Attack Stream Identification Method, Apparatus, and Device on Software Defined Network
    2.
    发明申请
    Attack Stream Identification Method, Apparatus, and Device on Software Defined Network 审中-公开
    攻击流识别方法,设备和软件定义网络设备

    公开(公告)号:US20170078313A1

    公开(公告)日:2017-03-16

    申请号:US15363047

    申请日:2016-11-29

    Abstract: An attack stream identification method, apparatus, and device on a software defined network is presented, where an invalid stream filter table is stored in a switch, and the method includes the steps of the switch receives a data packet of a data stream and searches, according to a characteristic value of the data packet, the invalid stream filter table for a state field of a filter entry; when the state field is a suspected attack stream state or a non-attack stream state, the switch sends a report message to a controller, determines a rate value for sending the report message to the controller, and fills the rate value in a rate field of the filter entry; and when the rate value is greater than a preset rate threshold, the switch changes the state field of the filter entry to an attack stream state.

    Abstract translation: 本发明提供了一种软件定义网络上的攻击流识别方法,装置和设备,其中无线流过滤表存储在交换机中,该方法包括交换机接收数据流的数据包并进行搜索的步骤, 根据数据分组的特征值,滤波器条目的状态字段的无效流过滤表; 当状态字段是可疑的攻击流状态或非攻击流状态时,交换机向控制器发送报告消息,确定用于向控制器发送报告消息的速率值,并在速率字段中填充速率值 的过滤条目; 并且当速率值大于预设速率阈值时,交换机将过滤器条目的状态字段改变为攻击流状态。

    Data packet forwarding method, apparatus, and system

    公开(公告)号:US10135725B2

    公开(公告)日:2018-11-20

    申请号:US15240232

    申请日:2016-08-18

    Abstract: A data packet forwarding solution, which relates to the field of network transmission. A virtual switch in the solution saves a flow entry as an aging flow entry deleted from a flow table in a switch, and receives a reporting data packet generated according to a forwarding data packet when the forwarding data packet fails to match each flow entry in the flow table in the switch and a secure channel between the switch and the controller is faulty, delivers an aging flow entry matching the reporting data packet from an aging flow table to the switch, where the aging flow table includes one or more flow entries that are deleted as aging flow entries from a flow table in the switch.

    Data transmission method, apparatus, and system

    公开(公告)号:US11375047B2

    公开(公告)日:2022-06-28

    申请号:US16130692

    申请日:2018-09-13

    Abstract: A method of data transmission includes: receiving a first packet, where the first packet includes first compressed data and a first check value, the first compressed data is obtained by compressing first data based on a first compression mode, the first check value is obtained by processing a second check value based on a first check algorithm, the second check value is obtained by processing the first compressed data based on a second check algorithm; obtaining a first check code by processing the first packet based on a third check algorithm; determining, according to a correspondence between the first check code and the first compression mode, that the first compression mode is a compression mode used when the first data is compressed; and obtaining the first data by decompressing, based on a first decompression mode corresponding to the first compression mode, the first compressed data included in the first packet.

    Attack stream identification method, apparatus, and device on software defined network

    公开(公告)号:US10382457B2

    公开(公告)日:2019-08-13

    申请号:US15363047

    申请日:2016-11-29

    Abstract: An attack stream identification method, apparatus, and device on a software defined network is presented, where an invalid stream filter table is stored in a switch, and the method includes the steps of the switch receives a data packet of a data stream and searches, according to a characteristic value of the data packet, the invalid stream filter table for a state field of a filter entry; when the state field is a suspected attack stream state or a non-attack stream state, the switch sends a report message to a controller, determines a rate value for sending the report message to the controller, and fills the rate value in a rate field of the filter entry; and when the rate value is greater than a preset rate threshold, the switch changes the state field of the filter entry to an attack stream state.

    Data Packet Forwarding Method, Apparatus, and System
    6.
    发明申请
    Data Packet Forwarding Method, Apparatus, and System 审中-公开
    数据包转发方法,装置和系统

    公开(公告)号:US20160359736A1

    公开(公告)日:2016-12-08

    申请号:US15240232

    申请日:2016-08-18

    Abstract: A data packet forwarding solution, which relates to the field of network transmission. A virtual switch in the solution saves a flow entry as an aging flow entry deleted from a flow table in a switch, and receives a reporting data packet generated according to a forwarding data packet when the forwarding data packet fails to match each flow entry in the flow table in the switch and a secure channel between the switch and the controller is faulty, delivers an aging flow entry matching the reporting data packet from an aging flow table to the switch, where the aging flow table includes one or more flow entries that are deleted as aging flow entries from a flow table in the switch.

    Abstract translation: 一种涉及网络传输领域的数据包转发解决方案。 解决方案中的虚拟交换机将流入口作为从交换机的流表中删除的老化流入口保存,并且当转发数据包未能匹配每个流入口时,接收根据转发数据包生成的报告数据包 交换机中的流表和交换机与控制器之间的安全通道故障,将与老化流表对应的报告数据包的老化流入口传递给交换机,老化流表包括一个或多个流条目, 从交换机的流表中删除作为老化流条目。

    DATA TRANSMISSION METHOD, APPARATUS, AND SYSTEM

    公开(公告)号:US20190014194A1

    公开(公告)日:2019-01-10

    申请号:US16130692

    申请日:2018-09-13

    Abstract: A method of data transmission includes: receiving a first packet, where the first packet includes first compressed data and a first check value, the first compressed data is obtained by compressing first data based on a first compression mode, the first check value is obtained by processing a second check value based on a first check algorithm, the second check value is obtained by processing the first compressed data based on a second check algorithm; obtaining a first check code by processing the first packet based on a third check algorithm; determining, according to a correspondence between the first check code and the first compression mode, that the first compression mode is a compression mode used when the first data is compressed; and obtaining the first data by decompressing, based on a first decompression mode corresponding to the first compression mode, the first compressed data included in the first packet.

    Input/Output (IO) Request Processing Method and File Server
    8.
    发明申请
    Input/Output (IO) Request Processing Method and File Server 审中-公开
    输入/输出(IO)请求处理方法和文件服务器

    公开(公告)号:US20170052979A1

    公开(公告)日:2017-02-23

    申请号:US15346114

    申请日:2016-11-08

    CPC classification number: G06F16/188 G06F9/4881 G06F16/144 G06F16/172

    Abstract: An input/output (IO) request processing method and a file server, where the method includes adding, according to different service levels carried in IO requests of users, the IO requests of the users to corresponding cache queues for processing at a virtual file system layer, a block IO layer and a device driver layer separately, thereby meeting different service level requirements for the IO requests of the users.

    Abstract translation: 一种输入/输出(IO)请求处理方法和文件服务器,其中该方法包括根据用户IO请求中携带的不同服务级别将用户的IO请求添加到相应的缓存队列中以在虚拟文件系统处理 层,块IO层和设备驱动层,从而满足用户的IO请求的不同服务级别要求。

Patent Agency Ranking