text:
This release is available in French.
Montreal, August 12, 2009 Sounds and images share a similar neural code in the human brain, according to a new Canadian study. In the online edition of the Proceedings of the National Academy of Sciences (PNAS), scientists from the Universit de Montral and the Montreal Neurological Institute at McGill University explain how the same neural code in the brain allows people to distinguish between different types of sounds, such as speech and music, or different images.
Participants were recruited to undergo functional magnetic resonance imaging (FMRI), a non-invasive form of brain mapping used to determine how the brain recognizes different characteristics in musical instruments, words from conversations or environmental sounds. Subjects underwent an exhaustive three hours of FMRI exams to provide precise information about how the brain reacts when different sounds are played.
"It turns out that the brain uses the same strategy to encode sounds than it uses to encode different images," explains lead author Marc Schnwiesner, a Universit de Montral psychology professor. "This may make it easier for people to combine sounds and images that belong to the same object, such as the dribbling of a basketball."
The next step for the researchers is to determine exactly how the brain distinguishes between rock drum beats to the strings of a symphony or from a French conversation to an English one. "Our goal is to disentangle exactly how the brain extracts these different types of sounds. This is a step may eventually let us reconstruct a song that a person has heard from according to the activity pattern in their brain," explains Dr. Schnwiesner, who is also a member of the International Laboratory for Brain, Music and Sound Research (BRAMS), a joint Universit de Montral and McGill University t
|Contact: Sylvain-Jacques Desjardins
University of Montreal


text:
By: Wayne Duggan As the world has become more aware of the harmful effects of greenhouse gases, an increasing amount of effort and money has been invested in developing renewable energy to displace fossil fuel as the leading source of global energy. With a limited amount of global fossil fuel remaining, it's inevitable that it.. Read more
By: Wayne Duggan Oil has captured the lion's share of the headlines surrounding the collapse in commodity prices over the past year, but many coal mining stocks have been hit even harder than oil stocks have. With share prices at historical lows, is it finally time to buy coal or will coal stocks remain value.. Read more
By: Wayne Duggan The recent volatility in oil prices has been staggering, and traders that have played the swings correctly have made a killing. After WTI prices recently dipped below $40/bbl for the first time since 2009, prices snapped back by more than 20 percent over a span of three trading days. Oil bulls argue.. Read more
By: Wayne Duggan With oil prices dipping to new six-year lows and WTI breaking below the $40/bbl threshold, Wall Street seems as polarized as ever when it comes to where oil prices will go from here. There's a compelling bull case and bear case to be made for oil, so here's a breakdown of how.. Read more
By: Wayne Duggan It's no secret that the major market turbulence that sent the S&P 500 down 11 percent in a matter of days has been driven in large part by fears surrounding the stock market crash in China. As bad as things have been in the U.S., China's Shanghai Index recently booked five consecutive.. Read more
Copyright © 2001-2015, Professional Trading Solutions, Inc. All Rights Reserved.

subset: commoncrawl


text:
Age: Toddlers,Preschool. Award Year: 2005.
Age: Preschool. Award Year: 2005.
Age: Preschool. Award Year: 2006.
Age: Preschool. Award Year: 2005.
Lauri�s puzzles come with rubber pieces and a pattern printed in the container/tray for beginners to follow. For building confidence, these are the perfect place to start. They do make puzzle boards with whole pieces, such as tools and vehicles. These are ideal for beginners.
The five piece puzzles are a perfect place to start with 2 year olds. The puzzles are marked 18 months and up- but we'd say for most kids, this is rushing it. There is also a Dog and puppy 5 piece puzzle that's a bit harder.
As with all puzzles-- it's really important to start with sets that your child can do with a minimum amount of frustration. The idea is to build their sense of confidence- save more complicated puzzles for later on.
Our 4-5 year old testers loved the 22-piece Race Car and 3-4's liked the 13-piece T-Rex, a 16-piece Farm Scene, a wonderful Birthday Cake, and Airplane. This company will provide missing pieces so that your investment is not lost. The textured pieces on their simple one piece puzzles are also good for tracing.
Age: Preschool, Early School Years. Award Year: 2010. Click here to purchase the product on Amazon.com.
Twenty puzzle sets of mother and baby animals done with charming illustrations that have a storybook quality. Ideal for working with your child on knowing and naming familiar animals such as bear/bear cub, cow/calf, and kangaroo/joey. We recommend starting out with five at a time. 3 & up. (212) 222-0823.
Age: Preschool. Award Year: 2006. Click here to purchase the product on Amazon.com.
Twenty-five puzzle sets of rhyming pairs such as cake and rake, house and mouse. Each pair is color coded and illustrations are easily recognizable objects to know and name. Rhyming games are useful for prereaders. 4 & up. Still top rated, Baby Animals ($14 4), pairs of mother and baby animals. We recommend starting out with five pairs at a time rather than the whole set. 3 & up. (212) 222-0823.
Age: Preschool. Award Year: 2007. Click here to purchase the product on Amazon.com.
Age: Preschool,Early School Years. Award Year: 2007.
A very satisfying oversized floor puzzle (24" ✕ 36") with 24 jumbo pieces featuring the iconic illustration of Clement Hurd. 3 & up. Still top rated, last year's PLATINUM AWARD-winning collection of Eric Carle puzzles, including The Very Books Block Puzzle ($13)—nine cubes can be turned to create six different images from several beloved Eric Carle books, including The Very Hungry Caterpillar, The Very Quiet Cricket, and The Very Lonely Firefly. Also 1, 2, 3 to the Zoo Great Big Puzzle ($15), a 24" ✕ 36" floor puzzle with Carle's picture-book animals on their way to the zoo; count the creatures from 1 to 10 and don't forget to find the mouse that is hiding on every train car. 3 & up.
Age: Preschool. Award Year: 2008.
A really over-sized (2' x 3') floor puzzle that features the animals in Eric Carle's classic book. The 24 jumbo pieces are pleasingly large and will be enjoyed by preschoolers after they have read the book. As you're working on the puzzle with your preschooler, you can enjoy making the sounds each animal makes. Other award winning puzzles in this line: Eric Carle 1,2,3 to the Zoo, Good Night Moon and Our World.
The company has signed a verification form complying with our safety requirements. We did not independently test this toy in a lab.
Age: Preschool. Award Year: 2008. Click here to purchase the product on Amazon.com.
Oppenheim Toy Portfolio - All Rights Reserved. Oppenheim Toy Portfolio, Oppenheim Toy Portfolio Platinum Award, and Oppenheim Toy Portfolio Blue Chip Award are Registered Trademarks of the Oppenheim Toy Portfolio.
Instructions for submitting product to the Oppenheim Toy Portfolio for review.
Contact the Toyportfolio by phone at (212) 598-0502 or by email at email@example.com.
Copyright 1995-2014
Products reviewed by the Oppenheim Toy Portfolio are provided by the manufacturer at their cost. The Oppenheim Toy Portfolio does not require or accept fees for reviewing products.


text:
Obviously, I'm not in the Chase, but I'm kind of a fan of the sport, so I watch what's going on in the Chase. For sure, it's pretty exciting. If I had to pick somebody, I think Carl Edwards obviously has a pretty good chance. I wouldn't say I'm out there rooting for him, but I like Carl. He's been very nice to me, we haven't had any on-track problems, and at Daytona, we raced a lot around each other. I have a lot of respect for him, and he has gone out of his way to talk to me. I like all the other guys personally, too, but Carl is in a real good position and has run well all year.
We're kind of in a different position. We're fighting to get back in the top 35 -- we're currently 37th -- and we have to be smart about everybody we're racing against. We're not going to be taking a lot of chances like a lot of people are. The thing for me is to continue to look at it from the point of view, you watch where the guys in the Chase are, you don't want to give them a problem, but you continue to race them. You're a little more careful, but you're not going to give them a spot just because they need another couple points. If they're that much better, they'll pass you.
Everybody is fighting for something at this point, whether it's being in the top 35 or for the championship or getting another couple points. There's still a lot out there. The biggest thing for us is not only to get back in the top 35 but also to keep working on the relationship between me and crew chief Travis Geisler. We feel we have some work to do to get to the point where we run with the 2 and the 12 cars at Penske Racing. They're not running as well as they'd like, either, but we need to get to that point.
Working with Travis has been good, but for me, it's kind of making me feel old. I'm 29, and I've never had a crew chief or engineer who's younger than me. He's 27, and that makes me the fifth-oldest person on my team. It's kind of cool, but it's also weird for me. I've got a lot of respect for Travis. He's very intelligent, and we have an opportunity to have a very good working relationship, so we can both make a name for ourselves. Obviously, I didn't have any problems with previous crew chief Chris Carrier -- he's one of the best people I've ever been around in terms of being at the races. Travis and I are both young and extremely motivated to do well, and we're going to work on that chemistry the rest of this season.
As far as team chemistry, David Stremme is going to be a great addition to the team next year. He was one of the first guys when I first came over to NASCAR who came over and talked to me, before we were even on the same team. I think it's great he's getting another shot at it. The way he is as far as a teammate has really made me feel like this is a good thing that's going to make all three of us work well next year. We need to make the whole team better. Kurt Busch has been good to me, too, and hopefully it's going to be a good relationship for all three of us. David is outgoing, and as much as he wants to get back in here and prove that he belongs here, that's going to make us all better.
We're at Dover this weekend, and I really like it. It's a 1-mile track, but it feels like a speedway race more than a typical shorter track. I didn't grow up racing quarter-mile bullrings, so for me that's the thing that I have to continue to work on. The smaller the track, the more improvement I need. But Dover is a neat little place. The first time I went there last year, I got an opportunity to watch some of the practices, and it's one of the places you watch the cars and they look like they're going fast. You really get a sense for the speed there.
Sam Hornish Jr., 28, drives the No. 77 Mobil 1 Dodge Charger. He will take ESPN.com readers inside his life on and off the track each week with the help of writer Angelique S. Chengelis.


text:
All Android applications categories
All Android games categories
by: TapToLearn | 7
Help Tiny Chicken recover the World's Lost Eggs!!
Tiny Run is a runner where Tiny Chicken travels to alien planets to recover the earth's lost eggs!
Help Tiny collect the eggs and survive the beautiful yet treacherous Alien lands inhabited by funny aliens.
Tags: www.tinyrun.org , art tinyrun
from 7 reviews


text:
Long Wharf acting company co-founder Vaughn McBride, longtime regional theater actor, playwright, teacher and director who was vigorously connected with the Actors Theater of Louisville for a quarter century, died Nov. 24 in Salt Lake City from cancer. He was 66.Born and raised in Salt Lake City, McBride moved east to co-found the Long Wharf Theater acting company in New Haven, Conn., where he played the lead in "The Crucible," "The Hostage," "Private Eye" and others. From 1961-67, he appeared in more than 57 productions with the Cleveland Playhouse acting company. His notable roles include Astroff in "Uncle Vanya," Jonathan in "Arsenic and Old Lace," and Crean in "Antigone. 1970 marked the beginning of McBride's 25-year run as a resident acting company member with the Actors Theater of Louisville, during which time he performed in more than 100 plays, including "A Christmas Carol," "To Kill a Mockingbird," "Antony and Cleopatra," "As You Like It" and "King Lear." He was the sole founder of ATL's apprenticeship program, State Tour program and Adventure Theater. He co-founded Walden Theater's Young Playwrights program in Louisville in 1981, where he taught playwrighting to middle and high school students for more than a decade. McBride's published and produced writings include "Let's Us," "New Girl," "Good Old Boy," "Go Back to Your Precious Wife and Son," and "Small Halos." Moving to the bigscreen, he appeared in the film "SLC Punk!" in 1999. He also acted in TV's "Touched by an Angel." He is survived by his mother, sister and several nieces and nephews.
Vaughn McBride
Most Popular
Shia LaBeouf Arrested in Austin for Public Intoxication
Box Office: 'Pan' Bombing as 'Martian' Heads for $34 Million Weekend Win
CBS Canceling 'Extant,' Developing Halle Berry Legal Drama
Watch: Lily James Slays Undead in 'Pride and Prejudice and Zombies' Trailer
AMC's 'Fear the Walking Dead' Has the Highest-Rated First Season in Cable History
Variety Jobs
Creative Development CoordinatorTriptyk Studios, New York, New York
Account/Project Coordinator (Ad Agency)Petrol Advertising, Burbank, California
Media SpecialistBridgewater Associates, Westport, Connecticut
Executive Director, Aspen FilmCompany Confidential, Aspen, Colorado
Associate Director, YouTuber & Gamer PartnershipsSave the Children, Fairfield, Connecticut
See More Jobs


text:
Edit hours
Avoid lunch time hours - it gets busy!
DL applicants must provide proof of (1) legal name; (2) DOB; (3) legal presence; and (4) SSN
Hours: Mon - Fri 8am to 4pm closed Sat, Sun & holidays.
Paper drivers license not valid ID
This is the nicest bmv I've ever been to!!!' quick n friendly!!
Tuesday through Saturday 8a-4p. Closed Sunday & holidays.


text:
Getting along Without Getting in Trouble : An Employee Handbook on Dealing with and Avoiding Sexual Harassment
AUTHOR: Blalock, Jennifer
EDITION: 1st
PUBLISHER: Kendall Hunt Publishing Company
Also available at Amazon.com
This book is not guaranteed to come with supple-
mental materials (access codes, CD's, DVDs, etc.)
mental materials (access codes, CD's, DVDs, etc.)
21 Day Unconditional Guarantee
any book, any reason


text:
Maple Leafs: James van Riemsdyk In the penthouse, penalty killing in the doghouse
van Riemsdyk capped a one-goal, two-assist performance on Saturday night with a nifty backhanded goal in the shootout to help carry the Leafs to a 4-3 shootout win in Ottawa.
|Report an Error
Share via Email
In the penthouse: James van Riemsdyk capped a one-goal, two-assist performance on Saturday night with a nifty backhanded goal in the shootout to help carry the Leafs to a 4-3 shootout win in Ottawa. The 24-year-old's second three-point game in a span of 10 days -- he had two goals and an assist in Pittsburgh -- gave him 13 goals and 25 points in 28 games this season.
"I've been given an opportunity by (head coach) Randy (Carlyle) to play in those key situations and I wanted to grab the bull by the horns," van Riemsdyk said. "He's shown a lot of confidence in me as a player. And your confidence grows when your coach shows confidence in you ... Obviously you're going to make mistakes here and there. But he keeps sticking with me. If your confidence continues to grow, you continue to evolve as a player."
In the doghouse: After a respectable start to the season, Toronto's penalty kill has been struggling mightily of late. On Saturday the unit gave up two goals, both of which Carlyle told reporters should have been better covered. It marked the seventh straight game the Leafs have given up at least one power-play goal. Over that span, in which the Leafs have won just two games, their not-so-special team is running at 64.5 per cent efficiency. That's dregs-of-the-league stuff in any league, let alone the world's best one.
Top News
- Updated Blue Jays fall to Rays in regular season finale, will play Texas in ALDS
- Working overtime to help bring Syrian refugees to GTA
- Emotional visitation for children and grandfather killed in crash
- Photos Updated Bringing beauty to Canada Post mailboxes
- TPP deal likely to be announced this evening
- NEW Mohamed Fahmy urges Canada to do more for citizens detained abroad
- Photos Heroin, U.S.A.: How the middle class got addicted
- No Peel cop disciplined for 'tampering' at shooting scene


text:
- EngineCooling SystemEngine ComponentsIgnition & Electrical
- Exhaust
- Wheels & Tires
- Brakes & Suspension
- Interior
- Lighting
- ExteriorRacks & CoversTowing, Plowing, & Recovery
- Chemicals & Lubricants
- Clearance
StreetSideAuto Garage
Call to Order: 877-787-8989Monday - Friday 8AM - 6PM CST | All-American Tech Support
Previously Searched Vehicles
More Vehicle Details
We need more details about your vehicle to verify part fitment.
October 12, 2015 by Andy Sheehan
September 25, 2015 by Andy Sheehan
September 17, 2015 by Andy Sheehan
Every vehicle needs a set of heavy duty, full coverage floor mats, and no one offers more coverage than Weathertech. Their floor mats, floor liners, and cargo liners are designed per vehicle to protect your factory carpet as much as possible. Clean carpet means a higher resale value, less car stank, a better look, and even fewer germs.
We know you're the same way. If you're not working on a masterpiece now, you're dreaming one up. And because we know that pain so well, we fight to keep our prices low and our inventory wide, moving your dream closer to a vision of polished chrome and a perfect wheel in your fists, growling with life like a pet grizzly. Then it's time for a new song, changing pitch through a wide-open exhaust and dropping octaves with a quick throw of the shifter. The feeling of glancing back over your shoulder as you walk away to admire the latest truck accessories you installed. We want to make that happen for you. So take a look around. And listen for the call.
There's something about the idea of a car that calls to us. That beautifully ugly symphony of greasy bits of metal, rubber, and glass all seem to sing in tune, and that song is aimed at us. So we work hard, we buy our projects, rusted, scratched, and warped, redeemed but unrestored. And then we put in the hours. Sure, we could hire it all done. But to pay away the experience of getting the grime under our nails, unwrapping new performance parts, and feeling the tiny sting of the welder sparks- we miss an opportunity. Building the beast is half the joy of owning it. Sometimes more.


text:
This business is not BBB accredited.
Idea Day Productions
Phone: (801) 943-6585 8548 S Scottish Dr, Sandy, UT 84093 http://www.ideaday.tv
BBB Business Reviews may not be reproduced for sales or promotional purposes.
BBB Accreditation
This business is not BBB accredited.
Businesses are under no obligation to seek BBB accreditation, and some businesses are not accredited because they have not sought BBB accreditation.
To be accredited by BBB, a business must apply for accreditation and BBB must determine that the business meets BBB accreditation standards, which include a commitment to make a good faith effort to resolve any consumer complaints. BBB Accredited Businesses must pay a fee for accreditation review/monitoring and for support of BBB services to the public.
Reason for Rating
BBB rating is based on 13 factors. Get the details about the factors considered.
Factors that raised the rating for Idea Day Productions include:
- Length of time business has been operating
- No complaints filed with BBB
Customer Complaints Summary
|Complaint Type
|Total Closed Complaints
|Advertising/Sales Issues
|Billing/Collection Issues
|Delivery Issues
|Guarantee/Warranty Issues
|Problems with Product/Service
|Total Closed Complaints
Definitions | BBB Complaint Process | File a Complaint against Idea Day Productions
Customer Reviews Summary Read customer reviews
|Customer Experience
|Total Customer Reviews
|Positive Experience
|Neutral Experience
|Negative Experience
|Total Customer Reviews
Read Customer Reviews | Submit a Customer Review | See Trends in Customer Reviews on Idea Day Productions
Additional Information
Type of Entity
Business ManagementMr. Edward Wilets, Company Contact
Contact Information
Business Category
Video Production Services


text:
|Publication number
|Publication type
|Application number
|Publication date
|18 Jul 2002
|Filing date
|16 Aug 2001
|Priority date
|7 Sep 2000
|Also published as
|Publication number
|Marinus Kaashoek, Edward Kohler, Massimiliano Poletto, Robert Morris
|Original Assignee
|Kaashoek Marinus Frans, Kohler Edward W., Poletto Massimiliano Antonio, Morris Robert T.
|Export Citation
|BiBTeX, EndNote, RefMan
|Patent Citations (50), Referenced by (92), Classifications (17), Legal Events (11)
|External Links: USPTO, USPTO Assignment, Espacenet
[0001] This application claims the benefit of U.S. Provisional Patent application Serial No. 60/230,759, filed Sep. 07, 2000, entitled "THWARTING DENIAL OF SERVICE ATTACKS"
[0002] This invention relates to techniques to thwart network-related denial of service attacks.
[0003] In denial of service attacks, an attacker sends a large volume of malicious traffic to a victim. In one approach an attacker, via a computer system connected to the Internet infiltrates one or a plurality of computers at various data centers. Often the attacker will access the Internet through an Internet Service Provider (ISP). The attacker by use of a malicious software program places the plurality of computers at the data centers under its control. When the attacker issues a command to the computers at the data centers, the machines send data out of the data centers at arbitrary times. These computers can simultaneously send large volumes of data over various times to the victim preventing the victim from responding to legitimate traffic.
[0004] According to an aspect of the present invention, a central controller system to coordinate thwarting denial of service attacks on a victim data center that is coupled to a network includes a communication device to receive data from a plurality of monitors, over a hardened, redundant network and a computer system. The computer system includes a process that executes on the computer system to analyze the data from the plurality of monitors to determine network traffic statistics that can identify malicious network traffic.
[0005] According to an additional aspect of the present invention, a method to coordinate thwarting denial of service attacks on a victim data center that is coupled to a network includes receiving data from a plurality of monitors, over a hardened, redundant network and analyzing the data from the plurality of monitors to determine network traffic statistics that can identify malicious network traffic.
[0006] According to an additional aspect of the present invention, a computer program product to coordinate thwarting denial of service attacks on a victim data center that is coupled to a network includes instructions to cause a computer to receive data from a plurality of monitors, over a hardened, redundant network and analyze the data from the plurality of monitors to determine network traffic statistics that can identify malicious network traffic.
[0007] One or more aspects of the invention may provide some or all of the following advantages.
[0008] Aspects of the invention provide a distributed rather than a point solution to thwarting denial of service attacks. The control center analyzes data from gateways and data collectors to detect attacks on victim sites. It can identify the source of the attack and provides a mechanism to notify an administrator at the victim site to install a filter or filters at appropriate points to discard traffic associated with the attack. The control center queries data collectors and asks which data collectors are seeing suspicious traffic being sent to the victim. The control center can issue a query for packet data by victim destination address. Based collected information, the control center can then determine what data centers are performing the spoofing on the victim. The information is used to either automatically shutdown traffic having the victim's destination address at the appropriate gateways or is used to identify networks or data centers from which the attack is originating and to follow up with calls to the appropriate administrators.
[0009]FIG. 1 is a block diagram of networked computers showing an architecture to thwart denial of service attacks.
[0010]FIG. 2 is a block diagram depicting details of placement of a gateway.
[0011]FIG. 3 is a block diagram depicting details of placement of data collectors.
[0012]FIG. 4 is flow chart depicting a data collection process.
[0013]FIG. 5 is a flow chart depicting details of a control center.
[0014]FIG. 6 is a diagram depicting functional layers of a monitoring process.
[0015]FIG. 7 is a diagram depicting one technique to gather statistics for use in algorithms that determine sources of an attack.
[0016]FIG. 8 is a diagram depicting an alternative technique to gather statistics for use in algorithms that determine sources of an attack.
[0017]FIG. 9 is flow chart depicting a process to determine receipt of bad TCP traffic.
[0018]FIG. 10 is flow chart depicting a process to defend against setup time connection attacks.
[0019] Referring to FIG. 1, an arrangement 10 to thwart denial of service attacks (DoS attacks) is shown. The arrangement 10 is used to thwart an attack on a victim data center 12, e.g., a web site or other network site under attack. The victim 12 is coupled to the Internet 14 or other network. For example, the victim 12 has a web server located at a data center (not shown).
[0020] An attacker via a computer system 16 that is connected to the Internet e.g., via an Internet 14 Service Provider (ISP) 18 or other approach, infiltrates one or a plurality of computers at various other sites or data centers 20 a-20 c. The attacker by use of a malicious software program 21 that is generally surreptitiously loaded on the computers of the data centers 20 a-20 c, places the plurality of computers in the data centers 20 a-20 c under its control. When the attacker issues a command to the data centers 20 a-20 c, the data centers 20 a-20 c send data out at arbitrary times. These data centers 20 a-20 c can simultaneously send large volumes of data at various times to the victim 12 to prevent the victim 12 from responding to legitimate traffic.
[0021] The arrangement 10 to protect the victim includes a control center 24 that communicates with and controls gateways 26 and data collectors 28 disposed in the network 14. The arrangement protects against DoS attacks via intelligent traffic analysis and filtering that is distributed throughout the network. The control center 24 is coupled to the gateways 26 and data collectors 28 by a hardened, redundant network 30. Gateways 26 and data collectors 28 are types of monitors that monitor and collect statistics on network traffic. In preferred embodiments, the network is inaccessible to the attacker. The gateway 26 devices are located at the edges of the Internet 14, for instance, at the entry points of data centers. The gateway devices constantly analyze traffic, looking for congestion or traffic levels that indicate the onset of a DoS attack. The data collectors 28 are located inter alia at major peering points and network points of presence (PoPs). The data collectors 28 sample packet traffic, accumulate, and collect statistical information about network flows.
[0022] All deployed devices e.g., gateways 26 and data collectors 28 are linked to the central control center. The control center aggregates traffic information and coordinates measures to track down and block the sources of an attack. The arrangement uses a distributed analysis emphasizing the underlying characteristics of a DoS attack, i.e., congestion and slow server response, to produce a robust and comprehensive DoS solution. Thus, this architecture 10 can stop new attacks rather than some solutions that can only stop previously seen attacks. Furthermore, the distributed architecture 10 will frequently stop an attack near its source, before it uses bandwidth on the wider Internet 14 or congests access links to the targeted victim 12.
[0023] A virus is one way to get attacks started. When surfing the web page a user may download something, which contains a virus that puts the user's computer under the control of some hacker. In the future, that machine can be one of the machines that launches the attack. The attacker only needs a sufficient amount of bandwidth to get a sufficient number of requests out to the victim 12 to be malicious.
[0024] Referring to FIG. 2, details of an exemplary deployment of a gateway is shown. Other deployments are possible and the details of such deployments would depend on characteristics of the site, network, cost and other considerations. The gateway 26 is a program executing on a device, e.g., a computer 27 that is disposed at the edge of the data center 20 behind an edge router at the edge of the Internet 14. Additional details on the gateway 26 are discussed below and in the APPENDIX A. In a preferred embodiment, a plurality of gateway devices are deployed at a corresponding plurality of locations, e.g., data centers or sites over the network, e.g., the Internet 14. There can be one gateway or a plurality of gateways at each data center, but that is not necessarily required.
[0025] The gateway 26 includes a monitoring process 32 (FIG. 6B) that monitors traffic that passes through the gateway as well as a communication process 33 that can communicate statistics collected in the gateway 26 with the data center 24. The gateway uses a separate interface over a private, redundant network, such as a modem 39 to communicate with the control center 24 over the hardened network 30. Other interface types besides a modem are possible. In addition, the gateway 26 can include processes 35 to allow an administrator to insert filters to filter out, i.e., discard packets that the device deems to be part of an attack, as determined by heuristics described below.
[0026] An attack can be designed to either overload the servers or overload some part of the network infrastructure inside the victim site 12. Thus, the victim site 12 can include routers, switches, load balancers and other devices inside the data center that can be targeted by the attack. A particularly troublesome attack causes overload of upstream bandwidth. Upstream bandwidth is the capacity between the victim 12 data center 12 a and one or a plurality of routers or switches belonging to the victim 12 data center's network service provider, which provides connectivity to the rest of the network, e.g., the Internet.
[0027] For an exemplary configuration, the victim site 12 can include a plurality of high bandwidth lines feeding a GSR (Gigabit Switch Router). At the output of the GSR are exit ports to various parts of the data center. The GSR is generally very high bandwidth and generally does not crash. The gateway 26 is placed behind the GSR and across some or all of the output ports of the GSR into the data center. This configuration allows the gateway 26 to monitor and control some or all of the traffic entering the data center without the need to provide routing functionality.
[0028] Alternatively, a gateway 26 can tap a network line without being deployed physically in line, and it can control network traffic, for example, by dynamically installing filters on nearby routers. The gateway 26 would install these filters on the appropriate routers via an out of band connection, i.e. a serial line or a dedicated network connection. Other arrangements are of course possible.
[0029] Referring to FIG. 3, data collectors 28 are shown coupled to the network to tap or sample traffic from data centers 20 a-20 c. Although data collectors 28 can be dispersed throughout the network 14 they can be strategically disposed at peering points, i.e., points where network traffic from two or more different backbone providers meet. The data collectors 28 can also be disposed at points of presence (PoPs). The data collectors 28 monitor and collect information pertaining to network traffic flow. The data collectors process statistics based on monitored network traffic that enters a peering point. Data collectors 28 include a monitoring process 32 (FIG. 6) as well as a communication process that communicates data to the control center over the hardened network 30. One or more data collector devices 28 use the monitoring process to monitor one or more lines that enter the peering point. Each data collector 28 would be able to monitor one or more lines depending on the specifics of how the network is configured and bandwidth requirements.
[0030] The gateway 26 and data collector 26 are typically software programs that are executed on devices such as computers, routers, or switches. In one arrangement, packets pass through the gateway 26 disposed at the data center 22 a and are sampled by the data collector.
[0031] Referring to FIG. 4, the data collector 26 performs 40 a sampling and statistic collection process 40. The data collector samples 42 one (1) packet in every (n) packets and has counters to collect statistics about every packet. The data collector 26 parses the information in the sampled packet. Information collected includes source information 44, which may be fake or spoofed, e.g., not correct information. It will also include destination information 46, which generally is accurate information. The data collector 28 collects that information but need not log the sampled packets. The data collector 28 maintains a log over a period of time, e.g., in the last hour. As an example, the log that the data collector 26 maintains is a log that specifies that the data collector has seen a certain number of packets, e.g., 10,000 packets of a particular kind, that apparently originated from a particular source(s) that are going to a particular destination.
[0032] Based on rules 48 within the data collector 26, the data collector 26 analyzes 50 the collected statistics and may if necessary compose 52 a message that raises an alarm. Alternatively, the data collector can respond to queries concerning characteristics of traffic on the network. Typically, the queries can be for information pertaining to statistics. It can be in the form of an answer to a question e.g., how many packets of a type did the data collector see or it can be a request to down load via the hardened network, the entire contents of the log. One rule is that when the data collector 26 starts sampling, the data collector periodically logs data and produces a log of a large plurality of different network flows over a period of time.
[0033] Referring to FIG. 5, a deployment for the control center 24 is shown. The control center 24 receives information from one or more gateways 26 and data collectors 28 and performs appropriate analysis using an analysis process 62. The control center is a hardened site.
[0034] The control center 24 has multiple upstream connections so that even during an attack it will have other ways to couple to the network 30. Several approaches can be used to harden the site. One approach can use special software between the site and the Internet 14 to make it immune to attack. An approach is to have a physically separate network 30 connected to all of the devices, e.g., gateways 26 and data collectors 28. One exemplary embodiment of that physically separate network 30, which is hardened, is the telephone system. Thus, each one of the data collectors 26 and gateways 26 includes an interface to the separate network, e.g., a modem. The data center 26 also includes a corresponding interface to the separate network, e.g., a modem or a modem bank 60.
[0035] With this approach, the redundant network 30 is not accessible to the attacker. The redundant network 30 thus is available to communicate between the data center 24 and data collectors and gateways to coordinate response to an attack. In essence, the network 30 used by the data center to communicate with the data collectors 26 and gateways 26 is not available to the attacker. Alternatively, if less than complete assurance is required, the control center could be resistant to attack and still be connected to the Internet 14.
[0036] The analysis process 62 that is executed on the control center 24 analyzes data from the gateways 26 and data collectors 28. The analysis process 62 tries to detect attacks on victim sites. The analysis process 62 views attacks as belonging to, e.g., one of three classes of attack. Herein these classes of attack are denoted as low-grade with spoofing, low-grade without spoofing and high-grade whether spoofing or non-spoofing.
[0037] A low-grade attack is an attack that does not take out upstream bandwidth. A low-grade attack does not significantly overburden the links between the Internet 14 and the victim data center 12. The low-grade non-spoofing attack is the simplest type of attack to defend against. It simply requires identifying the source of the attack and a mechanism to notify an administrator at the victim site to install a filter or filters at appropriate points to discard traffic containing the source address associated with the attack.
[0038] With a low-grade spoofing-type attack, an attacker sends an IP-packet to a destination but fakes the source address. There is no way to enforce use of an accurate source address by a sender. During a spoofing attack, each one of the attacking machines will send a packet with a fake, e.g., randomly selected or generated source address. Under this type of attack, the victim 12 alone cannot thwart the attack. An administrator at the victim 12 can try to put a filter on a router to stop the packets. However, there is no way for the administrator to guess what the random address of the next packet will be.
[0039] The control center 24 also includes a communication process 63 to send data to/from the gateways 26 and data collectors 28. The gateway 26 at the victim 12 contacts the control center and notifies the control center 24 that the victim 12 data center is under a spoofing attack. The gateway 26 identifies itself by network address (e.g., static IP address if on the Internet 14), via a message to the control center 24. The message sent over the hardened network 30 indicates the type of attack, e.g., an attack from addresses that the victim 12 cannot stop because it is a spoofing type of attack. The control center queries data collectors 28 and asks which data collectors 28 are seeing suspicious traffic being sent to the victim 12.
[0040] The packets from the attacker will have faked source addresses that will be changing with time. However, the control center can issue a query for this kind of packet by victim destination address. The data collectors 28 reply with the information collected. Based on that collected information from the data collectors 28, the control center can then determine what data centers are performing the spoofing on the victim 12.
[0041] In the present configuration, there are two possible sources of attack traffic: either the attacker is behind a gateway 26 or not. If the attacker is behind a gateway 26, the control center issues a request to the appropriate gateway 26 to block the attacking traffic, e.g. by allowing the appropriate gateway 26 to discard traffic, e.g., packets that contain the victim 12 destination address. The gateway 26 stops that traffic in a transparent manner. If the attacker is not behind a gateway 26, data collectors 28 are used to provide information about possible locations of the attackers. The availability of information from data collectors 28 increases the speed with which attackers are discovered. The data collectors 28 are positioned at network switching points that see a high volume of traffic, which minimizes the required number of deployed data collectors.
[0042] The high-grade attacks are attacks that take out the link between the victim 12 data center and the Internet 14. With a high-grade attack it does not matter whether the victim 12 is spoofed or not. Under a high-grade attack, the attack requires cooperation just like the low grade spoofing attack. Thus, the same thwarting mechanism is used for either spoofing or non-spoofing, e.g., using information from the data collectors 28 to identify attacking networks. This information is used to either automatically shutdown traffic having the victim's destination address at the appropriate gateways 26 or is used to identify networks or data centers from which the attack is originating and to follow up with calls to the appropriate administrators.
[0043] Referring to FIG. 6, a monitoring process 32 is shown. The monitoring process 32 can be deployed on data collectors 28 as well as gateways 26. The monitoring process 32 includes a process 32 a to collect statistics of packets that pass by the data collectors 28 or through the gateways 26. The monitoring process 32 also includes several processes 32 b to identify, malicious traffic flows based on the collected statistics as further described below.
[0044] Referring to FIG. 7, the gateways 26 and data collectors 28 are capable of looking at multiple levels of granularity. The gateways 26 and data collectors have monitoring process 32 used to measure some parameter of traffic flow. One goal of the gateways 26 and data collectors 28 is to measure some parameter of network traffic. This information collected by the gateways 26 and data collectors is used to trace the source of an attack.
[0045] One of the algorithms to measure parameters of traffic flow divides the traffic flow into buckets. For example, consider one simple parameter, the count of how many packets a data collector or gateway examines. An algorithm to track the count of this parameter starts with a predefined number of buckets, e.g., "N" buckets. The buckets are implemented as storage areas in the memory space of the data collector or gateway device. The algorithm will use some hash function "f(h)", which takes the packet and outputs an integer that corresponds to one of the buckets "B1-BN". Statistics from the packets start accumulating in the buckets "B1-BN". The buckets "B1-BN" are configured with threshold values "Th." As the contents of the buckets B1-BN reach the configured thresholds values "Th", (e.g., compare values of packet count or packet rate to threshold), the monitoring process 32 deems that event to be of significance. The monitoring process 32 takes that bucket, e.g., Bi and divides that bucket Bi into some other number M of new buckets Bil-BiM. Each of the new buckets Bil-BiM contains values appropriately derived from the original bucket Bi. Also, the hash function is extended to map to N+M−1 "h→N+M−1" values, rather than the original N values.
[0046] An attack designed to use the algorithm of FIG. 6 against a gateway 26 or a data collector 28 might send packets in such a fashion as to explode the number of buckets. Since each bucket consumes memory space, the attack can be designed to consume all available memory and crash the device, e.g., computer on which the monitoring process 32 executes. There are ways of preventing that type of attack on the monitoring process 32. One way is to make the hash function change periodically, e.g., randomly. Also the hash function is secret so that the packets are reassigned to different buckets in ways unknown to the attackers.
[0047] Referring to FIG. 8, a second method is that instead of using just thresholds and values inside a given bucket, the monitoring process 32 also sets thresholds on the number of buckets. As the gateway 26 or data collector 28 approaches a bucket threshold "Th", the gateway 26 or data collector 28 have the ability to take several buckets B1-B3 and divide them in more buckets B1-B4 or combine them into fewer bucket B1-B2.
[0048] The function of the variable number of buckets is to dynamically adjust the monitoring process to the amount of traffic and number of flows, so that the monitoring device (e.g., gateway 26 or data collector 28) is not vulnerable to DoS attacks against its own resources. The variable number of buckets also efficiently identifies the source(s) of attack by breaking down traffic into different categories (buckets) and looking at the appropriate parameters and thresholds in each bucket.
[0049] Thus, with multi-level analysis as discussed in FIGS. 6 and 7, traffic is monitored at multiple levels of granularity, from aggregate to individual flows. Multi-level analysis can be applied to all types of monitoring (i.e. TCP packet ratios, repressor traffic, etc. discussed below) except TCP SYN proxying (because the latter requires per-connection monitoring of all half-open connections as discussed below).
[0050] The monitoring process 32 has the gateway 26 or the data collectors 28 keep track of a metric (such as packet ratio) for each of n traffic buckets. (If n=1, the monitoring process 32 tracks the metric for all traffic in the aggregate.) The monitoring process 32 places packets into buckets according to a hash function of the source or destination address. If the metric in any bucket exceeds a given "suspicious" threshold, that bucket is split into several smaller buckets, and the metric is tracked individually for each new bucket. In the limit, each bucket can correspond to a single flow (source address/port and destination address/port pair). The resulting per-flow monitoring is resilient to denial-of-service attacks. If the number of buckets exceeds a given memory limit (for example, due to a many-flow spoofing attack), several fine-grain buckets can be aggregated into a single coarse-grain bucket. The hash function for placing packets into traffic buckets is secret and changes periodically, thwarting attacks based on carefully chosen addresses.
[0051] In the worst case, an attacker actually spoofs packets from all possible addresses. An IP address, for example is 32 bits long. This address length allows for approximately 4 billion possible random addresses and makes it impossible for the gateway at the victim site 12 to identify the attacker. In that worst case, the gateway 26 calls the control center, indicates the address of the gateway 26, and conveys that the gateway 26 is receiving unreasonably high levels of random traffic. The control center 24 contacts the data collectors 28. The control center 24 analyzes the statistics collected by the data collectors 28 to try to determine the source of the traffic.
[0052] Egress filtering is a recommended Internet 14 best practice procedure that does not allow any packets out of a network unless the source address belongs to that network. Egress filtering prevents hosts on that network from sending out packets with completely random source addresses. Rather, the space of usable fake addresses is limited by the size of the host's network address space, and may range up to 24 bits rather than the full 32 bits. If an attacker is attacking from a network that performs egress filtering, then all the attack traffic reaching a victim will fall into a smaller number of buckets, those corresponding to the source network address. In this way, the gateway 26 can identify the approximate source of the attack without necessarily relying on the control center or data collectors.
[0053] Several methods can be used separately or in combination to identify, malicious traffic flows. For example, the gateway 26 can detect DoS attacks and identify malicious flows or source addresses using at least one or more of the following methods including: analyzing packet ratios of TCP-like traffic; analyzing "repressor" traffic for particular types of normal traffic; performing TCP handshake analysis; performing various types of packet analysis at packet layers 3-7; and logging/historical analysis.
[0054] Packet Ratios for TCP-like Traffic
[0055] The Transmission Control Protocol (TCP) is a protocol in which a connection between two hosts, a client C, e.g. a web browser, and a server S, e.g. a web server, involves packets traveling in both directions, between C and S and between S and C. When C sends data to S and S receives it, S replies with an ACK ("acknowledgement") packet. If C does not receive the ACK, it will eventually try to retransmit the data to S, to implement TCP's reliable delivery property. In general, a server S will acknowledge (send an ACK) for every packet or every second packet.
[0056] Referring to FIG. 9, the monitoring process in the gateway 26 can examine 82 a ratio of incoming to outgoing HTCP packets for a particular set of machines, e.g. web servers. The monitoring process can compare 84 the ratio to a threshold value. The monitoring process can store 86 this ratio, time stamp it, etc. and conduct an ongoing analysis 88 to determine over time for example how much and how often it exceeds that ratio. As the ratio grows increasingly beyond 2:1, it is an increasing indication that the machines are receiving bad TCP traffic, e.g. packets that are not part of any established TCP connection, or that they are too overloaded to acknowledge the requests. This ratio is one of the parameters measured using the multiple-bucket algorithm described previously.
[0057] The gateway 26 divides traffic into multiple buckets, e.g. by source network address, and tracks the ratio of ingoing to outgoing traffic for each bucket. As the ratio for one bucket becomes skewed, the gateway 26 may subdivide that bucket to obtain a more detailed view. The gateway 26 raises 90 a warning or alarm to the data center 24 and/or to the administrators at the victim site 12.
[0058] Repressor Traffic
[0059] The phrase "repressor traffic" as used herein refers to any network traffic that is indicative of problems or a potential attack in a main flow of traffic. A gateway 26 may use repressor traffic analysis to identify such problems and stop or repress a corresponding attack.
[0060] One example of repressor traffic is ICMP port unreachable messages. These messages are generated by an end host when it receives a packet on a port that is not responding to requests. The message contains header information from the packet in question. The gateway 26 can analyze the port unreachable messages and use them to generate logs for forensic purposes or to selectively block future messages similar to the ones that caused the ICMP messages.
[0061] TCP Handshake Analysis
[0062] A TCP connection between two hosts on the network is initiated via a three-way handshake. The client, e.g. C, sends the server, e.g. S, a SYN ("synchronize") packet. S the server replies with a SYN ACK ("synchronize acknowledgment") packet. The client C replies to the SYN ACK with an ACK ("acknowledgment") packet. At this point, appropriate states to manage the connection are established on both sides.
[0063] During a TCP SYN flood attack, a server is sent many SYN packets but the attacking site never responds to the corresponding SYN ACKs with ACK packets. The resulting "half-open" connections take up state on the server and can prevent the server from opening up legitimate connections until the half-open connection expires, which usually takes 2-3 minutes. By constantly sending more SYN packets, an attacker can effectively prevent a server from serving any legitimate connection requests.
[0064] Referring to FIG. 10, in an active configuration, a gateway 26 can defend against SYN flood attacks. During connection setup, the gateway forwards 102 a SYN packet from a client to a server. The gateway forwards 104 a resulting SYN ACK packet from a server to client and immediately sends 106 ACK packet to the server, closing a three-way handshake. The gateway maintains the resulting connection for a timeout period 108. If the ACK packet does not arrive from client to server 110, the gateway sends 112 a RST ("reset") to the server to close the connection. If the ACK arrives 114, gateway forwards 116 the ACK and forgets 118 about the connection, forwarding subsequent packets for that connection. A variable timeout 120 period can be used. The variable time out period can be inversely proportional to number of connections for which a first ACK packet from client has not been received. If gateway 26 is placed inline in the network, when number of non-ACK'ed connections reaches a configurable threshold 122, the gateway will not forward any new SYNs until it finishes sending RSTs for those connections.
[0065] In a passive configuration, a gateway 26 can similarly keep track of ratios of SYNs to SYN ACKs and SYN ACKs to ACKs, and raise appropriate alarms when a SYN flood attack situation occurs.
[0066] Layer 3-7 Analysis
[0067] With layer 3-7 analysis, the gateway 26 looks at various traffic properties at network packet layers 3 through 7 to identify attacks and malicious flows. These layers are often referred to as layers of the Open System Interconnection (OSI) reference model and are network, transport, session, presentation and application layers respectively. Some examples of characteristics that the gateway may look for include:
[0068] 1. Unusual amounts of IP fragmentation, or fragmented IP packets with bad or overlapping fragment offsets.
[0069] 2. IP packets with obviously bad source addresses, or ICMP packets with broadcast destination addresses.
[0070] 3. TCP or UDP packets to unused ports.
[0071] 4. TCP segments advertizing unusually small window sizes, which may indicate load on server, or TCP ACK packets not belonging to a known connection.
[0072] 5. Frequent reloads that are sustained at a rate higher than plausible for a human user over a persistent HTTP connection.
[0073] Logging and Historical Traffic Analysis
[0074] The gateways 26 and data collectors 28 keep statistical summary information of traffic over different periods of time and at different levels of detail. For example, a gateway 26 may keep mean and standard deviation for a chosen set of parameters across a chosen set of time-periods. The parameters may include source and destination host or network addresses, protocols, types of packets, number of open connections or of packets sent in either direction, etc. Time periods for statistical aggregation may range from minutes to weeks. The device will have configurable thresholds and will raise warnings when one of the measured parameters exceeds the corresponding threshold.
[0075] The gateway 26 can also log packets. In addition to logging full packet streams, the gateway 26 has the capability to log only specific packets identified as part of an attack (e.g., fragmented UDP packets or TCP SYN packets that are part of a SYN flood attack). This feature of the gateway 26 enables administrators to quickly identify the important properties of the attack.
[0076] Building a DoS-resistant Network
[0077] The network of gateways 26, data collectors 28, and control center 24 are made DoS resistant by combining and applying several techniques. These techniques include the use of SYN cookies and "hashcash" to make devices more resistant to SYN floods and other attacks that occur at connection setup time. Also, the data center can use authentication and encryption for all connections. Private/public key pairs are placed on machines before deployment to avoid man-in-the-middle attacks. The control center 24 can have multiple physical connections from different upstream network service providers. The network over which the data center communicates between gateways and data collectors is a private redundant network that is inaccessible to attackers.
[0078] Information exchange between gateways/data collectors and the control center is efficient by transferring only statistical data or minimal header information, and by compressing all data.
[0079] This application includes an APPENDIX A attached hereto and incorporated herein by reference. APPENDIX A includes Click code for monitor software.
[0080] This application also includes an APPENDIX B attached hereto and incorporated herein by reference. APPENDIX B sets out additional modules for a Click Router that pertains to thwarting DoS attacks. "Click" is a modular software router system developed by The Massachusetts Institute of Technology's Parallel and Distributed Operating Systems group. A Click router is an interconnected collection of modules or elements used to control a router's behavior when implemented on a computer system.
[0081] Other embodiments are within the scope of the appended claims.
|Cited Patent
|Filing date
|Publication date
|17 Sep 1996
|11 Aug 1998
|Coherent Communications Systems Corp.
|Telecommunications network management observation and response system
|17 Mar 1995
|18 Aug 1998
|General Datacomm Advanced Research Centre Limited
|ATM cell switch
|16 Dec 1997
|9 May 2000
|Telefonaktiebolaget Lm Ericsson (Publ)
|Use of transmission control protocol proxy within packet data service transmissions in a mobile network
|12 Jan 1996
|9 May 2000
|International Business Machines Corporation
|Secure anonymous information exchange in a network
|24 Jun 1997
|22 Aug 2000
|3Com Corporation
|Distributed remote monitoring (dRMON) for networks
|28 Aug 1998
|31 Jul 2001
|3Com Corporation
|Integrated computer system and network performance monitoring
|4 Jun 1998
|21 Aug 2001
|Internet Tools, Inc.
|Dynamic signature inspection-based network intrusion detection
|30 Jun 1998
|28 Aug 2001
|Cisco Technology, Inc.
|System and method for real-time insertion of data into a multi-dimensional database for network intrusion detection and vulnerability assessment
|29 Dec 1998
|9 Oct 2001
|Cisco Technology, Inc.
|Method and system for adaptive network security using network vulnerability assessment
|19 Jul 1999
|16 Oct 2001
|Raytheon Company
|Information security analysis system
|9 Nov 1998
|20 Nov 2001
|Sri International
|Network surveillance
|25 Aug 2000
|5 Mar 2002
|Hyperon Incorporated
|Method and system for interfacing an intrusion detection system to a central alarm system
|29 Nov 1999
|26 Mar 2002
|Forescout Technologies Inc.
|Method for automatic intrusion detection and deflection in a network
|26 May 1998
|9 Apr 2002
|Alcatel Canada Inc.
|Tolerant CIR monitoring and policing
|5 Feb 1999
|30 Apr 2002
|Pluris, Inc.
|Data flow monitoring at a network node using periodically incremented counters for comparison to predetermined data flow thresholds
|22 Dec 2000
|14 May 2002
|Cisco Technology, Inc.
|Flow control technique for traffic in a high speed packet switching network
|5 May 2000
|14 May 2002
|Warp Solutions, Inc.
|System and method for load balancing
|27 Feb 1998
|27 Aug 2002
|Massachusetts Institute Of Technology
|Fault isolation for communication networks for isolating the source of faults comprising attacks, failures, and other network propagating errors
|15 Jan 1999
|26 Nov 2002
|Cisco Technology, Inc.
|Intrusion detection signature analysis using regular expressions and logical operators
|24 Jan 2000
|18 Mar 2003
|Cisco Technology, Inc.
|Method and apparatus for per traffic flow buffer management
|15 Jan 1999
|10 Jun 2003
|Cisco Technology, Inc.
|Parallel intrusion detection sensors with load balancing for high speed networks
|21 Jul 1999
|8 Jul 2003
|Nec Corporation
|IP network access for portable devices
|25 Aug 1999
|22 Jul 2003
|Watchguard Technologies, Inc.
|Network packet classification
|20 Dec 1999
|22 Jul 2003
|Cisco Technology, Inc.
|System and method for consolidating and sorting event data
|18 Mar 1999
|19 Aug 2003
|Cisco Technology, Inc.
|Network intrusion detection signature analysis using decision graphs
|6 May 1999
|13 Jan 2004
|Watchguard Technologies, Inc.
|Managing multiple network security devices from a manager device
|28 Feb 2001
|10 Feb 2004
|Western Digital Ventures, Inc.
|Computer system and method for accessing a protected partition of a disk drive that lies beyond a limited address range of a host computer's BIOS
|15 Apr 1999
|20 Apr 2004
|Purdue Research Foundation
|Network protection for denial of service attacks
|31 Aug 1999
|11 May 2004
|Intel Corporation
|Method and system for diagnosing network intrusion
|18 Mar 1998
|18 May 2004
|Cisco Technology, Inc.
|Method for blocking denial of service and address spoofing attacks on a private network
|22 Dec 1999
|10 Aug 2004
|Cisco Technology, Inc.
|Multilayered intrusion detection system and method
|26 Jun 2000
|7 Sep 2004
|Sun Microsystems, Inc.
|Method and apparatus for preventing a denial of service (DOS) attack by selectively throttling TCP/IP requests
|21 Sep 1998
|19 Oct 2004
|Microsoft Corporation
|Method and system of an application program interface for abstracting network traffic control components to application programs
|20 Feb 2001
|9 Nov 2004
|Netzentry, Inc.
|Method and apparatus for limiting network connection resources
|9 Apr 2001
|25 Jan 2005
|Inktomi Corporation
|Self-tuning dataflow I/O core
|15 May 2001
|13 Sep 2005
|The Regents Of The University Of Michigan
|Method and system for profiling network flows at a measurement point within a computer network
|22 Feb 2001
|21 Feb 2002
|Woo Thomas Y.
|Modular packet classification
|16 Aug 2001
|14 Mar 2002
|Poletto Massimiliano Antonio
|Device to protect victim sites during denial of service attacks
|16 Aug 2001
|14 Mar 2002
|Kohler Edward W.
|Thwarting source address spoofing-based denial of service attacks
|27 Jun 2001
|14 Mar 2002
|Mikko Puuskari
|Transporting QoS mapping information in a packet radio network
|15 May 2001
|14 Mar 2002
|The Regents Of The University Of Michigan
|Method and system for detecting, tracking and blocking denial of service attacks over a computer network
|16 Aug 2001
|21 Mar 2002
|Gil Thomer Michael
|Statistics collection for network traffic
|16 Aug 2001
|21 Mar 2002
|Kaashoek Marinus Frans
|Architecture to thwart denial of service attacks
|15 May 2001
|21 Mar 2002
|The Regents Of The University Of Michigan
|Method and system for protecting publicly accessible network computer services from undesirable network traffic in real-time
|16 Aug 2001
|28 Mar 2002
|Wei Xu
|Systems and methods for packet distribution
|4 Dec 2000
|1 Aug 2002
|International Business Machines Corporation
|Non-local aggregation of system management data
|5 Sep 2001
|1 Aug 2002
|Benjie Chen
|Thwarting connection-based denial of service attacks
|31 Aug 2001
|22 Aug 2002
|Boyd Eric L.
|Method and system for probing a network
|31 Aug 2001
|6 Mar 2003
|International Business Machines Corporation
|System and method for the detection of and reaction to computer hacker denial of service attacks
|7 May 2001
|7 Aug 2003
|Joseph Greenwald
|Systems and methods for diagnosing faults in computer networks
|Citing Patent
|Filing date
|Publication date
|16 Aug 2001
|9 May 2006
|Mazu Networks, Inc.
|Architecture to thwart denial of service attacks
|16 Aug 2001
|17 Oct 2006
|Mazu Networks, Inc.
|Monitoring network traffic denial of service attacks
|11 Apr 2002
|21 Nov 2006
|International Business Machines Corporation
|Detecting dissemination of malicious programs
|31 Jan 2002
|1 May 2007
|Mazu Networks, Inc.
|Architecture to thwart denial of service attacks
|16 Aug 2001
|2 Oct 2007
|Mazu Networks, Inc.
|Coordinated thwarting of denial of service attacks
|3 Nov 2003
|22 Apr 2008
|Mazu Networks, Inc.
|Event detection/anomaly correlation heuristics
|5 Sep 2001
|8 Jul 2008
|Mazu Networks, Inc.
|Thwarting connection-based denial of service attacks
|3 Feb 2004
|5 Aug 2008
|Lockheed Martin Corporation
|System for intrusion detection
|3 Nov 2003
|2 Dec 2008
|Mazu Networks, Inc.
|Detection of unauthorized access in a network
|11 Aug 2004
|9 Jun 2009
|Juniper Networks, Inc.
|Stateful firewall protection for control plane traffic within a network device
|5 May 2004
|16 Feb 2010
|Juniper Networks, Inc.
|Port scanning mitigation within a network through establishment of an a prior network connection
|9 Jun 2006
|6 Apr 2010
|Mcafee, Inc.
|Systems and methods for graphically displaying messaging traffic
|6 Mar 2003
|6 Apr 2010
|Mcafee, Inc.
|Systems and methods for secure communication delivery
|16 Aug 2001
|20 Apr 2010
|Riverbed Technology, Inc.
|Statistics collection for network traffic
|3 Nov 2003
|11 May 2010
|Riverbed Technology, Inc.
|Connection based detection of scanning attacks
|2 Mar 2006
|1 Jun 2010
|Alaxala Networks Corporation
|Detection method for abnormal traffic and packet relay apparatus
|16 Aug 2001
|22 Jun 2010
|Riverbed Technology, Inc.
|Thwarting source address spoofing-based denial of service attacks
|31 Jan 2002
|22 Jun 2010
|Riverbed Technology, Inc.
|Denial of service attacks characterization
|26 Oct 2004
|20 Jul 2010
|Riverbed Technology, Inc.
|Stackable aggregation for connection based anomaly detection
|3 Nov 2003
|10 Aug 2010
|Riverbed Technology, Inc.
|Feedback mechanism to minimize false assertions of a network intrusion
|24 Jan 2007
|17 Aug 2010
|Mcafee, Inc.
|Reputation based load balancing
|11 Jul 2006
|17 Aug 2010
|Mcafee, Inc.
|Systems and methods for anomaly detection in patterns of monitored communications
|3 Nov 2003
|2 Nov 2010
|Riverbed Technology, Inc.
|Connection table for intrusion detection
|3 Feb 2009
|11 Jan 2011
|Juniper Networks, Inc.
|Adaptive network router
|9 Jun 2006
|11 Jan 2011
|Mcafee, Inc.
|Methods and systems for exposing messaging reputation to an end user
|10 Jun 2003
|8 Feb 2011
|Panasonic Corporation
|Content-log analyzing system and data-communication controlling device
|15 May 2006
|8 Mar 2011
|Secure Computing Corporation
|Content-based policy compliance systems and methods
|28 Jun 2004
|19 Apr 2011
|Riverbed Technology, Inc.
|Flow logging for connection-based anomaly detection
|24 Jan 2007
|3 May 2011
|Mcafee, Inc.
|Aggregation of reputation data
|24 Jan 2007
|24 May 2011
|Mcafee, Inc.
|Correlation and analysis of entity attributes
|2 Nov 2000
|28 Jun 2011
|Arbor Networks, Inc.
|Detecting and preventing undesirable network traffic from being sourced out of a network domain
|1 Jun 2009
|13 Sep 2011
|Juniper Networks, Inc.
|Stateful firewall protection for control plane traffic within a network device
|29 May 2007
|18 Oct 2011
|Mcafee, Inc.
|Systems and methods for message threat management
|12 Jul 2006
|18 Oct 2011
|Mcafee, Inc.
|Systems and methods for message threat management
|8 Nov 2007
|25 Oct 2011
|Mcafee, Inc.
|Prioritizing network traffic
|12 Jul 2006
|29 Nov 2011
|Mcafee, Inc.
|Systems and methods for message threat management
|28 Aug 2008
|3 Jan 2012
|Juniper Networks, Inc.
|Adaptive network flow analysis
|1 Jul 2005
|6 Mar 2012
|Mcafee, Inc.
|Message profiling systems and methods
|25 Jan 2008
|17 Apr 2012
|Mcafee, Inc.
|Granular support vector machine with random granularity
|24 Jan 2007
|15 May 2012
|Mcafee, Inc.
|Reputation based connection throttling
|6 Nov 2007
|22 May 2012
|Mcafee, Inc.
|Adjusting filter or classification control settings
|3 Nov 2003
|29 May 2012
|Riverbed Technology, Inc.
|Connection based denial of service detection
|9 Oct 2008
|19 Jun 2012
|Stragent, Llc
|Hash-based systems and methods for detecting and preventing transmission of unwanted e-mail
|24 Jan 2007
|3 Jul 2012
|Mcafee, Inc.
|Multi-dimensional reputation scoring
|18 Apr 2010
|18 Sep 2012
|Stragent, Llc
|Hash-based systems and methods for detecting and preventing transmission of polymorphic network worms and viruses
|30 Jul 2008
|25 Dec 2012
|Juniper Networks, Inc.
|Streamlined packet forwarding using dynamic filters for routing and security in a shared forwarding plane
|29 Nov 2004
|15 Jan 2013
|Telecom Italia S.P.A.
|Method and system for managing denial of service situations
|13 Nov 2009
|5 Feb 2013
|Juniper Networks, Inc.
|Multi-router system having shared network interfaces
|3 Nov 2003
|2 Jul 2013
|Riverbed Technology, Inc.
|Aggregator for connection based anomaly detection
|3 Nov 2003
|6 Aug 2013
|Riverbed Technology, Inc.
|Connection based anomaly detection
|19 Jul 2011
|1 Oct 2013
|Mcafee, Inc.
|Systems and methods for classification of messaging entities
|24 Jan 2007
|15 Oct 2013
|Mcafee, Inc.
|Web reputation scoring
|16 Aug 2010
|5 Nov 2013
|Mcafee, Inc.
|Reputation based load balancing
|9 Jun 2006
|5 Nov 2013
|Mcafee, Inc.
|Systems and methods for identifying potentially malicious messages
|2 Apr 2009
|19 Nov 2013
|Mcafee, Inc.
|Prioritizing network traffic
|15 Dec 2011
|10 Dec 2013
|Mcafee, Inc.
|Prioritizing network traffic
|1 May 2012
|31 Dec 2013
|Mcafee, Inc.
|Adjusting filter or classification control settings
|16 May 2011
|31 Dec 2013
|Mcafee, Inc.
|Systems and methods for classification of messaging entities
|28 Nov 2011
|14 Jan 2014
|Mcafee, Inc.
|Systems and methods for message threat management
|25 Jan 2008
|21 Jan 2014
|Mcafee, Inc.
|Reputation based message processing
|4 Jun 2012
|24 Jun 2014
|Mcafee, Inc.
|Multi-dimensional reputation scoring
|24 Jan 2007
|24 Jun 2014
|Mcafee, Inc.
|Detecting image spam
|28 Oct 2009
|22 Jul 2014
|Juniper Networks, Inc.
|Protecting against distributed network flood attacks
|9 Feb 2012
|23 Sep 2014
|Cisco Technology, Inc.
|Techniques for network protection based on subscriber-aware application proxies
|29 Apr 2009
|16 Dec 2014
|Juniper Networks, Inc.
|Detecting malicious network software agents
|10 Apr 2012
|6 Jan 2015
|Mcafee Inc.
|System and method for determining and using local reputations of users and hosts to protect information in a network environment
|12 Sep 2008
|10 Feb 2015
|Juniper Networks, Inc.
|Hierarchical application of security services within a computer network
|29 Dec 2010
|24 Feb 2015
|Amazon Technologies, Inc.
|Techniques for protecting against denial of service attacks near the source
|4 Jun 2012
|14 Apr 2015
|Mcafee, Inc.
|Multi-dimensional reputation scoring
|25 Nov 2003
|11 Aug 2015
|F5 Networks, Inc.
|System and method for managing network communications
|16 Aug 2001
|21 Mar 2002
|Gil Thomer Michael
|Statistics collection for network traffic
|5 Sep 2001
|1 Aug 2002
|Benjie Chen
|Thwarting connection-based denial of service attacks
|3 Feb 2004
|12 Aug 2004
|General Electric Company
|System for intrusion detection
|3 Nov 2003
|7 Oct 2004
|Poletto Massimiliano Antonio
|Connection table for intrusion detection
|3 Nov 2003
|7 Oct 2004
|Benjamin Wilken
|Connection based denial of service detection
|3 Nov 2003
|14 Oct 2004
|Poletto Massimiliano Antonio
|Connection based anomaly detection
|3 Nov 2003
|28 Oct 2004
|Dudfield Anne Elizabeth
|Detection of unauthorized access in a network
|3 Nov 2003
|4 Nov 2004
|Dudfield Anne Elizabeth
|Connection based denial of service detection
|3 Nov 2003
|4 Nov 2004
|Roletto Massimiliano Antonio
|Aggregator for connection based anomaly detection
|3 Nov 2003
|23 Dec 2004
|Nazzal Robert N.
|Feedback mechanism to minimize false assertions of a network intrusion
|3 Nov 2003
|10 Feb 2005
|Poletto Massimiliano Antonio
|Detection of scanning attacks
|28 Jun 2004
|29 Dec 2005
|Poletto Massimiliano A
|Flow logging for connection-based anomaly detection
|26 Oct 2004
|27 Apr 2006
|Mazu Networks, Inc.
|Stackable aggregation for connection based anomaly detection
|14 Nov 2005
|20 Jul 2006
|Martin Curran-Gray
|Monitoring system, method of sampling datagrams, and apparatus therefor
|3 Nov 2003
|3 Aug 2006
|Daniel Weber
|Event detection/anomaly correlation heuristics
|9 Jun 2006
|30 Nov 2006
|Ciphertrust, Inc.
|Systems and Methods for Graphically Displaying Messaging Traffic
|9 Jun 2006
|1 Feb 2007
|Ciphertrust, Inc.
|Methods and Systems for Exposing Messaging Reputation to an End User
|31 May 2012
|Cisco Technology, Inc.
|Techniques for network protection based on subscriber-aware application proxies
|29 Dec 2010
|3 Oct 2013
|Andrew B. Dickinson
|Techniques for protecting against denial of service attacks near the source
|17 Jan 2006
|26 Jul 2006
|Agilent Technologies
|Monitoring system, method of sampling datagrams, and apparatus therefor
|26 Dec 2006
|9 Aug 2007
|Alcatel Lucent
|Method and apparatus for monitoring malicious traffic in communication networks
|6 Jun 2007
|14 Feb 2008
|Secure Computing Corp
|Systems and methods for identifying potentially malicious messages
|U.S. Classification
|709/224, 726/26
|International Classification
|Cooperative Classification
|European Classification
|16 Aug 2001
Owner name: MAZU NETWORKS, INC., MASSACHUSETTS
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:KAASHOEK, MARINUS FRANS;KOHLER JR., EDWARD W.;POLETTO, MASSIMILIANO ANTONIO;AND OTHERS;REEL/FRAME:012100/0033;SIGNING DATES FROM 20010727 TO 20010802
|30 Mar 2009
Owner name: MAZU NETWORKS, LLC,MASSACHUSETTS
Free format text: CHANGE OF NAME;ASSIGNOR:MAZU NETWORKS, INC.;REEL/FRAME:022460/0886
Effective date: 20090220
|15 Apr 2009
Owner name: RIVERBED TECHNOLOGY, INC.,CALIFORNIA
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:MAZU NETWORKS, LLC;REEL/FRAME:022542/0800
Effective date: 20090413
|5 Oct 2010
|Fee payment
Year of fee payment: 4
|20 Dec 2012
Owner name: MORGAN STANLEY & CO. LLC, MARYLAND
Free format text: SECURITY AGREEMENT;ASSIGNORS:RIVERBED TECHNOLOGY, INC.;OPNET TECHNOLOGIES, INC.;REEL/FRAME:029646/0060
Effective date: 20121218
|26 Dec 2013
Owner name: RIVERBED TECHNOLOGY, INC., CALIFORNIA
Free format text: RELEASE OF PATENT SECURITY INTEREST;ASSIGNOR:MORGAN STANLEY & CO. LLC, AS COLLATERAL AGENT;REEL/FRAME:032113/0425
Effective date: 20131220
|27 Dec 2013
Owner name: JPMORGAN CHASE BANK, N.A., AS ADMINISTRATIVE AGENT
Free format text: PATENT SECURITY AGREEMENT;ASSIGNOR:RIVERBED TECHNOLOGY, INC.;REEL/FRAME:032421/0162
Effective date: 20131220
|17 Mar 2015
|Fee payment
Year of fee payment: 8
|28 Apr 2015
Owner name: RIVERBED TECHNOLOGY, INC., CALIFORNIA
Free format text: RELEASE OF SECURITY INTEREST IN PATENTS;ASSIGNOR:BARCLAYS BANK PLC;REEL/FRAME:035521/0069
Effective date: 20150424
|1 May 2015
Owner name: MORGAN STANLEY SENIOR FUNDING, INC., AS COLLATERAL
Free format text: SECURITY INTEREST;ASSIGNOR:RIVERBED TECHNOLOGY, INC.;REEL/FRAME:035561/0363
Effective date: 20150424
|2 Jun 2015
Owner name: RIVERBED TECHNOLOGY, INC., CALIFORNIA
Free format text: CORRECTIVE ASSIGNMENT TO CORRECT THE CONVEYING PARTY NAME PREVIOUSLY RECORDED ON REEL 035521 FRAME 0069. ASSIGNOR(S) HEREBY CONFIRMS THE RELEASE OF SECURITY INTEREST IN PATENTS;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:035807/0680
Effective date: 20150424


text:
Burlington, ONCanada
May 3, 2013
Looking to meet new friends.
About us…
What's more important than eating great food with amazing friends?
This group is dedicated to bringing unforgettable experiences around great conversation and good food together in perfect harmony. As a Food and Events group, we explore Toronto's food landscape like in exclusive ways, bringing you a taste of something truly special.
Recommendations are always welcome! So come one come all, we'll do this together, one dish at a time! Bring yourself, bring a friend and let's get together for a fun time over Toronto's most craved for foods.
2,506 Indie Rockers
8,391 Members
6,914 Travel Enthusiasts
4,284 mindSHIFTers
2,856 Creatures
6,178 Social Crew
Meetup members, Log in
By clicking "Sign up" or "Sign up using Facebook", you confirm that you accept our Terms of Service & Privacy Policy


text:
Hannah Perez H Model
Christian ChristianPhotographer Male Hayward, California, US
Mayhem # 2890292
About Me
Published photographer. I currently shoot at a studio in Fremont, CA. I work with models of different levels and shoot different genres. If you are just getting started I can help and if you are experienced let's work together to add more to your portfolio or get published.
All test shoots are TFP. Compensation will always depend on the project.
Please do not hesitate to message me.
Hannah Perez H Model
jumzie Model
Inertia Creeps Model
CashayWall... Model
Shanice Watts Model
Yuni Model
Loading Content


text:
Meredith Powell Arrestedby Free Britney at . Comments
This video is no longer available. Please check below for related videos.
I'm sure those poor boys were ruined and now face a tragic future. What a lot of balony. I'd have crawled over hot coals to get next to my high school art teacher, Elaine Cohen.
- Tag:
- News
- Related Videos:
- News Videos
- Related Post:
- Uploaded by:
- Free Britney
- Uploaded:
- Duration:


text:
Improving patient health is the top priority for Reliant's 250 doctors and hundreds of other medical professionals. From medical decisions to business decisions, every choice they make is in the best interest of their patients. Reliant is currently welcoming new patients and accepts more than 20 health plans.
The Blackstone Valley Regional Economic Development Council is a private, non-profit organization that provides resources and information to businesses operating in or entering the region by aiding in expansion, relocation and networking.
The Council's mission is to deliver services and business resources that will enable companies to thrive within in the Blackstone Valley, and its closely aligned neighbors in south central Massachusetts, while improving the region's economy and lifestyle through the creation of quality jobs and enhanced public and private investment.
The Council aims accomplish this through its own work and the collective efforts of its eight affiliated partner organizations: the Affiliated Chambers of Commerce
In an encore episode, Steve D'Agostino interviews Joseph Deliso, chairman of the Economic Development Committee for the Blackstone Valley Chamber of Commerce.
Of Interest
You Shop.
Amazon Gives.
Amazon will donate 0.5% of the price of your eligible AmazonSmile purchases to WICN whenever you shop on AmazonSmile!
Click HERE to shop now.
Become a Member Now
Can't remember the last time you gave? Time to become a SUSTAINER!!
Your ongoing monthly donation will ensure that your membership never expires.
CLICK HERE to join now.


text:
Brookville, Pennsylvania Pet Friendly Hotels & Lodging
United States » Pennsylvania » Brookville
Looking for a hotel in Brookville, PA that you can bring your pet to? We made sure that each one of the hotels below are pet friendly, so you can enjoy your trip with your pet by your side! Once you have found a pet friendly hotel, you can book your stay instantly from our website or call 866-212-1803 to speak with a pet travel agent.
Browse Pet Friendly Hotels In Brookville, Pennsylvania
Rates from
235 Allegheny Blvd. - Brookville, PA (Map)
Quality Inn Brookville allows pets to accompany their people at their pet friendly accommodation. Up to 3 pets are welcome. The pet fee is $15 per stay.
Overview | Pet Policy | Map
Rates from
251 Allegheny Blvd - Brookville, PA (Map)
Super 8 Brookville, Pennsylvania welcomes pets at their pet friendly accommodation.
Overview | Pet Policy | Map


text:
0 Items In Cart
Subtotal: $0.00
Welcome Guest (Logout)
Regular Price:$47.00
Your Price:$47.00
Usually ships same day.
This item not eligible for additional promotional discounts.
Back On Track T-Shirt (cotton/poly)
The T-shirt is ideally suited for pain in your shoulder, neck and spine.
This garment is not the preferred choice for lower back pain however. Due to the concave curvature of the lumbar region, the fabric does not come into close enough contact with your lower back unless you are seated or lying down. Though many people choose to sleep in their T-shirt, and have thereby achieved extremely worthwhile results, the recommended product for lower back pain is certainly the back brace. Our mattress overlay has also proven very beneficial in relieving back pain, and is yet another effective alternative.
Colors: Black or White
Sizes: S, M, L, XL, XXL, & XXXL
There are currently no reviews for this product. This is your chance to be the first one to write a review!
Shipping Rates To United States, VA
Read More >>
Your Name:
Phone Number:
Your Message:
©2005-2015 HorseLoverZ.com. All Rights Reserved.
Shop by Brands |
Shop Pet |
Shop Farm and Feed |
Shop Lawn and Garden


text:
My Traveller Reviews
See what my clients have to say
Our trip was booked through Go2Africa and we dealt directly with Ashley Gerrand. The entire process from recommending the lodges to the final itinerary and documentation was handled in a very prompt, courteous and professional manner with all arrangements for the trip provided to us in good time. Having travelled to South Africa and Botswana over the last 15 years I would highly recommend Go2Africa, and Ashley, to organise your trip.Simon Warner - May 2015
Oh Ashley - you have no idea how wonderful our trip has been. We have constantly remarked we would not change a thing. How special to become one with nature. The people we met along the way became our instant friends - always making us feel like we were guests at their homes. We fell in love with Cape Town. We had the same guide as Dale and Diane. I could go on and on... We are enjoying the last day at Xaranna, and going home with hundreds of photos, ten extra pounds (my safari pants shrunk in the laundry?), and many memories.Marilyn Hyman - April 2015
We had a wonderful time on our vacation and in the days to come I hope to post a few things about our experience so others can have the benefit of the beautiful accommodations and wonderful people. Thanks so much for all your work to make our vacation a memory for a lifetime! Thanks so much and once again thanks for all your work to put together our wonderful vacation.Elizabeth Van Hall - April 2015
I think that all 4 of us had a splendid trip. You did a wonderful job, including our guide Shafiek in Cape Town. We'd stay in all of the same lodges again. Each was a unique experience. All of the staff were professional and friendly. And the time spent in each location was just about right. It was a great trip. Thanks for arranging it. We will be singing your praises to friends who are considering a safari for 70th birthdays next year.Steve & Elizabeth Holtze - April 2015
Ashley – We had an excellent trip! Just amazing! It is hard to get back to reality. I've been trying to get a couple of minutes to respond to you but work has been crazy this week. I will respond more fully over the weekend but we all really loved our trip to Africa. I really wanted to thank you for putting together such a great trip for us.Carine Rossouw - March 2015


text:
Coolest Dad Ever. Dad Sings Bohemian Rhapsody With Kids On the Way to School - Cute Videos
17-Year-Old Girl Auditions With Granddad's Favorite Song – WOW! - @ourprecioussavior
00:00:00 12524 views
Tim McGraw Sings 'My Little Girl' For College-Bound Daughter – TEARS! - @ourprecioussavior
00:00:00 20805 views
Embed ourprecioussavior 78736 views 2012-04-26T13:44:06 A father's love for his children runs deeper than any bond. Let's hear it for awesome dads that make every day routines fun and entertaining! This dad has the joy of taking his kids to school every morning and makes every day a fun memory by singing their
favorite song together. These precious moments where a family can laugh and sing together are certainly blessings from God. Click like if you have a cool dad!!!
favorite song together. These precious moments where a family can laugh and sing together are certainly blessings from God. Click like if you have a cool dad!!!
More Cute Videos
- 11-Year-Old Plays The Banjo Like You've NEVER Heard BeforeInspirational Videos
- Bullies Called Her 'World's Ugliest Woman' But She's Not Letting That Define Her!!...Inspirational Videos
- 'The Old Rugged Cross' – Beautiful Live Performance From AlabamaMusic Videos
- Judges Turn Gospel Girls Away. But Then They Came Back With THIS!Inspirational Videos
- 'Thy Word' – Live Performance From Amy GrantMusic Videos
- MercyMe - I Can Only ImagineMusic Videos
- Celtic Woman Sings Amazing Grace, and It's Simply Amazing!Music Videos
- Casting Crowns - Jesus, Friend of Sinners (Official Music Video)Music Videos
- This Flower Girl's Conversation With Her Dad Had Me Cracking Up!Cute Videos
- Young Girl Stuns The WORLD With Elvis Presley Classic 'Can't Help Falling In Love'Inspirational Videos
- 'Guilty' - Newsboys NEWEST Single From 'God's Not Dead 2'Music Videos
- This Country Crooner Had ALL 4 Judges Stunned. WOW!Inspirational Videos
No playlists found for this account.


text:
Senate Foreign Relations Committee member Sen. Marco Rubio, R-Fla., asks questions on Capitol Hill in Washington, Wednesday, July 9, 2014, during a hearing to examine Russia and developments in Ukraine. (AP Photo/Pablo Martinez Monsivais) ORG XMIT: DCPM115
It's time to play Democratic debate bingo
Make your debate viewing even more fun by following along using USA TODAY'S debate bingo cards to watch for some key phrases.
Trump, Bush campaign spar over volunteer's questions at N.H. event
A tough Donald Trump questioner has volunteered for the Jeb Bush campaign.
Donald Trump to tweet about Democratic debate
Republican front-runner plans to comment on Democratic debate via social media.
Jeb Bush unveils health care plan
Jeb Bush's health care plan emphasizes tax credits and state control.
'Warren wing' pushes economic populism issues for Democratic debate
Groups want debate focus on college costs, Social Security, Wall Street and Black Lives Matter.
For the Record: Podiums still available for Biden, Godot
Get excited — it's the day we've all been waiting for! Well, maybe not all of us, but at least Martin O'Malley. So, get excited — it's the day Martin O'Malley has (…)


text:
To contact "Picture Frame" suppliers, select Check Box and click on "Inquire Now".
Products: 1 • 2 • 3 • 4 • 5 • 6 • 7 • 8 • 9 • 10 | 11-20(Total 1,481 pages)
Related Products: Effects Shine | Effect Crack | Eco Wood Veneer | Eco Antiques | Eco Antique
Path: Top Products >> Gifts & Premiums >> Gifts & Novelties >> Picture Frame manufacturers – Update me on new products
To contact "Picture Frame" suppliers, select Check Box and click on "Inquire Now".
Products: 1 • 2 • 3 • 4 • 5 • 6 • 7 • 8 • 9 • 10 | 11-20(Total 1,481 pages)
Login or register for immediate download
Get in-depth market information & more on these verified suppliers:
See also companies of Paintings, Mosaic art, Embroidered arts, Tabletop fountains, Framed art
Above Picture Frame suppliers include wholesale Picture Frame, Picture Frame from China, India & Worldwide. Back to top of the page for chinese Picture Frame.
Please select your preferred language:
If you wish to change the language or use the original language later, please refer to the header or footer for more language options.
Contact the supplier of your choice. It's fast, precise and secure.
Contact all suppliers . It's fast, precise and secure.
Min. Order:
FOB Price:
Certs: More...
Learn more
Learn more
View all
Come and meet us at the Fair! Register
Come and see our product at the Fair!Register
This supplier has exhibited at one or more of our specialized sourcing Trade Shows
Click here to learn more about this supplier
Learn more
Please select an item(s) before clicking "Inquire Now" or "Add to Basket".