Michael Eugene Todd

US Patent:

8130641, Mar 6, 2012

Filed:

Mar 13, 2009

Appl. No.:

12/403466

Inventors:

Patrick Choy Ming Wong - Roseville CA, US
Scott Robert Koster - Roseville CA, US
Michael Todd - Rocklin CA, US

Assignee:

Hewlett-Packard Development Company, L.P. - Houston TX

International Classification:

H04L 12/26

US Classification:

370229, 370235

Abstract:

Methods, systems and computer readable mediums storing computer executable programs for managing network traffic within a virtual network system. A virtual network system defined within a physical network device is identified. A first virtual network device defined within the virtual network system is identified. A virtual network appliance within the physical network device is defined. The virtual network appliance is communicatively coupled to the first virtual network device. The virtual network appliance is communicatively coupled to the virtual network system. The virtual network appliance is operable to manage network traffic associated with the first virtual network device.

US Patent:

8391288, Mar 5, 2013

Filed:

Jan 31, 2007

Appl. No.:

11/669815

Inventors:

Michael Todd - Rocklin CA, US

Assignee:

Hewlett-Packard Development Company, L.P. - Houston TX

International Classification:

H04L 12/28
H04L 12/56

US Classification:

370392

Abstract:

A system for protecting networks from vulnerability exploits comprises a security engine operable to receive a packet destined for a user's network and forward the packet to at least one host virtual machine for processing. The security engine is further operable to forward the stored packet to the user's internal network based upon a result of the processed packet. A method of securing a network from vulnerability exploits is described. The method comprises receiving a packet destined for a user's internal network; forwarding the packet to at least one virtual machine based upon a virtual machine configuration table; processing the forwarded packet on the at least one virtual machine; and releasing the packet to the user's internal network based upon results of the processing.

US Patent:

20090241190, Sep 24, 2009

Filed:

Mar 24, 2008

Appl. No.:

12/079013

Inventors:

Michael Todd - Rocklin CA, US
Scott Robert Koster - Roseville CA, US
Patrick Choy Ming Wong - Sacramento CA, US

International Classification:

G06F 21/00

US Classification:

726 23

Abstract:

A method of securing a network from vulnerability exploits, including the steps of a traffic analysis engine receiving a plurality of packets destined for an internal operating system; the traffic analysis engine selectively forwarding the packets to at least one virtual machine emulating the internal operating system; the virtual machine processing each forwarded packet; a rapid analysis engine identifying a malicious packet from the processed packets; and the rapid analysis engine creating a new signature to identify the malicious packet.

US Patent:

20100198125, Aug 5, 2010

Filed:

Jan 30, 2009

Appl. No.:

12/363716

Inventors:

Michael Edward Todd - Rocklin CA, US

International Classification:

A61F 5/00

US Classification:

602 20

Abstract:

A device for supporting and elevating the arm and hand above the heart while healing. The device comprises mainly of a belt, support pole, and straps for the arm and forearm. The support pole can be attached to different areas of the belt to support different waist line sizes along with left or right arm and/or hand injuries. The support pole is also adjustable for different human height, arm width and lengths. The device enables shoulder mobility and is supported by the waist, thus allowing the person to move around freely.

US Patent:

20110107422, May 5, 2011

Filed:

Oct 30, 2009

Appl. No.:

12/609490

Inventors:

Patrick Choy Ming Wong - Roseville CA, US
Michael Todd - Roseville CA, US

International Classification:

G06F 11/00

US Classification:

726 23, 714 48, 714E11004

Abstract:

Embodiments of the invention provide a network device for detecting email worms having a port for receiving packets and a processing engine configured to inspect packets received on the port, wherein if a predetermined number of packets sent from a client represent DNS queries, the client is identified as being infected.

US Patent:

20120113841, May 10, 2012

Filed:

Oct 28, 2009

Appl. No.:

13/260162

Inventors:

Michael Todd - Rocklin CA, US
Patrick Choy Ming Wong - Scotts Valley CA, US
Matthew Richard Thomas Hall - Roseville CA, US

International Classification:

H04L 12/26

US Classification:

370252

Abstract:

A method for detection of a network address translation (NAT) device in a network is described herein. An edge network device detects a first packet at an edge port of the edge network device. A second packet is detected at the edge port of the edge network device. It is determined whether a time to live (TTL) value associated with the first packet is different from a TTL value associated with the second packet. Where the TTL value associated with the first packet is different from a TTL value associated with the second packet, it is determined that a NAT device is connected to the edge port. Where the TTL value associated with the first packet is the same as a TTL value associated with the second packet, it is determined that a NAT device is not connected to the edge port.

US Patent:

20130152163, Jun 13, 2013

Filed:

Feb 6, 2013

Appl. No.:

13/760944

Inventors:

Michael Todd - Rocklin CA, US

Assignee:

HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. - Houston TX

International Classification:

H04L 29/06

US Classification:

726 1, 726 23

Abstract:

A system for protecting networks from vulnerability exploits comprises a security engine operable to receive a packet destined for a user's network and forward the packet to at least one host virtual machine for processing. The security engine is further operable to forward the stored packet to the user's internal network based upon a result of the processed packet. A method of securing a network from vulnerability exploits is described. The method comprises receiving a packet destined for a user's internal network; forwarding the packet to at least one virtual machine based upon a virtual machine configuration table; processing the forwarded packet on the at least one virtual machine; and releasing the packet to the user's internal network based upon results of the processing.