A network switch automatically detects undesired network traffic and mirrors the undesired traffic to a security management device. The security management device determines the source of the undesired traffic and redirects traffic from the source to itself. The security management device also automatically sends a policy to a switch to block traffic from the source.

Network threat detection and mitigation

A security processor performs all or substantially all security and network processing to provide a secure I/O interface system to protect computing hardware from unauthorized access or attack. The security processor sends and receives all incoming and outgoing data packets for a host device and includes a packet engine, coupled to a local data bus, to process the incoming and outgoing packets. The processor further comprises a cryptographic core coupled to the packet engine to provide encryption and decryption processing for packets processed by the packet engine. The packet engine also handles classification processing for the incoming and outgoing packets. A modulo engine may be coupled to the local data bus.

System and Method For a Secure I/O Interface

A system, method, and computer program product are provided for automatically identifying potentially unwanted data as unwanted. In use, data determined to be potentially unwanted (e.g. potentially malicious) is received. Additionally, the data is automatically identified as unwanted (e.g. malicious). Furthermore, the data is stored for use in detecting unwanted data (e.g. malicious data).

System, method, and computer program product for automatically identifying potentially unwanted data as unwanted

A bandwidth reallocation circuit can monitor data traffic to and/or from logical network segments (LNSs) of a segmented network. As the data traffic rate to and/or from individual LNSs changes, the bandwidth reallocation circuit can dynamically reallocate the total bandwidth among the LNSs to meet changing bandwidth needs. Thus, as some of the LNSs become busy with data traffic, network bandwidth can be temporarily borrowed for less active LNSs. This can result in more efficient use of the network bandwidth capacity of the network than has been achieved in the prior art, which can significantly increase the speed at which data can be uploaded and/or downloaded to the individual LNSs.

Dynamic allocation of network bandwidth

A system, a method for providing virus protection, and a computer program stored on a storage medium in a communication system including at least a first network coupled to a destination to which transmissions of data packets are made from the first network to the destination is described. A virus protection system includes a gateway, coupled between the first network and the destination, which includes a firewall which receives data packets and a virus scanning engine, coupled to the firewall, which receives the data packets after reception by the firewall, tests the data packets, passes any data packets, which are tested by the virus scanning engine to not contain a virus to the destination and discards any data packets which are tested by the virus scanning engine to contain a virus.

System and method of providing virus protection at a gateway

A device described herein may include an input port operable to receive data packets; a switching board operable to classify the data packets, determine whether the data packets should be accepted by the device, and determine whether received data packets are first data packets in a session; a management board operable to receive the data packets from the switching board that were determined by the switching board to be the first data packets in a session; and one or more processing boards operable to receive data packets from the switching board that were determined by the switching board to not be the first data packets in a session and to process the received data packets.

Guangsong Huang

Papers

Internet security device and method

Network security device

Network security device and method