Abstract: Systems, methods, and software described herein provide enhancements for orbital satellite platforms. In one example, an orbital satellite platform includes a plurality of satellite devices each comprising a virtualized execution system configured to execute one or more software payloads as associated virtual nodes. An active satellite device is provided among the plurality of satellite devices and is configured to execute at least an active virtual node, determine state information related to the execution of the active virtual node, and periodically update the state information in a storage satellite device. The storage satellite device is configured to select a level of statefulness for delivery of the state information to a peer satellite device designated as an operational backup for the active satellite device.

Abstract: Systems, methods, and software described herein provide enhancements for deploying software applications in satellites. In one example, a control system may receive user input indicative of deployment requirements for a software application, and identify an availability of resources in a plurality of satellites deployed as an orbiting satellite platform. The control system further determines deployment options for deployment of the software application based on the deployment requirements and the availability of resources in the plurality of satellites, and provides the deployment options to a developer of the software application.

Abstract: Systems, methods, and software described herein provide enhancements for deploying applications in satellites. In one example, a satellite may receive software applications capable of execution as virtual nodes on the satellite, and receive a resource schedule associated with the software applications. The satellite may further execute the software applications on the satellite based on the resource schedule, wherein the resource schedule allocates processing resources and user sensor resources to the software applications.

Abstract: Systems, methods, and software described herein provide enhancements for deploying applications in satellites. In one example, a satellite may receive software applications capable of execution as virtual nodes on the satellite, and receive a resource schedule associated with the software applications. The satellite may further execute the software applications on the satellite based on the resource schedule, wherein the resource schedule allocates processing resources and user sensor resources to the software applications.

Abstract: Embodiments disclosed herein provide systems and methods for distributing applications to virtual machines. In a particular embodiment, a method includes providing a list of one or more attachable applications and receiving a selection indicating at least one application of the one or more attachable applications to be attached to a virtual machine. The method further includes attaching the at least one application to the virtual machine.

Abstract: Objects can be extracted from data flows captured by a capture device. In one embodiment, the invention includes assigning to each captured object a cryptographic status based on whether the captured object is encrypted. In one embodiment, the invention further includes determining whether the object violated a cryptographic policy using the assigned cryptographic status of the object.

Abstract: Objects captured over a network by a capture system can be indexed to provide enhanced search and content analysis capabilities. In one embodiment the objects can be indexed using a data structure having a source address field to indicate an origination address of the object, a destination address field to indicate a destination address of the object, a source port field to indicate an origination port of the object, a destination port field to indicate a destination port of the object, a content field to indicate a content type from a plurality of content types identifying a type of content contained in the object, and a time field to indicate when the object was captured. The data structure may also store a cryptographic signature of the object to ensure the object is not altered after capture.

Abstract: Objects can be extracted from data flows captured by a capture device. Each captured object can then be classified according to content. Meta-data about captured objects can be stored in a tag. In one embodiment, the present invention includes receiving a request to present a previously captured object to a user, accessing a tag associated with the requested object, the tag containing metadata related to the object, the metadata including an object signature, and verifying that the object has not been altered since capture using the object signature before presenting the object to the user.

Abstract: Objects captured over a network by a capture system can be indexed to provide enhanced search and content analysis capabilities. In one embodiment the objects can be indexed using a data structure having a source address field to indicate an origination address of the object, a destination address field to indicate a destination address of the object, a source port field to indicate an origination port of the object, a destination port field to indicate a destination port of the object, a content field to indicate a content type from a plurality of content types identifying a type of content contained in the object, and a time field to indicate when the object was captured. The data structure may also store a cryptographic signature of the object to ensure the object is not altered after capture.

Abstract: Objects can be extracted from data flows captured by a capture device. In one embodiment, the invention includes assigning to each captured object a cryptographic status based on whether the captured object is encrypted. In one embodiment, the invention further includes determining whether the object violated a cryptographic policy using the assigned cryptographic status of the object.

Abstract: Objects can be extracted from data flows captured by a capture device. In one embodiment, the invention includes assigning to each captured object a cryptographic status based on whether the captured object is encrypted. In one embodiment, the invention further includes determining whether the object violated a cryptographic policy using the assigned cryptographic status of the object.

Abstract: Objects captured over a network by a capture system can be indexed to provide enhanced search and content analysis capabilities. In one embodiment the objects can be indexed using a data structure having a source address field to indicate an origination address of the object, a destination address field to indicate a destination address of the object, a source port field to indicate an origination port of the object, a destination port field to indicate a destination port of the object, a content field to indicate a content type from a plurality of content types identifying a type of content contained in the object, and a time field to indicate when the object was captured. The data structure may also store a cryptographic signature of the object to ensure the object is not altered after capture.

Abstract: Objects can be extracted from data flows captured by a capture device. Each captured object can then be classified according to content. Meta-data about captured objects can be stored in a tag. In one embodiment, the present invention includes receiving a request to present a previously captured object to a user, accessing a tag associated with the requested object, the tag containing metadata related to the object, the metadata including an object signature, and verifying that the object has not been altered since capture using the object signature before presenting the object to the user.

Abstract: Objects can be extracted from data flows captured by a capture device. Each captured object can then be classified according to content. Meta-data about captured objects can be stored in a tag. In one embodiment, the present invention includes receiving a request to present a previously captured object to a user, accessing a tag associated with the requested object, the tag containing metadata related to the object, the metadata including an object signature, and verifying that the object has not been altered since capture using the object signature before presenting the object to the user.

Abstract: Objects can be extracted from data flows captured by a capture device. Each captured object can then be classified according to content. Meta-data about captured objects can be stored in a tag. In one embodiment, the present invention includes receiving a request to present a previously captured object to a user, accessing a tag associated with the requested object, the tag containing metadata related to the object, the metadata including an object signature, and verifying that the object has not been altered since capture using the object signature before presenting the object to the user.

Abstract: Objects can be extracted from data flows captured by a capture device. In one embodiment, the invention includes assigning to each captured object a cryptographic status based on whether the captured object is encrypted. In one embodiment, the invention further includes determining whether the object violated a cryptographic policy using the assigned cryptographic status of the object.

Abstract: In one embodiment, objects captured over a network can be queried using a graphical user interface. In one embodiment, the graphical user interface (GUI) includes a search editor to enable a user to author and edit a search that mines objects captured by a capture system. In one embodiment, the graphical user also includes a capture rule editor a to enable a user to author and edit a capture rule used by the capture system to intercept objects transmitted over a network.

Abstract: Objects captured over a network by a capture system can be indexed to provide enhanced search and content analysis capabilities. In one embodiment the objects can be indexed using a data structure having a source address field to indicate an origination address of the object, a destination address field to indicate a destination address of the object, a source port field to indicate an origination port of the object, a destination port field to indicate a destination port of the object, a content field to indicate a content type from a plurality of content types identifying a type of content contained in the object, and a time field to indicate when the object was captured. The data structure may also store a cryptographic signature of the object to ensure the object is not altered after capture.