Luis A Morales

US Patent:

7444417, Oct 28, 2008

Filed:

Feb 18, 2004

Appl. No.:

10/782508

Inventors:

Thusitha Jayawardena - Holmdell NJ, US
Luis E. Morales - Freehold NJ, US

International Classification:

G06F 15/16
G06F 15/173
G06F 15/177

US Classification:

709229, 370401, 713153, 719311, 709230, 709249

Abstract:

In an IP network during a DDoS attack on a website or other internet entity having an IP address, selective black-holing of attack traffic is performed such that some of the traffic destined for the IP address under attack continues to go to the IP address under attack while other traffic, destined for the same IP address is, rerouted via BGP sessions to a black-hole router. Such a selective black-holing scheme can be used to allow some traffic to continue in route to the IP address under attack, while other traffic is diverted.

US Patent:

7925766, Apr 12, 2011

Filed:

Feb 18, 2004

Appl. No.:

10/782512

Inventors:

Thusitha Jayawardena - Holmdel NJ, US
Luis E. Morales - Freehold NJ, US

Assignee:

AT&T Intellectual Property II, L.P. - Atlanta GA

International Classification:

G06F 15/16
G06F 11/00
H04J 3/10

US Classification:

709229, 370401, 709230, 709249, 726 22, 726 23, 726 24

Abstract:

A system and method for aiding the handling of DDoS attacks in which VPN traffic entering an ISP network at some points will be black-holed, while VPN traffic entering the ISP network at other points will be routed, as it should be, to the system-under-attack. Thus, the system-under-attack is made available to some of the user community and made unavailable to suspect portions of the user community. Furthermore, the number of entry points where black-holing of VPN traffic occurs can be selected and changed in real-time during a DDoS attack.

US Patent:

7953855, May 31, 2011

Filed:

Sep 19, 2008

Appl. No.:

12/284254

Inventors:

Thusitha Jayawardena - Holmdell NJ, US
Luis E. Morales - Freehold NJ, US

Assignee:

AT&T Intellectual Property II, L.P. - Atlanta GA

International Classification:

G06F 15/16
G06F 15/173
G06F 15/177

US Classification:

709225, 709229, 709249, 713153, 719311, 370401

Abstract:

In an IP network during a DDoS attack on a website or other internet entity having an IP address, selective black-holing of attack traffic is performed such that some of the traffic destined for the IP address under attack continues to go to the IP address under attack while other traffic, destined for the same IP address is, rerouted via BGP sessions to a black-hole router. Such a selective black-holing scheme can be used to allow some traffic to continue in route to the IP address under attack, while other traffic is diverted.

US Patent:

60440929, Mar 28, 2000

Filed:

Jun 11, 1997

Appl. No.:

8/872749

Inventors:

Thusitha Jayawardena - Howell NJ
Luis E. Morales - Freehold NJ

Assignee:

AT&T Corp. - New York NY

International Classification:

H04J 306
H04L 700
H04L 1256

US Classification:

370516

Abstract:

By recognizing that it is not necessary to identify a synchronization failure immediately when the failure occurs, but rather not until the failure results in a detectable difference, the method and system described herein can distinguish between Cell Delay Variation (CDV) and loss of synchronization. Because CDV will have a larger effect on the stability than a failure of the frequency recovery system at the precise moment of the failure, a synchronization failure cannot usually be distinguished from CDV for several minutes or hours, depending upon the stability of the reference clock. The present invention monitors a fill level of a play-out buffer in the ATM network, and attempts to determine if a variation in the fill level is linear with time, which is indicative of a synchronization failure. Upon detecting such a failure, the method of the present invention switches to an adaptive method for frequency recovery. If the variation in the fill level of the play-out buffer is not linear, but an underflow/overflow (or slip) has occurred, then the method of the present invention can inform an intelligent buffer control that the underflow/overflow is not due to the presence of a synchronization failure, which enables the intelligent buffer controller to take appropriate action.

US Patent:

59875267, Nov 16, 1999

Filed:

Apr 6, 1998

Appl. No.:

9/055507

Inventors:

Luis E. Morales - Freehold NJ

Assignee:

AT&T Corp. - New York NY

International Classification:

G06F 1516

US Classification:

709249

Abstract:

In accordance with an embodiment of the present invention, a first asynchronous transfer mode network is provided, adapted to couple with a first entity external to the network, the first entity having a fourth port and a fifth port. The network has a first port. The network also has a second port coupled to the first port by a first permanent virtual connection, and the second port is coupled to the fourth port via a first interface. The network also has a third port coupled to said first port by a second permanent virtual connection, and the third port is coupled to the fifth port via a second interface. Packets are sent between the first port and the second port via the first permanent virtual connection, and between the second port and the fourth port via the first interface until a failure is detected, the failure occurring at the first interface, the second port, or the fourth port. After a failure is detected, packets are sent between the first port and the third port via the second permanent virtual connection, and between the third port and the fifth port via the second interface.

US Patent:

57612030, Jun 2, 1998

Filed:

Apr 4, 1996

Appl. No.:

8/628174

Inventors:

Luis E. Morales - Freehold NJ

Assignee:

Lucent Technologies Inc. - Murray Hill NJ

International Classification:

H04L 700

US Classification:

370418

Abstract:

A system and method for frequency recovery that allows selection between either a synchronous recovery scheme or asynchronous recovery. A frequency recovery system for synchronizing a received data stream, comprising: a first timing signal generator configured to receive the data stream, extract any timing information included in the data stream, and output a first timing signal based on the extracted timing information;a clock source for providing a second timing signal; a data module for receiving the data stream and outputting the data stream at a desired rate, the data module utilizing either the first timing signal or the second timing signal to output the data at the desired rate; and a switch for selectively applying either the first timing signal or the second timing signal to the data module.