Abstract: A computer network device comprises an intrusion prevention rule set comprising a plurality of rules, each of the plurality of rules associated with two or more rule classification parameters, and an intrusion prevention module that is operable to use two or more of the classification parameters associated with the plurality of intrusion protection rules to selectively apply the rules to provide network intrusion protection of network traffic

Abstract: A secure commerce server system and method. A secure commerce server system includes a plurality of regions or burbs, including an internal burb and an external burb, a commerce server and an administration server. Processes and data objects associated with the administration server are bound to the internal burb. Processes and data objects associated with the commerce server are bound to the external burb. Processes bound to one burb cannot communicate directly to processes and data objects bound to other burbs. The administration server cannot be manipulated by a process bound to the external burb.

Abstract: A secure commerce server system and method. A secure commerce server system includes a plurality of regions or burbs, including an internal burb and an external burb, a commerce server and an administration server. Processes and data objects associated with the administration server are bound to the internal burb. Processes and data objects associated with the commerce server are bound to the external burb. Processes bound to one burb cannot communicate directly to processes and data objects bound to other burbs. The administration server cannot be manipulated by a process bound to the external burb.

Abstract: A proxy which is part of a firewall program controls exchanges of information between two application entities. The proxy interrogates attempts to establish a communication session by requesting entities with a server entity in lower layers in accordance with defined authentication procedures. The proxy interfaces with networking software to direct a communication stack to monitor connection requests to any address on specific ports. The requestor's address, and the server's address are checked against an access control list. If either address is invalid, the proxy closes the connection. If both are valid, a new connection is setup such that both the requestor and server are transparently connected to the proxy with variable higher levels being connected in a relay mode. Protocol data units are interrogated for conformance to a protocol session, and optionally further decoded to add additional application specific filtering. In one embodiment, an OSI architecture comprises the levels.

Abstract: A secure commerce server system and method. A secure commerce server system includes a plurality of regions or burbs, including an internal burb and an external burb, a commerce server and an administration server. Processes and data objects associated with the administration server are bound to the internal burb. Processes and data objects associated with the commerce server are bound to the external burb. Processes bound to one burb cannot communicate directly to processes and data objects bound to other burbs. The administration server cannot be manipulated by a process bound to the external burb.

Abstract: A robot hand for grasping objects having substantially planar faces includes a base and a plurality of arms extending from the base. A plurality of vacuum cups are supported on and radially movable along the arms. Pivotal drive means pivot the arms, radial drive means move the cups along the arms, and vacuum means apply a vacuum to the cups. The cups are readily positioned to permit lifting and transporting of objects such as plies and the like, including those objects having irregular planar shapes.

Abstract: A modular system for controlling the routing of data through a plurality of data terminals includes a number of modules in a tree structure. Each of the modules has circuitry for receiving a data stream. Each of the modules further has a plurality of ports, each port being suitable for transmitting data to and receiving data from data devices such as data terminals and other modules. Each of the modules includes a routing array connected to the ports for serially connecting the ports for flow of the data stream through the operable data devices connected to the ports. The routing array is internally controllable to open a selected one of a plurality of data paths between the ports. At least some of the ports have driver circuits associated therewith for regenerating and converting the data stream as it passes between ports in the selected data path. Each module has an output for supplying the data stream from the module to a destination device.

Abstract: This invention comprises a percussion instrument, including seven bongo drums held together by blocks fastened therebetween, a carrying handle on one of the blocks, and a microphone holder attached to one of the drums.