Vincent E. Parla

OPTIMAL ROUTING FOR SECURE ACCESS TO RESOURCES

AUTHENTICATION (AUTHN) AND AUTHORIZATION (AUTHZ) BINDING FOR SECURE NETWORK ACCESS

CONTROL FLOW INTEGRITY MONITORING FOR APPLICATIONS RUNNING ON PLATFORMS

PROVABLE REMOTE ATTESTATION OF COMPUTING ASSETS USING SBOMS

USING CLIENT-HELLO FOR INTELLIGENT ROUTING AND FIREWALLING IN MULTIPATH SECURE ACCESS SYSTEMS

CORRELATING ENDPOINT AND NETWORK VIEWS TO IDENTIFY EVASIVE APPLICATIONS

USING MASQUE TO TUNNEL ETHERNET FRAMES

DYNAMIC USER AUTHENTICATION AND TRAFFIC STEERING

ENFORCING CONDITIONAL ACCESS TO NETWORK SERVICES BASED ON AUTHORIZATION STATUSES ASSOCIATED WITH NETWORK FLOWS

NEXT GEN ZERO TRUST NETWORK ACCESS (ZTNA) AND VIRTUAL PRIVATE NETWORK (VPN) INCLUDING CLOUD SECURE ACCESS SERVICE EDGE (SASE)

PRIORITIZATION OF INDIVIDUAL CHANNELS WITHIN MULTIPLEXED STREAMS FOR ZERO TRUST NETWORK ACCESS (ZTNA)

AUTOTUNING OPTIMAL KEEPALIVE INTERVALS FOR SECURE SESSIONS

Policy Expressions using QUIC Connection Identifiers

CONTROL FLOW DIRECTED GRAPH FOR USE WITH PROGRAM DISASSEMBLER

PRIVACY PRESERVING SECURE ACCESS

USING MASQUE TO TUNNEL ETHERNET FRAMES

WORKLOAD MIGRATION FOR MULTIPATH ROUTED NETWORK SESSIONS

USING CLIENT-HELLO FOR INTELLIGENT ROUTING AND FIREWALLING IN MULTIPATH SECURE ACCESS SYSTEMS

RESILIENT DATA PLANE PROCESSING USING MULTIPLE NETWORK STREAMS

ENFORCING CONDITIONAL ACCESS TO NETWORK SERVICES BASED ON AUTHORIZATION STATUSES ASSOCIATED WITH NETWORK FLOWS

BINDING FLOWS TO UNIQUE ADDRESSES OR PORTS

TELEMETRY OVER QUIC

NEXT GEN ZERO TRUST NETWORK ACCESS (ZTNA) AND VIRTUAL PRIVATE NETWORK (VPN) INCLUDING CLOUD SECURE ACCESS SERVICE EDGE (SASE)

ENTERPRISE-MANAGED AUTHENTICATION AND AUTHORIZATION

AUTOMATIC ENCRYPTION FOR CLOUD-NATIVE WORKLOADS

QUIC AND ANYCAST PROXY RESILIENCY

USING NON-ROUTABLE ADDRESSING TO REDUCE ATTACK SURFACE IN SECURE ACCESS SYSTEMS

DEMAND-BASED SCALING OF ENTERPRISE WORKLOADS INTO CLOUD NETWORKS

CONTROL FLOW ANALYSIS OF A MICROSERVICE-BASED APPLICATION USING A COMMON CPU HARDWARE TELEMETRY FORMAT

IMPLEMENTING POLICY BASED ON UNIQUE ADDRESSES OR PORTS

Network Address Translation (NAT)-based Traffic Steering

END-TO-END TRANSACTIONAL MICROSEGMENTATION

PRIORITIZATION OF INDIVIDUAL CHANNELS WITHIN MULTIPLEXED STREAMS FOR ZERO TRUST NETWORK ACCESS (ZTNA)

Deploying just in time (JIT) deceptions at scale in networks

USING RELAYS AND AUTHORIZATION CHAINS TO REDUCE ATTACK SURFACE

Secure access app connectors

HTTP type connectivity detection using parallel probes for preferred protocol selection

CORRELATING FIREWALL AND ZERO TRUST DATA TO MONITOR REMOTE AND HYBRID WORKER SESSIONS

AUTOTUNING OPTIMAL KEEPALIVE INTERVALS FOR SECURE SESSIONS

DYNAMIC USER AUTHENTICATION AND TRAFFIC STEERING

CLOUD-NATIVE WORKLOAD OPTIMIZATION

QUIC and anycast proxy resiliency

PROXIMITY-AWARE MULTIFACTOR AUTHENTICATION FOR CONTINUOUS TRUSTED ACCESS

HTTP/3 and HTTP/2 connectivity detection using parallel probes for preferred protocol selection

AUTHENTICATION (AUTHN) AND AUTHORIZATION (AUTHZ) BINDING FOR SECURE NETWORK ACCESS

Automatic encryption for cloud-native workloads

Telemetry over quic

OPTIMAL ROUTING FOR SECURE ACCESS TO RESOURCES

Privacy preserving secure access

Threat analytics and dynamic compliance in security policies

CONTROL FLOW PREVENTION USING SOFTWARE BILL OF MATERIALS ANALYSIS

CONTROL FLOW INTEGRITY INSTRUCTION POINTER PATCHING

LEARNED CONTROL FLOW MONITORING AND ENFORCEMENT OF UNOBSERVED TRANSITIONS

CONTROL FLOW INTEGRITY MONITORING BASED INSIGHTS

CONTROL FLOW INTEGRITY MONITORING FOR APPLICATIONS RUNNING ON PLATFORMS

CONTROL FLOW INTEGRITY ENFORCEMENT FOR APPLICATIONS RUNNING ON PLATFORMS

INLINE CONTROL FLOW MONITOR WITH ENFORCEMENT

CONTROL FLOW DIRECTED GRAPH FOR USE WITH PROGRAM DISASSEMBLER

CONTROL FLOW INTEGRITY MONITORING FOR APPLICATIONS RUNNING ON PLATFORMS

Workload migration for multipath routed network sessions

Secure access App Connectors

OPTIMAL DATA PLANE SECURITY & CONNECTIVITY FOR SECURED CONNECTIONS

Routing application control and data-plane traffic in support of cloud-native applications

Demand-based scaling of enterprise workloads into cloud networks

Dynamic proxy placement for policy-based routing

Policy-based workload orchestration for enterprise networks

Implementing policy based on unique addresses or ports

Binding flows to unique addresses or ports

Network address translation (NAT)-based traffic steering

ADAPTIVE CLOUD-NATIVE SERVICE CHAINING

Policy-based workload orchestration for enterprise networks

Automatic encryption for cloud-native workloads

CORRELATING ENDPOINT AND NETWORK VIEWS TO IDENTIFY EVASIVE APPLICATIONS

Cloud-native workload optimization

Network flow attribution in service mesh environments

QUIC and anycast proxy resiliency

Policy expressions using QUIC connection identifiers

Using masque to tunnel ethernet frames

Next gen zero trust network access (ZTNA) and virtual private network (VPN) including cloud secure access service edge (SASE)

Secure captive portal remediation

Secure captive portal remediation

Correlating endpoint and network views to identify evasive applications

Monitoring real-time processor instruction stream execution

Correlating endpoint and network views to identify evasive applications

Dynamic split tunneling

Differential malware detection using network and endpoint sensors

Context sharing between endpoint device and network security device using in-band communications

Method for providing authoritative application-based routing and an improved application firewall

Redirect to inspection proxy using single-sign-on bootstrapping

Application services based on dynamic split tunneling

Application identification in records of network flows

Redirect to inspection proxy using single-sign-on bootstrapping

Method for providing authoritative application-based routing and an improved application firewall

Application services based on dynamic split tunneling

Multiple application containerization in a single container

Restricting network and device access based on presence detection

Restricting network access while connected to an untrusted network

Dynamic content-based routing

Methods and apparatus for event handling

Method for dynamically tunneling over an unreliable protocol or a reliable protocol, based on network conditions