1. A method of detecting abnormal traffic at a node of a communications network equipped with an intrusion detectionprevention system (IDSIPS), the method comprising:
monitoring the status of a traffic flow input to said node to establish when said traffic flow carries suspicious data traffic, by looking only at a subset of data traffic in said traffic flow, wherein the step of monitoring comprises:
assigning a risk class from a plurality of risk classes to said traffic flow based on vulnerabilities recognized for a protocol used by said traffic flow, the plurality of risk classes including an \u201cat risk\u201d class or a \u201cnot at risk\u201d class,
measuring a rate of the subset of data traffic in said traffic flow, and
comparing the rate of said subset of data traffic to a first threshold if said traffic flow belongs to the \u201cat risk\u201d class,
comparing the rate of said subset of data traffic to a second threshold if said traffic flow belongs to the \u201cnot at risk\u201d class, wherein the first threshold is lower than the second threshold,
flagging said traffic flow as a suspicious traffic flow when the rate of the subset of data traffic is above a respective one of said first and second thresholds; and
triggering an early notification once the status of said traffic flow is flagged as a suspicious traffic flow.
2. The method of claim 1, further comprising:
further monitoring the status of said suspicious traffic flow by looking at a specified parameter of said suspicious traffic flow to determine when said suspicious traffic flow is an under attack traffic flow;
updating the status of said suspicious traffic flow from suspicious to under attack, and flagging said suspicious traffic flow as an under attack traffic flow; and
sending said under attack traffic flow to the IDSIPS to perform a mitigating action.
3. The method of claim 1, wherein said subset of data traffic includes a plurality of Internet Control Message Protocol (ICMP) packets in said traffic flow.
4. The method of claim 2 wherein said specified parameter is the rate of said suspicious traffic flow.
5. The method of claim 4, wherein said step of further monitoring comprises:
measuring the rate of said suspicious traffic flow; and
comparing the rate of said suspicious traffic flow with a further threshold for establishing if the status of said suspicious traffic flow is \u201cunder attack\u201d.
6. For a network node of a communication network equipped with an intrusion detectionprevention system (IDSIPS), a method of detecting abnormal traffic, the method comprising:
maintaining a service status table with a status for a traffic flow input to said network node;
classifying said traffic flow into a risk class based on vulnerabilities recognized for a protocol used by said traffic flow, the risk class being either an \u201cat risk\u201d class or a \u201cnot at risk\u201d class;
evaluating the status of said traffic flow as \u201csuspicious\u201d or \u201cnon-suspicious\u201d based on the risk class assigned to said traffic flow, wherein the step of evaluating comprises:
separating Internet Control Message Protocol (ICMP) packets from said traffic flow,
rate monitoring said ICMP packets,
comparing the rate of said ICMP packets to a first threshold if said traffic flow belongs to the \u201cat risk\u201d class,
comparing the rate of said ICMP packets to a second threshold if said traffic flow belongs to the \u201cnot at risk\u201d class, wherein the first threshold is lower than the second threshold, and
determining that said traffic flow is \u201csuspicious\u201d when the rate of said ICMP packets exceeds a respective one of said first and second thresholds;
updating said service status table whenever the status of said traffic flow changes from a \u201cnon-suspicious\u201d state to a \u201csuspicious\u201d state and flagging said traffic flow as a suspicious traffic flow;
further evaluating the status of said suspicious traffic flow to identify an \u201cunder attack\u201d status or a \u201cnot under attack\u201d status;
further updating the status of said suspicious traffic flow to an \u201cunder attack\u201d status, and flagging said suspicious traffic flow as an under attack traffic flow; and
routing said under attack traffic flow to said IDSIPS.
7. The method of claim 6, wherein the step of evaluating further comprises generating an early traffic status notifier whenever said ICMP rate exceeds a respective one of said first and second thresholds.
8. The method of claim 6, wherein the step of further evaluating comprises:
measuring the rate of said suspicious traffic flow;
comparing the rate of said suspicious traffic flow against a third threshold; and
generating an under attack traffic notifier whenever the rate of said suspicious traffic flow exceeds said third threshold.
9. The method of claim 8, wherein said third threshold is selected according to a transmission protocol used by said traffic flow.
10. The method of claim 6, wherein said step of routing comprises identifying a type of attack and, based on the type of attack, performing a mitigating action on said traffic flow.
11. The method of claim 10, wherein the mitigating action is one of:
discarding said under attack traffic flow altogether,
rate limiting the rate of said under attack traffic flow,
rate limiting packets in said under attack traffic flow matching an attack signature, and
rate limiting packets in said under attack traffic flow found via packet inspection.
12. A system for abnormal traffic detection with early notification (ATDEN) comprising:
maintaining a service status table with a service status for a traffic flow input to a communication node;
classifying said traffic flow into a risk class based on vulnerabilities recognized for a protocol used by said traffic flow, the risk class being either an \u201cat risk\u201d class or a \u201cnot at risk\u201d class;
a monitor that evaluates the status of said traffic flow and updating said service status table whenever the status of the traffic flow changes, wherein the monitor comprises:
separating Internet Control Message Protocol (ICMP) packets from said traffic flow,
an ICMP rate monitor that monitors said ICMP packets, wherein said ICMP rate monitor:
comparing the rate of said ICMP packets against a first threshold for said \u201cat risk\u201d class and against a second threshold for said \u201cnot at risk\u201d class, and
determines that said traffic flow is \u201csuspicious\u201d when the rate of said ICMP packets exceeds a respective one of said first and second thresholds; and
a traffic discriminator that routes said traffic flow to an output of said system, to said monitor if said traffic flow has a \u201csuspicious\u201d state and to an intrusion detectionprevention system (IDSIPS) to perform a mitigating action, if said traffic flow has an \u201cunder attack\u201d status.
13. The system of claim 12, wherein said monitor further comprises a traffic rate monitor that measures the rate of said traffic flow against a third threshold, and generating an \u201cunder attack\u201d notifier whenever the rate of said traffic flow exceeds said third threshold.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A composition comprising a biologically active substance (BAS) and a multiplicity of different citric acid esters (CAE) andor citric acid ethers, wherein the amount of the CAE or the ether in the composition is sufficient to dissolve, disperse, emulsify, or suspend the entire amount of the BAS in the composition, and wherein the concentration of CAEs and citric acid ethers in the composition is higher than the concentration of any other constituent in the composition.
2. The composition of claim 1 which is a pharmaceutical composition packaged for parenteral administration into the body of a patient, for oral administration to a patient, or for topical administration to a body surface of a patient.
3. The composition of claim 2 wherein the administration is intravascular, intrathecal, intramuscular, subcutaneous, or intracavitary.
4. The composition of claim 2 wherein the topical administration is to the skin, to a mucosal surface, to the surface of the eye, to the nasal passages, or to the external ear.
5. The composition of claim 1 which is a liquid.
6. The composition of claim 1 which is a semi-solid, a gel, a paste, or a solid.
7. The composition of claim 1 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 3% ww.
8. The composition of claim 7 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 10% ww.
9. The composition of claim 8 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 25% ww.
10. The composition of claim 9 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 50% ww.
11. The composition of claim 1 wherein the CAE is hydrophobic.
12. The composition of claim 1 wherein one or more of the CAEs is hydrophobic.
13. The composition of claim 1 wherein one or more of the CAEs is hydrophilic.
14. The composition of claim 1 wherein at least one of the CAEs is selected from the group consisting of triethyl citrate, acetyl triethyl citrate, tri-n-butyl citrate, acetyl tri-n-butyl citrate, acetyl tri-n-hexyl citrate, and butyryl tri-n-hexyl citrate.
15. The composition of claim 1 wherein each of the CAEs is selected from the group consisting of triethyl citrate, acetyl triethyl citrate, tri-n-butyl citrate, acetyl tri-n-butyl citrate, acetyl tri-n-hexyl citrate, and butyryl tri-n-hexyl citrate.
16. A composition comprising a biologically active substance (BAS) and a citric acid ester (CAE) or a citric acid ether, wherein the amount of the CAE or the ether in the composition is sufficient to dissolve, disperse, emulsify, or suspend the entire amount of the BAS in the composition, wherein the composition comprises a multiplicity of different BASs.
17. The composition of claim 16 wherein the composition comprises a multiplicity of different CAEs andor citric acid ethers.
18. A composition comprising a biologically active substance (BAS), a citric acid ester (CAE) or a citric acid ether, wherein the amount of the CAE or the ether in the composition is sufficient to dissolve, disperse, emulsify, or suspend the entire amount of the BAS, and a wax that is solid at room temperature.
19. A kit for treatment or prevention of a medical condition by administration of a pharmaceutical composition containing a biologically active substance (BAS) dissolved, dispersed, emulsified, or suspended in a citric acid ester andor citric acid ether vehicle, the kit comprising a packaging, a biologically active substance within a container within the packaging, a citric acid ester (CAE) andor a citric acid ether within a container within the packaging, and instructions within or on the packaging for applying the BAS and the CAE andor citric acid ether into the body or onto a body part of a patient, wherein the amounts of the BAS and CAE andor citric acid ether within the packaging are such that the CAE andor citric acid ether is sufficient to completely dissolve, disperse, emulsify, or suspend the BAS.
20. The kit of claim 19 wherein the BAS and the CAE andor citric acid ether are housed within a single container within the packaging.
21. The kit of claim 19 wherein the BAS and the CAE andor citric acid ether are housed in separate containers within the packaging.
22. The kit of claim 19 wherein the concentration of CAE and citric acid ether in the composition is greater than 3% ww.
23. The kit of claim 22 wherein the concentration of CAE and citric acid ether in the composition is greater than 10% ww.
24. The kit of claim 23 wherein the concentration of CAE and citric acid ether in the composition is greater than 25% ww.
25. The kit of claim 19 wherein the concentration of CAE and citric acid ether in the composition is higher than that of any other components of the composition.
26. The kit of claim 19 wherein the CAE is hydrophobic.
27. The kit of claim 19 wherein the CAE is hydrophilic.
28. The kit of claim 19 wherein the CAE or ether is a multiplicity of CAEs andor citric acid ethers.
29. The kit of claim 28 wherein at least one of the CAEs is hydrophobic.
30. The kit of claim 19 wherein the CAE is selected from the group consisting of triethyl citrate, acetyl triethyl citrate, tri-n-butyl citrate, acetyl tri-n-butyl citrate, acetyl tri-n-hexyl citrate, and butyryl tri-n-hexyl citrate.
31. The kit of claim 28 wherein at least one of the CAEs is selected from the group consisting of triethyl citrate, acetyl triethyl citrate, tri-n-butyl citrate, acetyl tri-n-butyl citrate, acetyl tri-n-hexyl citrate, and butyryl tri-n-hexyl citrate.
32. The kit of claim 31 wherein each of the CAEs is selected from the group consisting of triethyl citrate, acetyl triethyl citrate, tri-n-butyl citrate, acetyl tri-n-butyl citrate, acetyl tri-n-hexyl citrate, and butyryl tri-n-hexyl citrate.
33. The kit of claim 19 wherein the instructions are for internal administration into the body of a patient.
34. The kit of claim 33 wherein the administration is parenteral.
35. The kit of claim 19 wherein the instructions are for topical administration onto a body part of a patient.
36. The kit of claim 35 wherein the administration is to the skin, to a mucosal surface, to a serosal surface, to the surface of the eye, to the nose, to the ear, oral, intravaginal, or rectal.
37. The composition of claim 16 which is a pharmaceutical composition packaged for parenteral administration into the body of a patient, for oral administration to a patient, or for topical administration to a body surface of a patient.
38. The composition of claim 37 wherein the administration is intravascular, intrathecal, intramuscular, subcutaneous, or intracavitary.
39. The composition of claim 37 wherein the topical administration is to the skin, to a mucosal surface, to the surface of the eye, to the nasal passages, or to the external ear.
40. The composition of claim 16 which is a liquid.
41. The composition of claim 16 which is a semi-solid, a gel, a paste, or a solid.
42. The composition of claim 16 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 3% ww.
43. The composition of claim 42 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 10% ww.
44. The composition of claim 43 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 25% ww.
45. The composition of claim 44 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 50% ww.
46. The composition of claim 16 wherein the CAE is hydrophobic.
47. The composition of claim 16 wherein the composition comprises a multiplicity of different CAEs andor citric acid ethers.
48. The composition of claim 47 wherein one or more of the CAEs is hydrophobic.
49. The composition of claim 47 wherein one or more of the CAEs is hydrophilic.
50. The composition of claim 16 wherein at least one of the CAEs is selected from the group consisting of triethyl citrate, acetyl triethyl citrate, tri-n-butyl citrate, acetyl tri-n-butyl citrate, acetyl tri-n-hexyl citrate, and butyryl tri-n-hexyl citrate.
51. The composition of claim 16 wherein each of the CAEs is selected from the group consisting of triethyl citrate, acetyl triethyl citrate, tri-n-butyl citrate, acetyl tri-n-butyl citrate, acetyl tri-n-hexyl citrate, and butyryl tri-n-hexyl citrate.
52. The composition of claim 18 wherein the concentration of CAEs and citric acid ethers in the composition is higher than the concentration of any other constituent in the composition.
53. The composition of claim 18 which is a pharmaceutical composition packaged for parenteral administration into the body of a patient, for oral administration to a patient, or for topical administration to a body surface of a patient.
54. The composition of claim 53 wherein the administration by intravascular, intrathecal, intramuscular, subcutaneous, or intracavitary parenteral administration.
55. The composition of claim 53 wherein the topical administration is to the skin, to a mucosal surface, to the surface of the eye, to the nasal passages, or to the external ear.
56. The composition of claim 18 which is a liquid.
57. The composition of claim 18 which is a semi-solid, a gel, a paste, or a solid.
58. The composition of claim 18 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 3% ww.
59. The composition of claim 58 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 10% ww.
60. The composition of claim 59 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 25% ww.
61. The composition of claim 60 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 50% ww.
62. The composition of claim 18 wherein the CAE is hydrophobic.
63. The composition of claim 18 wherein one or more of the CAEs is hydrophobic.
64. The composition of claim 18 wherein one or more of the CAEs is hydrophilic.
65. The composition of claim 18 wherein at least one of the CAEs is selected from the group consisting of triethyl citrate, acetyl triethyl citrate, tri-n-butyl citrate, acetyl tri-n-butyl citrate, acetyl tri-n-hexyl citrate, and butyryl tri-n-hexyl citrate.
66. A composition comprising a biologically active substance (BAS) and a multiplicity of different citric acid esters (CAE) andor citric acid ethers, wherein the amount of the CAE or the ether in the composition is sufficient to dissolve, disperse, emulsify, or suspend the entire amount of the BAS in the composition wherein each of the CAEs is selected from the group consisting of triethyl citrate, acetyl triethyl citrate, tri-n-butyl citrate, acetyl tri-n-butyl citrate, acetyl tri-n-hexyl citrate, and butyryl tri-n-hexyl citrate.
67. The composition of claim 66, wherein the concentration of CAEs and citric acid ethers in the composition is higher than the concentration of any other constituent in the composition.
68. The composition of claim 66 which is a pharmaceutical composition packaged for parenteral administration into the body of a patient, for oral administration to a patient, or for topical administration to a body surface of a patient.
69. The composition of claim 68 wherein the administration is by intravascular, intrathecal, intramuscular, subcutaneous, or intracavitary parenteral administration.
70. The composition of claim 68 wherein the topical administration is to the skin, to a mucosal surface, to the surface of the eye, to the nasal passages, or to the external ear.
71. The composition of claim 66 which is a liquid.
72. The composition of claim 66 which is a semi-solid, a gel, a paste, or a solid.
73. The composition of claim 66 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 3% ww.
74. The composition of claim 73 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 10% ww.
75. The composition of claim 74 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 25% ww.
76. The composition of claim 75 wherein the concentration of the CAE and the citric acid ether in the composition is greater than 50% ww.
77. The composition of claim 66 wherein the CAE is hydrophobic.
78. The composition of claim 66 wherein one or more of the CAEs is hydrophobic.
79. The composition of claim 66 wherein one or more of the CAEs is hydrophilic.
80. The composition of claim 66 wherein at least one of the CAEs is selected from the group consisting of triethyl citrate, acetyl triethyl citrate, tri-n-butyl citrate, acetyl tri-n-butyl citrate, acetyl tri-n-hexyl citrate, and butyryl tri-n-hexyl citrate.