Abstract: A network system includes a security device and a network access device. The network access device is to receive a packet from a source node destined to a destination node, and to examine a data structure maintained by the network access device to determine whether the data structure stores a data member having a predetermined value, the data member indicating whether the packet should undergo security processing. If the data member matches the predetermined value, the packet is transmitted to a security device associated with the network access device to allow the security device to perform content inspection, and in response to a response received from the security device, the packet is routed to the destination node dependent upon the response. The packet is routed to the destination node without forwarding the packet to the security device.

Abstract: A method and apparatus for dynamic security insertion into virtualized networks is described. The method may include receiving, at a network device from a second network device, a data packet and application data extracted from the data packet. The method may also include generating a routing decision for a network connection associated with the data packet based, at least in part, on the application data. Furthermore, the method may include transmitting the routing decision for the data packet to the second device for the second device to route the data based on the routing decision.

Abstract: A network system includes a first network access device having an input/output (IO) module of a firewall to capture a packet of a network session originated from a first node associated with the first network access device, a first security device having a firewall processing module to determine based on the captured packet whether the first node is a destination node that is receiving VM migration from a second node that is associated with a second network access device. The first security device is to update a first flow table within the first network access device. The network system further includes a second security device to receive a message from the first security device concerning the VM migration to update a second flow table of the second network access device, such that further network traffic of the network session is routed to the first node without interrupting the network session.

Abstract: A method and apparatus is disclosed herein for TCP SYN flood protection. In one embodiment, a TCP SYN flood protection arrangement comprises a first device operable to process packet input and output functions, including performing sender verification with respect to a connection initiation from a sender for a first TCP connection between the sender and a destination server and a second device, separate from the first device, to perform one or more security processing operations on packets of the first TCP connection from the sender after the first device verifies the sender is legitimate.

Abstract: A method and apparatus is disclosed herein for distributed zone-based security. In one embodiment, the method comprises: determining an ingress security zone associated with an ingress of a first network device based on a first key and a media access control (MAC) address of a source of a packet; determining an egress security zone of a second network device based on a MAC address of a destination for the packet and a second key; performing a policy lookup based on the ingress security zone and the egress security zone to identify a policy to apply to the packet; and applying the policy to the packet.

Abstract: A method and apparatus is disclosed herein for IP packet tunneling in a network. In one embodiment, the method comprises receiving, at a first network device, a first IP packet of a IP connection; creating a second IP packet by replacing information in a field in the first IP packet with a session ID identifying the IP connection; and forwarding, by the first network device, the second IP packet to the second network device in the distributed network environment.

Abstract: Embodiment of the present invention provides a packet transmission method. The method includes: receiving an encrypted packet sent by a client by using a virtual private network (VPN) tunnel, wherein the encrypted packet is sent by the client after the client determines, according to a preset control policy, that the control policy comprises an Internet Protocol (IP) address and a port number that are the same as a destination IP address and a destination port number of a packet to be sent and encrypts the packet to be sent, and the control policy comprises information about an IP address and a port number of an intranet server that can exchange a packet with a security socket layer protocol (SSL) VPN server; decrypting the encrypted packet; and sending the decrypted packet to a corresponding intranet server, wherein a source IP address of the decrypted packet is an external network IP address.

Abstract: Systems and methods are provided for predicting the onset of postoperative atrial fibrillation (AF) from electrocardiogram (ECG) data representing a patient. A signal processing component determines parameters representing the activity of the heart of the patient from the ECG data. A feature extraction component calculates a plurality of features useful in predicting postoperative AF from the determined parameters. A classification component determines an AF index for the patient from the calculated plurality of features. The AF index represents the likelihood that the patient will experience AF.

Abstract: Systems and methods are provided for predicting the onset of postoperative atrial fibrillation (AF) from electrocardiogram (ECG) data representing a patient. A signal processing component determines parameters representing the activity of the heart of the patient from the ECG data. A feature extraction component calculates a plurality of features useful in predicting postoperative AF from the determined parameters. A classification component determines an AF index for the patient from the calculated plurality of features. The AF index represents the likelihood that the patient will experience AF.

Abstract: An index building, querying method, device and system for distributed columnar database are provided. The index building method for distributed columnar database includes: obtaining a column field from a distributed columnar database, generating a column index file in which the column field is a key word, the column index file comprising the mapping relationship between the value of the column field in the distributed columnar database and the corresponding Row field value; storing the column index file to a index catalogue corresponding to the column field in the distributed columnar database.

Abstract: The examples described herein provide methods and equipment for an anti-oxidation spraying on a steel billet. In some examples, when the billet at the temperature of 400° C.-1000° C. enters the predetermined spraying region, a plurality of anti-oxidation spraying devices are used to perform an anti-oxidation spray on the billet in two or more directions, thereby forming directly an anti-oxidation coating on the steel billet at 400° C.-1000° C. By using the example method and equipment described herein, on-line spraying of anti-oxidation coating on the steel billet can be performed under high-temperature condition, thereby reducing an oxidation burning loss rate of the steel billet.

Abstract: Systems and methods are provided for predicting the onset of postoperative atrial fibrillation (AF) from electrocardiogram (ECG) data representing a patient. A signal processing component determines parameters representing the activity of the heart of the patient from the ECG data. A feature extraction component calculates a plurality of features useful in predicting postoperative AF from the determined parameters. A classification component determines an AF index for the patient from the calculated plurality of features. The AF index represents the likelihood that the patient will experience AF.