Lei Liu

7555306, Jun 30, 2009

Jun 1, 2006

11/445407

Lei Liu - San Jose CA, US

Sun Microsystems, Inc. - Santa Clara CA

H04Q 7/20

455522, 455423, 455424, 455425, 455 6711, 455500, 370270, 370242, 370343, 379 101, 379 2602, 379 2703

A method for monitoring performance of a mobile device involves intercepting a first monitoring request from a monitoring management host, where the first monitoring request is associated with the mobile device, enabling a monitoring agent associated with the mobile device, establishing a thin listener associated with the monitoring agent, transmitting a second monitoring request, in response to the first monitoring request, to the mobile device, receiving, by the thin listener, data from the mobile device in response to the second monitoring request, analyzing the data received in response to the second monitoring request to obtain an analysis report, and transmitting the analysis report to the monitoring management host, in response to the first monitoring request.

7603671, Oct 13, 2009

Nov 4, 2005

11/267659

Lei Liu - San Jose CA, US

Sun Microsystems, Inc. - Santa Clara CA

G06F 9/455
G06F 9/46
G06F 15/16
G06F 15/173

718 1, 718100, 718104, 718105, 709202, 709224, 709225, 709226

A virtual zone management framework manages one or more virtual computing zones forming a global computing zone residing on a host computer. The virtual zone manager comprises a normalization engine, a zone probe, and an interface engine that manages each virtual computing zone residing on the host computer. The virtual zone manager manages the services operating on each virtual zone while simultaneously managing the global computing environment using probes and/or agents to gather data and zone characteristics in response to a triggering event. Once data of interest are gathered for each zone, they are normalized so as to present a consistent and compatible representation of the characteristics with respect to the other virtual computing zones. Based on a comparison and analysis of the normalized characteristics, the virtual zone manager manages each of the virtual zones within the global computing environment as well as the global computing environment itself.

7702747, Apr 20, 2010

May 31, 2006

11/444552

Lei Liu - San Jose CA, US
Guanghwa Ho - San Jose CA, US

Oracle America, Inc. - Redwood Shores CA

G06F 15/16
G06F 7/00

709217, 707101, 709205, 709206

A method for identity synchronization across multiple domains includes obtaining identity data from a source channel, wherein the identity data is associated with a source channel protocol, decoupling the identity data from the source channel protocol to obtain decoupled identity data, creating a normalized event object using the decoupled identity data, placing the normalized event object into an event bus, coupling the normalized event object with a target channel protocol to create a target-specific change object for a target channel, and forwarding the target-specific change object to the target channel.

7814465, Oct 12, 2010

May 12, 2006

11/433661

Lei Liu - San Jose CA, US

Oracle America, Inc. - Redwood Shores CA

G06F 9/44

717126, 717124, 717127, 717128, 717131

A method for verification of an application for zones that includes determining an execution environment of the application, obtaining a list of permissions from the execution environment, analyzing the application to identify a restricted instruction within the application, wherein the restricted instruction is zone specific, and generating a report when a required permission of the restricted instruction is not in the list of permissions.

8418249, Apr 9, 2013

Nov 10, 2011

13/293986

Antonio Nucci - San Jose CA, US
Prakash Mandayam Comar - East Lansing MI, US
Sabyasachi Saha - Sunnyvale CA, US
Lei Liu - East Lansing MI, US

Narus, Inc. - Sunnyvale CA

G06F 11/00

726 23, 706 20, 706 48, 709225

A method for profiling network traffic of a network. The method includes obtaining a signature library comprising a plurality of signatures corresponding to a plurality of behavioral models, generating, based on a first pre-determined criterion, a group behavioral model associated with the signature library, wherein the group behavioral model represents a common behavior of a plurality of historical flows identified from the network traffic, wherein each of the plurality of signatures correlates to a subset of the plurality of historical flows, selecting a flow in the network traffic for including in a target flow set, wherein the flow matches the group behavioral model without matching any of the plurality of behavioral models, analyzing the target flow set to generate a new signature, and adding the new signature to the signature library. Further, each behavioral model is generated from a kernel constructed using boosting of decision tree learning methods.

8504504, Aug 6, 2013

Sep 26, 2008

12/239521

Lei Liu - San Jose CA, US

Oracle America, Inc. - Redwood City CA

G06F 17/00
G06N 5/02

706 46

Systems and methods for discovery and classification of denial of service attacks in a distributed computing system may employ local agents on nodes thereof to detect resource-related events. An information later agent may determine if events indicate attacks, perform clustering analysis to determine if they represent known or unknown attack patterns, classify the attacks, and initiate appropriate responses to prevent and/or mitigate the attack, including sending warnings and/or modifying resource pool(s). The information layer agent may consult a knowledge base comprising information associated with known attack patterns, including state-action mappings. An attack tree model and an overlay network (over which detection and/or response messages may be sent) may be constructed for the distributed system. They may be dynamically modified in response to changes in system configuration, state, and/or workload. Reinforcement learning may be applied to the tuning of attack detection and classification techniques and to the identification of appropriate responses.

20070192431, Aug 16, 2007

Feb 10, 2006

11/351828

Lei Liu - San Jose CA, US

Sun Microsystems, Inc. - Santa Clara CA

G06F 15/16

709217000, 709230000

A method for processing a service request that includes receiving the service request using a transport protocol, decoupling the service request from the transport protocol to obtain a decoupled service request, normalizing the decoupled service request to obtain a request object, and routing the request object to a first service engine of a plurality of service engines capable of processing the decoupled service request.

20070198554, Aug 23, 2007

Feb 10, 2006

11/351686

Lei Liu - San Jose CA, US

Sun Microsystems, Inc. - Santa Clara CA

G06F 7/00

707101000

A method for management of a grid fabric that includes receiving a management request using a protocol, decoupling the management request from the protocol to obtain a decoupled management request, selecting a grid control service from a plurality of grid control services configured to perform the decoupled management request, identifying at least one node in the grid fabric associated with the decoupled management request by the grid control service, executing at least one command based on the decoupled management request using the at least one node and the grid control service, wherein the at least one command generates a result, and outputting the result.