Abstract: Multi-virtualization scheme selection can include determining a number of virtualization schemes between a number of nodes. Multi-virtualization scheme selection can also include analyzing a number of properties of communication between the number of nodes. Furthermore, multi-virtualization scheme selection can include selecting a virtualization scheme for the communication between the number of nodes based on the number of properties of the communication.

Abstract: A method of dynamically applying a control policy to a network is described. A network layer of a plurality of network layers associated with user traffic is determined. A portion of a control policy corresponding to the network layer and the user traffic is accessed. Then, the portion is sent to a security device associated with the network layer, the portion being configured to be applied by the security device to the network layer and the user traffic.

Abstract: A method of managing security in a network is described. A data anomaly at a first location on a network is detected. A source of this data anomaly is identified. The source is compared with a plurality of access control policies, wherein each of the plurality of access control policies comprises at least one access restriction instruction associated with one or more sources. Based on the comparing, the source is associated with a corresponding one of the plurality of access control policies.

Abstract: A remote network device having a network security policy, includes: a firewall component embedded within the network device to filter data flow with a network; a user-defined network security policy for the firewall component to define constraints on data flows permitted by the network device; and a failsafe protocol to enable remote control of the device independent of the user-defined network security policy and the firewall filter.

Abstract: A headless appliance includes a network chassis management interface determiner configured to determine a network chassis management interface. The headless appliance is configured to be disposed in a network chassis. The headless appliance also includes a management interface command mapping configured to associate commands of the network chassis management interface to commands of a headless appliance management interface.

Abstract: A method of dynamically applying a control policy to a network is described. A network layer of a plurality of network layers associated with user traffic is determined. A portion of a control policy corresponding to the network layer and the user traffic is accessed. Then, the portion is sent to a security device associated with the network layer, the portion being configured to be applied by the security device to the network layer and the user traffic.

Abstract: A method of managing security in a network is described. A data anomaly at a first location on a network is detected. A source of this data anomaly is identified. The source is compared with a plurality of access control policies, wherein each of the plurality of access control policies comprises at least one access restriction instruction associated with one or more sources. Based on the comparing, the source is associated with a corresponding one of the plurality of access control policies.

Abstract: A remote network device having a network security policy, includes: a firewall component embedded within the network device to filter data flow with a network; a user-defined network security policy for the firewall component to define constraints on data flows permitted by the network device; and a failsafe protocol to enable remote control of the device independent of the user-defined network security policy and the firewall filter.

Abstract: Disclosed are systems and methods for seeding a random number generator, comprising retrieving a first data block from a memory; initially seeding the random number generator using the first data block as a seed; retrieving a number generated by the random number generator; mapping the number to a memory address in the memory using a mathematical function; retrieving a successive data block from the memory address; and successively seeding the random number generator with a combination of the seed and the successive data block such that the combination of the seed and the successive data block becomes a resulting seed.