Aiguo Fei from San Jose, CA

Name / Title

Company / Classification

Phones & Addresses

Aiguo Fei
Principal

Gadgetao, LLC
Design and Selling of Gadgets · Nonclassifiable Establishments

873 Hercules Ln, San Mateo, CA 94404

Us Patents

Network Device For Embedding Data In A Data Packet Sequence
view source
US Patent:

7715448, May 11, 2010
Filed:

Jun 6, 2007
Appl. No.:

11/759179
Inventors:

Lebin Cheng - Fremont CA, US
Aiguo Fei - Foster City CA, US
Assignee:

Red Aril, Inc. - San Mateo CA
International Classification:

H04J 3/00
H04J 3/12
H04N 7/10
US Classification:

370528, 370476, 725 32
Abstract:

A network device is deployed in an in-line fashion, preferably at a data traffic point along a network. Depending on the constraints of data packets in a data packet sequence from a website, the network device is configured to modify some of the data packets or fabricate new data packets to embed the selected data in the data packet sequence. By keeping the headers of the data packets substantially identical, changes to a data packet or addition of a new data packet become transparent to users as well as to the website.

Method And Apparatus For Detecting A Distributed Denial Of Service Attack
view source
US Patent:

7788718, Aug 31, 2010
Filed:

Jun 13, 2002
Appl. No.:

10/171937
Inventors:

Aiguo Fei - San Jose CA, US
Kai Sun - Mountain View CA, US
Fengmin Gong - Livermore CA, US
Assignee:

McAfee, Inc. - Santa Clara CA
International Classification:

G06F 12/14
G06F 12/16
G08B 23/00
US Classification:

726 22, 726 14, 726 23, 726 25
Abstract:

A method of identifying a distributed denial of service attack is described in which a rate profile is determined, where the rate profile corresponds to information transfer rates at which information is received from a network. A burst magnitude threshold based on this rate profile is then established. A burst duration profile characterizing periods of time during which the information transfer rate exceeds this burst magnitude threshold is also calculated, and a burst duration threshold is then defined based upon this burst duration profile. A distributed denial of service attack is identified when the information transfer rate exceeds the burst magnitude threshold for a period of time exceeding the burst duration threshold.

Network Devices For Replacing An Advertisement With Another Advertisement
view source
US Patent:

20080306816, Dec 11, 2008
Filed:

Jun 6, 2007
Appl. No.:

11/759187
Inventors:

Michael Matthys - Los Altos Hills CA, US
Lebin Cheng - Fremont CA, US
Aiguo Fei - Foster City CA, US
International Classification:

G06Q 30/00
US Classification:

705 14
Abstract:

Techniques for replacing an advertisement in a webpage from a website with another advertisement are disclosed. A response including the webpage is intercepted in a network device deployed in an in-line fashion, preferably at a data traffic point along a network. When it is determined that the webpage includes an advertisement that is replaceable, a preferable advertisement more correlated to the interests of a user is embedded in data packets to replace those for the original advertisement. Subsequently, the preferable advertisement is served when the webpage is displayed.

Method And Apparatus For Adaptively Classifying Network Traffic
view source
US Patent:

7203963, Apr 10, 2007
Filed:

Jun 13, 2002
Appl. No.:

10/172740
Inventors:

Shyhtsun Felix Wu - Davis CA, US
Aiguo Fei - San Jose CA, US
Fengmin Gong - Livermore CA, US
Assignee:

McAfee, Inc. - Santa Clara CA
International Classification:

G06F 21/00
G06F 9/00
G06F 11/00
H04L 29/02
US Classification:

726 23, 726 3, 726 11, 709224
Abstract:

A method of adaptively classifying information using a binary tree comprises establishing a binary tree including a set of binary sequences each representing one or more network addresses. Once network traffic is received having identifiers describing network traffic sources, the identifiers are correlated to binary sequences within the binary tree. A revision metric is formed based on this correlating, and the binary tree is then revised according to this revision metric. A method of blocking a DDOS attack comprises establishing a binary tree including a set of binary sequences, each of these binary sequences representing one or more network addresses. When network traffic is received having identifiers describing network traffic sources, the identifiers are correlated to binary sequences within the binary tree. Once a DDOS attack notification signal is received, a selected binary tree path within the binary tree is identified as a low cost blocking path within the binary tree. Network traffic correlated to a binary sequence corresponding to the selected binary tree path is blocked.