Systems and methods for processing data flows

US9525696B2 · kind B2 · utility

Assignee

• Blue Coat Systems, Inc. · US

Inventors

• Harsh Kapoor · Boxborough, US
• Moisey Akerman · Upton, US
• Stephen D. Justus · Portland, US
• John C. Ferguson · Harvard, US
• Yevgeny Korsunsky · Newton, US
• Paul S. Gallo · Newton, US
• Charles Ching Lee · Ashland, US
• Timothy M. Martin · Westford, US
• Chunsheng Fu · Sharonville, US
• Weidong Xu · Westford, US

Key dates

• Filing date: Mar 9, 2012
• Grant date: Dec 20, 2016
• Expiry date: Jun 24, 2035

Classification

• Technology area (CPC G): Physics
• CPC primary: G06N3/088
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

A flow processing facility, which uses a set of artificial neurons for pattern recognition, such as a self-organizing map, in order to provide security and protection to a computer or computer system supports unified threat management based at least in part on patterns relevant to a variety of types of threats that relate to computer systems, including computer networks. Flow processing for switching, security, and other network applications, including a facility that processes a data flow to address patterns relevant to a variety of conditions are directed at internal network security, virtualization, and web connection security. A flow processing facility for inspecting payloads of network traffic packets detects security threats and intrusions across accessible layers of the IP-stack by applying content matching and behavioral anomaly detection techniques based on regular expression matching and self-organizing maps. Exposing threats and intrusions within packet payload at or near real-time rates enhances network security from both external and internal sources while ensuring security policy is rigorously applied to data and system resources. Intrusion Detection and Protection (…