Patents by Inventor Rafi Tzadikario

Rafi Tzadikario has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Protection against reflection distributed denial of service attacks
    Patent number: 8156557
    Abstract: A method includes monitoring outgoing request packets transmitted by a node in a protected network over a link connecting the protected network to an external network. Incoming response packets that originate in the external network and are destined for transmission to the node are also monitored. One or more of the incoming response packets that were not solicited by any of the outgoing request packets are identified responsively to monitoring the outgoing request packets and the incoming response packets. A characteristic that differentiates between the identified incoming response packets and the incoming response packets that were solicited by the outgoing request packets is determined. A guard device in the external network is instructed to inhibit the transmission over the link of subsequent unsolicited response packets based on the characteristic.
    Type: Grant
    Filed: January 4, 2007
    Date of Patent: April 10, 2012
    Assignee: Cisco Technology, Inc.
    Inventors: Dan Touitou, Darrel Lewis, Rafi Tzadikario, Karen Horowitz
  • Protection against reflection distributed denial of service attacks
    Publication number: 20080168559
    Abstract: A method includes monitoring outgoing request packets transmitted by a node in a protected network over a link connecting the protected network to an external network. Incoming response packets that originate in the external network and are destined for transmission to the node are also monitored. One or more of the incoming response packets that were not solicited by any of the outgoing request packets are identified responsively to monitoring the outgoing request packets and the incoming response packets. A characteristic that differentiates between the identified incoming response packets and the incoming response packets that were solicited by the outgoing request packets is determined. A guard device in the external network is instructed to inhibit the transmission over the link of subsequent unsolicited response packets based on the characteristic.
    Type: Application
    Filed: January 4, 2007
    Publication date: July 10, 2008
    Inventors: Dan Touitou, Darrel Lewis, Rafi Tzadikario, Karen Horowitz