A system and method for maintaining security in a distributed computing environment comprises a policy manager located on a server for managing and distributing a security policy, and an application guard located on a client for managing access to securable components as specified by the security policy. In the preferred embodiment, a global policy specifies access privileges of the user to securable components. The policy manager may then preferably distribute a local client policy based on the global policy to the client. An application guard located on the client then manages access to the securable components as specified by the local policy.

System and method for maintaining security in a distributed computer network

An improved method and apparatus is used for storing and delivering information over the Internet and using Internet technologies. According to one embodiment of the present invention, a method and apparatus for maintaining statistics on a server (204) is disclosed. According to an alternative embodiment, a method and apparatus (204) is disclosed for predicting data that a client device (100) may request from a server on a network. In another embodiment of the present invention, a method and apparatus (204) is disclosed for managing bandwith between a client device (100) and a network. According to yet another embodiment, a method and apparatus (204) is disclosed for validating a collection of data (200). According to yet another embodiment, a method for providing notification to clients (100) from servers (204) is disclosed.

A method and apparatus for storing and delivering documents on the internet

A system for automatically creating and maintaining a database of information utilizing user opinions about subjects, particularly exceptional experiences. Described is an Internet system assisting/motivating a population of users interested in information about certain categories of subjects to automatically maintain the database content and to improve the usefulness and quality of the database information without any substantial management by the website owner-manager. The user opinions are primarily in the form of both comments and ratings about which natural-language terms best describe a particular subject, enabling user searches of the subject database to be by way of preferred such descriptive natural-language terms, which terms are further preferred to be evaluative and approving.

System for creating and maintaining a database of information utilizing user opinions

When a network resource request having a domain name is received, it is determined whether the network resource can be located including determining whether the domain name is resolvable. Rather than, or in addition to, displaying an error message or processing a search request in response to determining that a network resource can not be located or of an unresolvable domain name, the domain name can instead be redirected to a registration service where the domain name may automatically be used to perform a registration request and determine domain name availability. When the domain name is not available for registration, domain name registrant information is provided. However, when the domain name is determined available, a registration form is provided. For example, such a domain name in question may be redirected from the autosearch feature of a web browser to a service, which determines that the domain name is available for registration enabling a potential registrant to register the available domain name by selecting a domain name registration provider from a list of domain name registration providers.

Method, product, and apparatus for requesting a network resource

A system and method are provided for identifying inappropriate content in websites on a network. Unrecognized uniform resource locators (URLs) or other web content are accessed by workstations and are identified as possibly having malicious content. The URLs or web content may be preprocessed within a gateway server module or some other software module to collect additional information related to the URLs. The URLs may be scanned for known attack signatures, and if any are found, they may be tagged as candidate URLs in need of further analysis by a classification module.

System and method of analyzing web content

A cache for use with a network filter that receives, stores and ejects local rule bases dynamically. The cache stores a rule that was derived from a rule base in the filter. The cache rule is associated in the cache with a rule base indicator indicating from which rule base the cache rule was derived, and a rule base version number indicating the version of the rule base from which the cache rule was derived. When the filter receives a packet, the cache is searched for a rule applicable to a received packet. If no such rule is found, the filter rule base is found, and an applicable rule is carried out and copied to the cache along with a rule base indicator and version number. If a cache rule is found, it is implemented if its version number matches the version number of the rule base from which it was derived. Otherwise, the cache rule is deleted. The cache provides an efficient way of accurately implementing the rules of a dynamic rule base without having to search the entire rule base for each packet.

Session cache and rule caching method for a dynamic filter

A scalable distributed caching system on a network receives a request for a data object from a user. The caching system carries out a locator function that locates a directory cache for the object. The directory cache stores a directory list that identifies the locations of object caches that purport to store copies of the object requested by the user. The object caches on the object directory list are polled, and in response send messages to the cache that received the user request indicating if each object cache stores a copy of the requested object. The receiving cache sends a message requesting a copy of the object to the object cache that sent the message first received by the receiving cache indicating that an object cache stores the requested object. The object cache that sent the first received message then sends a copy of the object to the receiving cache, which stores a copy and then sends a copy to the user. The directory list for the object is then updated by adding the network address of the receiving cache. Outdated copies of objects stored on object caches are deleted in a distributed fashion to maintain the coherence of the cached copies. This is further reinforced by the association of time-to-live parameters with the each copy and each object cache address on directory lists.

Scalable distributed caching system and method

A system and method for providing peer-level access control on networks that carry packets of information, each packet having a 5-tuple having a source and destination address, a source and destination port, and a protocol identifier. The local rule base of a peer is dynamically loaded into a filter when the peer is authenticated, and ejected when the peer is loses authentication. The local rule base is efficiently searched through the use of hash tables wherein a hashed peer network address serves as a pointer the peer's local rules. Each rule comprises a 5-tuple and an action. The action of a rule is carried out on a packet when the 5-tuple of the rule corresponds to the 5-tuple of the packet.

System and method for providing peer level access control on a network

Scalable network object caching

A system and method for determining if a received identifier could be equivalent to one of a set of predetermined identifiers. Predetermined identifiers are encoded into an output. The coded output is stored on a node in a network. An identifier is received over the network and is tested against the coded output. The test reveals if the received identifier could be equivalent to one of a set of predetermined identifiers encoded into the output. An action can be taken that depends upon the outcome of the test. The present invention is useful in efficiently routing messages in a network, determining the authorization of user requests, and other applications.

Thomas B. London

Papers

Session cache and rule caching method for a dynamic filter

Scalable distributed caching system and method

System and method for providing peer level access control on a network

Scalable network object caching

System and method for determining if a message identifier could be equivalent to one of a set of predetermined indentifiers