[liberationtech] Technology for controlling the Internet

[Terry Winograd]

http://www.cloudshield.com/Solutions/Government.asp

CloudShield provides a unique high-performance network computing platform
capable of full packet and stream control at line-rates up to 20 Gbps. This
includes full packet inspection and modification, from layers 2-7, with
complete access to headers and payload. This is accomplished with negligible
(tens of microseconds) latency and throughput up to millions of packets per
second per processing blade. The carrier-grade platform is provisioned and
controlled using standards-based, secure out-of-band management, and
applications can be deployed and modified with no down-time.

This revolutionary platform, combined with CloudShield's open programming
language, enables completely new applications, bringing software
capabilities to the network.

CloudShield helps government customers, systems integrators, and independent
software vendors address their most difficult problems in:

   - Infrastructure Protection
      - Domain Name Service (DNS) attack mitigation and response caching
      - Border Gateway Protocol (BGP) update validation,
      prefix/subprefix-hijack protection
      - Distributed Denial of Service (DDoS) attack mitigation
   - Network Situational Awareness
      - 100% packet accurate NetFlow records, no sampling
      - Snort-based IDS
      - Passive host and service fingerprinting and vulnerability assessment
      - Fully-customizable signature-based alerting
   - Active In-line Control
      - Ability to block, log, capture, and modify packets in real-time
      - Configurations modifiable in real-time up to hundreds of times per
      second via out-of-band management
   - Seamless Integration and Interoperability
      - IPv4 to IPv6 Transition: Transparent interoperability to support
      migration to IPv6-only domains and clients
      - Content-based Routing and flow control between disparate
      applications
   - Bandwidth and Service Management
      - Application control, including tracking, rate-limiting, or blocking
   - Cross-Domain Solutions
      - Partner-developed, accredited high-speed CDS for formatted message
      traffic
      - Partner-developed prototypes for streaming media, chat, imagery,
      VoIP

CloudShield solutions are deployed in-line in many mission-critical networks
throughout the Department of Defense and the Intelligence Community.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20100311/8c4d0032/attachment.html>