Back to results
US 10,542,038 B2Granted
Security appliance
AssigneeFortress Information Security
InventorDejan Nenov
Life of this patent
Estimating the term…
Abstract
A security appliance may incorporate a touch screen or similar input/output interface, providing command and control over network functionality and configuration, without requiring log in via a network from another computing device. During denial of service attacks, commands from the local interface may be given priority access to processing resources and memory, allowing mitigating actions to be taken, such as shutting down ports, blacklisting packet sources, or modifying filter rules. This may allow the security device to address attacks without having to be manually rebooted or disconnected from the network.
Claims20
An appliance, comprising:
- a housing;
- a network security device deployed within the housing, coupled to a first network and a second network;
- and
- an input/output device deployed on a surface of the housing, the input/output device providing a user interface of the network security device;
- wherein the network security device is configured, responsive to receipt of a network packet matching a predetermined filter, to:
- store the network packet in a memory of the network security device,
- block transmission of the network packet,
- reserve a predetermined amount of memory of the network security device for the user interface provided by the input/output device, and
- increase a priority of execution of the user interface, responsive to receipt of the network packet matching the predetermined filter;
- and
- wherein the input/output device is configured to display, via the user interface, a notification of the received network packet.
8 more elements
An appliance, comprising:
- a housing;
- a network security device deployed within the housing, coupled to a first network and a second network;
- and
- an input/output device deployed on a surface of the housing, the input/output device providing a user interface of the network security device;
- wherein the network security device is configured, responsive to receipt of a network packet matching a predetermined filter, to:
- store the network packet in a memory of the network security device,
- block transmission of the network packet,
- reserve a predetermined amount of memory of the network security device for the user interface provided by the input/output device;
- and
- wherein the input/output device is configured to display, via the user interface, a notification of the received network packet and
- wherein the network security device is further configured to transmit a notification to a second device, responsive to receipt of the network packet matching the predetermined filter.
8 more elements
An appliance, comprising:
- a housing;
- a network security device deployed within the housing, coupled to a first network and a second network;
- and
- an input/output device deployed on a surface of the housing, the input/output device providing a user interface of the network security device;
- wherein the network security device is configured, responsive to receipt of a network packet matching a predetermined filter, to:
- store the network packet in a memory of the network security device,
- block transmission of the network packet,
- reserve a predetermined amount of memory of the network security device for the user interface provided by the input/output device;
- and
- wherein the input/output device is configured to display, via the user interface, a notification of the received network packet and
- wherein the network security device is further configured to:
- detect an interaction with the user interface indicating to increase a priority of a second filter matching the network packet, and
- increase the priority of the second filter in a rule set of the network security device.
10 more elements
A method, comprising:
- receiving, by a network security device deployed within a housing of an appliance, a first packet;
- blocking, by the network security device, transmission of the first packet, responsive to the first packet matching a predetermined filter;
- reserving, by the network security device, a predetermined amount of memory of the network security device for a user interface provided by an input/output device of the network security device, responsive to the first packet matching the predetermined filter;
- increasing, by the network security device, a priority of execution of the user interface, responsive to the first packet matching the predetermined filter;
- and
- displaying a notification of receipt of the first packet, by the input/output device deployed on a surface of the housing, responsive to the first packet matching the predetermined filter.
3 more elements
Dependencies are inferred from the claim text.