An apparatus for transmitting a file with enhanced transmission security through a network includes a file-splitting processor that splits the file into a plurality of message segments and addresses the plurality of message segments to a plurality of addresses assigned to a receiving host. The apparatus includes a message segment transmitter for transmitting the plurality of message segments to the receiving host.

Camouflage of network traffic to resist attack

Methods and apparatus are described which enable transactions in electronic networks relating to digital assets, e.g., digital goods or services, through the use of title objects. A title object may have a number of elements and attributes which identify one or more digital assets and define access rights to the corresponding digital asset(s).

Methods and apparatus for enabling transaction relating to digital assets

A Message Publishing System (MPS) and method is disclosed. The MPS publishes a message, preferably on the Internet, that can be simultaneously reviewed by a mass audience. A user of the MPS sends the message to be published to the MPS. The MPS verifies that the sender of the message is an authorized user of the MPS before publishing the message. The MPS converts the received message into one or more formats, preferably webpage(s) for display on the Internet. The message is stored in a network storage area, preferably on an Internet web server. When the MPS receives a request for the message, it retrieves the requested message from the storage area and sends it to the requestor for review, preferably using a web browser.

Message publishing system and method

A system and method for providing distributed security of a network. Several device profilers are placed at different locations of a network to assess vulnerabilities from different perspectives. The device profiler identifies the hosts on the network, and characteristics such as operating system and applications running on the hosts. The device profiler traverses a vulnerability tree having nodes representative of characteristics of the hosts, each node having an associated set of potential vulnerabilities. Verification rules can verify the potential vulnerabilities. A centralized correlation server, at a centrally accessible location in the network, stores the determined vulnerabilities of the network and associates the determined vulnerabilities with attack signatures. Traffic monitors access the attack signatures and monitor network traffic for attacks against the determined vulnerabilities.

Network security system having a device profiler communicatively coupled to a traffic monitor

Described are techniques used for assessing the security of a network. Pruned attack trees are generated using a forward chaining, breadth-first technique representing the attack paths of a possible attacker in the network. A vulnerability score is determined for each network and attacker starting point using attack loss values assigned to each host and information extracted from the attack tree(s) concerning compromised hosts. Different hypothetical alternatives may be evaluated to improve security of the network and each alternative may be evaluated by recomputing the network vulnerability score and comparing the recomputed score to the original network vulnerability score. Also disclosed is a method for determining end-to-end connectivity of a network. The resulting end-to-end connectivity information is used in generating the pruned attack tree.

A network security planning architecture

A combined digital signature is method of making a single public key digital signature on a number of messages, such that individual combined signatures may be extracted and individually presented. The mechanism of a combined digital signature is a combination of a hash tree whose leaves correspond to messages, together with a cryptographic signature made on the root of that hash tree. The invention comprises a method of making a combined signature, a method of extracting individual combined signatures, a method of verifying individual combined signatures, and the data format of an individual combined signature. The invention can increase performance of signature-making by a factor of several hundred over previous art.

Combined digital signature

A data structure and method are disclosed for encapsulating a message with a verifiable message ID and a verifiable identification of message interpretation information The encapsulated message includes a message set and a data generated message identifier The message set includes a message body that contains the content of a message and a data generated interpretation identifier that verifiably identifies an interpretation file that may be used to interpret the message body The data generated message identifier is a hash function of the message set that includes the message body and the data generated interpretation identifier The data generated message identifier is determined such that the data generated message identifier verifiably identifies the message set

System and method for encapsulating transaction messages with verifiable data generated identifiers

A data structure and method are disclosed for encapsulating a message with a verifiable message ID and a verifiable identification of message interpretation information. The encapsulated message (408) includes a message set and a data generated message identifier. The message set includes a message body that contains the content of a message and a data generated interpretation identifier that verifiably identifies (410) an interpretation file that may be used to interpret the message body. The data generated message identifier is a hash function of the message set that includes the message body and the data generated interpretation identifier. The data generated message identifier is determined such that the data generated message identifier verifiably identifies the message set.

Eric G. Hughes

Papers

Combined digital signature

System and method for encapsulating transaction messages with verifiable data generated identifiers

System and method for processing transaction messages