Ali M Parandehgheibi

20120284078, Nov 8, 2012

May 6, 2011

13/102203

SHIVALI AGARWAL - GHAZIABAD, IN
SAEED BAGHERI - CROTON ON HUDSON NY, US
JARIR K. CHAAR - TARRYTOWN NY, US
ALI PARANDEHGHEIBI - MEDFORD MA, US
KRISHNA C. RATAKONDA - YORKTOWN HEIGHTS NY, US
BIKRAM SENGUPTA - BANGALORE, IN

INTERNATIONAL BUSINESS MACHINES CORPORATION - ARMONK NY

G06Q 10/00

705 723

A computer implemented method, system, and/or computer program product generate an optimal training policy and an optimal promotion policy to accommodate an upcoming project. Required new job positions are identified for an upcoming project. A skillset matrix, which describes a current skill level of each worker in a work unit, and a promotion matrix, which describes historical evaluations of how well each worker achieved predefined goals of past projects, are generated. The skillset matrix is utilized to create an optimal training policy that identifies which workers are in need of additional training in order to qualify for one or more of the identified new job positions, and the promotion matrix is utilized create an optimal promotion policy that identifies which workers will be candidates for being promoted into one or more of the identified said new job positions.

20130114481, May 9, 2013

Nov 8, 2011

13/291310

Minji Kim - Cambridge MA, US
Muriel Medard - Belmont MA, US
Ali Parandehgheibi - Medford MA, US

Massachusetts Institute of Technology - Cambridge MA

H04W 74/00
H04W 40/00
G06F 15/16
H04L 12/56

370310, 370394, 370328, 709219

A coding approach for a robust and flexible network communication protocol is described. By using coding, it is possible to eliminate the need to track packet identities, and hence, it is possible to reduce coordination overhead associated with many conventional protocols. The method and system described herein takes advantage of multiple paths, interfaces, mediums, servers, and storage locations available in a network. The proposed protocol allows quick response to congestion by load balancing over different network resources. The method also enables soft vertical hand-overs across heterogeneous networks. In one embodiment, a media file is divided into chunks and transmitted using a transport protocol tailored to meet delay requirements of media streaming applications. Also described are different coding strategies for chunk delivery based upon an urgency level of each chunk.

20130238746, Sep 12, 2013

Mar 12, 2012

13/418269

Ali Parandehgheibi - Medford MA, US
Richard Barry - Los Angeles CA, US

NETWORK CODING, INC. - Los Angeles CA

G06F 15/16

709217, 709227

A system and method is disclosed for enabling a redirection application to use non-proxy-enabled modules for communication with a server through a proxy server, in which a non-proxy-enabled module takes an address or an URL as the input to establish a connection with the server. This system and method does not require administrative access (e.g. super-user, root, and the like), which is useful for mobile devices where obtaining such privileges is typically difficult. In one embodiment, a media application may use a media player provided by an operating system as a module. In this embodiment, the media application is the redirection application and the media player is the module. The non-proxy-enabled modules use addresses or URLs to locate and fetch data.

20230040556, Feb 9, 2023

Aug 15, 2022

17/819888

- San Jose CA, US
Navindra Yadav - Cupertino CA, US
Michael Standish Watts - Mill Valley CA, US
Ali Parandehgheibi - Sunnyvale CA, US
Shashidhar Gandham - Fremont CA, US
Ashutosh Kulshreshtha - Cupertino CA, US
Khawar Deen - Sunnyvale CA, US

H04L 43/045
H04L 9/40
G06F 9/455
G06N 20/00
G06F 21/55
G06F 21/56
G06F 16/28
G06F 16/2457
G06F 16/248
G06F 16/29
G06F 16/16
G06F 16/17
G06F 16/11
G06F 16/13
G06F 16/174
G06F 16/23
G06F 16/9535
G06N 99/00
H04L 9/32
H04L 41/0668
H04L 43/0805
H04L 43/0811
H04L 43/0852
H04L 43/106
H04L 45/00
H04L 45/50
H04L 67/12
H04L 43/026
H04L 61/5007
H04L 67/01
H04L 67/51
H04L 67/75
H04L 67/1001
H04L 43/062
H04L 43/10
H04L 47/2441
H04L 41/0893
H04L 43/08
H04L 43/04
H04W 84/18
H04L 67/10
H04L 41/046
H04L 43/0876
H04L 41/12
H04L 41/16
H04L 41/0816
G06F 21/53
H04L 41/22
G06F 3/04842
G06F 3/04847
H04L 41/0803
H04L 43/0829
H04L 43/16
H04L 1/24
H04W 72/08
H04L 9/08
H04J 3/06
H04J 3/14
H04L 47/20
H04L 47/32
H04L 43/0864
H04L 47/11
H04L 69/22
H04L 45/74
H04L 47/2483
H04L 43/0882
H04L 41/0806
H04L 43/0888
H04L 43/12
H04L 47/31
G06F 3/0482
G06T 11/20
H04L 43/02
H04L 47/28
H04L 69/16
H04L 45/302

This disclosure generally relate to a method and system for network policy simulation in a distributed computing system. The present technology relates techniques that enable simulation of a new network policy with regard to its effects on the network data flow. By enabling a simulation data flow that is parallel and independent from the regular data flow, the present technology can provide optimized network security management with improved efficiency.

20210377136, Dec 2, 2021

Aug 16, 2021

17/403026

- San Jose CA, US
Navindra Yadav - Cupertino CA, US
Michael Standish Watts - Mill Valley CA, US
Ali Parandehgheibi - Sunnyvale CA, US
Shashidhar Gandham - Fremont CA, US
Ashutosh Kulshreshtha - Cupertino CA, US
Khawar Deen - Sunnyvale CA, US

H04L 12/26
H04L 29/06
G06F 9/455
G06N 20/00
G06F 21/55
G06F 21/56
G06F 16/28
G06F 16/2457
G06F 16/248
G06F 16/29
G06F 16/16
G06F 16/17
G06F 16/11
G06F 16/13
G06F 16/174
G06F 16/23
G06F 16/9535
G06N 99/00
H04L 9/32
H04L 12/24
H04L 12/715
H04L 12/723
H04L 29/08
H04L 12/851
H04W 84/18
G06F 21/53
G06F 3/0484
H04L 1/24
H04W 72/08
H04L 9/08
H04J 3/06
H04J 3/14
H04L 29/12
H04L 12/813
H04L 12/823
H04L 12/801
H04L 12/741
H04L 12/833
H04L 12/721
G06F 3/0482
G06T 11/20
H04L 12/841
H04L 12/725

A method provides for receiving network traffic from a host having a host IP address and operating in a data center, and analyzing a malware tracker for IP addresses of hosts having been infected by a malware to yield an analysis. When the analysis indicates that the host IP address has been used to communicate with an external host infected by the malware to yield an indication, the method includes assigning a reputation score, based on the indication, to the host. The method can further include applying a conditional policy associated with using the host based on the reputation score. The reputation score can include a reduced reputation score from a previous reputation score for the host.

20210144073, May 13, 2021

Jan 20, 2021

17/153785

- San Jose CA, US
Navindra Yadav - Cupertino CA, US
Michael Standish Watts - Mill Valley CA, US
Ali Parandehgheibi - Sunnyvale CA, US
Shashidhar Gandham - Fremont CA, US
Ashutosh Kulshreshtha - Cupertino CA, US
Khawar Deen - Sunnyvale CA, US

H04L 12/26
H04L 29/06
G06F 9/455
G06N 20/00
G06F 21/55
G06F 21/56
G06F 16/28
G06F 16/2457
G06F 16/248
G06F 16/29
G06F 16/16
G06F 16/17
G06F 16/11
G06F 16/13
G06F 16/174
G06F 16/23
G06F 16/9535
G06N 99/00
H04L 9/32
H04L 12/24
H04L 12/715
H04L 12/723
H04L 29/08
H04L 12/851
H04W 84/18
G06F 21/53
G06F 3/0484
H04L 1/24
H04W 72/08
H04L 9/08
H04J 3/06
H04J 3/14
H04L 29/12
H04L 12/813
H04L 12/823
H04L 12/801
H04L 12/741
H04L 12/833
H04L 12/721
G06F 3/0482
G06T 11/20
H04L 12/841
H04L 12/725

An example method according to some embodiments includes receiving flow data for a packet traversing a network. The method continues by determining a source endpoint group and a destination endpoint group for the packet. The method continues by determining that a policy was utilized, the policy being applicable to the endpoint group. Finally, the method includes updating utilization data for the policy based on the flow data.

20210067849, Mar 4, 2021

Nov 11, 2020

17/094815

- San Jose CA, US
Omid Madani - San Carlos CA, US
Vimal Jeyakumar - Sunnyvale CA, US
Navindra Yadav - Cupertino CA, US
Ali Parandehgheibi - Sunnyvale CA, US
Andy Sloane - Pleasanton CA, US
Kai Chang - San Francisco CA, US
Khawar Deen - Sunnyvale CA, US
Shih-Chun Chang - San Jose CA, US
Hai Vu - San Jose CA, US

H04Q 9/02
H04L 12/26
G06F 11/34
H04L 29/06
H04L 12/24

An application and network analytics platform can capture telemetry from servers and network devices operating within a network. The application and network analytics platform can determine an application dependency map (ADM) for an application executing in the network. Using the ADM, the application and network analytics platform can resolve flows into flowlets of various granularities, and determine baseline metrics for the flowlets. The baseline metrics can include transmission times, processing times, and/or data sizes for the flowlets. The application and network analytics platform can compare new flowlets against the baselines to assess availability, load, latency, and other performance metrics for the application. In some implementations, the application and network analytics platform can automate remediation of unavailability, load, latency, and other application performance issues.

20200304523, Sep 24, 2020

Jun 11, 2020

16/899190

- San Jose CA, US
Abhishek Ranjan Singh - Pleasanton CA, US
Shashidhar Gandham - Fremont CA, US
Ellen Christine Scheib - Mountain View CA, US
Omid Madani - San Carlos CA, US
Ali Parandehgheibi - Sunnyvale CA, US
Jackson Ngoc Ki Pang - Sunnyvale CA, US
Vimalkumar Jeyakumar - Los Altos CA, US
Michael Standish Watts - Los Altos CA, US
Hoang Viet Nguyen - Pleasanton CA, US
Khawar Deen - Sunnyvale CA, US
Rohit Chandra Prasad - Sunnyvale CA, US
Sunil Kumar Gupta - Milpitas CA, US
Supreeth Hosur Nagesh Rao - Cupertino CA, US
Anubhav Gupta - Fremont CA, US
Ashutosh Kulshreshtha - Cupertino CA, US
Roberto Fernando Spadaro - Milpitas CA, US
Hai Trong Vu - San Jose CA, US
Varun Sagar Malhotra - Sunnyvale CA, US
Shih-Chun Chang - San Jose CA, US
Bharathwaj Sankara Viswanathan - Mountain View CA, US
Duane Thomas Barlow - Fremont CA, US

H04L 29/06
H04L 12/26

An example method includes detecting, using sensors, packets throughout a datacenter. The sensors can then send packet logs to various collectors which can then identify and summarize data flows in the datacenter. The collectors can then send flow logs to an analytics module which can identify the status of the datacenter and detect an attack.