1. A computer-implemented method for circumstantially blocking incoming network traffic containing code, the method comprising the steps of:
monitoring incoming network traffic of a protocol and being addressed to a target computer, the protocol comprising a transmission protocol, and the incoming network traffic being transmitted using the transmission protocol;
detecting incoming network traffic containing code; and
blocking incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic being traffic that should never contain code according to the protocol.
2. The method of claim 1 wherein the step of blocking incoming network traffic containing code from reaching the target computer further comprises:
blocking incoming network traffic containing code from reaching the target computer, responsive to a high alert state indicating a likelihood of a network based attack.
3. The method of claim 2 further comprising:
automatically detecting a condition indicating a likelihood of a network based attack; and
responsive to the detection, triggering a high alert state indicating a likelihood of a network based attack.
4. The method of claim 2 further comprising:
receiving a notification of a high alert state indicating a likelihood of a network based attack.
5. The method of claim 1 wherein the step of blocking incoming network traffic containing code from reaching the target computer further comprises:
blocking incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic originating from a source from which code should never be transmitted.
6. The method of claim 1 wherein the step of blocking incoming network traffic containing code from reaching the target computer further comprises:
blocking incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic being transmitted across a network path across which code should never be transmitted.
7. The method of claim 1 wherein the step of blocking incoming network traffic containing code from reaching the target computer responsive to the incoming network traffic being traffic that should never contain code according to the protocol further comprises:
blocking incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic being a type that should never contain code according to the protocol.
8. The method of claim 1 wherein the step of blocking incoming network traffic containing code from reaching the target computer further comprises:
blocking incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic not conforming to a statistical profile indicating under what circumstances code is permitted to be transmitted to the target computer.
9. The method of claim 8 wherein the step of blocking incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic not conforming to a statistical profile indicating under what circumstances code is permitted to be transmitted to the target computer further comprises:
blocking incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic having one or more characteristics from a list of characteristics consisting of:
being transmitted at a time at which code is not to be transmitted;
being transmitted via a port via which code is not to be transmitted;
being transmitted at a frequency at which code is not to be transmitted;
being transmitted in a protocol state that should never contain code;
being transmitted to an address to which code is not to be transmitted; and
being transmitted from an address from which code is not to be transmitted.
10. The method of claim 8 further comprising:
allowing incoming network traffic to reach the target computer during a specified period of time;
creating the statistical profile based upon circumstances under which the incoming network traffic during the period of time contains code.
11. The method of claim 1 wherein the step of monitoring incoming network traffic of a protocol and being addressed to the target computer further comprises:
scanning a stream.
12. The method of claim 1 wherein the step of monitoring incoming network traffic of a protocol and being addressed to the target computer further comprises:
analyzing packets.
13. The method of claim 1 wherein the steps are performed by an incoming network traffic manager which is incorporated into at least one of the following:
a firewall;
an intrusion detection system;
an intrusion detection system application proxy;
a router;
a switch;
a stand alone proxy;
a server;
a gateway;
a client.
14. A non-transitory computer readable storage medium containing an executable computer program product for circumstantially blocking incoming network traffic containing code, the computer program product comprising:
program code for monitoring incoming network traffic of a protocol and being addressed to a target computer, the protocol comprising a transmission protocol, and the incoming network traffic being transmitted using the transmission protocol;
program code for detecting incoming network traffic containing code; and
program code for blocking incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic being traffic that should never contain code according to the protocol.
15. The non-transitory computer readable storage medium of claim 14 further comprising:
program code for blocking incoming network traffic containing code from reaching the target computer, responsive to a high alert state indicating a likelihood of a network based attack.
16. The non-transitory computer readable storage medium of claim 14 further comprising:
program code for blocking incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic originating from a source from which code should never be transmitted.
17. The non-transitory computer readable storage medium of claim 14 further comprising:
program code for blocking incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic being transmitted across a network path across which code should never be transmitted.
18. The non-transitory computer readable storage medium of claim 14 further comprising:
program code for blocking incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic being a type that should never contain code.
19. The non-transitory computer readable storage medium of claim 14 further comprising:
program code for blocking incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic not conforming to a statistical profile indicating under what circumstances code is permitted to be transmitted to the target computer.
20. A computer system for circumstantially blocking incoming network traffic containing code, the computer system comprising:
a computer processor for executing computer program code; and
a computer-readable storage medium storing executable computer program code comprising:
a network traffic monitoring module configured to monitor incoming network traffic of a protocol and being addressed to a target computer, the protocol comprising a transmission protocol, and the incoming network traffic being transmitted using the transmission protocol;
a code detection module, configured to detect incoming network traffic containing code, the code detection module being communicatively coupled to the network traffic monitoring module; and
a code blocking module, configured to block incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic being traffic that should never contain code according to the protocol, the code blocking module being communicatively coupled to the code detection module.
21. The computer system of claim 20 wherein:
the network traffic monitoring module, the code detection module and the code blocking module are communicatively coupled to at least one of the following:
a firewall;
an intrusion detection system;
an intrusion detection system application proxy;
a router;
a switch;
a stand alone proxy;
a server;
a gateway;
a client.
22. The method of claim 1 wherein the step of blocking incoming network traffic containing code from reaching the target computer responsive to the incoming network traffic being traffic that should never contain code according to the protocol further comprises:
blocking incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic being in a state which should never contain code according to the protocol.
23. The computer program product of claim 14 further comprising:
program code for blocking incoming network traffic containing code from reaching the target computer, responsive to the incoming network traffic being in a state which should never contain code according to the protocol.
24. The method of claim 1, wherein the protocol comprises a content protocol, and content of the incoming network traffic should comply with the content protocol.
25. The computer readable medium of claim 14, wherein the protocol comprises a content protocol, and content of the incoming network traffic should comply with the content protocol.
26. The computer system of claim 20, wherein the protocol comprises a content protocol, and content of the incoming network traffic should comply with the content protocol.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1-36. (canceled)
37. A computer implemented method, comprising:
providing, from a web browser, a search query to a server;
receiving, at the web browser:
a mapping between an indicia of each of first documents responsive to the search query and an identification identifying each of the first documents, and
a representation for each of two or more rankings of the first documents, wherein for each representation:
a respective ranking for the representation is based on one of two or more distinct degrees of influence of an interest profile that is different from the distinct degrees of influence that other representations are based on; and
the representation includes the identifications associated with the first documents included in the respective ranking;
wherein the interest profile comprises data representing a plurality of topics of interest to a user;
receiving a selection from the user of one of the distinct degrees of influence of the interest profile; and
displaying the representation of the ranking associated with the selected one of the distinct degrees of influence of the interest profile using the mapping and the representation of the ranking associated with the selected one of the distinct degrees of influence.
38. The method of claim 37, wherein each of the first documents is associated with a respective information retrieval score and a respective boost values, where each boost value represents a degree of relevance of the document to a distinct topic in the plurality of topics.
39. The method of claim 38, wherein each of the first documents is associated with a score based on the information retrieval score for the respective first document, the respective boost value for the respective first document, and a distinct degree of influence of the interest profile.
40. The method of claim 39, wherein the first documents are ranked based on the score of each of the first documents.
41. The method of claim 37, wherein the web browser selectively displays each ranking without sending a request to the server for a new ranking.
42. The method of claim 37, wherein the degree of influence corresponds to a personalization input mapped to a manipulation of a control.
43. The method of claim 37, wherein the control is one of a slider, dial, or two or more radio buttons each corresponding to a respective distinct degrees of influence.
44. The method of claim 37, wherein each ranking of the first documents includes a personalization icon next to each first document, wherein the personalization icon is associated with an interest that is included in the interest profile of the user.
45. A computer readable storage medium encoded with a computer program, the computer program comprising instructions that, when executed, operate to cause a computer to perform operations comprising:
providing, from a web browser, a search query to a server;
receiving, at the web browser:
a mapping between an indicia of each of first documents responsive to the search query and an identification identifying each of the first documents, and
a representation for each of two or more rankings of the first documents, wherein for each representation:
a respective ranking for the representation is based on one of two or more distinct degrees of influence of an interest profile that is different from the distinct degrees of influence that other representations are based on; and
the representation includes the identifications associated with the first documents included in the respective ranking;
wherein the interest profile comprises data representing a plurality of topics of interest to a user;
receiving a selection from the user of one of the distinct degrees of influence of the interest profile; and
displaying the representation of the ranking associated with the selected one of the distinct degrees of influence of the interest profile using the mapping and the representation of the ranking associated with the selected one of the distinct degrees of influence.
46. The computer readable storage medium of claim 45, wherein each of the first documents is associated with a respective information retrieval score and a respective boost values, where each boost value represents a degree of relevance of the document to a distinct topic in the plurality of topics.
47. The computer readable storage medium of claim 46, wherein each of the first documents is associated with a score based on the information retrieval score for the respective first document, the respective boost value for the respective first document, and a distinct degree of influence of the interest profile.
48. The computer readable storage medium of claim 47, wherein the first documents are ranked based on the score of each of the first documents.
49. The computer readable storage medium of claim 45, wherein the web browser selectively displays each ranking without sending a request to the server for a new ranking.
50. The computer readable storage medium of claim 45, wherein the degree of influence corresponds to a personalization input mapped to a manipulation of a control.
51. The computer readable storage medium of claim 45, wherein the control is one of a slider, dial, or two or more radio buttons each corresponding to a respective distinct degrees of influence.
52. The computer readable storage medium of claim 45, wherein each ranking of the first documents includes a personalization icon next to each first document, wherein the personalization icon is associated with an interest that is included in the interest profile of the user.
53. A system comprising:
one or more computers; and
a web browser configured to:
providing, from the web browser, a search query to a server;
receiving, at the web browser:
a mapping between an indicia of each of first documents responsive to the search query and an identification identifying each of the first documents, and
a representation for each of two or more rankings of the first documents, wherein for each representation:
a respective ranking for the representation is based on one of two or more distinct degrees of influence of an interest profile that is different from the distinct degrees of influence that other representations are based on; and
the representation includes the identifications associated with the first documents included in the respective ranking;
wherein the interest profile comprises data representing a plurality of topics of interest to a user;
receiving a selection from the user of one of the distinct degrees of influence of the interest profile; and
displaying the representation of the ranking associated with the selected one of the distinct degrees of influence of the interest profile using the mapping and the representation of the ranking associated with the selected one of the distinct degrees of influence.
54. The system of claim 53, wherein each of the first documents is associated with a respective information retrieval score and a respective boost values, where each boost value represents a degree of relevance of the document to a distinct topic in the plurality of topics.
55. The system of claim 54, wherein each of the first documents is associated with a score based on the information retrieval score for the respective first document, the respective boost value for the respective first document, and a distinct degree of influence of the interest profile.
56. The system of claim 55, wherein the first documents are ranked based on the score of each of the first documents.