A signature based dynamic network intrusion detection system (IDS) includes attack signature profiles which are descriptive of characteristics of known network security violations. The attack signature profiles are organized into sets of attack signature profiles according to security requirements of network objects on a network. Each network object is assigned a set of attack signature profiles which is stored in a signature profile memory together with association data indicative of which sets of attack signature profiles correspond to which network objects. A monitoring device monitors network traffic for data addressed to the network objects. Upon detecting a data packet addressed to one of the network objects, packet information is extracted from the data packet. The extracted information is utilized to obtain a set of attack signature profiles corresponding to the network object based on the association data. A virtual processor executes instructions associated with attack signature profiles to determine if the packet is associated with a known network security violation. An attack signature profile generator is utilized to generate additional attack signature profiles configured for processing by the virtual processor in the absence of any corresponding modification of the virtual processor.

Dynamic signature inspection-based network intrusion detection

Disclosed herein are methods, systems, and apparatuses to enable subscribers of mobile wireless communication devices to view, research, select and customize service plans; to create and manage device groups, share and set permission controls for service plans among devices in device groups; to manage communication services through graphical user interfaces; to sponsor and promote service plans; and to design, manage, and control communication services through application programming interfaces.

Service Plan Design, User Interfaces, Application Programming Interfaces, and Device Management

The present invention provides a system for operating a power line communications system that is comprised of a plurality of network elements, which may take the form of repeaters, bypass devices, backhaul devices, wireless backhaul devices, enhanced bypass device, communication interface devices and others. In one embodiment, two groups of network elements in the same electrical distribution system are isolated except selected communication link.

Power line communication system and method of operating the same

Device Assisted Services (DAS) for protecting network capacity is provided. In some embodiments, DAS for protecting network capacity includes monitoring a network service usage activity of the communications device in network communication; classifying the network service usage activity for differential network access control for protecting network capacity; and associating the network service usage activity with a network service usage control policy based on a classification of the network service usage activity to facilitate differential network access control for protecting network capacity.

Device-Assisted Services for Protecting Network Capacity

A device for providing communications through power lines that are communicatively coupled to an electrical distribution network infrastructure and to the internal wiring of at least one customer premises having one or more communication devices therein is provided. One embodiment comprises a coupler configured to be coupled to the electrical distribution network infrastructure, a modem in communication with the coupler to communicate data through the power lines; and a wireless transceiver in communication with said modem. In some embodiments, the electrical distribution network infrastructure may be a structure that uses electricity, such as a street light.

Device and method for coupling with electrical distribution network infrastructure to provide communications

A network, network devices, and methods are described for marked packet forwarding A network device includes a network chip having a number of network ports for receiving and transmitting packets The network chip includes logic to decapsulate a packet received from a tunnel, mark the packet with a handle associated with an originating network device of the packet using information from an encapsulation header, and forward the marked packet to a checking functionality having a destination address different from an original destination address of the packet

Marked packet forwarding

A method provides for a first network node in a plurality of network nodes to transmit a data packet to a hub. The hub and the network nodes are interconnected within a local network system. Control signals are exchanged between the first network node and the hub. The exchange of control signals is done in a first signal frequency range. A data packet is sent from the first network node to the hub. The data packet is sent using data signals within a second signal frequency range. The first signal frequency range and the second signal frequency range do not overlap.

High speed data transfer over twisted pair cabling

A dual-connection option allows preservation of network connectivity to a device or path by providing a second, redundant connection which takes over if a first connection fails. One goal is to provide communication with all critical devices at all times. If the ability to communicate with a device is lost because part of the connection to the device or the device itself has been destroyed, recovery from such loss is provided. The invention is preferably embodied in a particular implementation of the proposed Redundant Links standard, and satisfies the requirements of the proposed IEEE 802.12 standard, while adding specific enhancements to the proposed standard, such as storing and/or reporting conditions that lead up to a failure; accommodating minor, temporary disruptions; allowing status inquiries with regard to a redundant link while maintaining a primary connection; and continuing testing the redundant link after an initial verification.

Computer network with devices/paths having redundant links

A network system includes end nodes which are connected to a plurality of cascaded hubs. Each hub is able to generate a network error packet when a timeout is detected. More specifically, a first hub starts a first timer upon the first hub acknowledging a grant to a first device connected to a first port of the first hub. Upon expiration of the first timer without the first hub beginning to receive a first network packet over the first port, the first hub begins to send a first error packet to a second device connected to the first hub. If the first hub begins to receive a second error packet over the first port after expiration of the first timer and before the first hub has completed sending the first error packet, the first hub appends the second error packet to the first error packet. If the first hub does not begin to receive any error packet over the first port before completely sending the first error packet, the first hub marks the first port as failed.

Error recovery in a network having cascaded hubs

A new technology needs to offer more than just 100 Mb/s. To succeed in the LAN marketplace, a new LAN technology must be very cost competitive with the established LANs, such as Ethernet and Token Ring, while also providing backwards compatibility with existing network software. We describe a new 100-Mb/s LAN technology that has these characteristics This technology is being defined as an open standard within the IEEE Project 802.12 Demand Priority group. Two important objectives were established for this LAN technology: first, it should be able to use the unshielded twisted pair (UTP) wiring found in a large number of installations and, in particular, to use the same wiring as defined for use in 1OBase-T. This objective was later extended to encompass support for the shielded twisted pair (STP) used for IEEE 802.5. This will enable the majority of current LAN users to benefit from their enormous investment in cable plant. The second objective was that the network should support new applications, such as video conferencing and remote training, while also providing backwards compatibility with the massive installed software base. Both objectives have been met. The Demand Priority MAC protocol currently being standardized in IEEE 802.12, offers substantial benefits over the CSMA/CD protocol of IEEE 802.3. By preserving both the current wiring infrastructure and investment in software, and by using the very simple Demand Priority MAC protocol, 100 Mb/s LANs could soon be as low-cost as 10Base-T is today. >

Alan R. Albrecht

Papers

Marked packet forwarding

High speed data transfer over twisted pair cabling

Computer network with devices/paths having redundant links

Error recovery in a network having cascaded hubs

The Demand Priority MAC protocol