Assignee: Riverbed Technology, Inc.

Location: San Francisco, CA
No. of patents: 35

Number	Title	Issue Date
8180902	Establishing network connections between transparent network devices Transparent network devices intercept messages from non-transparent network devices that establish a connection. Transparent network devices modify these messages to establish an inner connection with each other. The transparent network devices mimic at least some o...	05/15/2012
8176186	Transaction accelerator for client-server communications systems Self-discovering transaction accelerators improve communications between a client and a server. A client directs a message to a server. A client-side transaction accelerator intercepts the message, terminates the connection with the client, and accelerates the reque...	05/08/2012
8140690	Connection forwarding Two or more network traffic processors connected with the same LAN and WAN are identified as neighbors. Neighboring network traffic processors cooperate to overcome asymmetric routing, thereby ensuring that related sequences of network traffic are processed by the s...	03/20/2012
8090809	Role grouping Techniques to assign nodes in a network to groups of nodes includes grouping nodes on a network into groups based on host connection set data by identifying bi-connected components in the host connection set data; and merging groups with similar connection habits as...	01/03/2012
8069225	Transparent client-server transaction accelerator In a network that conveys requests from clients to servers and responses from servers to clients, a network transaction accelerator for accelerating transactions involving data transfer between at least one client and at least one server over a network comprising a ...	11/29/2011
8006306	Exploit-based worm propagation mitigation A system, method and computer program product for exploit-based worm detection and mitigation are disclosed. The system, method, and computer program product are configured to identify a signature representing content prevalent in network traffic, determine if the t...	08/23/2011
7984160	Establishing a split-terminated communication connection through a stateful firewall, with network transparency A method and apparatus are provided for establishing a split-terminated client-server communication connection through a stateful firewall, with network transparency. In an environment in which a pair of network intermediaries is employed to optimize client-server c...	07/19/2011
7953869	Cooperative proxy auto-discovery and connection interception In a network supporting transactions between clients and servers and proxies that are interposable in a network path between at least one client and at least one server, wherein a pair of proxies can modify a packet stream between a client and a server such that pac...	05/31/2011
7949737	Method and apparatus for grouping nodes based on connection characteristics Techniques for correlating different results of role grouping includes receiving two sets of grouping of nodes on a network, grouping of the nodes according to connection characteristics of the nodes in the groups, each of the sets having associated identifications ...	05/24/2011
7929534	Flow logging for connection-based anomaly detection A plurality of flow collector devices is disposed to collect flow information on a network. Duplicate flow records received from the flow collectors are eliminated by determining whether a pair of flow records has the same, source and destination flow identifiers an...	04/19/2011
7849134	Transaction accelerator for client-server communications systems In a network having transaction acceleration, for an accelerated transaction, a client directs a request to a client-side transaction handler that forwards the request to a server-side transaction handler, which in turn provides the request, or a representation ther...	12/07/2010
7853699	Rules-based transaction prefetching using connection end-point proxies Network proxies reduce server latency in response to series of requests from client applications. Network proxies intercept messages clients and a server. Intercepted client requests are compared with rules. When client requests match a rule, additional request mess...	12/14/2010
7852237	Content-based segmentation scheme for data compression in storage and transmission including hierarchical segment representation In a coding system, input data within a system is encoded. The input data might include sequences of symbols that repeat in the input data or occur in other input data encoded in the system. The encoding includes determining a target segment size, determining a wind...	12/14/2010
7839781	Service curve mapping A method for configuring service curves for managing the output port of a networking device includes the following steps. A multitude of traffic classes is defined, each traffic class being characterized by a bandwidth and a delay priority. A multitude of traffic se...	11/23/2010
7836498	Device to protect victim sites during denial of service attacks A system architecture for thwarting denial of service attacks on a victim data center is described. The system includes a first plurality of monitors that monitor network traffic flow through the network. The first plurality of monitors is disposed at a second plura...	11/16/2010
7827272	Connection table for intrusion detection A system for detecting network intrusions and other conditions in a network is described. The system includes a plurality of collector devices that are disposed to collect data and statistical information on packets that are sent between nodes on a network. An aggre...	11/02/2010
7774839	Feedback mechanism to minimize false assertions of a network intrusion A graphical user interface for an intrusion detection system is described. The graphical user interface includes a field that depicts a summary of anomalies identified as part of a event that is detected in a network, the summary indicating event severity details of...	08/10/2010
7769834	System for selecting a proxy pair based on configurations of autodiscovered proxies on a network Network devices include proxies and where multiple proxies are present on a network, they can probe to determine the existence of other proxies. Where more than two proxies are present and thus different proxy pairings are possible, the proxies are programmed to det...	08/03/2010
7764626	Role grouping of hosts in computer networks Techniques to assign nodes in a network to groups of nodes are described. The techniques include representing hosts in the network by property vectors that encode information about the hosts, identifying properties of the property vector by integers in the property ...	07/27/2010
7760653	Stackable aggregation for connection based anomaly detection A system includes a plurality of collector devices that are disposed to collect statistical information on packets that are sent between nodes on a network. The system also includes a stackable aggregator that receives network data from the plurality of collector de...	07/20/2010
7743415	Denial of service attacks characterization A system architecture for thwarting denial of service attacks on a victim data center is described. The system includes a first plurality of data monitors that monitor network traffic flow through the network. The first plurality of monitors is disposed at a second ...	06/22/2010
7743134	Thwarting source address spoofing-based denial of service attacks A system architecture for thwarting denial of service attacks on a victim data center is described. The system includes a first plurality of monitors that monitor network traffic flow through the network. The first plurality of monitors is disposed at a second plura...	06/22/2010
7733910	Data segmentation using shift-varying predicate function fingerprinting Shift-varying segmentation uses a shift-varying predicate function to evaluate input data within a sliding window to determine if the current sliding window position should be a segment boundary. The shift-varying predicate function is a function of both the input d...	06/08/2010
7716737	Connection based detection of scanning attacks A system for detecting network intrusions and other conditions in a network is described. The system includes a plurality of collector devices that are disposed to collect data and statistical information on packets that are sent between nodes on a network. An aggre...	05/11/2010
7706273	Port tracking on dynamically negotiated ports Techniques for tracking dynamically negotiated port connections in a network include collecting statistical information on packets that are sent between nodes on a network, inspecting packets of control connections to detect payload fragments that denote ephemeral p...	04/27/2010
7702806	Statistics collection for network traffic A system architecture for thwarting denial of service attacks on a victim data center is described. The system includes a first plurality of monitors that monitor network traffic flow through the network. The first plurality of monitors is disposed at a second plura...	04/20/2010
7698730	Service detection A new service detection process in a network retrieves a baseline list of port protocols used by a entity being tracked. The baseline value is determined over a baseline period. A current list of port protocols for the entity being tracked is also retrieved and is c...	04/13/2010
7664963	Data collectors in connection-based intrusion detection A system for detecting network intrusions and other conditions in a network is described. The system includes a plurality of collector devices that are disposed to collect data and statistical information on packets that are sent between nodes on a network. An aggre...	02/16/2010
7657934	Architecture to thwart denial of service attacks A monitoring device is disposed to thwart denial of service attacks on a data center. The monitoring device is a device that collects statistical information on packets that are sent between a network and the data center for a plurality of customers by examining tra...	02/02/2010
7581023	Architecture to thwart denial of service attacks An arrangement is disposed in a network. The arrangement includes a device that is logically disposed adjacent logically nearby routers having a first type of probe that are disposed to sample traffic, and that is has second type of probe that is disposed in-line du...	08/25/2009
7480240	Service curve mapping A method for configuring service curves for managing the output port of a networking device includes the following steps. A multitude of traffic classes is defined, each traffic class being characterized by a bandwidth and a delay priority. A multitude of traffic se...	01/20/2009
7477166	Content-based segmentation scheme for data compression in storage and transmission including hierarchical segment representation In a coding system, input data within a system is encoded. The input data might include sequences of symbols that repeat in the input data or occur in other input data encoded in the system. The encoding includes determining a target segment size, determining a wind...	01/13/2009
7428573	Transaction accelerator for client-server communication systems In a network having transaction acceleration, for an accelerated transaction, a client directs a request to a client-side transaction handler that forwards the request to a server-side transaction handler, which in turn provides the request, or a representation ther...	09/23/2008
7318100	Cooperative proxy auto-discovery and connection interception In a network supporting transactions between clients and servers and proxies that are interposable in a network path between at least one client and at least one server, wherein a pair of proxies can modify a packet stream between a client and a server such that pac...	01/08/2008
7120666	Transaction accelerator for client-server communication systems In a network having transaction acceleration, for an accelerated transaction, a client directs a request to a client-side transaction handler that forwards the request to a server-side transaction handler, which in turn provides the request, or a representation ther...	10/10/2006

PatentStorm

Bizarre Patents

PatentStorm News

Assignee: Riverbed Technology, Inc.