Andrew H Baker

US Patent:

7949732, May 24, 2011

Filed:

May 12, 2004

Appl. No.:

10/843459

Inventors:

Martin Roesch - Eldersburg MD, US
Ronald A. Dempster - Mount Airy MD, US
Andrew Baker - Columbia MD, US
Eric Gustafson - Ellicott City MD, US

Assignee:

Sourcefire, Inc. - Columbia MD

International Classification:

G06F 15/177
G06F 15/173
G06F 15/16
H04L 12/28

US Classification:

709220, 709224, 709230, 370254

Abstract:

A packet transmitted on a network is read and decoded. A network device and its operating system are identified by analyzing the decoded packet. If more than one operating system is identified from the decoded packet, the operating system is selecting by comparing confidence values assigned to the operating systems identified. A service running on the network device is identified from the decoded packet or subsequent packets that are read, decoded and analyzed. The network topology of a network is determined by reading, decoding, and analyzing a plurality of packets. A flow between two network devices is determined by reading, decoding, and analyzing a plurality of packets. Vulnerabilities are assigned to operating systems and services identified by reading, decoding, and analyzing packets. Network configuration policy is enforced on operating systems and services identified by reading, decoding, and analyzing packets.

US Patent:

8578002, Nov 5, 2013

Filed:

Dec 16, 2010

Appl. No.:

12/969682

Inventors:

Martin Roesch - Eldersburg MD, US
Ronald A. Dempster - Mount Airy MD, US
Andrew Baker - Columbia MD, US
Eric Gustafson - Ellicott City MD, US

Assignee:

Sourcefire, Inc. - Columbia MD

International Classification:

G06F 15/177
G06F 15/173
G06F 15/16

US Classification:

709220, 709224, 709230, 370254

Abstract:

A packet transmitted on a network is read and decoded. A network device and its operating system are identified by analyzing the decoded packet. If more than one operating system is identified from the decoded packet, the operating system is selecting by comparing confidence values assigned to the operating systems identified. A service running on the network device is identified from the decoded packet or subsequent packets that are read, decoded and analyzed. The network topology of a network is determined by reading, decoding, and analyzing a plurality of packets. A flow between two network devices is determined by reading, decoding, and analyzing a plurality of packets. Vulnerabilities are assigned to operating systems and services identified by reading, decoding, and analyzing packets. Network configuration policy is enforced on operating systems and services identified by reading, decoding, and analyzing packets.

US Patent:

20110314143, Dec 22, 2011

Filed:

Jun 22, 2010

Appl. No.:

12/820227

Inventors:

Andrew Baker - Columbia MD, US

Assignee:

Sourcefire, Inc. - Columbia MD

International Classification:

G06F 15/173

US Classification:

709224

Abstract:

A system includes a processor device. The processor device is configured to receive reports of operating system identities for a single host; determine which of the operating system identities are an intersection of the reported operating system identities; and assign the intersection of the reported operating system identities as a resolved operating system identity.

US Patent:

20200040289, Feb 6, 2020

Filed:

Aug 6, 2019

Appl. No.:

16/533004

Inventors:

- Westminster MD, US
Andrew BAKER - Westminster MD, US
Ashli JOHNSON - Finksburg MD, US

International Classification:

C12G 1/06
B01F 3/04

Abstract:

A carbon dioxide and nitrogen infused wine product includes wine infused with both carbon dioxide and nitrogen. A ratio of carbon dioxide to nitrogen in said wine can be in a range of 80%CO/20%N-60%CO/40%N.