SYSTEMS AND METHODS FOR UTILIZING UNI-DIRECTIONAL INTER-HOST COMMUNICATION IN AN AIR GAP ENVIRONMENT
    2.
    发明申请
    SYSTEMS AND METHODS FOR UTILIZING UNI-DIRECTIONAL INTER-HOST COMMUNICATION IN AN AIR GAP ENVIRONMENT 有权
    利用空气间隙环境中的方向直接通信的系统和方法

    公开(公告)号:US20140289792A1

    公开(公告)日:2014-09-25

    申请号:US14225164

    申请日:2014-03-25

    Abstract: A request message is generated with a trusted network entity executing trusted code on a first network layer. The request message to target a non-trusted network entity executing non-trusted code on a second network layer. The request message is transmitted from the trusted network entity to the non-trusted network entity through at least a policy enforcement entity. The policy enforcement entity applies one or more network traffic rules to enforce a unidirectional flow of traffic from the first network layer to the second network layer. A response check message is generated with the trusted network entity. The response check message to determine whether response information is available on the non-trusted network entity in response to the request message. The response check message is transmitted from the trusted network entity to the non-trusted network entity through at least the policy enforcement entity. The response check message to determine whether the response information is stored in a conceptual mailbox on the non-trusted network entity.

    Abstract translation: 使用在第一网络层上执行可信代码的可信网络实体生成请求消息。 所述请求消息针对在第二网络层上执行不可信代码的不可信网络实体。 请求消息通过至少一个策略执行实体从可信网络实体发送到不可信网络实体。 策略执行实体应用一个或多个网络流量规则来强制从第一网络层到第二网络层的单向流量流。 利用可信网络实体产生响应检查消息。 所述响应检查消息用于响应于所述请求消息来确定所述不信任网络实体上的响应信息是否可用。 响应检查消息通过至少策略执行实体从可信网络实体发送到不可信网络实体。 响应检查消息以确定响应信息是否存储在不可信网络实体上的概念邮箱中。

    Systems and methods for utilizing uni-directional inter-host communication in an air gap environment

    公开(公告)号:US10182075B2

    公开(公告)日:2019-01-15

    申请号:US15087599

    申请日:2016-03-31

    Abstract: A request message is generated with a trusted network entity executing trusted code on a first network layer. The request message to target a non-trusted network entity executing non-trusted code on a second network layer. The request message is transmitted from the trusted network entity to the non-trusted network entity through at least a policy enforcement entity. The policy enforcement entity applies one or more network traffic rules to enforce a unidirectional flow of traffic from the first network layer to the second network layer. A response check message is generated with the trusted network entity. The response check message to determine whether response information is available on the non-trusted network entity in response to the request message. The response check message is transmitted from the trusted network entity to the non-trusted network entity through at least the policy enforcement entity. The response check message to determine whether the response information is stored in a conceptual mailbox on the non-trusted network entity.

    SYSTEMS AND METHODS FOR UTILIZING UNI-DIRECTIONAL INTER-HOST COMMUNICATION IN AN AIR GAP ENVIRONMENT
    7.
    发明申请
    SYSTEMS AND METHODS FOR UTILIZING UNI-DIRECTIONAL INTER-HOST COMMUNICATION IN AN AIR GAP ENVIRONMENT 审中-公开
    利用空气间隙环境中的方向直接通信的系统和方法

    公开(公告)号:US20160285916A1

    公开(公告)日:2016-09-29

    申请号:US15087599

    申请日:2016-03-31

    Abstract: A request message is generated with a trusted network entity executing trusted code on a first network layer. The request message to target a non-trusted network entity executing non-trusted code on a second network layer. The request message is transmitted from the trusted network entity to the non-trusted network entity through at least a policy enforcement entity. The policy enforcement entity applies one or more network traffic rules to enforce a unidirectional flow of traffic from the first network layer to the second network layer. A response check message is generated with the trusted network entity. The response check message to determine whether response information is available on the non-trusted network entity in response to the request message. The response check message is transmitted from the trusted network entity to the non-trusted network entity through at least the policy enforcement entity. The response check message to determine whether the response information is stored in a conceptual mailbox on the non-trusted network entity.

    Abstract translation: 使用在第一网络层上执行可信代码的可信网络实体生成请求消息。 所述请求消息针对在第二网络层上执行不可信代码的不可信网络实体。 请求消息通过至少一个策略执行实体从可信网络实体发送到不可信网络实体。 策略执行实体应用一个或多个网络流量规则来强制从第一网络层到第二网络层的单向流量流。 利用可信网络实体产生响应检查消息。 所述响应检查消息用于响应于所述请求消息来确定所述不信任网络实体上的响应信息是否可用。 响应检查消息通过至少策略执行实体从可信网络实体发送到不可信网络实体。 响应检查消息以确定响应信息是否存储在不可信网络实体上的概念邮箱中。

    DYNAMIC TRAFFIC THROTTLING
    10.
    发明公开

    公开(公告)号:US20230155940A1

    公开(公告)日:2023-05-18

    申请号:US17454884

    申请日:2021-11-15

    CPC classification number: H04L47/122 H04L47/25 H04L47/30 H04L43/0882

    Abstract: Disclosed are examples of systems, apparatuses, methods, and computer program products for dynamic traffic throttling. A server system can receive, via an edge worker associated with a content delivery network (CDN), a first set of requests to access a first site. The server system can determine that traffic to the first site is to be throttled. The server system can determine a throttling rate. The server system can transmit instructions to the edge worker, the instructions configured to cause the edge worker to direct at least a portion of a second set of requests to access the first site to a waiting room site prior to being directed to the first site, the direction of the at least the portion of the second set of requests to the waiting room site being subject to the throttling rate.

Patent Agency Ranking