Steven E Lang

US Patent:

6851061, Feb 1, 2005

Filed:

Aug 24, 2000

Appl. No.:

09/644664

Inventors:

Roark B. Hilomen - San Jose CA, US
Steven P. Lang - San Jose CA, US

Assignee:

Networks Associates, Inc. - Santa Clara CA

International Classification:

G06F 1130

US Classification:

713201, 713154, 709224

Abstract:

A system and method for detecting network intrusions using a protocol stack multiplexor is described. A network protocol stack includes a plurality of hierarchically structured protocol layers. Each such protocol layer includes a read queue and a write queue for staging transitory data packets and a set of procedures for processing the transitory data packets in accordance with the associated protocol. A protocol stack multiplexor is interfaced directly to at least one such protocol layer through a set of redirected pointers to the processing procedures of the interfaced protocol layer. A data packet collector references at least one of the read queue and the write queue for the associated protocol layer. A data packet exchanger communicates a memory reference to each transitory data packet from the referenced at least one of the read queue and the write queue for the associated protocol layer. An analysis module receives the communicated memory reference and performs intrusion detection based thereon.

US Patent:

20190342157, Nov 7, 2019

Filed:

Jul 15, 2019

Appl. No.:

16/511477

Inventors:

- San Jose CA, US
Steven Lang - San Jose CA, US
Artem Gavrilov - San Jose CA, US

International Classification:

H04L 12/24
H04L 29/08

Abstract:

Example implementations includes a systems and methods for viral discovery and installation for distributed networks. A master node in a first subnet of a network broadcasts an auto-discovery request and receives information identifying a first node in the first subnet. The master node initializes a first proxy data router configured to forward the auto-discovery request to a second subnet of the network. The master node receives information identifying a second node in the second subnet and may issue commands for execution on the second node, such as further proxy data router initialization or configuration updates for installation on the second subnet.

US Patent:

20180331895, Nov 15, 2018

Filed:

Jul 26, 2017

Appl. No.:

15/660763

Inventors:

- San Jose CA, US
Steven Lang - San Jose CA, US
Artem Gavrilov - San Jose CA, US

International Classification:

H04L 12/24
H04L 29/08

Abstract:

An example implementation includes a system having a network configuration generator, a first computing rack, and a second computing rack. The network configuration receives network configuration information for a first plurality of nodes and a second plurality of nodes, and generates a network configuration file including network configuration information for the first plurality of nodes and the second plurality of nodes. The first plurality of nodes includes a first configuration node to receive the network configuration file, identify network configuration information for the first plurality of nodes in the network configuration file as being part of the first computing rack, and update network configuration for the first plurality of nodes based on the identified network configuration information for the first computing rack.