Abstract: A method for identifying devices in a computer network includes collecting data points including device related parameters/information from a device accessing network resources, determining a string distance between the set of collected data points with the data sets collected from previously known network devices and selecting the smallest string distance value and/or highest similarity score. If the determined string distance to the data set of the closest device exceeds a threshold value, the device accessing the network resources is new and its entry can be created. If the determined string distance is under a predetermined threshold value, it is determined that the device accessing the network resources is the device having the closest string distance value to the collected set of data points, and the values in a database and/or the network element of the previously known device can be updated based on the collected set of data points.

Abstract: A method of monitoring traffic by a router acting as a gateway between a first and second network is described. The router can receive data packets sent from the first device over the TCP connection and can send a TCP ACK packet to the first device in response to each data packet. The data packets can be stored without sending them to the second device. The stored data packets can be examined in order to determine whether to block or allow the TCP connection. In the event that it is determined to allow the TCP connection, the router can send each of the stored data packets to the second device. In the event that it is determined to block the TCP connection, the router can send a TCP RST message to each of the first and second devices in order to close the TCP connection.

Abstract: A method for identifying devices in a computer network includes collecting data points including device related parameters/information from a device accessing network resources, determining a string distance between the set of collected data points with the data sets collected from previously known network devices and selecting the smallest string distance value and/or highest similarity score. If the determined string distance to the data set of the closest device exceeds a threshold value, the device accessing the network resources is new and its entry can be created. If the determined string distance is under a predetermined threshold value, it is determined that the device accessing the network resources is the device having the closest string distance value to the collected set of data points, and the values in a database and/or the network element of the previously known device can be updated based on the collected set of data points.

Abstract: There is provided a network security method in a computer network. The method comprises detecting, by a gateway computer, a target device being connected to the computer network, detecting the target device transmitting a DNS query for resolving a hostname into an IP address, transmitting a query to a content rating system, wherein the query comprises the resolved hostname related to the DNS query of the target device, receiving, from the content rating system, a list of categorization categories assigned to the resolved hostname, determining a type of the target device on the basis of the received list of categorization categories assigned to the hostname, and generating a security related decision on the basis of the determined type of the target device.

Abstract: There is provided a network security method in a computer network. The method comprises detecting, by a gateway computer, a target device being connected to the computer network, detecting the target device transmitting a DNS query for resolving a hostname into an IP address, transmitting a query to a content rating system, wherein the query comprises the resolved hostname related to the DNS query of the target device, receiving, from the content rating system, a list of categorization categories assigned to the resolved hostname, determining a type of the target device on the basis of the received list of categorization categories assigned to the hostname, and generating a security related decision on the basis of the determined type of the target device.

Abstract: A method of monitoring traffic, the method being carried out by a router acting as a gateway between a first and second network, the method comprising: after establishment of a TCP connection between a first device on the first network and a second device on the second network: receiving a plurality of data packets sent from the first device over the TCP connection; sending a TCP ACK packet to the first device in response to each data packet of the plurality of data packets; storing said data packets without sending them to the second device; examining at least part of the plurality of the stored data packets in order to determine whether to block or allow the TCP connection; in the event that it is determined to allow the TCP connection: sending each of the stored data packets to the second device; in the event that it is determined to block the TCP connection: sending a TCP RST message to each of the first and second devices in order to close the TCP connection.

Abstract: According to an aspect of the invention, there is provided a method of protecting a user from a compromised web resource. The method may include monitoring a user's requests for trusted web resources to determine one or more web resources to be checked. The method may include querying a network database based on the determined one or more web resources to obtain historical data relating to whether any of the one or more web resources has been compromised at any time during a preceding time period. The method may include providing a predetermined response to protect the user if any of the one or more web resources has been compromised.

Abstract: According to an aspect of the invention, there is provided a method of protecting a user from a compromised web resource. The method may include monitoring a user's requests for trusted web resources to determine one or more web resources to be checked. The method may include querying a network database based on the determined one or more web resources to obtain historical data relating to whether any of the one or more web resources has been compromised at any time during a preceding time period. The method may include providing a predetermined response to protect the user if any of the one or more web resources has been compromised.

Abstract: A method for evaluating distance from a first point to a second point. The method includes the steps of generating a periodic binary sequence, generating a harmonic modulation signal, generating a modulated light signal at a range finding device, wherein the modulated light signal is generated based upon the periodic binary sequence and the harmonic modulation signal, transmitting the modulated light signal from the first point toward an object at the second point, receiving a reflected light signal from the object, and determining a distance between the first point and the second point based upon a phase evaluation of periodic binary sequence and harmonic modulation signal of both the transmitted light signal and the received light signal.

Abstract: A method for evaluating distance from a first point to a second point. The method includes the steps of generating a periodic binary sequence, generating a harmonic modulation signal, generating a modulated light signal at a range finding device, wherein the modulated light signal is generated based upon the periodic binary sequence and the harmonic modulation signal, transmitting the modulated light signal from the first point toward an object at the second point, receiving a reflected light signal from the object, and determining a distance between the first point and the second point based upon a phase evaluation of periodic binary sequence and harmonic modulation signal of both the transmitted light signal and the received light signal.