Abstract: A security appliance samples data about software defined infrastructures (SDIs) of a cloud computing environment to incrementally build models that map resource attributes indicated in fields to data types. The security appliance uses the model(s) to provide context sensitive help in policy rule constructions.

Abstract: A security appliance samples data about software defined infrastructures (SDIs) of a cloud computing environment to incrementally build models that map resource attributes indicated in fields to data types. The security appliance uses the model(s) to provide context sensitive help in policy rule constructions.

Abstract: A security appliance monitors streams of events and detects anomalous behavior by users with respect to software defined infrastructure. The security appliance creates baselines of activities for each user. After generating baselines, the security appliance compares events to the activity baselines of users to detect deviations. If a deviation is detected, then a violation report is generated.

Abstract: A security appliance is used to evaluate the software defined infrastructure. The security appliance includes a data ingestion and query engine. The data ingestion and query engine is configured to retrieve data associated with a resource in the software defined infrastructure, the data stored in a tree structure, extract selective information for the resource from the retrieved data, and generate a NI model for the resource, with the NI model including a plurality of fields and associated value types. A path document for each of the fields is generated, with the path document including a plurality of attributes related to the resource in the software defined infrastructure. The generated path document for each of the fields of the NI model is stored in a data store of the security appliance.

Abstract: A security appliance is used to evaluate the software defined infrastructure. The security appliance includes a data ingestion and query engine. The data ingestion and query engine is configured to retrieve data associated with a resource in the software defined infrastructure, the data stored in a tree structure, extract selective information for the resource from the retrieved data, and generate a NI model for the resource, with the NI model including a plurality of fields and associated value types. A path document for each of the fields is generated, with the path document including a plurality of attributes related to the resource in the software defined infrastructure. The generated path document for each of the fields of the NI model is stored in a data store of the security appliance.

Abstract: A security appliance is used to evaluate a software defined infrastructure. The security appliance includes a data ingestion and query engine. The data ingestion and query engine are configured to retrieve configuration and operational information associated with the software defined infrastructure, extract selective information from the retrieved configuration and operational information, and store extracted selective information in a plurality of data store. A policy compliance engine is configured to evaluate selectively stored information for compliance to a policy and generate a report based on the evaluation. The configuration and operational information include information related to asset configuration, audit event indicative of an initiation of an infrastructure related activity for the software defined infrastructure and network communication associated with the software defined infrastructure.

Abstract: A system and method to evaluate a software defined infrastructure is disclosed. A security appliance is used to evaluate the software defined infrastructure. The security appliance includes a data ingestion and query engine. The data ingestion and query engine is configured to retrieve configuration and operational information associated with the software defined infrastructure, extract selective information from the retrieved configuration and operational information, and store extracted selective information in a plurality of data store. A policy compliance engine is configured to evaluate selectively stored information for compliance to a policy and generate a report based on the evaluation.

Abstract: A cloud security service is made available to endpoint computers. Network traffic from originating application programs running on endpoint computers are redirected to the cloud security service based on characteristics of the originating application programs. Network traffic from an originating application program may be redirected to the cloud security service by way of a virtual private network (VPN) tunnel or generic routing encapsulation (GRE) tunnel between an endpoint computer and a cloud computing system hosting the cloud security service, for example. Network traffic from an originating application program may also be routed from an endpoint computer to a gateway system, and then redirected from the gateway system to the cloud computing system. The cloud security service may drop or forward network packets of the network traffic depending on a result of scanning the network packets.

Abstract: A technique for web filtering includes monitoring and recording completed DNS (domain name service) transactions involving a user computer. The user computer may thereafter issue an HTTP (hypertext transport protocol) request to a remote server computer, with the HTTP request including an IP address of the server computer instead of its domain name. The HTTP request may be correlated with the recorded completed DNS transactions to obtain the domain name of the server computer. The domain name of the server computer may be employed to determine the reputation of the domain name for web filtering purposes.

Abstract: A cloud security service is made available to endpoint computers. Network traffic from originating application programs running on endpoint computers are redirected to the cloud security service based on characteristics of the originating application programs. Network traffic from an originating application program may be redirected to the cloud security service by way of a virtual private network (VPN) tunnel or generic routing encapsulation (GRE) tunnel between an endpoint computer and a cloud computing system hosting the cloud security service, for example. Network traffic from an originating application program may also be routed from an endpoint computer to a gateway system, and then redirected from the gateway system to the cloud computing system. The cloud security service may drop or forward network packets of the network traffic depending on a result of scanning the network packets.

Abstract: A network application control system is employed to classify unknown computer network traffic. The system includes a firewall computer with a network filter that filters network traffic generated by endpoint computers running local processes. The system may also include a management computer with an endpoint management server that manages endpoint agents running in the endpoint computers. Unknown network traffic is analyzed to generate a pattern matching signature and a policy recommendation. The policy recommendation may be applied to subsequently received network traffic matching the signature.

Abstract: The present invention provides isolated monoclonal antibodies that selectively bind albumin from animals. Also provided are methods using such antibodies for the detection of early renal disease in animals. The method includes the steps of (a) obtaining a sample from an animal to be tested; (b) contacting the sample with an antibody having a greater avidity for feline albumin than for other proteins or components in the sample; (c) detecting the complex formed by the antibody and albumin; and (d) determining the amount of albumin in the sample from the amount of antibody-albumin complex detected. An amount of albumin in the range of from 10 ?g/ml to about 300 ?g/ml indicates the presence of early renal disease.

Abstract: A system for removing matter from a conduit. The system includes the steps of passing a transport vehicle and a shape memory polymer material through the conduit, transmitting energy to the shape memory polymer material for moving the shape memory polymer material from a first shape to a second and different shape, and withdrawing the transport vehicle and the shape memory polymer material through the conduit carrying the matter.

Abstract: In broad terms, the present invention includes materials and methods useful to distinguish between and among species of a genus. The present methods utilize the differences in PCR amplicon sizes to specifically identify a given species.

Abstract: In broad terms, the present invention includes materials and methods useful to distinguish between and among species of a genus. The present methods utilize the differences in PCR amplicon sizes to specifically identify a given species.

Abstract: This invention relates to a reagent for enzymatic determination of an analyte concentration in a patient wherein the degree of oxidation of a coenzyme is measured, characterized in that said reagent is stabilized against oxidation by a coenzyme reduction system comprising an enzyme and substrate pair selected so as to enable continuous regeneration of said coenzyme throughout storage of said reagent. Also disclosed is an improvement in an enzymatic method of determination of an analyte concentration in a sample body fluid wherein the degree of oxidation of a coenzyme is measured, the improvement comprising stabilizing a reagent comprising said coenzyme against oxidation by a coenzyme reduction system comprising an enzyme and substrate pair selected so as to enable continuous regeneration of said coenzyme throughout storage of said reagent. Also disclosed are reagents for the determination of aspartate aminotransferase, alanine aminotransferase, ammonia and urea.

Abstract: A rasp hub assembly for use in a tire buffing machine is disclosed. The hub assembly includes two end plates, and a set of tire rasp blades and spacers arranged in alternating circumferential rows. The blades and spacers have conforming nonplanar elongated bodies, with the blades nested with adjacent spacers. The resulting rasp hub assembly allows the use of an even or odd number of rasp blades in each row, and provides various benefits further described in the specification.

Abstract: A tire rasp blade for use in a tire buffing machine having a rotating hub. A set of rasp blades is arranged in a plurality of circumferential rows. Each of the blades has a non-planar elongated body with generally planar portions, and an arcuate working edge having teeth which extend in a direction generally parallel to the direction of hub rotation. The working edge includes two elliptical-shaped segments.