MICHAEL LEE HALL, JR
Pilots at Mandeville Cir, Austin, TX

7305383, Dec 4, 2007

Jun 10, 2004

10/866377

Blaine Kubesh - Cedar Park TX, US
Gerald Lathem - Elgin TX, US
Mohit Jaggi - Sunnyvale CA, US
Amit Sinha - Santa Clara CA, US
Michael Hall - Austin TX, US

Cisco Technology, Inc. - San Jose CA

G06F 7/00

707 3, 707 4, 707 6, 7071041, 717152, 341107

A processing system wherein a bitmap array is first used to obtain an index. The index is used to obtain a value from an array. A predefined default value is used to improve compression and speed in cases where a single default value is often encountered. In this embodiment the size of each entry in the bitmap array is one bit. In another approach, a bitmap array having two bit entries is provided. The use of two bits allows four different entry values. Two values are used to indicate two different default values. A third value is used for a “repeat” indicator to when the last-used next-state value should be re-used. The fourth value is used to indicate indexing into a pointer table, similarly to the embodiment using single-bit entries in the bitmap array.

7555774, Jun 30, 2009

Aug 2, 2004

10/910194

Michael Lee Hall - Austin TX, US
Kevin L. Wiley - Austin TX, US
Munawar Hossain - Austin TX, US
Joseph M. Sirrianni - Ceder Park TX, US

Cisco Technology, Inc. - San Jose CA

H04L 29/00

726 22

In accordance with one embodiment of the present invention, a method for inline intrusion detection includes receiving a packet at a physical interface of an intrusion detection system. The packet is tagged with a first VLAN identifier associated with an external network. The network further includes buffering the packet at the physical interface, communicating a copy of the packet to a processor, and analyzing the copy of the packet at the processor to determine whether the packet includes an attack signature. The method also includes communicating a reply message from the processor to the interface indicating whether the packet includes an attack signature. If the packet does not contain an attack signature the buffered copy of the packet is re-tagged with a second VLAN identifier associated with a protected network and re-tagged packet is communicated to the protected network.

7574741, Aug 11, 2009

Apr 20, 2005

11/110144

James Aviani - Santa Barbara CA, US
Jean-Philippe Champagne - Goleta CA, US
Matthew Gnagy - Milpitas CA, US
Michael Hall - Austin TX, US
Ravishankar Ganesh Ithal - Fremont CA, US

Cisco Technology, Inc. - San Jose CA

G06F 17/30, H04L 9/00

726 23, 726 22, 726 26

A method and system for preventing the detection of an operating system by an intruder, the operating system installed on a host in a network, is provided. The intruder transmits a network probe for operating system detection. The network probe is identified and a response is generated to the network probe, generated by the operating system, is modified. The modified response provides the intruder with false information related to the operating system, thereby misleading the intruder about the type of operating system.