a specific target in a sample, as well as its concentration (qualification and quantification) is detected by reason of a potential or voltage in a closed circuit, built up a redox reaction. The reaction is produced by binding a capture moiety to an enzymatic redox reaction partner, allowing the capture moiety to bind to any target in the sample. In a homogenous assay, the method further comprises washing any such bound target. The bound target may be immobilized through use of a second capture moiety. Substrate for the enzyme is then added. The action on the substrate by the enzyme generates electrons, creating a potential across an anode and cathode which may be separated by a membrane.

Abstract: A method and system for tracing-back single packets based on storing only one record per flow, ‘FlowId’, observed by a router on a given interface and in a given time window ‘Time Period’. This record can be seen as a canonical representation for all packets seen during this window. A malicious packet may be traced back to its origin by identifying the port of arrival based on that packet time of arrival X and the FlowId.

Abstract: When the processing resources of a host system are occupied beyond a trigger point by incoming requests, that host system issues a cool-it message that is broadcast throughout the network, eventually reaching edge routers that, in response to the message, throttle the traffic that they pass into the network. The throttling is applied in increasing amounts with increasing traffic volumes received at the edge routers. The cool-it messages are authenticated to ensure that they are not being used as instruments of a DoS attack. This mechanism also works to control legitimate network congestion, and it does not block users from a host system that is under attack.

Abstract: Systems and methods of mitigating attacks, such as Denial of Service (DoS) attacks, in a communications network are presented. Source addresses of packets received at network devices are monitored in relation to known reliable addresses stored in a decision engine. If the source address, as stored in a source table, is known as being legitimate the packets are placed in a high priority queue for transmission at the highest rate. Packets with an unknown address are placed in a lower priority queue, the source address stored in a different source table, and the packet is serviced at a lower rate. Packets that become known to be legitimate are moved from the unknown table to the table from which high priority queues are serviced. In this way, an attacker that employs spoofing techniques is prevented from overtaxing network resources.

Abstract: A removable replaceable cartridge for use with a liquid diffusing device. The cartridge includes a venturi, a conduit extending to the venturi, a mixing area and an outlet path for atomizing and dispersing a liquid within the cartridge. A diffusion device including a removable replaceable cartridge received within a housing. The housing includes a source of compressed gas which is directed into the cartridge. A venturi head with a unitary body for use with a diffusion device.

Abstract: A removable replaceable cartridge for use with a liquid diffusing device. The cartridge includes a venturi, a conduit extending to the venturi, a mixing area and an outlet path for atomizing and dispersing a liquid within the cartridge. A diffusion device including a removable replaceable cartridge received within a housing. The housing includes a source of compressed gas which is directed into the cartridge. A venturi head with a unitary body for use with a diffusion device.

Abstract: A method and system of controlling operation of a diffusion appliance to treat the atmosphere within an enclosed space. The appliance may be programmed to operate according to a control scheme specifying a flow rate of liquid to a diffusion means and a periodic operation of the diffusion means. Control schemes may be associated with different volumes of spaces to be treated by the appliance. Anti-fatigue schemes may provide variation of the flow rate or periodic operation of the appliance. Initiation controls schemes may be used to start treatment of the space before the appliance is programmed to operate according to one of the control schemes.

Abstract: The Time to Live (TTL) field in an IP header is used as a covert channel in a communication system. More particularly the TTL field can be used to selectively mark packets with unique identifiers as they pass through an upstream station on their way to a downstream station. In this way the source of a traffic flow at least within a particular domain can be absolutely identified. This method of performing a traceback operation doesn't utilize additional resources as it relies on functionality which already exists in the system.