Abstract: The present invention generally relates to network-attack-resilient intrusion-tolerant Supervisory Control and Data Acquisition (SCADA) systems. Some implementations utilize redundant, proactively-recovery-configured servers at multiple centers communally executing a replication protocol. Some implementations, in addition to control centers, include data centers, which participate in the replication protocol, except that they may not be capable of controlling remote units such as Remote Terminal Units (RTUs).

Abstract: A packet recovery transmits N requests for retransmission of the transmitted packet to the sender node at N scheduled times upon determining satisfaction of a packet recovery condition associated with a transmitted packet from a sender node at a receiver node. At least one of the N scheduled times includes a receiver waiting time. M retransmissions of the transmitted packet from sender node at M scheduled times is performed upon the first receipt of a request for retransmission of the transmitted packet. At least one of the M scheduled times includes a sender waiting time. N and M are non-zero positive integers, and at least one of N or M is greater than one.

Abstract: Systems, computer readable media, and method concern assigning an abstraction representation to data associated with a system of the SCADA environment. The method also includes providing the abstraction representation to a control system associated with the system of the SCADA environment. The control system is implemented in a computer system. Further, the method includes receiving actual data from the system of the SCADA environment. Additionally, the method includes generating abstract data from the actual data using the abstraction representation. The method, also includes forwarding the abstract data to the control system.

Abstract: Systems, computer readable media, and method concern assigning an abstraction representation to data associated with a system of the SCADA environment. The method also includes providing the abstraction representation to a control system associated with the system of the SCADA environment. The control system is implemented in a computer system. Further, the method includes receiving actual data from the system of the SCADA environment. Additionally, the method includes generating abstract data from the actual data using the abstraction representation. The method, also includes forwarding the abstract data to the control system.

Abstract: The present invention generally relates to network-attack-resilient intrusion-tolerant Supervisory Control and Data Acquisition (SCADA) systems. Some implementations utilize redundant, proactively-recovery-configured servers at multiple centers communally executing a replication protocol. Some implementations, in addition to control centers, include data centers, which participate in the replication protocol, except that they may not be capable of controlling remote units such as Remote Terminal Units (RTUs).

Abstract: A routing system and method for flows within a network provides multicast flow transport for one or more groups. Transit routers comprising processing units that run overlay processes route one or more flows based on overlay group identifiers. Access nodes issue requests for overlay groups in order to receive flows from the transit routers. The overlay processes utilize a mapping service that maps overlay group identifiers to native multicast group identifiers. A control channel between the access nodes and transit routers is used for communicating access nodes requests, overlay group identifiers, and native multicast group identifiers.

Abstract: A routing protocol is used to transmit messages from a sender to a receiver over a network of nodes, where adversaries can control links between the nodes and can also control the behavior of a large number of nodes. Various techniques can be used, along or in combination, to combat these effects. In one approach, certain trigger conditions are identified, the occurrence of which signals malicious behavior within the network. When signaled, the sender requests status reports from the intermediate nodes in an effort to determine which nodes are malicious. The information for the status reports is generated by nodes as packets are passed from one node to the next.

Abstract: A routing system and method for flows within a network provides multicast flow transport for one or more groups. Transit routers comprising processing units that run overlay processes route one or more flows based on overlay group identifiers. Access nodes issue requests for overlay groups in order to receive flows from the transit routers. The overlay processes utilize a mapping service that maps overlay group identifiers to native multicast group identifiers. A control channel between the access nodes and transit routers is used for communicating access nodes requests, overlay group identifiers, and native multicast group identifiers.

Abstract: A packet recovery transmits N requests for retransmission of the transmitted packet to the sender node at N scheduled times upon determining satisfaction of a packet recovery condition associated with a transmitted packet from a sender node at a receiver node. At least one of the N scheduled times includes a receiver waiting time. M retransmissions of the transmitted packet from sender node at M scheduled times is performed upon the first receipt of a request for retransmission of the transmitted packet. At least one of the M scheduled times includes a sender waiting time. N and M are non-zero positive integers, and at least one of N or M is greater than one.

Abstract: A Flow Transport and Delivery Network (FTDN) supports delivery and transport of flows to destination nodes over parallel overlay networks. Overlay nodes executing overlay processes create and maintain one or more overlay networks. A plurality of sites are connected to each other via the parallel overlay networks with each site comprising one or more transit routers that route the flows to the destination nodes.

Abstract: A routing system and method for flows within a network provides multicast flow transport for one or more groups. Transit routers comprising processing units that run overlay processes route one or more flows based on overlay group identifiers. Access nodes issue requests for overlay groups in order to receive flows from the transit routers. The overlay processes utilize a mapping service that maps overlay group identifiers to native multicast group identifiers. A control channel between the access nodes and transit routers is used for communicating access nodes requests, overlay group identifiers, and native multicast group identifiers.

Abstract: The present invention relates to a packet recovery method for packets communicated between sender and receiver nodes of an overlay network that runs over an underlying IP network. The present invention executes a packet recovery process at a receiver node upon satisfaction of a packet recovery condition that is associated with meeting a deadline driven criteria for a transmitted packet. The packet recovery process associates N number of scheduled times with N requests for retransmission of the transmitted packet. At least one of the N scheduled times includes a receiver waiting time. At each N scheduled time, a request for retransmission of the transmitted packet is transmitted to a source node. A packet retransmission process at the sender node is executed upon the first receipt of a request for retransmission of the transmitted packet.

Abstract: The present invention relates to a system and method that delivers content from one or more content sources to a plurality of subscriber units via a flow transport subsystem that transports content flows originated from the one or more content sources over a wide area network in response to one or more requests for deadline-driven content flows. E.g., live or interactive flows. One or more gateways interface with the flow transport subsystem for receiving the deadline-driven content flows. Each of the one or more gateways is associated with one or more subscriber units and is selected based on one or more requests for deadline-driven content flows. A content processor converts the deadline-driven content flows to modulated content flows, and a flow delivery subsystem delivers the modulated content flows to one or more subscriber units associated with a selected gateway over an allocated frequency bandwidth of one or more transmission mediums.

Abstract: A routing system and method for flows within a network provides multicast flow transport for one or more groups. Transit routers comprising processing units that run overlay processes route one or more flows based on overlay group identifiers. Access nodes issue requests for overlay groups in order to receive flows from the transit routers. The overlay processes utilize a mapping service that maps overlay group identifiers to native multicast group identifiers. A control channel between the access nodes and transit routers is used for communicating access nodes requests, overlay group identifiers, and native multicast group identifiers.

Abstract: A routing protocol is used to transmit messages from a sender to a receiver over a network of nodes, where adversaries can control links between the nodes and can also control the behavior of a large number of nodes. Various techniques can be used, along or in combination, to combat these effects. In one approach, certain trigger conditions are identified, the occurrence of which signals malicious behavior within the network. When signaled, the sender requests status reports from the intermediate nodes in an effort to determine which nodes are malicious. The information for the status reports is generated by nodes as packets are passed from one node to the next.

Abstract: The present invention relates to a packet recovery method for packets communicated between sender and receiver nodes of an overlay network that runs over an underlying IP network. The present invention executes a packet recovery process at a receiver node upon satisfaction of a packet recovery condition that is associated with meeting a deadline driven criteria for a transmitted packet. The packet recovery process associates N number of scheduled times with N requests for retransmission of the transmitted packet. At least one of the N scheduled times includes a receiver waiting time. At each N scheduled time, a request for retransmission of the transmitted packet is transmitted to a source node. A packet retransmission process at the sender node is executed upon the first receipt of a request for retransmission of the transmitted packet.

Abstract: The present invention relates to a system and method that delivers content from one or more content sources to a plurality of subscriber units via a flow transport subsystem that transports content flows originated from the one or more content sources over a wide area network in response to one or more requests for deadline-driven content flows. E.g., live or interactive flows. One or more gateways interface with the flow transport subsystem for receiving the deadline-driven content flows. Each of the one or more gateways is associated with one or more subscriber units and is selected based on one or more requests for deadline-driven content flows. A content processor converts the deadline-driven content flows to modulated content flows, and a flow delivery subsystem delivers the modulated content flows to one or more subscriber units associated with a selected gateway over an allocated frequency bandwidth of one or more transmission mediums.

Abstract: A Flow Transport and Delivery Network (FTDN) supports delivery and transport of flows to destination nodes over parallel overlay networks. Overlay nodes executing overlay processes create and maintain one or more overlay networks. A plurality of sites are connected to each other via the parallel overlay networks with each site comprising one or more transit routers that route the flows to the destination nodes.

Abstract: A system for maximal gathering of fresh information added to a network such as the as the Internet and for processing the gathered fresh information. A link server (2) sends a batch of links to check (3) to a crawler (1B). Crawler (1B) them executes its crawling assignment by filtering the encountered content and extracting only that which is new or changed (4). Crawler (1B) then returns this content (4) to at least one data center and any interested web mining application (5). By using the crawlers (1A-E) to filter the data and only return or notify regarding, the fresh content, less bandwidth is needed to get the information to the web mining application (5).

Abstract: A system for maximal gathering of fresh information added to a network such as the as the Internet and for processing the gathered fresh information. A link server (2) sends a batch of links to check (3) to a crawler (1B). Crawler (1B) them executes its crawling assignment by filtering the encountered content and extracting only that which is new or changed (4). Crawler (1B) then returns this content (4) to at least one data center and any interested web mining application (5). By using the crawlers (1A-E) to filter the data and only return or notify regarding, the fresh content, less bandwidth is needed to get the information to the web mining application (5).