Systems and methods for processing data flows

US8010469B2 · kind B2 · utility

Assignee

• Crossbeam Systems, Inc. · US

Inventors

• Harsh Kapoor · Boxborough, US
• Moisey Akerman · Upton, US
• Stephen D. Justus · Portland, US
• JC Ferguson · Harvard, US
• Yevgeny Korsunsky · Newton, US
• Paul S. Gallo · Newton, US
• Charles Ching Lee · Ashland, US
• Timothy M. Martin · Westford, US
• Chunsheng Fu · Sharonville, US
• Weidong Xu · Westford, US

Key dates

• Filing date: Oct 29, 2007
• Grant date: Aug 30, 2011
• Expiry date: Nov 5, 2029

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L2463/141
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

Methods and systems for flow processing and switching, security, and other network applications, including a facility that processes a data flow to address patterns relevant to a variety of conditions are directed at internal network security, virtualization, and web connection security are described. Such flow processing facilities may be used for inspecting network traffic packet payloads to detect security threats and intrusions across accessible layers of the network IP stack by applying content matching and behavioral anomaly detection techniques based on regular expression matching and self-organizing maps. Exposing threats and intrusions within packet payload at or near real-time rates enhances network security from both external and internal sources while ensuring security policy is rigorously applied to data and system resources.