Patents by Inventor Naomi Frid
Naomi Frid has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 11212205Abstract: A packet broker that performs a health-status check of a proxy server while the proxy server processes one or more proxy connections. The packet broker may attempt to exchange a heartbeat signal with the proxy server, and if unsuccessful, the proxy server is assumed to be failing. In such cases, a failover is desirable. Rather than implementing a “hard” failover, in which no further communication packets are directed to the proxy server, a “soft” failover is performed where the packet broker prevents new proxy connections from being processed by the proxy server, but maintains at least one (e.g., all) of the current proxy connections that are being processed by the proxy server.Type: GrantFiled: February 27, 2020Date of Patent: December 28, 2021Assignee: VERINT SYSTEMS LTD.Inventor: Naomi Frid
-
Publication number: 20210126905Abstract: Methods and systems for applying surveillance to client computers that communicate via proxy servers. A decoding system accepts communication packets from a communication network. Based on the received packets, the decoding system identifies that a certain client computer conducts a communication session with a target server via a proxy server. The decoding system processes the packets so as to correlate the identity of the client computer with the identity of the target server. The correlated identities may comprise, for example, Internet Protocol (IP) addresses or Uniform Resource Locators (URLs).Type: ApplicationFiled: November 10, 2020Publication date: April 29, 2021Inventor: Naomi Frid
-
Patent number: 10862869Abstract: Methods and systems for applying surveillance to client computers that communicate via proxy servers. A decoding system accepts communication packets from a communication network. Based on the received packets, the decoding system identifies that a certain client computer conducts a communication session with a target server via a proxy server. The decoding system processes the packets so as to correlate the identity of the client computer with the identity of the target server. The correlated identities may comprise, for example, Internet Protocol (IP) addresses or Uniform Resource Locators (URLs).Type: GrantFiled: May 23, 2017Date of Patent: December 8, 2020Assignee: VERINT SYSTEMS LTD.Inventor: Naomi Frid
-
Publication number: 20200267067Abstract: A packet broker that performs a health-status check of a proxy server while the proxy server processes one or more proxy connections. The packet broker may attempt to exchange a heartbeat signal with the proxy server, and if unsuccessful, the proxy server is assumed to be failing. In such cases, a failover is desirable. Rather than implementing a “hard” failover, in which no further communication packets are directed to the proxy server, a “soft” failover is performed where the packet broker prevents new proxy connections from being processed by the proxy server, but maintains at least one (e.g., all) of the current proxy connections that are being processed by the proxy server.Type: ApplicationFiled: February 27, 2020Publication date: August 20, 2020Inventor: Naomi Frid
-
Patent number: 10581709Abstract: A packet broker that performs a health-status check of a proxy server while the proxy server processes one or more proxy connections. The packet broker may attempt to exchange a heartbeat signal with the proxy server, and if unsuccessful, the proxy server is assumed to be failing. In such cases, a failover is desirable. Rather than implementing a “hard” failover, in which no further communication packets are directed to the proxy server, a “soft” failover is performed where the packet broker prevents new proxy connections from being processed by the proxy server, but maintains at least one (e.g., all) of the current proxy connections that are being processed by the proxy server.Type: GrantFiled: October 26, 2016Date of Patent: March 3, 2020Assignee: VERINT SYSTEMS LTD.Inventor: Naomi Frid
-
Patent number: 10454790Abstract: Methods and systems for analyzing flows of communication packets. A front-end processor associates input packets with flows and forwards each flow to the appropriate unit, typically by querying a flow table that holds a respective classification for each active flow. In general, flows that are not yet classified are forwarded to the classification unit, and the resulting classification is entered in the flow table. Flows that are classified as requested for further analysis are forwarded to an appropriate flow analysis unit. Flows that are classified as not requested for analysis are not subjected to further processing, e.g., discarded or allowed to pass.Type: GrantFiled: March 26, 2018Date of Patent: October 22, 2019Assignee: VERINT SYSTEMS LTDInventors: Eithan Goldfarb, Yuval Altman, Naomi Frid, Gur Yaari
-
Publication number: 20180295035Abstract: Methods and systems for analyzing flows of communication packets. A front-end processor associates input packets with flows and forwards each flow to the appropriate unit, typically by querying a flow table that holds a respective classification for each active flow. In general, flows that are not yet classified are forwarded to the classification unit, and the resulting classification is entered in the flow table. Flows that are classified as requested for further analysis are forwarded to an appropriate flow analysis unit. Flows that are classified as not requested for analysis are not subjected to further processing, e.g., discarded or allowed to pass.Type: ApplicationFiled: March 26, 2018Publication date: October 11, 2018Inventors: Eithan Goldfarb, Yuval Altman, Naomi Frid, Gur Yaari
-
Patent number: 9929920Abstract: Methods and systems for analyzing flows of communication packets. A front-end processor associates input packets with flows and forwards each flow to the appropriate unit, typically by querying a flow table that holds a respective classification for each active flow. In general, flows that are not yet classified are forwarded to the classification unit, and the resulting classification is entered in the flow table. Flows that are classified as requested for further analysis are forwarded to an appropriate flow analysis unit. Flows that are classified as not requested for analysis are not subjected to further processing, e.g., discarded or allowed to pass.Type: GrantFiled: January 6, 2016Date of Patent: March 27, 2018Assignee: VERINT SYSTEMS LTD.Inventors: Eithan Goldfarb, Yuval Altman, Naomi Frid, Gur Yaari
-
Publication number: 20170331792Abstract: Methods and systems for applying surveillance to client computers that communicate via proxy servers. A decoding system accepts communication packets from a communication network. Based on the received packets, the decoding system identifies that a certain client computer conducts a communication session with a target server via a proxy server. The decoding system processes the packets so as to correlate the identity of the client computer with the identity of the target server. The correlated identities may comprise, for example, Internet Protocol (IP) addresses or Uniform Resource Locators (URLs).Type: ApplicationFiled: May 23, 2017Publication date: November 16, 2017Inventor: Naomi Frid
-
Patent number: 9692730Abstract: Methods and systems for applying surveillance to client computers that communicate via proxy servers. A decoding system accepts communication packets from a communication network. Based on the received packets, the decoding system identifies that a certain client computer conducts a communication session with a target server via a proxy server. The decoding system processes the packets so as to correlate the identity of the client computer with the identity of the target server. The correlated identities may comprise, for example, Internet Protocol (IP) addresses or Uniform Resource Locators (URLs).Type: GrantFiled: January 25, 2012Date of Patent: June 27, 2017Assignee: VERINT SYSTEMS LTD.Inventor: Naomi Frid
-
Publication number: 20170126797Abstract: A packet broker that performs a health-status check of a proxy server while the proxy server processes one or more proxy connections. The packet broker may attempt to exchange a heartbeat signal with the proxy server, and if unsuccessful, the proxy server is assumed to be failing. In such cases, a failover is desirable. Rather than implementing a “hard” failover, in which no further communication packets are directed to the proxy server, a “soft” failover is performed where the packet broker prevents new proxy connections from being processed by the proxy server, but maintains at least one (e.g., all) of the current proxy connections that are being processed by the proxy server.Type: ApplicationFiled: October 26, 2016Publication date: May 4, 2017Inventor: Naomi Frid
-
Patent number: 9497167Abstract: Methods and systems for filtering communication packets using a multi-stage filtering system that receives a large volume of communication packets from a communication network that filters the packets in two or more successive stages. The system comprises at least one front-end filtering unit and multiple back-end filtering units. Typically although not necessarily, the front-end filtering unit filters the packets based on layer-2 to layer-4 attributes of the packets. The back-end filtering units, on the other hand, filter the packets based on content extracted from the packet payloads. The back-end filtering units may perform filtering, for example, based on keyword spotting, application classification, malware detection and other content-related criteria. The front-end filtering unit typically performs filtering at the individual packet level and/or at the level of request-response transactions.Type: GrantFiled: July 29, 2013Date of Patent: November 15, 2016Assignee: VERINT SYSTEMS LTD.Inventors: Dana Weintraub, Naomi Frid
-
Publication number: 20160197796Abstract: Methods and systems for analyzing flows of communication packets. A front-end processor associates input packets with flows and forwards each flow to the appropriate unit, typically by querying a flow table that holds a respective classification for each active flow. In general, flows that are not yet classified are forwarded to the classification unit, and the resulting classification is entered in the flow table. Flows that are classified as requested for further analysis are forwarded to an appropriate flow analysis unit. Flows that are classified as not requested for analysis are not subjected to further processing, e.g., discarded or allowed to pass.Type: ApplicationFiled: January 6, 2016Publication date: July 7, 2016Inventors: Eithan Goldfarb, Yuval Altman, Naomi Frid, Gur Yaari
-
Patent number: 9264446Abstract: Methods and systems for analyzing flows of communication packets. A front-end processor associates input packets with flows and forwards each flow to the appropriate unit, typically by querying a flow table that holds a respective classification for each active flow. In general, flows that are not yet classified are forwarded to the classification unit, and the resulting classification is entered in the flow table. Flows that are classified as requested for further analysis are forwarded to an appropriate flow analysis unit. Flows that are classified as not requested for analysis are not subjected to further processing, e.g., discarded or allowed to pass.Type: GrantFiled: January 25, 2012Date of Patent: February 16, 2016Assignee: VERINT SYSTEMS LTD.Inventors: Eithan Goldfarb, Yuval Altman, Naomi Frid, Gur Yaari
-
Patent number: 8767551Abstract: Methods and systems for managing the actions that are applied to packet flows by packet processing systems. A packet processing system maintains a flow table, i.e., a list of active flows and respective actions to be applied to the flows. The system classifies each incoming packet into a respective flow, and processes the packet in accordance with the action that is specified for this flow in the flow table. Typically, the system deletes a packet flow from the flow table when it becomes inactive, e.g., when no packets belonging to the flow arrive within a certain time-out period.Type: GrantFiled: January 25, 2012Date of Patent: July 1, 2014Assignee: Verint Systems, Ltd.Inventors: Eithan Goldfarb, Yuval Altman, Naomi Frid, Gur Yaari
-
Publication number: 20140096228Abstract: Methods and systems for filtering communication packets using a multi-stage filtering system that receives a large volume of communication packets from a communication network that filters the packets in two or more successive stages. The system comprises at least one front-end filtering unit and multiple back-end filtering units. Typically although not necessarily, the front-end filtering unit filters the packets based on layer-2 to layer-4 attributes of the packets. The back-end filtering units, on the other hand, filter the packets based on content extracted from the packet payloads. The back-end filtering units may perform filtering, for example, based on keyword spotting, application classification, malware detection and other content-related criteria. The front-end filtering unit typically performs filtering at the individual packet level and/or at the level of request-response transactions.Type: ApplicationFiled: July 29, 2013Publication date: April 3, 2014Applicant: Verint Systems Ltd.Inventors: Dana WEINTRAUB, Naomi FRID
-
Publication number: 20120215909Abstract: Methods and systems for analyzing flows of communication packets. A front-end processor associates input packets with flows and forwards each flow to the appropriate unit, typically by querying a flow table that holds a respective classification for each active flow. In general, flows that are not yet classified are forwarded to the classification unit, and the resulting classification is entered in the flow table. Flows that are classified as requested for further analysis are forwarded to an appropriate flow analysis unit. Flows that are classified as not requested for analysis are not subjected to further processing, e.g., discarded or allowed to pass.Type: ApplicationFiled: January 25, 2012Publication date: August 23, 2012Applicant: VERINT SYSTEMS LTD.Inventors: Eithan Goldfarb, Yuval Altman, Naomi Frid, Gur Yaari
-
Publication number: 20120215927Abstract: Methods and systems for applying surveillance to client computers that communicate via proxy servers. A decoding system accepts communication packets from a communication network. Based on the received packets, the decoding system identifies that a certain client computer conducts a communication session with a target server via a proxy server. The decoding system processes the packets so as to correlate the identity of the client computer with the identity of the target server. The correlated identities may comprise, for example, Internet Protocol (IP) addresses or Uniform Resource Locators (URLs).Type: ApplicationFiled: January 25, 2012Publication date: August 23, 2012Applicant: VERINT SYSTEMS LTD.Inventor: Naomi Frid
-
Publication number: 20120213074Abstract: Methods and systems for managing the actions that are applied to packet flows by packet processing systems. A packet processing system maintains a flow table, i.e., a list of active flows and respective actions to be applied to the flows. The system classifies each incoming packet into a respective flow, and processes the packet in accordance with the action that is specified for this flow in the flow table. Typically, the system deletes a packet flow from the flow table when it becomes inactive, e.g., when no packets belonging to the flow arrive within a certain time-out period.Type: ApplicationFiled: January 25, 2012Publication date: August 23, 2012Applicant: VERINT SYSTEMS LTD.Inventors: Eithan Goldfarb, Yuval Altman, Naomi Frid, Gur Yaari
-
Patent number: 6693874Abstract: An H.323 client terminal (102) according to an embodiment of the invention employs primary and secondary H.323 control units or state machines (110a, 110b). The primary control unit (110a) sends signaling messages to a primary gatekeeper (108a) and triggers the secondary control unit (110b) to send a message with an appropriate correlation identifier to a secondary gatekeeper (108b). The primary control unit (110a) establishes a call per standard H.323 protocols. The secondary control unit (110b) also establishes a call via a secondary gatekeeper (108b). However, no media channels are established for this back up call. As the secondary control unit (110b) receives signaling from the secondary gatekeeper (108b), it checks the status of the call with the primary control unit (110a). If the call signaling on the primary control unit (110a) is proceeding normally, no further action is taken. If the call signaling with the primary gatekeeper (108a) fails, the secondary control unit (110b) takes over communication.Type: GrantFiled: May 26, 1999Date of Patent: February 17, 2004Assignee: Siemens Information & Communication Networks, Inc.Inventors: Shmuel Shaffer, Uzi Shalev, Naomi Frid Ruppin, William J. Beyda