Dehua Te Huang, Age 56260 Alba Ct, Los Altos, CA 94022

7343485, Mar 11, 2008

Sep 3, 2003

10/654388

Dehua Huang - Fremont CA, US
Adam J. Sweeney - Sunnyvale CA, US
Richard A. Johnson - Santa Barbara CA, US
Silviu Dobrota - San Jose CA, US

Cisco Technology, Inc. - San Jose CA

H04L 9/00

713153, 726 14

A method may involve: maintaining protocol status information for a network protocol, where the protocol status information includes protocol information generated by a protocol server and network traffic information indicative of how messages are conveyed from the protocol client to a network, and updating the protocol status information in response to intercepting a protocol message being conveyed between a protocol client and a protocol server. For example, the network protocol can be DHCP (Dynamic Host Configuration Protocol) and the protocol status information can be updated to include an IP (Internet Protocol) address assigned to the protocol client by the protocol server in the protocol message. Such a method may inhibit the misuse of one or more network protocols and/or attacks on protocol servers.

7551559, Jun 23, 2009

Oct 22, 2004

10/971521

Premkumar Jonnala - Santa Clara CA, US
Adam J. Sweeney - Sunnyvale CA, US
Dehua Huang - Fremont CA, US
Silviu Dobrota - San Jose CA, US
Pradeep S. Sudame - Fremont CA, US
Marco E. Foschiano - To, IT

Cisco Technology, Inc. - San Jose CA

H04L 5/12

370230, 370389

Users are allowed to specify per-interface rate limits for inter-layer binding protocol traffic. If the user-specified rate limit is exceeded on a given interface, inter-layer binding protocol messages received via that interface are caused to be dropped (e. g. , by selectively dropping ILBP messages, or by simply shutting down the interface). If the rate is not exceeded, inter-layer binding protocol messages received via that interface can be validated (e. g. , by comparing an inter-layer binding included in the body of an inter-layer binding protocol message to protocol status information obtained by snooping protocol messages). If the inter-layer binding does not match the protocol status information, the inter-layer binding protocol message is dropped. If a match is found, the inter-layer binding protocol message is allowed to be forwarded normally. Such systems and methods may be used to inhibit various undesirable network behavior, such as man-in-the-middle attacks.

8082333, Dec 20, 2011

Nov 10, 2008

12/267774

Dehua Huang - Los Altos CA, US
Premkumar Jonnala - Fremont CA, US
Nagarani Chandika - Cupertino CA, US
Kyle Gordon Haight - San Jose CA, US
Feng Zhu - San Jose CA, US
Dan Mihai Florea - Saratoga CA, US
Bimohit Bawa - Sunnyvale CA, US

Cisco Technology, Inc. - San Jose CA

G06F 15/177

709222, 709220

A DHCP proxy agent is provided to send on behalf of a static host a DHCP request so that an access layer security feature such as DHCP snooping/IPSG can be applied to the static host and/or in a mixed static IP and DHCP environment.