DR. THOMAS MICHAEL ANDERSON, MD, PHD
Radiology at Pacific St, Seattle, WA

6801503, Oct 5, 2004

Oct 9, 2000

09/685518

David J. Wetherall - Seattle WA
Stefan R. Savage - Seattle WA
Thomas E. Anderson - Seattle WA

Arbor Networks, Inc. - Lexington MA

H04J 314

370235, 370253, 709226

An apparatus is equipped to receive network traffic data for network traffic routed through a number of routing devices with one or more degrees of separation from a network node. The network traffic data include at least network traffic data for network traffic destined for the network node which meet a traffic type selection criteria and are routed by the routing devices to the network node. The apparatus is further equipped to progressively regulate and de-regulate network traffic routing by the routing devices based at least in part on the received network traffic data and the degrees of separation of the routing devices from the network node. Regulation extends from routing devices with the lowest degree of separation from the network node to routing devices with the highest degree of separation, following in the reverse direction of the routing paths traversed by the packets to reach the network node. In one embodiment, the extension or push back is made one degree of separation at a time. In one embodiment, deregulation follows the reverse path, whereas in another embodiment, deregulation is determined and implemented locally, whenever regulation or the extent of regulation is no longer needed.

2005001, Jan 27, 2005

Aug 24, 2004

10/924657

David Wetherall - Seattle WA, US
Stefan Savage - Seattle WA, US
Thomas Anderson - Seattle WA, US

Arbor Networks, Inc. - Lexington MA

H04L012/26

370235000

An apparatus is equipped to receive network traffic data for network traffic routed through a number of routing devices with one or more degrees of separation from a network node. The network traffic data include at least network traffic data for network traffic destined for the network node which meet a traffic type selection criteria and are routed by the routing devices to the network node. The apparatus is further equipped to progressively regulate and de-regulate network traffic routing by the routing devices based at least in part on the received network traffic data and the degrees of separation of the routing devices from the network node. Regulation extends from routing devices with the lowest degree of separation from the network node to routing devices with the highest degree of separation, following in the reverse direction of the routing paths traversed by the packets to reach the network node. In one embodiment, the extension or push back is made one degree of separation at a time. In one embodiment, deregulation follows the reverse path, whereas in another embodiment, deregulation is determined and implemented locally, whenever regulation or the extent of regulation is no longer needed. In one embodiment, regulation is made in accordance with a not-to-exceed profile, and the not-to-exceed limit or limits are divided up as regulation extends away from the network node.

7970886, Jun 28, 2011

Nov 2, 2000

09/706503

David J. Wetherall - Seattle WA, US
Stefan R. Savage - Seattle WA, US
Thomas E. Anderson - Seattle WA, US

Arbor Networks, Inc. - Chelmsford MA

G06F 15/173

709224, 709225, 709229

The present invention provides for a novel approach to protecting a system owner's system(s) from being exploited and providing involuntary assistance to a DOS attack. The present invention provides the protection by detecting and preventing undesirable or inappropriate network traffic from being sourced from a network domain. More specifically, a monitor/regulator is provided to monitor network traffic leaving a network domain. The monitor/regulator determines if undesirable/inappropriate network traffics are leaving the network domain based on the observed characteristics of the outbound and inbound network traffics. If it is determined that undesirable/inappropriate network traffics are leaving the network domain, the monitors/regulator, in one embodiment, at least warns system owners of the detection. In another embodiment, the monitors/regulator further issues regulation instruction(s) to boundary routing device(s) of the network domain(s), thereby preventing the network domain(s) from being exploited to source such undesirable/inappropriate network traffics.

5590046, Dec 31, 1996

Apr 1, 1993

8/042347

Thomas Q. Anderson - Seattle WA
Garth W. Broadrick - Spokane WA
Merrill A. Christianson - Puyallup WA
Daniel A. Hippe - Auburn WA
Arthur T. Hughes - Auburn WA
Jagdish C. Kalyan - Bothell WA
Daniel L. Nydegger - Auburn WA
Robert C. Platt - Seattle WA
Karapurath Ramachandran - Maple Valley WA

The Boeing Company - Seattle WA

G05B 1918

36447413

A workcell for making parts in a vertical orientation from rigid sheet material capable of self-support on edge includes a plurality of CNC machines for performing machining operations on said sheet material in a vertical orientation. The CNC machines receive machine control data from a cell controller which, in turn, receives nest order packages from a factory system. The parts data from which the factory system constructs the nest order packages comes from the original engineering parts definition in a central data storage system which is the ultimate parts design authority of the assembly for which the parts are to be made. The rigid sheet material is transferred in a vertical orientation to and between the CNC machines in at least one automated handling cart. The cart has a transfer mechanism for transferring sheets of the rigid sheet material on edge between the cart and the CNC machines. A motive mechanism is provided for driving the cart between the CNC machines under control of the cell controller, and for stopping the cart with its transfer mechanism in registry with the CNC machines.

7778165, Aug 17, 2010

Nov 8, 2007

11/937223

Harsha V. Madhyastha - Seattle WA, US
Thomas Anderson - Seattle WA, US
Arvind Krishnamurthy - Seattle WA, US
Arun Venkataramani - Northampton MA, US

University of Washington - Seattle WA

G01R 31/08

370229, 370254

Performance metrics between any two arbitrary end-hosts are predicted based upon previous measurements on the Internet between a plurality of geographically dispersed vantage points and clusters of end-hosts. Each cluster comprises end-hosts that are related based upon their IP address prefixes. In response to a central agent that stores the measured data for each of a plurality of predicted paths on the Internet, the vantage points use traceroute software to measure and periodically update performance metrics such as latency, bottleneck capacity, bandwidth, and packet loss rate for links comprising the predicted paths between the vantage points and one (or more) destination points associated with each cluster, and gather such data using distributed application systems. A user or client application can subsequently request predicted performance metrics for communication between specific end-hosts, based upon the previous measurement data.

7058015, Jun 6, 2006

Aug 4, 2000

09/631898

David J. Wetherall - Seattle WA, US
Thomas E. Anderson - Seattle WA, US
Stefan R. Savage - Seattle WA, US

Arbor Networks, Inc. - Lexington MA

G06F 11/00, G06F 15/16, G06F 15/173

370236, 370230, 726 23, 709224, 709225, 709229, 709232, 709235

A number of sensors are distributively deployed in a network, either integrally disposed in a number of routing devices of the network or externally disposed and coupled to the routing devices, to monitor and report on network traffic routed through the routing devices. A director is provided to receive network traffic reports from the sensors for the routing devices, and to determine whether moderating actions are to be taken to moderate an amount of network traffic, based at least in part on some of the network traffic reports received from the sensors. In one embodiment, upon determining moderating actions are to be taken, the director further determines what kind of moderating actions are to be taken, including where the moderating actions are to be taken. In one embodiment, the director further instructs appropriate ones of the sensors to cause the desired moderating actions to be applied on the network traffic going through some of the routing devices. In one embodiment, the director, in cooperation with the sensors, also determines when and where moderating actions are to be relaxed, and causes such relaxation to be effectuated.

8509086, Aug 13, 2013

Jun 20, 2002

10/176845

Thomas E. Anderson - Seattle WA, US
David J. Wetherall - Seattle WA, US
Stefan R. Savage - Carlsbad CA, US

G01R 31/08, H04L 12/54

3702361

An apparatus is equipped to receive network traffic data for network traffic routed over one or more network links relevant to a network link. Selected numbers of analysis are performed to determine if the network link of interest is being misused. The analyses include but are not limited to analyses to determine whether the network traffic routed are inconsistent with an expected traffic pattern, whether unallocated source addresses are present, whether source addresses exhibit an uncharacteristic even distribution pattern, whether a server is uncharacteristically excessive in responding to the same source address, whether normal bursty behavior is absent from the traffic, whether a ratio of packets in one direction to packets in another direction is out of balance, whether a ratio of packets of one type to packets of another type is out of balance, and whether a server is uncharacteristically excessive in responding with error responses.