A system and method is disclosed for detecting security vulnerabilities in a computer network. The system includes an IP spoofing attack detector, a stealth port service map generator, a source port verifier, source routing verifier, an RPC service detector and a Socks configuration verifier. Each of these verifiers may be operated separately or as a group to detect security vulnerabilities on a network. Each verifier may be programmed to exhaustively test all ports of all computers on a network to detect susceptibility to IP spoofing attacks, access to services with little or no authorization checks or misconfigured routers or Socks servers. The detected vulnerabilities or the location of services having little or no authorization checks may be stored in a table for reference by a network administrator. The service map generated by the stealth service map generator may be used to identify all service ports on a network to facilitate the operation of the other verifiers which send service command messages to service ports to detect their accessibility. A graphic user interface (GUI) may be used to provide input and control by a user to the security verifiers and to present options and display information to the user.

Method and apparatus for detecting and identifying security vulnerabilities in an open network computer communication system

An automated analysis system identifies the presence of malicious P-code or N-code programs in a manner that limits the possibility of the malicious code infecting a target computer. The target computer system initializes an analytical virtual P-code engine (AVPE). As initialized, the AVPE comprises software simulating the functionality of a P-code or intermediate language engine as well as machine language facilities simulating the P-code library routines that allow the execution of N-code programs. The AVPE executes a target program so that the target program does not interact with the target computer. The AVPE analyzes the behavior of the target program to identify occurrence of malicious code behavior and to indicate in a behavior pattern the occurrence of malicious code behavior. The AVPE is terminated at the end of the analysis process, thereby removing from the computer system the copy of the target program that was contained within the AVPE.

Computer immune system and method for detecting unwanted code in a P-code or partially compiled native-code program executing within a virtual machine

The invention provides improved methods and apparatus for control using field and control devices that provide a virtual machine environment and that communicate via an IP network. By way of non-limiting example, such field device can be an “intelligent” transmitter or actuator that includes a low power processor, along with a random access memory, a read-only memory, FlashRAM, and a sensor interface. The processor can execute a real-time operating system, as well as a Java virtual machine (JVM). Java byte code executes in the JVM to configure the field device to perform typical process control functions, e.g., for proportional integral derivative (PID) control and signal conditioning. Control networks can include a plurality of such field and control devices interconnected by an IP network, such as an Ethernet.

Methods and apparatus for control using control devices that provide a virtual machine environment and that communicate via an ip network

A device and method of providing wireless communications is provided. In one embodiment, the method includes determining that a plurality of wireless networks are concurrently available to provide wireless communication for a telephone device wherein the plurality of wireless networks include different types of networks, selecting one of the plurality of wireless networks based, at least in part, one or more rules, establishing a first wireless communication link with a remote device via the selected network, and wherein the one or more rules are configured to reduce a cost of communicating data. Other embodiments may include various other selection criteria for selecting a network such as, for example, the available bandwidth of one or more of the networks and the type of data to be communicated.

Portable communications device and method

An analytical virtual machine (AVM) analyzes computer code using a software processor including a register that stores behavior flags indicative of behaviors identified by virtually executing the code within the virtual machine. The AVM includes a sequencer that stores the sequence in which behavior flags are set in the behavior flags register. The AVM analyzes machine performance by emulating execution of the code being analyzed on a fully virtual machine and records the observed behavior. When emulation and analysis are complete, the AVM returns the behavior flags register and sequencer to the real machine and terminates.

Analytical virtual machine

A parallel processing computer system having an improved architecture for communication of information between nodes. The computer system of the present invention comprises at least three nodes; each of the three nodes for processing information. Each of the nodes comprises a routing means for routing information between nodes. The routing means allow reservation of a route through the network of nodes. Messages may then be transmitted from an origin node to a destination node over the reserved route. Use of a route reservation system reduces requirements for buffering of information at intermediate nodes on a route, improves message passing latency and increases node-to-node bandwidth. The present invention teaches communication of messages between nodes in a synchronous manner.

Message routing in a multiprocessor computer system

An adaptive routing means and method useful for transferring messages on a number of multi-dimensional network topologies that connect distributed multi-processing systems. A plurality of processing nodes comprising processing means for processing information and router means for routing messages are connected in a multi-dimensional network (A) with an identical or redundant message passing multi-dimensional network (B) of routers being connected to network A. Each router comprises four types of channels for message passing: 1) a channel to transfer information between a router and a processor coupled to the router, 2) a channel to transfer information in an X direction, 3) a channel for the Y direction, and 4) a channel for the Z direction. This connectivity allows messages to pass between nodes within network A, between routers within network B, or between network A and network B by passing through a router. Messages are routed in networks A and B by routing first in the X dimension and then in the Y dimension. The present invention transitions between A and B networks when contention is encountered in the X or Y direction, if the appropriate Z channel is available. If an X or Y channel is not immediately granted, a request is made for the Z channel. Both the request for an X or Y channel and the request for the Z channel are maintained until one request is granted. The message is then routed on the granted channel and the other request is withdrawn. The router does not commit to routing on a particular channel until one channel is available.

Adaptive message routing for multi-dimensional networks

A method and apparatus for reserving and releasing routing paths in a parallel processing computer system. The present invention eliminates the need to restart the computer system to recover from a system seizure or an application stall. A plurality of signals are provided which convey various message transmission information to source, intermediate and destination nodes and routing elements. A first signal is used by a source node to reserve a route to a destination node. A second signal is used by the destination node to indicate that the message has reached the destination node and later that the entire message has been transmitted. A third signal is used by the destination node to signal that an error in transmission has been detected. Through various combinations of the signals transmission information is obtained and nodes in the route may be reserved and released.

Routing resource reserve/release protocol for multi-processor computer systems

Synchronous message routing using a retransmitted clock signal in a multiprocessor computer system

A parallel processing computer system having an improved architecture for communication of information between nodes. The computer system of the present invention comprises at least three nodes; each of the three nodes for processing information. Each of the nodes comprises a routing means for routing information between nodes. The routing means allow reservation of a route through the network of nodes. Messages may then be transmitted from an origin node to a destination node over the reserved route. Use of a route reservation system reduces requirements for buffering of information at intermediate nodes on a route, improves message passing latency and increases node-to-node bandwidth. The present invention teaches communication of messages between nodes in a synchronous manner using a common strobe signal. The strobe signal is modified by regenerating alternate edges of the signal in order to eliminate pulse shrinkage of the strobe signal.

Steven F. Nugent

Papers

Message routing in a multiprocessor computer system

Adaptive message routing for multi-dimensional networks

Routing resource reserve/release protocol for multi-processor computer systems

Synchronous message routing using a retransmitted clock signal in a multiprocessor computer system

Message routing in a multi-processor computer system with alternate edge strobe regeneration