IP Library › Granted Patent US 12,463,942
Granted Patent B2
US 12,463,942 · App. 18/086,974 · Granted Nov 4, 2025

Rule swapping in a packet network

Inventors: David K. Ahn (Winston-Salem, NC); Steven Rogers (Leesburg, VA); Sean Moore (Hollis, NH)
Assignee: Centripetal Networks, LLC
H04L63/0263G06N5/02H04L41/16
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,463,942
App. No.
18/086,974
Granted
Nov 4, 2025
Kind
B2
Abstract

In some variations, first and second rule sets may be received by a network protection device. The first and second rule sets may be preprocessed. The network protection device may be configured to process packets in accordance with the first rule set. Packets may be received by the network protection device. A first portion of the packets may be processed in accordance with the first rule set. The network protection device may be reconfigured to process packets in accordance with the second rule set. A second portion of the packets may be processed in accordance with the second rule set.

Claims (85)

1 . A method comprising:

configuring a packet filtering device to process packets in accordance with a first set of packet filtering rules;

receiving, by the packet filtering device, a first plurality of packets after configuring the packet filtering device to process packets in accordance with the first set of packet filtering rules;

beginning processing, by the packet filtering device, the first plurality of packets in accordance with the first set of packet filtering rules;

receiving, by the packet filtering device, a second set of packet filtering rules;

preprocessing, by the packet filtering device and during processing of the first plurality of packets in accordance with the first set of packet filtering rules, the second set of packet filtering rules by performing operations on the second set of packet filtering rules, prior to the second set of packet filtering rules being implemented on the packet filtering device, to optimize performance of the packet filtering device, wherein the packet filtering device does not process packets using the second set of packet filtering rules while preprocessing the second set of packet filtering rules;

in response to receiving a signal to process packets in accordance with the second set of packet filtering rules:

ceasing processing, by the packet filtering device, of the first plurality of packets, wherein a first portion of the first plurality of packets has completed processing in accordance with the first set of packet filtering rules and a second portion of the first plurality of packets has not completed processing in accordance with the first set of packet filtering rules;

temporarily storing, by the packet filtering device, the second portion of the first plurality of packets;

reconfiguring the packet filtering device to process packets in accordance with the second set of packet filtering rules; and

responsive to receiving one or more signals indicating that reconfiguration of the packet filtering device to process packets in accordance with the second set of packet filtering rules has completed, processing, by the packet filtering device, the second portion of the first plurality of packets and a second plurality of unprocessed packets in accordance with the second set of packet filtering rules.

2 . The method of claim 1 , further comprising:

detecting one or more network conditions indicating an attack, wherein the signal to process packets in accordance with the second set of packet filtering rules is based on detecting the one or more network conditions.

3 . The method of claim 1 , wherein preprocessing the second set of packet filtering rules comprises at least one of:

merging a first rule and a second rule into a single rule;

separating a third rule into a plurality of rules; or

reordering one or more rules in the second set of packet filtering rules.

4 . The method of claim 1 , further comprising:

storing, by the packet filtering device, the first set of packet filtering rules and the second set of packet filtering rules in a memory buffer; and

adjusting, by the packet filtering device, a size of the memory buffer based on at least one of a size of the first set of packet filtering rules and a size of the second set of packet filtering rules.

5 . The method of claim 1 , wherein the second set of packet filtering rules is received after processing the first portion of the first plurality of packets in accordance with the first set of packet filtering rules.

6 . The method of claim 1 , wherein the second set of packet filtering rules are received before processing of the first portion of the first plurality of packets in accordance with the first set of packet filtering rules.

7 . The method of claim 1 , wherein the second plurality of unprocessed packets are received after configuring the packet filtering device to process packets in accordance with the second set of packet filtering rules.

8 . The method of claim 1 , wherein temporarily storing the second portion of the first plurality of packets and the second plurality of unprocessed packets further comprises caching the second portion of the first plurality of packets and the second plurality of unprocessed packets.

9 . The method of claim 1 , wherein the one or more signals indicating that reconfiguration of the packet filtering device to process packets in accordance with the second set of packet filtering rules has completed are received from each processor, of one or more processors associated with the packet filtering device, prior to processing packets in accordance with the second set of packet filtering rules.

10 . The method of claim 1 , further comprising:

ceasing processing, after receiving one or more signals indicating that reconfiguration of the packet filtering device to process packets in accordance with the second set of packet filtering rules has completed, packets in accordance with the first set of packet filtering rules.

11 . A packet filtering device comprising:

one or more processors; and

memory comprising instructions that, when executed by the one or more processors, cause the packet filtering device to:

configure the packet filtering device to process packets in accordance with a first set of packet filtering rules;

receive a first plurality of packets after configuring the packet filtering device to process packets in accordance with the first set of packet filtering rules;

begin processing the first plurality of packets in accordance with the first set of packet filtering rules;

receive a second set of packet filtering rules;

preprocess, during processing of the first plurality of packets in accordance with the first set of packet filtering rules, the second set of packet filtering rules by performing operations on the second set of packet filtering rules, prior to the second set of packet filtering rules being implemented on the packet filtering device, to optimize performance of the packet filtering device, wherein the packet filtering device does not process packets using the second set of packet filtering rules while preprocessing the second set of packet filtering rules;

in response to receiving a signal to process packets in accordance with the second set of packet filtering rules:

cease processing of the first plurality of packets, wherein a first portion of the first plurality of packets has completed processing in accordance with the first set of packet filtering rules and a second portion of the first plurality of packets has not completed processing in accordance with the first set of packet filtering rules;

temporarily store the second portion of the first plurality of packets;

reconfigure the packet filtering device to process packets in accordance with the second set of packet filtering rules; and

responsive to receiving one or more signals indicating that reconfiguration of the packet filtering device to process packets in accordance with the second set of packet filtering rules has completed, process the second portion of the first plurality of packets and a second plurality of unprocessed packets in accordance with the second set of packet filtering rules.

12 . The packet filtering device of claim 11 , wherein the instructions, when executed by the one or more processors, cause the packet filtering device to:

detect one or more network conditions indicating an attack, wherein the signal to process packets in accordance with the second set of packet filtering rules is based on detecting the one or more network conditions.

13 . The packet filtering device of claim 11 , wherein the instructions, when executed by the one or more processors, cause the packet filtering device to preprocess the second set of packet filtering rules by at least one of:

merging a first rule and a second rule into a single rule;

separating a third rule into a fourth rule and a fifth rule; or

reordering one or more rules in the second set of packet filtering rules.

14 . The packet filtering device of claim 11 , wherein the instructions, when executed by the one or more processors, cause the packet filtering device to:

store the first set of packet filtering rules and the second set of packet filtering rules in a memory buffer; and

adjust a size of the memory buffer based on at least one of a size of the first set of packet filtering rules and a size of the second set of packet filtering rules.

15 . The packet filtering device of claim 11 , wherein the second set of packet filtering rules is received after processing the first portion of the first plurality of packets in accordance with the first set of packet filtering rules.

16 . The packet filtering device of claim 11 , wherein the second set of packet filtering rules are received before processing of the first portion of the first plurality of packets in accordance with the first set of packet filtering rules.

17 . The packet filtering device of claim 11 , wherein the second plurality of unprocessed packets are received after configuring the packet filtering device to process packets in accordance with the second set of packet filtering rules.

18 . The packet filtering device of claim 11 , wherein the instructions, when executed by the one or more processors, cause the packet filtering device to temporarily store the second portion of the first plurality of packets and the second plurality of unprocessed packets by caching the second portion of the first plurality of packets and the second plurality of unprocessed packets.

19 . The packet filtering device of claim 11 , wherein the instructions, when executed by the one or more processors, cause the packet filtering device to:

receive, prior to processing packets in accordance with the second set of packet filtering rules, from each processor, of one or more processors associated with the packet filtering device, the one or more signals indicating that reconfiguration of the packet filtering device to process packets in accordance with the second set of packet filtering rules has completed.

20 . The packet filtering device of claim 11 , wherein the instructions, when executed by the one or more processors, cause the packet filtering device to:

cease processing, after receiving one or more signals indicating that reconfiguration of the packet filtering device to process packets in accordance with the second set of packet filtering rules has completed, packets in accordance with the first set of packet filtering rules.

21 . One or more non-transitory computer-readable media comprising instructions that, when executed, cause a packet filtering device to:

configure the packet filtering device to process packets in accordance with a first set of packet filtering rules;

receive a first plurality of packets after configuring the packet filtering device to process packets in accordance with the first set of packet filtering rules;

begin processing a first portion of the first plurality of packets in accordance with the first set of packet filtering rules;

receive a second set of packet filtering rules;

preprocess, during processing of the first plurality of packets in accordance with the first set of packet filtering rules, the second set of packet filtering rules by performing operations on the second set of packet filtering rules, prior to the second set of packet filtering rules being implemented on the packet filtering device, to optimize performance of the packet filtering device, wherein the packet filtering device does not process packets using the second set of packet filtering rules while preprocessing the second set of packet filtering rules;

in response to a signal to process packets in accordance with the second set of packet filtering rules:

cease processing of the first plurality of packets, wherein a first portion of the first plurality of packets has completed processing in accordance with the first set of packet filtering rules and a second portion of the first plurality of packets has not completed processing in accordance with the first set of packet filtering rules;

temporarily store the second portion of the first plurality of packets;

reconfigure the packet filtering device to process packets in accordance with the second set of packet filtering rules; and

responsive to receiving one or more signals indicating that reconfiguration of the packet filtering device to process packets in accordance with the second set of packet filtering rules has completed, process a second portion of the first plurality of packets and a second plurality of unprocessed packets in accordance with the second set of packet filtering rules.

22 . The one or more non-transitory computer-readable media of claim 21 , wherein the instructions, when executed, cause the packet filtering device to:

detect one or more network conditions indicating an attack, wherein the signal to process packets in accordance with the second set of packet filtering rules is based on detecting one or more network conditions indicating an attack.

23 . The one or more non-transitory computer-readable media of claim 21 , wherein the instructions, when executed, cause the packet filtering device to preprocess the second set of packet filtering rules by at least one of:

merging a first rule and a second rule into a single rule;

separating a third rule into a plurality of rules; or

reordering one or more rules in the second set of packet filtering rules.

24 . The one or more non-transitory computer-readable media of claim 21 , wherein the instructions, when executed, cause the packet filtering device to:

store the first set of packet filtering rules and the second set of packet filtering rules in a memory buffer; and

adjust a size of the memory buffer based on at least one of a size of the first set of packet filtering rules and a size of the second set of packet filtering rules.

25 . The one or more non-transitory computer-readable media of claim 21 , wherein the second set of packet filtering rules is received after processing the first portion of the first plurality of packets in accordance with the first set of packet filtering rules.

26 . The one or more non-transitory computer-readable media of claim 21 , wherein the second set of packet filtering rules are received before processing of the first portion of the first plurality of packets in accordance with the first set of packet filtering rules.

27 . The one or more non-transitory computer-readable media of claim 21 , wherein the second plurality of unprocessed packets are received after configuring the packet filtering device to process packets in accordance with the second set of packet filtering rules.

28 . The one or more non-transitory computer-readable media of claim 21 , wherein the instructions, when executed, cause the packet filtering device to temporarily store the second portion of the first plurality of packets and the second plurality of unprocessed packets by caching the second portion of the first plurality of packets and the second plurality of unprocessed packets.

29 . The one or more non-transitory computer-readable media of claim 21 , wherein the instructions, when executed, cause the packet filtering device to:

receive, prior to processing packets in accordance with the second set of packet filtering rules, from each processor, of one or more processors associated with the packet filtering device, the one or more signals indicating that reconfiguration of the packet filtering device to process packets in accordance with the second set of packet filtering rules has completed.

30 . The one or more non-transitory computer-readable media of claim 21 , wherein the instructions, when executed, cause the packet filtering device to:

cease processing, after receiving one or more signals indicating that reconfiguration of the packet filtering device to process packets in accordance with the second set of packet filtering rules has completed, packets in accordance with the first set of packet filtering rules.

Assignments (2)
CHANGE OF NAME Recorded Feb 7, 2023
From: CENTRIPETAL NETWORKS, INC.
To: CENTRIPETAL NETWORKS, LLC
Reel/Frame 062666/0239 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 22, 2022
From: AHN, DAVID K.; ROGERS, STEVEN; MOORE, SEAN
To: CENTRIPETAL NETWORKS
Reel/Frame 062184/0197 →
Continuity (8)
Continuation 17859156 · Jul 7, 2022
Continuation 16892424 · Jun 4, 2020
Continuation 16744341 · Jan 16, 2020
Continuation 16357855 · Mar 19, 2019
Continuation 15610995 · Jun 1, 2017
Continuation 14921718 · Oct 23, 2015
Continuation 13739178 · Jan 11, 2013
Related Publication 20230208811A1 · Jun 29, 2023
References Cited (400)
US 5226141A · Esbensen · 1993 [cited by examiner]
US 6098172A · Coss et al. · 2000 [cited by applicant]
US 6147976A · Shand et al. · 2000 [cited by applicant]
US 6208640B1 · Spell et al. · 2001 [cited by applicant]
US 6226372B1 · Beebe et al. · 2001 [cited by applicant]
US 6279113B1 · Vaidya · 2001 [cited by applicant]
US 6298340B1 · Calvignac · 2001 [cited by examiner]
US 6317837B1 · Kenworthy · 2001 [cited by applicant]
US 6484261B1 · Wiegel · 2002 [cited by applicant]
US 6611875B1 · Chopra et al. · 2003 [cited by applicant]
US 6662235B1 · Callis et al. · 2003 [cited by applicant]
US 6678827B1 · Rothermel et al. · 2004 [cited by applicant]
US 6691168B1 · Bal et al. · 2004 [cited by applicant]
US 6826694B1 · Dutta et al. · 2004 [cited by applicant]
US 6907042B1 · Oguchi · 2005 [cited by applicant]
US 6971028B1 · Lyle et al. · 2005 [cited by applicant]
US 7043467B1 · Milito · 2006 [cited by examiner]
US 7054930B1 · Cheriton · 2006 [cited by applicant]
US 7089581B1 · Nagai et al. · 2006 [cited by applicant]
US 7095716B1 · Ke et al. · 2006 [cited by applicant]
US 7107613B1 · Chen et al. · 2006 [cited by applicant]
US 7143438B1 · Coss et al. · 2006 [cited by applicant]
US 7152240B1 · Green et al. · 2006 [cited by applicant]
US 7185368B2 · Copeland, III · 2007 [cited by applicant]
US 7215637B1 · Ferguson et al. · 2007 [cited by applicant]
US 7225269B2 · Watanabe · 2007 [cited by applicant]
US 7227842B1 · Ji et al. · 2007 [cited by applicant]
US 7237267B2 · Rayes et al. · 2007 [cited by applicant]
US 7263099B1 · Woo et al. · 2007 [cited by applicant]
US 7296288B1 · Hill et al. · 2007 [cited by applicant]
US 7299353B2 · Le Pennec et al. · 2007 [cited by applicant]
US 7320022B2 · Hayter · 2008 [cited by examiner]
US 7331061B1 · Ramsey et al. · 2008 [cited by applicant]
US 7478429B2 · Lyon · 2009 [cited by applicant]
US 7499412B2 · Matityahu et al. · 2009 [cited by applicant]
US 7539186B2 · Aerrabotu et al. · 2009 [cited by applicant]
US 7610621B2 · Turley et al. · 2009 [cited by applicant]
US 7684400B2 · Govindarajan et al. · 2010 [cited by applicant]
US 7710885B2 · Ilnicki et al. · 2010 [cited by applicant]
US 7721084B2 · Salminen et al. · 2010 [cited by applicant]
US 7792775B2 · Matsuda · 2010 [cited by applicant]
US 7814158B2 · Malik · 2010 [cited by applicant]
US 7814546B1 · Strayer et al. · 2010 [cited by applicant]
US 7818794B2 · Wittman · 2010 [cited by applicant]
US 7849502B1 · Bloch et al. · 2010 [cited by applicant]
US 7913303B1 · Rouland et al. · 2011 [cited by applicant]
US 7954143B2 · Aaron · 2011 [cited by applicant]
US 8004994B1 · Darisi et al. · 2011 [cited by applicant]
US 8009566B2 · Zuk et al. · 2011 [cited by applicant]
US 8037517B2 · Fulp et al. · 2011 [cited by applicant]
US 8042167B2 · Fulp et al. · 2011 [cited by applicant]
US 8117655B2 · Spielman · 2012 [cited by applicant]
US 8156206B2 · Kiley et al. · 2012 [cited by applicant]
US 8176561B1 · Hurst et al. · 2012 [cited by applicant]
US 8219675B2 · Ivershen · 2012 [cited by applicant]
US 8271645B2 · Rajan et al. · 2012 [cited by applicant]
US 8306994B2 · Kenworthy · 2012 [cited by applicant]
US 8307029B2 · Davis et al. · 2012 [cited by applicant]
US 8331234B1 · Newton et al. · 2012 [cited by applicant]
US 8422391B2 · Zhu · 2013 [cited by applicant]
US 8495725B2 · Ahn · 2013 [cited by applicant]
US 8510821B1 · Brandwine et al. · 2013 [cited by applicant]
US 8726379B1 · Stiansen et al. · 2014 [cited by applicant]
US 8789135B1 · Pani · 2014 [cited by applicant]
US 8806638B1 · Mani · 2014 [cited by applicant]
US 8832832B1 · Visbal · 2014 [cited by applicant]
US 8856926B2 · Narayanaswamy et al. · 2014 [cited by applicant]
US 8935785B2 · Pandrangi · 2015 [cited by applicant]
US 9094445B2 · Moore et al. · 2015 [cited by applicant]
US 9124552B2 · Moore · 2015 [cited by applicant]
US 9137205B2 · Rogers et al. · 2015 [cited by applicant]
US 9154446B2 · Gemelli et al. · 2015 [cited by applicant]
US 9160713B2 · Moore · 2015 [cited by applicant]
US 9172627B2 · Kjendal et al. · 2015 [cited by applicant]
US 9203806B2 · Ahn · 2015 [cited by examiner]
US 9419942B1 · Buruganahalli et al. · 2016 [cited by applicant]
US 9531672B1 · Li et al. · 2016 [cited by applicant]
US 9634911B2 · Meloche · 2017 [cited by applicant]
US 9686193B2 · Moore · 2017 [cited by applicant]
US 20010039579A1 · Trcka et al. · 2001 [cited by applicant]
US 20010039624A1 · Kellum · 2001 [cited by applicant]
US 20020016858A1 · Sawada et al. · 2002 [cited by applicant]
US 20020038339A1 · Xu · 2002 [cited by applicant]
US 20020049899A1 · Kenworthy · 2002 [cited by applicant]
US 20020083345A1 · Halliday et al. · 2002 [cited by applicant]
US 20020112188A1 · Syvanne · 2002 [cited by applicant]
US 20020152209A1 · Merugu et al. · 2002 [cited by applicant]
US 20020164962A1 · Mankins et al. · 2002 [cited by applicant]
US 20020165949A1 · Na et al. · 2002 [cited by applicant]
US 20020174255A1 · Hayter et al. · 2002 [cited by applicant]
US 20020186683A1 · Buck et al. · 2002 [cited by applicant]
US 20020198981A1 · Corl et al. · 2002 [cited by applicant]
US 20030005122A1 · Freimuth et al. · 2003 [cited by applicant]
US 20030014665A1 · Anderson et al. · 2003 [cited by applicant]
US 20030018591A1 · Komisky · 2003 [cited by applicant]
US 20030035370A1 · Brustoloni · 2003 [cited by applicant]
US 20030051026A1 · Carter et al. · 2003 [cited by applicant]
US 20030051165A1 · Krishnan et al. · 2003 [cited by applicant]
US 20030088787A1 · Egevang · 2003 [cited by applicant]
US 20030097590A1 · Syvanne · 2003 [cited by applicant]
US 20030105976A1 · Copeland · 2003 [cited by applicant]
US 20030120622A1 · Nurmela et al. · 2003 [cited by applicant]
US 20030123456A1 · Denz et al. · 2003 [cited by applicant]
US 20030142681A1 · Chen et al. · 2003 [cited by applicant]
US 20030145225A1 · Bruton et al. · 2003 [cited by applicant]
US 20030154297A1 · Suzuki et al. · 2003 [cited by applicant]
US 20030154399A1 · Zuk et al. · 2003 [cited by applicant]
US 20030188192A1 · Tang et al. · 2003 [cited by applicant]
US 20030212900A1 · Liu et al. · 2003 [cited by applicant]
US 20030220940A1 · Futoransky et al. · 2003 [cited by applicant]
US 20040010712A1 · Hui et al. · 2004 [cited by applicant]
US 20040015719A1 · Lee et al. · 2004 [cited by applicant]
US 20040015905A1 · Huima · 2004 [cited by examiner]
US 20040073655A1 · Kan et al. · 2004 [cited by applicant]
US 20040088542A1 · Daude et al. · 2004 [cited by applicant]
US 20040093513A1 · Cantrell et al. · 2004 [cited by applicant]
US 20040098511A1 · Lin et al. · 2004 [cited by applicant]
US 20040114518A1 · MacFaden et al. · 2004 [cited by applicant]
US 20040123220A1 · Johnson et al. · 2004 [cited by applicant]
US 20040131056A1 · Dark · 2004 [cited by applicant]
US 20040148520A1 · Talpade et al. · 2004 [cited by applicant]
US 20040151155A1 · Jouppi · 2004 [cited by applicant]
US 20040172529A1 · Culbert · 2004 [cited by applicant]
US 20040172557A1 · Nakae et al. · 2004 [cited by applicant]
US 20040177139A1 · Schuba et al. · 2004 [cited by applicant]
US 20040181690A1 · Rothermel et al. · 2004 [cited by applicant]
US 20040193943A1 · Angelino et al. · 2004 [cited by applicant]
US 20040199629A1 · Bomer et al. · 2004 [cited by applicant]
US 20040205360A1 · Norton et al. · 2004 [cited by applicant]
US 20040250124A1 · Chesla et al. · 2004 [cited by applicant]
US 20050010765A1 · Swander et al. · 2005 [cited by applicant]
US 20050024189A1 · Weber · 2005 [cited by applicant]
US 20050071650A1 · Jo et al. · 2005 [cited by applicant]
US 20050076227A1 · Kang et al. · 2005 [cited by applicant]
US 20050108557A1 · Kayo et al. · 2005 [cited by applicant]
US 20050114704A1 · Swander · 2005 [cited by applicant]
US 20050117576A1 · McDysan et al. · 2005 [cited by applicant]
US 20050125697A1 · Tahara · 2005 [cited by applicant]
US 20050138204A1 · Iyer et al. · 2005 [cited by applicant]
US 20050138353A1 · Spies et al. · 2005 [cited by applicant]
US 20050141537A1 · Kumar et al. · 2005 [cited by applicant]
US 20050183140A1 · Goddard · 2005 [cited by applicant]
US 20050229246A1 · Rajagopal et al. · 2005 [cited by applicant]
US 20050249214A1 · Peng · 2005 [cited by applicant]
US 20050251570A1 · Heasman et al. · 2005 [cited by applicant]
US 20050283823A1 · Okajo et al. · 2005 [cited by applicant]
US 20050286522A1 · Paddon et al. · 2005 [cited by applicant]
US 20060031928A1 · Conley et al. · 2006 [cited by applicant]
US 20060048142A1 · Roese · 2006 [cited by examiner]
US 20060053491A1 · Khuti et al. · 2006 [cited by applicant]
US 20060070122A1 · Bellovin · 2006 [cited by applicant]
US 20060080733A1 · Khosmood et al. · 2006 [cited by applicant]
US 20060085849A1 · Culbert · 2006 [cited by applicant]
US 20060092921A1 · Narayanan et al. · 2006 [cited by applicant]
US 20060104202A1 · Reiner · 2006 [cited by applicant]
US 20060114899A1 · Toumura et al. · 2006 [cited by applicant]
US 20060133377A1 · Jain · 2006 [cited by applicant]
US 20060136987A1 · Okuda · 2006 [cited by applicant]
US 20060137009A1 · Chesla · 2006 [cited by applicant]
US 20060146879A1 · Anthias et al. · 2006 [cited by applicant]
US 20060159028A1 · Curran-Gray et al. · 2006 [cited by applicant]
US 20060195575A1 · Delany et al. · 2006 [cited by applicant]
US 20060195896A1 · Fulp et al. · 2006 [cited by applicant]
US 20060212572A1 · Afek et al. · 2006 [cited by applicant]
US 20060248580A1 · Fulp et al. · 2006 [cited by applicant]
US 20060262798A1 · Joshi et al. · 2006 [cited by applicant]
US 20070056038A1 · Lok · 2007 [cited by applicant]
US 20070083924A1 · Lu · 2007 [cited by applicant]
US 20070118894A1 · Bhatia · 2007 [cited by applicant]
US 20070147380A1 · Ormazabal et al. · 2007 [cited by applicant]
US 20070211644A1 · Ottamalika et al. · 2007 [cited by applicant]
US 20070240208A1 · Yu et al. · 2007 [cited by applicant]
US 20070291789A1 · Kutt et al. · 2007 [cited by applicant]
US 20080005795A1 · Acharya et al. · 2008 [cited by applicant]
US 20080028467A1 · Kommareddy et al. · 2008 [cited by applicant]
US 20080043739A1 · Suh et al. · 2008 [cited by applicant]
US 20080072307A1 · Maes · 2008 [cited by applicant]
US 20080077705A1 · Li et al. · 2008 [cited by applicant]
US 20080080493A1 · Weintraub et al. · 2008 [cited by applicant]
US 20080086435A1 · Chesla · 2008 [cited by applicant]
US 20080101234A1 · Nakil et al. · 2008 [cited by applicant]
US 20080163333A1 · Kasralikar · 2008 [cited by applicant]
US 20080201772A1 · Mondaeev et al. · 2008 [cited by applicant]
US 20080229415A1 · Kapoor et al. · 2008 [cited by applicant]
US 20080235755A1 · Blaisdell et al. · 2008 [cited by applicant]
US 20080279196A1 · Friskney et al. · 2008 [cited by applicant]
US 20080301765A1 · Nicol et al. · 2008 [cited by applicant]
US 20080313738A1 · Enderby · 2008 [cited by applicant]
US 20080320116A1 · Briggs · 2008 [cited by applicant]
US 20090028160A1 · Eswaran et al. · 2009 [cited by applicant]
US 20090138938A1 · Harrison et al. · 2009 [cited by applicant]
US 20090144819A1 · Babbar et al. · 2009 [cited by applicant]
US 20090150972A1 · Moon et al. · 2009 [cited by applicant]
US 20090168657A1 · Puri et al. · 2009 [cited by applicant]
US 20090172800A1 · Wool · 2009 [cited by applicant]
US 20090185568A1 · Cho et al. · 2009 [cited by applicant]
US 20090222877A1 · Diehl et al. · 2009 [cited by applicant]
US 20090240698A1 · Shukla et al. · 2009 [cited by applicant]
US 20090262723A1 · Pelletier et al. · 2009 [cited by applicant]
US 20090262741A1 · Jungck et al. · 2009 [cited by applicant]
US 20090300759A1 · Wang et al. · 2009 [cited by applicant]
US 20090328219A1 · Narayanaswamy · 2009 [cited by applicant]
US 20100011433A1 · Harrison et al. · 2010 [cited by applicant]
US 20100011434A1 · Kay · 2010 [cited by applicant]
US 20100082811A1 · Van Der Merwe et al. · 2010 [cited by applicant]
US 20100095367A1 · Narayanaswamy · 2010 [cited by applicant]
US 20100107240A1 · Thaler et al. · 2010 [cited by applicant]
US 20100115621A1 · Staniford et al. · 2010 [cited by applicant]
US 20100132027A1 · Ou · 2010 [cited by applicant]
US 20100183015A1 · Inoue et al. · 2010 [cited by applicant]
US 20100195503A1 · Raleigh · 2010 [cited by applicant]
US 20100199346A1 · Ling et al. · 2010 [cited by applicant]
US 20100202299A1 · Strayer et al. · 2010 [cited by applicant]
US 20100211678A1 · McDysan et al. · 2010 [cited by applicant]
US 20100232445A1 · Bellovin · 2010 [cited by applicant]
US 20100242098A1 · Kenworthy · 2010 [cited by applicant]
US 20100268799A1 · Maestas · 2010 [cited by applicant]
US 20100296441A1 · Barkan · 2010 [cited by applicant]
US 20100303240A1 · Beachem et al. · 2010 [cited by applicant]
US 20110055916A1 · Ahn · 2011 [cited by applicant]
US 20110055923A1 · Thomas · 2011 [cited by applicant]
US 20110088092A1 · Nguyen et al. · 2011 [cited by applicant]
US 20110141900A1 · Jayawardena et al. · 2011 [cited by applicant]
US 20110154470A1 · Grimes et al. · 2011 [cited by applicant]
US 20110185055A1 · Nappier et al. · 2011 [cited by applicant]
US 20110214157A1 · Korsunsky et al. · 2011 [cited by applicant]
US 20110258694A1 · Wu · 2011 [cited by examiner]
US 20110270956A1 · McDysan et al. · 2011 [cited by applicant]
US 20110277034A1 · Hanson · 2011 [cited by applicant]
US 20120023576A1 · Sorensen et al. · 2012 [cited by applicant]
US 20120084866A1 · Stolfo · 2012 [cited by applicant]
US 20120106354A1 · Pleshek et al. · 2012 [cited by applicant]
US 20120110128A1 · Aaron et al. · 2012 [cited by applicant]
US 20120110656A1 · Santos et al. · 2012 [cited by applicant]
US 20120113987A1 · Riddoch et al. · 2012 [cited by applicant]
US 20120117354A1 · Tatsumura · 2012 [cited by examiner]
US 20120240135A1 · Risbood et al. · 2012 [cited by applicant]
US 20120240185A1 · Kapoor et al. · 2012 [cited by applicant]
US 20120264443A1 · Ng et al. · 2012 [cited by applicant]
US 20120314617A1 · Erichsen et al. · 2012 [cited by applicant]
US 20120331543A1 · Bostrom et al. · 2012 [cited by applicant]
US 20130007257A1 · Ramaraj et al. · 2013 [cited by applicant]
US 20130031544A1 · Sridharan · 2013 [cited by examiner]
US 20130047020A1 · Hershko et al. · 2013 [cited by applicant]
US 20130059527A1 · Hasesaka et al. · 2013 [cited by applicant]
US 20130061294A1 · Kenworthy · 2013 [cited by applicant]
US 20130081102A1 · Beauvais · 2013 [cited by examiner]
US 20130104236A1 · Ray et al. · 2013 [cited by applicant]
US 20130117852A1 · Stute · 2013 [cited by applicant]
US 20130125230A1 · Koponen et al. · 2013 [cited by applicant]
US 20130139236A1 · Rubinstein et al. · 2013 [cited by applicant]
US 20130254766A1 · Zuo et al. · 2013 [cited by applicant]
US 20130291100A1 · Ganapathy et al. · 2013 [cited by applicant]
US 20130304742A1 · Roman · 2013 [cited by examiner]
US 20130305311A1 · Puttaswamy Naga et al. · 2013 [cited by applicant]
US 20140075510A1 · Sonoda et al. · 2014 [cited by applicant]
US 20140082204A1 · Shankar et al. · 2014 [cited by applicant]
US 20140082730A1 · Vashist et al. · 2014 [cited by applicant]
US 20140115654A1 · Rogers et al. · 2014 [cited by applicant]
US 20140150051A1 · Bharali et al. · 2014 [cited by applicant]
US 20140156702A1 · Shyamsunder et al. · 2014 [cited by applicant]
US 20140165130A1 · Zaitsev · 2014 [cited by applicant]
US 20140201123A1 · Ahn et al. · 2014 [cited by applicant]
US 20140215561A1 · Roberson et al. · 2014 [cited by applicant]
US 20140215574A1 · Erb et al. · 2014 [cited by applicant]
US 20140245423A1 · Lee · 2014 [cited by applicant]
US 20140259170A1 · Amsler · 2014 [cited by applicant]
US 20140281030A1 · Cui et al. · 2014 [cited by applicant]
US 20140283004A1 · Moore · 2014 [cited by applicant]
US 20140283030A1 · Moore et al. · 2014 [cited by applicant]
US 20140317397A1 · Martini · 2014 [cited by applicant]
US 20140317737A1 · Shin et al. · 2014 [cited by applicant]
US 20140337613A1 · Martini · 2014 [cited by applicant]
US 20140365372A1 · Ross et al. · 2014 [cited by applicant]
US 20140366132A1 · Stiansen et al. · 2014 [cited by applicant]
US 20150033336A1 · Wang et al. · 2015 [cited by applicant]
US 20150052601A1 · White et al. · 2015 [cited by applicant]
US 20150106930A1 · Honda et al. · 2015 [cited by applicant]
US 20150128274A1 · Giokas · 2015 [cited by applicant]
US 20150135325A1 · Stevens et al. · 2015 [cited by applicant]
US 20150207809A1 · Macaulay · 2015 [cited by applicant]
US 20150237012A1 · Moore · 2015 [cited by applicant]
US 20150244734A1 · Olson et al. · 2015 [cited by applicant]
US 20150256431A1 · Buchanan et al. · 2015 [cited by applicant]
US 20150304354A1 · Rogers et al. · 2015 [cited by applicant]
US 20150334125A1 · Bartos et al. · 2015 [cited by applicant]
US 20150341389A1 · Kurakami · 2015 [cited by applicant]
US 20150347246A1 · Matsui et al. · 2015 [cited by applicant]
US 20150350110A1 · McGeer · 2015 [cited by applicant]
US 20150350229A1 · Mitchell · 2015 [cited by applicant]
US 20150372977A1 · Yin · 2015 [cited by applicant]
US 20150373043A1 · Wang et al. · 2015 [cited by applicant]
US 20160020968A1 · Aumann et al. · 2016 [cited by applicant]
US 20160028751A1 · Cruz Mota et al. · 2016 [cited by applicant]
US 20160065611A1 · Fakeri-Tabrizi et al. · 2016 [cited by applicant]
US 20160112443A1 · Grossman et al. · 2016 [cited by applicant]
US 20160119365A1 · Barel · 2016 [cited by applicant]
US 20160127417A1 · Janssen · 2016 [cited by applicant]
US 20160191558A1 · Davison · 2016 [cited by applicant]
US 20160205069A1 · Blocher et al. · 2016 [cited by applicant]
US 20160219065A1 · Dasgupta et al. · 2016 [cited by applicant]
US 20160285706A1 · Rao · 2016 [cited by applicant]
US 20160294870A1 · Banerjee et al. · 2016 [cited by applicant]
US 20160366099A1 · Jordan · 2016 [cited by applicant]
US 20170223046A1 · Singh · 2017 [cited by applicant]
US 20170272469A1 · Kraemer et al. · 2017 [cited by applicant]
US 20180343238A1 · Tola · 2018 [cited by examiner]
AU 2005328336B2 · 2011 [cited by applicant]
AU 2006230171B2 · 2012 [cited by applicant]
CA 2600236A1 · 2006 [cited by applicant]
EP 1006701A2 · 2000 [cited by applicant]
EP 1313290A1 · 2003 [cited by applicant]
EP 1484884A2 · 2004 [cited by applicant]
EP 1677484A2 · 2006 [cited by applicant]
EP 2385676A1 · 2011 [cited by applicant]
EP 2498442A1 · 2012 [cited by applicant]
EP 1864226B1 · 2013 [cited by applicant]
KR 20010079361A · 2001 [cited by applicant]
WO 2005046145A1 · 2005 [cited by applicant]
WO 2006093557A2 · 2006 [cited by applicant]
WO 2006105093A2 · 2006 [cited by applicant]
WO 2007109541A2 · 2007 [cited by applicant]
WO 2011038420A2 · 2011 [cited by applicant]
WO 2012146265A1 · 2012 [cited by applicant]
Aug. 9, 2018 (US) Non-Final Office Action—U.S. Appl. No. 15/413,947. [cited by applicant]
Dec. 18, 2018 (US) Final Office Action—U.S. Appl. No. 15/610,995. [cited by applicant]
Jul. 11, 2018 (US) Declaration of Kevin Jeffay, PhD in Support of Petition for Inter Partes Review of U.S. Pat. No. 9,565,213—IPR2018-01386. [cited by applicant]
Jul. 12, 2018 (US) Petition for Inter Partes Review of U.S. Pat. No. 9,565,213—IPR2018-01386. [cited by applicant]
Jul. 13, 2018 (US) Notice of Allowance—U.S. Appl. No. 15/414,117. [cited by applicant]
Jul. 20, 2018 (US) Declaration of Dr. Stuart Staniford in Support of Petition for Inter Partes Review of U.S. Pat. No. 9,124,552—IPR2018-01436. [cited by applicant]
Jul. 20, 2018 (US) Declaration of Dr. Stuart Staniford in Support of Petition for Inter Partes Review of U.S. Pat. No. 9,160,713—IPR2018-01437. [cited by applicant]
Jul. 20, 2018 (US) Petition for Inter Partes Review of U.S. Pat. No. 9,124,552—IPR2018-01436. [cited by applicant]
Jul. 20, 2018 (US) Petition for Inter Partes Review of U.S. Pat. No. 9,160,713—IPR2018-01437. [cited by applicant]
Jul. 26, 2018 (US) Declaration of Kevin Jeffay, PhD in Support of First Petition for Inter Partes Review of U.S. Pat. No. 9,137,205—IPR2018-01443. [cited by applicant]
Jul. 26, 2018 (US) Declaration of Kevin Jeffay, PhD in Support of Second Petition for Inter Partes Review of U.S. Pat. No. 9,137,205—IPR2018-01444. [cited by applicant]
Jul. 27, 2018 (US) First Petition for Inter Partes Review of U.S. Pat. No. 9,137,205—IPR2018-01443. [cited by applicant]
Jul. 27, 2018 (US) Non-Final Office Action—U.S. Appl. No. 15/382,806. [cited by applicant]
Jul. 27, 2018 (US) Second Petition for Inter Partes Review of U.S. Pat. No. 9,137,205—IPR2018-01444. [cited by applicant]
Jul. 5, 2018 (US) Non-Final Office Action—U.S. Appl. No. 15/413,750. [cited by applicant]
Mar. 15, 2018 (EP) Second Communication pursuant to Article 94(3) EPC—App. 13765547.8. [cited by applicant]
Mar. 16, 2018 (EP) Communication Pursuant to Rule 164(2)(b) and Article 94(3) EPC—App. 15722292.8. [cited by applicant]
Mar. 21, 2018 (AU) First Examination Report—App. 2015382393. [cited by applicant]
Mar. 8, 2018 (US) Non-Final Office Action—U.S. Appl. No. 14/745,207. [cited by applicant]
May 25, 2018 (US) Notice of Allowance—U.S. Appl. No. 15/413,834. [cited by applicant]
Nov. 14, 2018 (US) Final Office Action—U.S. Appl. No. 14/745,207. [cited by applicant]
Oct. 12, 2018 (US) Non-Final Office Action—U.S. Appl. No. 16/039,896. [cited by applicant]
Oct. 4, 2018 (US) Non-Final Office Action—U.S. Appl. No. 16/030,374. [cited by applicant]
Oct. 4, 2018 (US) Notice of Allowance—U.S. Appl. No. 15/827,477. [cited by applicant]
Sep. 17, 2018 (US) Declaration of Narasimha Reddy Ph.D., in Support of Petition for Inter Partes Review of U.S. Pat. No. 9,560,176 (First)—IRP2018-01654. [cited by applicant]
Sep. 17, 2018 (US) Declaration of Narasimha Reddy Ph.D., in Support of Petition for Inter Partes Review of U.S. Pat. No. 9,560,176 (Second)—IRP2018-01655. [cited by applicant]
Sep. 17, 2018 (US) Petition for Inter Partes Review of U.S. Pat. No. 9,560,176 (First)—IPR 2018-01654. [cited by applicant]
Sep. 17, 2018 (US) Petition for Inter Partes review of U.S. Pat. No. 9,560,176 (Second)—IPR2018-01655. [cited by applicant]
Sep. 27, 2018 (WO) International Search Report and Written Opinion—App. PCT/US2018/043367. [cited by applicant]
Sep. 4, 2018 (WO) International Search Report and Written Opinion—App. PCT/US2018/041355. [cited by applicant]
Sep. 27, 2018 (US) Non-Final Office Action—U.S. Appl. No. 15/614,956. [cited by applicant]
Apr. 2, 2019 (US) Decision—Institution of Inter Partes Review of U.S. Pat. No. 9,560,077—IPR 2018-01513. [cited by applicant]
Apr. 8, 2019 (US) Final Office Action—U.S. Appl. No. 15/413,947. [cited by applicant]
Feb. 21, 2019 (US) Final Office Action—U.S. Appl. No. 15/382,806. [cited by applicant]
Feb. 6, 2019 (US) Final Office Action—U.S. Appl. No. 15/413,750. [cited by applicant]
Feb. 6, 2019 (US) Notice of Allowance and Fees Due—U.S. Appl. No. 16/039,896. [cited by applicant]
Jan. 24, 2019 (US) Decision—Institution of Inter Partes Review of U.S. Pat. No. 9,124,552 B2—IPR 2018-01436. [cited by applicant]
Jan. 24, 2019 (US) Notice of Allowance—U.S. Appl. No. 15/610,995. [cited by applicant]
Jun. 3, 2019 (EP) Communication pursuant to Article 94(3) EPC—Third Examination Report—App. 13765547.8. [cited by applicant]
Jun. 3, 2019 (US) Final Office Action—U.S. Appl. No. 15/614,956. [cited by applicant]
Mar. 11, 2019 (US) Final Office Action—U.S. Appl. No. 16/030,354. [cited by applicant]
Mar. 18, 2019 (AU) First Examination Report—App. 2016379156. [cited by applicant]
Jan. 24, 2019 (US) Decision—Institution of Inter Partes Review of U.S. Pat. No. 9,160,713 B2—IPR 2018-01437. [cited by applicant]
Mar. 8, 2019 (US) Notice of Allowance and Fees Due—U.S. Appl. No. 16/030,374. [cited by applicant]
Mar. 8, 2019 (US) Notice of Allowance and Fees Due—U.S. Appl. No. 16/060,374. [cited by applicant]
May 23, 2019 (US) Non-Final Office Action—U.S. Appl. No. 14/745,207. [cited by applicant]
May 24, 2019 (US) Non-Final Office Action—U.S. Appl. No. 16/111,524. [cited by applicant]
A. Feldmann et al., “Tradeoffs for Packet Classification”, Proceedings of the IEEE INFOCOM, 397-413, 2000. [cited by applicant]
A. Hari et al., “Detecting and Resolving Packet Filter Conflicts”, Proceedings of IEEE INFOCOM, 1203-1212, 2000. [cited by applicant]
Acharya et al, “OPTWALL: A Hierarchical Traffic-Aware Firewall,” Department of Computer Science, Telecommunications Program, University of Pittsburgh, pp. 1-11 (2007). [cited by applicant]
Anonymous: “The Distribution of Malicious Domains,” The DomainTools Report, 2016 Edition, Mar. 9, 2016 (Mar. 9, 2016), pp. 1-11, XP055502306, Retrieved from: https://www.domaintools.com/resources/white-papers/the-domain… [cited by applicant]
Bellion, “High Performance Packet Classification”, http://www.hipac.org (Publication Date Unknown). [cited by applicant]
Blake, et al., “An Architecture for Differentiated Services,” Network Working Group RFC 2475, Dec. 1998, 36 pages. [cited by applicant]
Blake, et al., “An Architecture for Differentiated Services,” also known as the Diffserv architecture, as defined in RFC 2475, Network Working Group, Decemer 1998, 36 pages. [cited by applicant]
C. Benecke, “A Parallel Packet Screen for High Speed Networks”, Proceedings of the 15th Annual Computer Security Applications Conference, 1999. [cited by applicant]
Chen, et al, “Research on the Anomaly Discovering Algorithm of the Packet Filtering Rule Sets,” Sep. 2010, First International Confererence on Pervasive Computing, Signal Processing and Applications, pp. 362-366. [cited by applicant]
D. Comer, “Analysis of a Heuristic for Full Trie Minimization”, ACM Transactions on Database Systems, 6(3): 513-537, Sep. 1981. [cited by applicant]
D. Decasper et al., “Router Plugins: A Software Architecture for Next-Generation Routers”, IEEE/ACM Transactions on Networking, 8(1): Feb. 2000. [cited by applicant]
D. Eppstein et al., “Internet Packet Filter Management and Rectangle Geometry”, Proceedings of the Symposium on Discrete Algorithms, 827-835, 2001. [cited by applicant]
E. Al-Shaer et al., “Firewall Policy Advisor for Anomaly Discovery and Rule Editing”, Proceedings of the IFIP/IEEE International Symposium on Integrated Network Management, 2003. [cited by applicant]
E. Al-Shaer et al., “Modeling and Management of Firewall Policies”, IEEE Transactions on Network and Service Management, 1(1): 2004. [cited by applicant]
E. Fulp et al., “Network Firewall Policy Tries”, Technical Report, Computer Science Department, Wake Forest University, 2004. [cited by applicant]
E. Fulp, “Optimization of Network Firewall Policies Using Ordered Sets and Directed Acyclical Graphs”, Technical Report, Computer Scient Department, Wake Forest University, Jan. 2004. [cited by applicant]
E. Fulp, “Preventing Denial of Service Attacks on Quality of Service”, Proceedings of the 2001 DARPA Information Survivability Conference and Exposition II, 2001. [cited by applicant]
E.L. Lawler, “Sequencing Jobs to Minimize Total Weighted Completion Time Subject to Precedence Constraints”, Annals of Discrete Mathematics, 2: 75-90, 1978. [cited by applicant]
E.W. Fulp, “Firewall Architectures for High Speed Networks”, U.S. Department of Energy Grant Application, Funded Sep. 2003. [cited by applicant]
Frahim, et al., “Cisco ASA: All-in-One Firewall, IPS, and VPN Adaptive Security Appliance,” Indiana: Cisco Press: 2006, 54 pages. [cited by applicant]
Fulp, “Trie-Based Policy Representations for Network Firewalls,” Proceedings of the IEEE International Symposium on Computer Communications (2005). [cited by applicant]
Fulp, Errin: “CV: Errin Fulp,” XP002618346, www.cs.wfu.edu/fulp/ewfPub.html, pp. 1-5 (Copyright 2010). [cited by applicant]
G. Brightwell et al., “Counting Linear Extensions is #P-Complete”, Proceedings of the Twenty-Third Annual ACM Symposium on Theory of Computing, 1991. [cited by applicant]
G.V. Rooij, “Real Stateful TCP Packet Filtering in IP Filter”, Proceedings of the 10th USENIX Security Symposium, 2001. [cited by applicant]
Greenwald, Michael; “Designing an Academic Firewall: Policy, Practice, and Experience with SURF”; IEEE, Proceedings of SNDSS, 1996. [cited by applicant]
J. Xu et al., “Design and Evaluation of a High-Performance ATM Firewall Switch and Its Applications”, IEEE Journal on Selected Areas in Communications, 17(6): 1190-1200, Jun. 1999. [cited by applicant]
J.K. Lenstra et al., “Complexity of Scheduling Under Precedence Constraints”, Operations Research, 26(1): 22-35, 1978. [cited by applicant]
Kindervag, et al. “Build Security Into Your Network's DNA: The Zero Trust Network Architecture,” Forrester Research Inc.; Nov. 5, 2010, pp. 1-26. [cited by applicant]
L. Qui et al., “Fast Firewall Implementations for Software and Hardware-Based Routers”, Proceedings of ACM Sigmetrics, Jun. 2001. [cited by applicant]