Christine Norling Jones

US Patent:

7680139, Mar 16, 2010

Filed:

Mar 23, 2005

Appl. No.:

11/087408

Inventors:

Christine Elaine Jones - Waltham MA, US
Gregory Donald Troxel - Stow MA, US

Assignee:

Verizon Patent and Licensing Inc. - Basking Ridge NJ
BBN Technologies Corp. - Basking Ridge NJ

International Classification:

H04L 12/28
H04L 12/56
H04L 12/26

US Classification:

370414, 3702301, 370231, 370238, 370418

Abstract:

This disclosure relates to methods and systems for queuing traffic in packet-switched networks. In one of many possible embodiments, a queue management system includes a plurality of queues and a priority module configured to assign incoming packets to the queues based on priorities associated with the incoming packets. The priority module is further configured to drop at least one of the packets already contained in the queues. The priority module is configured to operate across multiple queues when determining which of the packets contained in the queues to drop. Some embodiments provide for hybrid queue management that considers both classes and priorities of packets.

US Patent:

7814546, Oct 12, 2010

Filed:

Mar 10, 2005

Appl. No.:

11/077400

Inventors:

William Timothy Strayer - West Newton MA, US
Christine Elaine Jones - Spokane Valley WA, US
Isidro Marcos Castineyra - Somerville MA, US
Regina Rosales Hain - Winchester MA, US

Assignee:

Verizon Corporate Services Group, Inc. - Basking Ridge NJ
Raytheon BBN Technologies Corp. - Basking Ridge NJ

International Classification:

G06F 11/00
G06F 12/14
G06F 12/16
G08B 23/00

US Classification:

726 23

Abstract:

A system and method for determining the point of entry of a malicious packet into a network is disclosed. An intrusion detection system detects entry of the malicious packet into the network (). A stepping stone detection system identifies stepping stones in extended connections within the network (). A traceback engine isolates the malicious packet in response to operation of the intrusion detection system (), wherein the traceback engine utilizes the identified stepping stones to determine the point of entry of the malicious packet.

US Patent:

7854003, Dec 14, 2010

Filed:

Mar 10, 2005

Appl. No.:

11/077341

Inventors:

William Timothy Strayer - West Newton MA, US
Christine Elaine Jones - Spokane Valley WA, US
Isidro Marcos Castineyra - Somerville MA, US
Regina Rosales Hain - Winchester MA, US

Assignee:

Verizon Corporate Services Group Inc. & Raytheon BBN Technologies Corp. - Basking Ridge NJ

International Classification:

G06F 11/00
G06F 12/14
G06F 12/16
G08B 23/00

US Classification:

726 23

Abstract:

A method and system is provided for detecting correlated connections in an extended connection. A plurality of stepping stone detection algorithms are executed in parallel (), each of the plurality of stepping stone detection algorithms generating a result. The results are scored for each of the plurality of stepping stone detection algorithms (). A consensus attack path is generated based upon the scored results ().

US Patent:

8125898, Feb 28, 2012

Filed:

Mar 10, 2005

Appl. No.:

11/077429

Inventors:

William Timothy Strayer - West Newton MA, US
Christine Elaine Jones - Spokane Valley WA, US
Rajesh Krishnan - North Billerica MA, US
Isidro Marcos Castineyra - Somerville MA, US
Regina Rosales Hain - Winchester MA, US

Assignee:

Verizon Corporate Services Group Inc. - Basking Ridge NJ
Ratheon BBN Technologies, Corp. - Cambridge MA

International Classification:

G01R 31/08
H04J 3/24
G06F 15/173
G06F 11/00

US Classification:

370230, 370252, 370474, 709224, 726 23

Abstract:

A method of determining correlated flows in a network may include obtaining times of arrival and corresponding flows for data units in the network () and assigning weights to a set of data units based on respective times between the set of data units and one data unit (). A probability matrix representing interflow connections in the network may be updated based on the assigned weights ().

US Patent:

8204069, Jun 19, 2012

Filed:

Jan 21, 2010

Appl. No.:

12/691310

Inventors:

Christine Elaine Jones - Waltham MA, US
Gregory Donald Troxel - Stow MA, US

Assignee:

Verizon Patent and Licensing Inc. - Basking Ridge NJ
Raytheon BBN Technologies Corp. - Cambridge MA

International Classification:

H04L 12/28
H04L 12/56
H04L 12/26

US Classification:

370414, 3702301, 370231, 370238, 370418

Abstract:

This disclosure relates to methods and systems for queuing traffic in packet-switched networks. In one of many possible embodiments, a queue management system includes a plurality of queues and a priority module configured to assign incoming packets to the queues based on priorities associated with the incoming packets. The priority module is further configured to drop at least one of the packets already contained in the queues. The priority module is configured to operate across multiple queues when determining which of the packets contained in the queues to drop. Some embodiments provide for hybrid queue management that considers both classes and priorities of packets.

US Patent:

20150358279, Dec 10, 2015

Filed:

Mar 14, 2013

Appl. No.:

13/828427

Inventors:

Raytheon BBN Technologies Corp. - , US
Alden Warren Jackson - Brookline MA, US
Christine Elaine Jones - Spokane Valley WA, US
Josh Forrest Karlin - Stow MA, US
Victoria Ursula Manfredi - Cambridge MA, US
David Patrick Mankins - Cambridge MA, US
William Timothy Strayer - West Newton MA, US

Assignee:

Raytheon BBN Technologies Corp. - Cambridge MA

International Classification:

H04L 29/06
H04L 29/08
H04L 12/58

Abstract:

Systems and methods for protecting a network including providing a mapping between internal addresses as seen by devices of the protected network and external addresses; providing devices with a mapped address for a destination in response to a lookup request; rewriting, at a gateway, destination addresses of packets exiting the protected network based on the mapping; and rewriting, at the destination-network gateway, source addresses of packets entering the protected network based on the mapping. Embodiments include a gateway coupled to a protected network, an external network, and a name server. The name server, in response to a hostname lookup request, configured to provide a network device with the internal address; and the gateway with a mapping including the internal address, the addresses of the device, and the hostname. The gateway configured to rewrite destination addresses of outbound packets, and source addresses of inbound packets, based on the mapping.

US Patent:

20150358285, Dec 10, 2015

Filed:

Mar 14, 2013

Appl. No.:

13/828546

Inventors:

Raytheon BBN Technologies Corp. - , US
Alden Warren Jackson - Brookline MA, US
Christine Elaine Jones - Spokane Valley WA, US
Josh Forrest Karlin - Stow MA, US
Victoria Ursula Manfredi - Cambridge MA, US
David Patrick Mankins - Cambridge MA, US
William Timothy Strayer - West Newton MA, US

Assignee:

Raytheon BBN Technologies Corp. - Cambridge MA

International Classification:

H04L 29/06
H04L 29/12

Abstract:

Systems and methods for protecting a network including preventing data traffic from exiting the network unless a domain name request has been performed by a device attempting to transmit the data traffic. In an embodiment, a device within the protected network attempting to send data outside the protected network requests an address for a destination outside the protected network from a domain name server (DNS). In response, the DNS provides an address of the destination to the device and a gateway. In response to receiving the address, the gateway temporarily allows access to the address. In an embodiment, a DNS is coupled to a protected network and the gateway, the DNS provides an external address to a device in response to a request; and a mapping to the gateway; the gateway, coupled to a protected network and an external network, allows traffic according to the mapping.