Abstract: A given packet of the packetized data flow of packets is received. The given packet (145) is selectively discarded depending on at least one of the flow history of the packetized data flow and up pseudorandom test. In some embodiments, the selectively discarding is selectively executed of the given packet is at least partially overlapping with at least one further packet of the packetized data flow. Such techniques may find particular application in network-based intrusion prevention systems.

Abstract: A hardware system for signature matching in a distributed network is disclosed. The hardware system comprises a network processor and a memory. The network processor is configured to perform horizontal compression on a state table using bitmaps, wherein the state table has a plurality of states and state transitions. The processor is also configured to perform a first grouping of states of the state table using the bitmaps to generate a first one or more sets of states, perform a second grouping of states of the state table based on the first one or more sets of states and a transition threshold to generate a second one or more sets of states, perform a conquer step grouping of the states of the state table based on the second one or more sets of states and conquer criteria to generate third one or more sets of states, and generate a two dimensioned compressed state table based on the third one or more sets of states. The memory circuit is configured to store the two dimensioned compressed state table.

Abstract: Provided in some embodiments are systems and methods for determining a data flow path including a plurality of network devices for routing data from a first network device to a second network device; determining for the network devices one or more flow rules that specify an input for receiving data, an output for outputting data, and a role tag indicative of a role of a network device, where the role tag for one or more flow rules for a first network device of the network devices indicates a source role; distributing, to the network devices, the one or more flow rules; determining malicious activity on the data flow path; determining that the first network device is a source based at least in part on the role tag for the first network device; and sending, to the first network device, a blocking flow rule to inhibit routing of malicious data.

Abstract: A mobile device including: a position locator; a user data engine; and a reputation engine client configured to: receive a location from the position locator; operate the user data engine to provide a user profile, intent, and context data for a user, the context data including dynamic factors about the user, and the profile including relative factors about the user that are relatively static with respect to the context data from the user data engine; and determine a reputation for the location, wherein the reputation is based at least in part on a combination of the user profile, intent, and context.

Abstract: A signature matching hardware accelerator system comprising one or more hardware accelerator circuits, wherein each of the hardware accelerator circuit utilizes a compressed deterministic finite automata (DFA) comprising a state table representing a database of digital signatures defined by a plurality of states and a plurality of characters, wherein the plurality of states are divided into groups, each group comprising a leader state having a plurality of leader state transitions and one or more member states, each having a plurality of member state transitions is disclosed. The hardware accelerator circuit comprises a memory circuit configured to store the leader state transitions within each group of the compressed DFA, only the member state transitions that are different from the leader state transitions for a respective character within each group of the compressed DFA and a plurality of member transition bitmasks associated respectively with the plurality of member state transitions.

Abstract: A signature matching hardware accelerator system comprising one or more hardware accelerator circuits, wherein each of the hardware accelerator circuit utilizes a compressed deterministic finite automata (DFA) comprising a state table representing a database of digital signatures defined by a plurality of states and a plurality of characters, wherein the plurality of states are divided into groups, each group comprising a leader state having a plurality of leader state transitions and one or more member states, each having a plurality of member state transitions is disclosed. The hardware accelerator circuit comprises a memory circuit configured to store a single occurrence of a most repeated leader state transition within each group, the unique leader state transitions comprising the leader state transitions that are different from the most repeated leader state transition within the respective group; and leader transition bitmasks associated respectively with the leader states within each group.

Abstract: In an example, one or more computing devices operate to provide a context-aware reputation of a place, such as in relation to a human user. Context may include the user's identity and purpose, as well as environmental factors such as time of day, weather, and political drivers. The device may communicate with a server to receive globalized safety intelligence. When the user enters a zone, the device may determine a context-sensitive reputation, such as “Green,” “Yellow,” or “Red.” Depending on the reputation, the device may then take an appropriate action, such as warning the user or providing additional information.

Abstract: Systems and methods for interchange rate processing are provided. An interchange rate processing computing device is configured to receive transaction messages from one or more acquiring banks. Each transaction message may contain transaction data corresponding to a payment card transaction. The interchange rate processing computing device may analyze the transaction data to identify one or more one or more transaction characteristics. Based on the transaction characteristics, the interchange rate processing computing device may identify a lowest valid interchange rate for the payment card transaction and determine a corresponding interchange rate designator. The interchange rate processing computing device may then generate an enhanced transaction message including the transaction data and the interchange rate designator and transmit the enhanced transaction message to a payment processor, issuing bank, or other entity in a payment processing network.

Abstract: In an example, one or more computing devices operate to provide a context-aware reputation of a place, such as in relation to a human user. Context may include the user's identity and purpose, as well as environmental factors such as time of day, weather, and political drivers. The device may communicate with a server to receive globalized safety intelligence. When the user enters a zone, the device may determine a context-sensitive reputation, such as “Green,” “Yellow,” or “Red.” Depending on the reputation, the device may then take an appropriate action, such as warning the user or providing additional information.

Abstract: This invention relates to the use of alkyl amido quaternary ammonium salts, and formulations thereof, as thickening agents in aqueous based fluids, especially those used in oil field applications. The quaternary ammonium salts of the present invention exhibit improved gelling characteristics.

Abstract: According to the present invention, methods and apparatus are provided to allow efficient and effective aggregation of ports into port channels in a fiber channel network. A local fiber channel switch can automatically identify compatible ports and initiate exchange sequences with a remote fiber channel switch to aggregate ports into port channels. Ports can be aggregated synchronously to allow consistent generation of port channel map tables.

Abstract: This invention relates to the use of alkyl amido quaternary ammonium salts, and formulations thereof, as thickening agents in aqueous based fluids, especially those used in oil field applications. The quaternary ammonium salts of the present invention exhibit improved gelling characteristics.

Abstract: This invention relates to the use of alkyl amido quaternary ammonium salts, and formulations thereof, as thickening agents in aqueous based fluids, especially those used in oil field applications. The quaternary ammonium salts of the present invention exhibit improved gelling characteristics.

Abstract: The present invention relates to a gelled hydrocarbon fluid useful as a fracturing fluid in subterranean formations comprising at least one gelling agent which is a salt of a carboxylic acid having from about 6 to about 30 carbon atoms. An activator which is a difunctional and/or trifunctional carboxylic acid is preferably added to control gel time.