Yan Lan Chen

US Patent:

8522348, Aug 27, 2013

Filed:

Jul 29, 2010

Appl. No.:

12/846541

Inventors:

Yan Chen - Northfield IL, US
Zhichun Li - Evanston IL, US
Gao Xia - Beijing, CN
Bin Liu - Beijing, CN

Assignee:

Northwestern University - Evanston IL

International Classification:

G06F 11/00

US Classification:

726 23

Abstract:

Systems, methods, and apparatus are provided for vulnerability signature based Network Intrusion Detection and/or Prevention which achieves high throughput comparable to that of the state-of-the-art regex-based systems while offering improved accuracy. A candidate selection algorithm efficiently matches thousands of vulnerability signatures simultaneously using a small amount of memory. A parsing transition state machine achieves fast protocol parsing. Certain examples provide a computer-implemented method for network intrusion detection. The method includes capturing a data message and invoking a protocol parser to parse the data message. The method also includes matching the parsed data message against a plurality of vulnerability signatures in parallel using a candidate selection algorithm and detecting an unwanted network intrusion based on an outcome of the matching.

US Patent:

20200202382, Jun 25, 2020

Filed:

Dec 19, 2018

Appl. No.:

16/225586

Inventors:

Yan Ping Chen - Chicago IL, US
John Clifton Davis - Seattle WA, US
Antonio Hudson - Chicago IL, US
Alex Chin - Stanford CA, US

International Classification:

G06Q 30/02
G06N 20/00

Abstract:

A system and process to determine the causal relationship between advertisement delivery data and sales data are disclosed. According to one embodiment, a method comprises importing advertisement data and sales data. The advertisement data and the sales data are joined to generate a joined data set. Customer journeys are generated for a timeframe from the joined data set. A first group of customers who saw an advertisement of interest are identified. A second group of customers who did not see the advertisement of interest are identified. Each customer of the first group is matched to a customer in the second group who is similar to the customer of the first group. An average treatment effect for the advertisement of interest is calculated.

US Patent:

20140283041, Sep 18, 2014

Filed:

Mar 13, 2014

Appl. No.:

14/207665

Inventors:

- SHENZHEN, CN
XIANG PAN - NORTHFIELD IL, US
YAN CHEN - NORTHFIELD IL, US
JIANWEI ZHUGE - NORTHFIELD IL, US
XIAOBIN QIAN - BEIJING, CN
JIAN FU - SHENZHEN, CN

Assignee:

HUAWEI TECHNOLOGIES CO.,LTD. - SHENZHEN

International Classification:

G06F 21/56

US Classification:

726 22

Abstract:

An embodiment of the present application provides technologies for detecting malicious content embedded in a content downloaded from an external source. The downloaded content converted into an opcode sequence by a web browser in a computing device. The opcode sequence is compared with a pre-stored opcode signature. The opcode signature comprises multiple sentences, and each sentence has multiple clauses. Each clause may include a matching opcode, a condition, an instruction, and an identifier. When a matching opcode in a clause matches with an opcode of the opcode sequence, and the condition as specified in the clause is determined to be true, the instruction in the clause is taken and next sentence identified by the identifier is taken to match the opcode sequence. Eventually, the last taken clause in the opcode signature may instruct whether opcode sequence contains malicious code.