Craig L Anderson

US Patent:

7624276, Nov 24, 2009

Filed:

Oct 24, 2006

Appl. No.:

11/586446

Inventors:

John Princen - Cupertino CA, US
Pramila Srinivasan - Palo Alto CA, US
Craig Steven Anderson - Sunnyvale CA, US

Assignee:

BroadOn Communications Corp. - Mountain View CA

International Classification:

G06F 21/00

US Classification:

713177, 713193

Abstract:

A technique for security and authentication on block-based media includes involves the use of protected keys, providing authentication and encryption primitives. A system according to the technique may include a secure device having a security kernel with protected keys. A disk drive security mechanism may support authentication of data, secrecy, and ticket validation using the security kernel and, for example, a ticket services module (e. g. , a shared service that may or may not be used by other storage devices like flash).

US Patent:

7930694, Apr 19, 2011

Filed:

Sep 8, 2004

Appl. No.:

10/936901

Inventors:

Craig S. Anderson - Sunnyvale CA, US
Santosh G. Abraham - Pleasanton CA, US
Stevan Vlaovic - Cupertino CA, US

Assignee:

Oracle America, Inc. - Redwood City CA

International Classification:

G06F 9/46
G06F 13/00

US Classification:

718100, 718104, 711150, 711152, 711156

Abstract:

Intelligent prediction of critical sections is implemented using a method comprising updating a critical section estimator based on historical analysis of atomic/store instruction pairs during runtime and performing lock elision when the critical section estimator indicates that the atomic/store instruction pairs define a critical section.

US Patent:

D641886, Jul 19, 2011

Filed:

Mar 10, 2010

Appl. No.:

29/357272

Inventors:

Elvir Causevic - Clayton MO, US
Richard Comrie Watt - Greenwich CT, US
Craig Anderson - Chicago IL, US
Martin Rathgeber - Chicago IL, US
Gregory James Holderfield - Oak Park IL, US
Neil Rothman - Baltimore MD, US

Assignee:

Brainscope Company, Inc. - Bethesda MD

International Classification:

2401

US Classification:

D24187

US Patent:

7991999, Aug 2, 2011

Filed:

Oct 9, 2009

Appl. No.:

12/576243

Inventors:

John Princen - Cupertino CA, US
Pramila Srinivasan - Palo Alto CA, US
Craig Steven Anderson - Sunnyvale CA, US

Assignee:

iGware Inc. - Mountain View CA

International Classification:

H04L 9/00

US Classification:

713170, 713171, 380 28

Abstract:

A technique for security and authentication on block-based media includes involves the use of protected keys, providing authentication and encryption primitives. A system according to the technique may include a secure device having a security kernel with protected keys. A disk drive security mechanism may support authentication of data, secrecy, and ticket validation using the security kernel and, for example, a ticket services module (e. g. , a shared service that may or may not be used by other storage devices like flash).

US Patent:

8205035, Jun 19, 2012

Filed:

Jun 22, 2009

Appl. No.:

12/489215

Inventors:

Anoop Kandi Reddy - Santa Clara CA, US
Craig Steven Anderson - Santa Clara CA, US
Prakash Khemani - Santa Clara CA, US

Assignee:

Citrix Systems, Inc. - Fort Lauderdale FL

International Classification:

G06F 12/08
G06F 15/16

US Classification:

711103, 711118, 711E12017, 726 14, 709227

Abstract:

The present invention is directed towards systems and methods for integrating cache managing and application firewall processing in a networked system. In various embodiments, an integrated cache/firewall system comprises an application firewall operating in conjunction with a cache managing system in operation on an intermediary device. In various embodiments, the application firewall processes a received HTTP response to a request by a networked entity serviced by the intermediary device. The application firewall generates metadata from the HTTP response and stores the metadata in cache with the HTTP response. When a subsequent request hits in the cache, the metadata is identified to a user session associated with the subsequent request. In various embodiments, the application firewall can modify a cache-control header of the received HTTP response, and can alter the cookie-setting header of the cached HTTP response. The system and methods can significantly reduce processing time associated with application firewall processing of web content exchanged over a network.

US Patent:

8413225, Apr 2, 2013

Filed:

Dec 22, 2010

Appl. No.:

12/976678

Inventors:

Craig Anderson - Sunnyvale CA, US
Anoop Reddy - San Jose CA, US
Rajiv Mirani - Los Gatos CA, US
Abhishek Chauhan - Saratoga CA, US

Assignee:

Citrix Systems, Inc. - Fort Lauderdale FL

International Classification:

H04L 29/02

US Classification:

726 12, 726 11

Abstract:

The present invention is directed towards systems and methods for efficiently an intermediary device processing strings in web pages across a plurality of user sessions. A device intermediary to a plurality of clients and a server identifies a plurality of strings in forms and uniform resource locators (URLs) of web pages traversing the device across a plurality of user sessions. The device stores each string of the plurality of strings to one or more allocation arenas shared among a plurality of user session. Each string is indexed using a hash key generated from the string. The device recognizes that a received string transmitted from a webpage of a session of a user is eligible to be shared among the plurality of user sessions. The device determines that a copy of the received string is stored in an allocation arena using a hash generated from the received string. The device uses the copy of the received string stored in the allocation arena in place of the string in the web page of the session of the user to process the web page.

US Patent:

8438626, May 7, 2013

Filed:

Dec 23, 2009

Appl. No.:

12/645845

Inventors:

Craig Anderson - Sunnyvale CA, US
Anoop Reddy - San Jose CA, US
Rajiv Mirani - Los Gatos CA, US
Abhishek Chauhan - Saratoga CA, US

Assignee:

Citrix Systems, Inc. - Fort Lauderdale FL

International Classification:

G06F 9/00

US Classification:

726 11

Abstract:

The present invention is directed towards systems and methods for sharing session data among cores in a multi-core system. A first application firewall module executes on a core of a multi-core intermediary device which establishes a user session. The first application firewall module stores application firewall session data to memory accessible by the first core. A second application firewall module executes on a second core of the multi-core intermediary device. The second application firewall module receives a request from the user via the established user session. The request includes a session identifier identifying that the user session was established by the first core. The second application firewall module determines to perform one or more security checks on the request and communicates a portion of the request the first core. The second application firewall module receives and processes the security check results and instructions from the first core.

US Patent:

8578099, Nov 5, 2013

Filed:

Jun 15, 2012

Appl. No.:

13/524692

Inventors:

Anoop Kandi Reddy - San Jose CA, US
Craig Steven Anderson - Sunnyvale CA, US
Prakash Khemani - San Jose CA, US

Assignee:

Citrix Systems, Inc. - Fort Lauderdale FL

International Classification:

G06F 12/08

US Classification:

711118, 711103, 711E12017, 709227, 726 14

Abstract:

The present invention is directed towards integrating cache managing and application firewall processing in a networked system. An integrated cache/firewall system comprises an application firewall operating in conjunction with a cache managing system in operation on an intermediary device. The application firewall processes a received HTTP response to a request by a networked entity serviced by the intermediary device. The application firewall generates metadata from the HTTP response and stores the metadata in cache with the HTTP response. When a subsequent request hits in the cache, the metadata is identified to a user session associated with the subsequent request. The application firewall can modify a cache-control header of the received HTTP response, and can alter the cookie-setting header of the cached HTTP response.