US2004021531 METHOD AND SYSTEM FOR REDUCING SCOPE OF SELF-PROPAGATING ATTACK CODE IN NETWORK

1. (WO2005006710) METHOD AND SYSTEM FOR REDUCING SCOPE OF SELF-PROPAGATING ATTACK CODE IN NETWORK

National Phase

Notices

Latest bibliographic data on file with the International Bureau

Pub. No.:		WO/2005/006710		International Application No.:		PCT/US2004/021531
Publication Date:		20.01.2005		International Filing Date:		02.07.2004

IPC:

H04L 29/06 (2006.01)

Applicants:

ARBOR NETWORKS, INC. [US/US]; 430 Bedford Street, Lexington, Massachusetts 02420 (US) (For All Designated States Except US).
PTACEK, Thomas, Henry [US/US]; (US) (For US Only).
SONG, Douglas, Joon [US/US]; (US) (For US Only).
NAZARIO, Jose, Oscar [US/US]; (US) (For US Only)

Inventors:

PTACEK, Thomas, Henry; (US).
SONG, Douglas, Joon; (US).
NAZARIO, Jose, Oscar; (US)

Agent:

HOUSTON, Grant, J.; Houston Eliseeva LLP, 4 Militia Drive, Suite 4, Lexington, MA 02421 (US)

Priority Data:

60/484,873		03.07.2003		US
10/684,964		14.10.2003		US

Title

(EN) METHOD AND SYSTEM FOR REDUCING SCOPE OF SELF-PROPAGATING ATTACK CODE IN NETWORK
(FR) PROCEDE ET SYSTEME PERMETTANT DE REDUIRE LA PORTEE D'UN CODE D'ATTAQUE A AUTO-PROPAGATION DANS UN RESEAU

Abstract:

(EN)Technique for protecting a communications network, such a computer network, from attack such as self-propagating code violations of security policies, in which the network is divided into 'compartments' that are separated by access control devices such as firewalls. The access control devices are then used to stop the spread of self-propagating attack code, the 'zero-day' worms, for example. However, the access control devices are configured such that upon activation legitimate in-use network services will not be jeopardized.
(FR)L'invention concerne une technique permettant de protéger un réseau de communications, tel qu'un réseau informatique, contre une attaque, telle que des violations de codes à auto-propagation des règles de sécurité, le réseau étant réparti en 'compartiments' séparés au moyen de dispositifs de commande de l'accès, tels que des pare-feux. Les dispositifs de commande de l'accès sont ensuite utilisés pour arrêter la diffusion d'un code d'attaque à auto-propagation, les vers 'zero-day' par exemple. Cependant, les dispositifs de commande de l'accès sont conçus de manière qu'au moment de l'activation, des services de réseau utilisés de manière légitime ne soient pas mis en danger.

Designated States:

AE, AG, AL, AM, AT, AU, AZ, BA, BB, BG, BR, BW, BY, BZ, CA, CH, CN, CO, CR, CU, CZ, DE, DK, DM, DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, HR, HU, ID, IL, IN, IS, JP, KE, KG, KP, KR, KZ, LC, LK, LR, LS, LT, LU, LV, MA, MD, MG, MK, MN, MW, MX, MZ, NA, NI, NO, NZ, OM, PG, PH, PL, PT, RO, RU, SC, SD, SE, SG, SK, SL, SY, TJ, TM, TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, YU, ZA, ZM, ZW.
African Regional Intellectual Property Org. (ARIPO) (BW, GH, GM, KE, LS, MW, MZ, NA, SD, SL, SZ, TZ, UG, ZM, ZW)
Eurasian Patent Organization (EAPO) (AM, AZ, BY, KG, KZ, MD, RU, TJ, TM)
European Patent Office (EPO) (AT, BE, BG, CH, CY, CZ, DE, DK, EE, ES, FI, FR, GB, GR, HU, IE, IT, LU, MC, NL, PL, PT, RO, SE, SI, SK, TR)
African Intellectual Property Organization (OAPI) (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, ML, MR, NE, SN, TD, TG).

Publication Language:	English (EN)
Filing Language:	English (EN)