Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 1 of 49
SRI v. ISS and Symantec Exhibit 7 to the Proposed PreTrial Order SRI'S List of Exhibits L.R. 16.4(d)(6)
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
1
U.S. Patent No. 6,321,338 (Porras et al.)
1
PTX-
2
n/a
U.S. Patent No. 6,484,203 (Porras et al.)
2
PTX-
3
n/a
U.S. Patent No. 6,708,212 (Porras et al.)
3
PTX-
4
n/a
U.S. Patent No. 6,711,615 (Porras et al.)
4
PTX-
5
n/a
File History for U.S. Patent 6,321,338, Serial No. 09/188,793
106 Document complete.
Document inadequately identified.
Document adequately identified.
5
PTX-
6
n/a
File History for U.S. Patent 6,484,203, Serial No. 09/658,137 File History for U.S. Patent 6,708,212, Serial No. 10/429,607 File History for U.S. Patent 6,711,615, Serial No. 10/254,457
106 Document complete.
Document inadequately identified. Document inadequately identified. Document inadequately identified.
Document adequately identified. Document adequately identified. Document adequately identified.
6
PTX-
7
n/a
106 Document complete.
7
PTX-
8
n/a
106 Document complete.
8
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 2 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
9
NT
Produced during summary judgment briefing; publicly available Produced during summary judgment briefing; publicly available Produced during summary judgment briefing; publicly available; identification adequate
Not timely: produced after the close of discovery.
Produced during summary judgment briefing; publicly available Produced during summary judgment briefing; publicly available Produced during summary judgment briefing; publicly available
699
Contents of the website at http://www.faqs.org/rfcs/ PTX10 NT Not timely: produced after the close of discovery. 700
PTX-
11
Contents of the website at http://www.rfc-editor.org/overview.html NT; DI
Not timely: produced after the close of discovery.
703
PTX-
12
ISS-02892 02904
http://www.isoc.org/isoc.org/isoc/conferences/ndss/98cfp.shtml "EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances" by Phillip Porras and Peter G. Neumann An e-mail dated April 15, 2005 DM, 106 Document complete; description accurate 802, 901(a), 402 401; 402; 801; 803; 807; 901; PTO para. 24
705
PTX-
13
SYM_P_02806340280644
706
PTXPTXPTX-
14 15 16
SRI_287656 SRI_287659 SRI_E_0018138 SRIE_0052257 SRIE_0052258
SRI Invention Disclosure Form for Emerald
105, 802
105, 802 Email regarding the acceptance of the Live Traffic paper for publication A string of emails between Gary Jackson and Phillip 105, 802 Porras Re Live Traffic Analysis
401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24
105, 802 105, 802 105, 802
401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24
733 712 732
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 3 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
17
SYM_P_0507977SYM_P_0507996
HTML version of the publication by Phillip Porras 105, 802 and Alfonso Valdes, Live Traffic Analysis of TCP/IP Gateways. www.web.arcive.org/eb/19980124000949/www.csl.s ri.com/emerald/live-traffic.html
401; 402; 803; 807; PTO para. 24
105, 802
401; 402; 803; 807; PTO para. 24
713
PTX-
18
NT
Produced during summary judgment briefing; publicly available
Not timely: produced after the close of discovery.
Produced during summary judgment briefing; publicly available
702
PTX-
19
PTX-
20
SUN 0000501-SUN 0000506; SUN 0000600-SUN 0000608
http://web.archive.org/web/19970713122019/www.isoc.org/conferences/ndss98/ Excerpts from SunScreen EFS, Configuration and Management Guide An abstract of the publication by Phillip Porras and NT Alfonso Valdes, Live Traffic Analysis of TCP/IP Gateways, located at web.archive.org/web/19980124003236/http:/www.cs l.sri.com/ememerald/traffic-short.html Letter to Macchia re SRI_Network Security Patents Folder entitled Symantec re Letter to Schallop re SRI_Network Security Patents Letter to Schallup from Abramson re Symantec's infringement of SRI_patents Letter to Michael Schallup from Abramson re network-based intrusion Fedex packing slip to Schallup from SRI 105, 802 105, 802 105, 802 105, 802 105, 802 Produced during summary judgment briefing; publicly available
802
803; 807
710
901(a), 802; 402, 403. Not timely: produced after the close of discovery.
Produced during summary judgment briefing; publicly available; 401; 402; 803; 807; 901 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24
711
PTXPTXPTXPTXPTX-
21 22 23 24 25
SRI_17515 17516 SRI_18069 18071 SRI_18075 SRI_18076 -18078 SRI_18080
401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para.24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24
105, 802, 402, 403 105, 802 105, 802 105, 802 105, 802
622 620 619 617 618
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 4 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
26
SRI_2184144 2184147 SRI_9430 9431
Letter to Petty from Abramson re prior art to SRI_Patents
DI
Identification adequate
105, 802, 402, 403, 408, document inadequately identified 105, 802, 402, 403
401; 402; 803; 807; PTO para. 24; identification adequate 401; 402; 803; 807; PTO para. 24
627
PTX-
27
Letter to Richard `Macchia re SRI_Network Security 105, 802 Patents
401; 402; 803; 807; PTO para. 24
621
PTXPTX-
28 29
Agabian: 449 SYM_P_00943640094390 SYM_P_01633030163305 SYM_P_02818340281836 SYM_P_02856480285684 SYM_P_02860990286152 SYM_P_02866630286704 SYM_P_02885510288587 SYM_P_03649580364997 SYM_P_03689780369898 SYM_P_03703430370644 SYM_P_03726170372666 SYM_P_03755350375571 PNC 001-PNC 039
White Paper: Enterprise Security, Symantec, Security Information Management Symantec Security Management System, Integrating 402, 403 Product Data, Requirements, Draft 1.3 Symantec Correlation Capabilities Rev 3 106, 402, 403
402, 901(a), 802, 403, 105 401; 402 402, 901(a), 802, 403, 105
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24
389 380
PTXPTX-
30 31
401; 402
402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105
378 390
PTXPTXPTXPTXPTXPTXPTXPTXPTX-
32 33 34 35 36 37 38 39 40
Email thread btwn Schwarz and Smith re Security Information Manager 4.0 installed and performing well Symantec, Draft, SIMA 4.0, Minardi, F24H, 901(a) Walkthrough Global Technical Training, Symantec Security 901(a) Information Manager Overview, Costco Symantec Response for JPMorgan Chase Security Information and Even Management RFI Symantec Security Information Manager 4.0; Product Functional Requirements Draft Symantec Security Management Strategy Transformation FAQ Symantec Incident Manager, SSMS Solution General 402, 403 RFI Symantec Security Information, Manager 4.0, Support Team Training, Student Guide Unit 5, Symantec Incident Manager Managing incidents with Symantec Security Information Manager 4.0, Support Team Minardi Training Course Statement of work between PNC and Symantec 106, 403
901; PTO para. 24 901; PTO para. 24
402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105
392 385 393 384 382 379 388 381 387
401; 402
402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105
106 Document complete 401; 402
402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105
PTX-
41
901(a)
901; PTO para. 24
802, 901(a), 402, 403, 105
401; 402; 801; 803; 807; 901 468
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 5 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTXPTXPTXPTX-
42 43 44 45
PNC 040-PNC 071 PNC 72-102 Bagley: 200 Bagley: 201
Symantec Sales Quote
901(a)
901; PTO para. 24 901; PTO para. 24
802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105.
401; 402; 801; 803; 807; 901 469 401; 402; 801; 803; 807; 901 470 401; 402; 801; 803; 807; 901 184 401; 402; 801; 803; 807; 901; Description accurate 185
White Paper provided by Symantec explaining real 901(a) time security monitoring Data Sheet: Security Technology Symantec Network Security 7100 Series Data Sheet: Symantec Gateway Security 5600 Series
PTXPTXPTXPTXPTXPTXPTXPTX-
46 47 48 49 50 51 52 53
SYM_P_00305440030552 SYM_P_00319010031933 SYM_P_00944470094457 SYM_P_00967180096749 SYM_P_00976940097711 SYM_P_0195825-47
How ManHunt Detects Threats How ManHunt Detects Threats
802, 901(a) 901(a)
801; 803; 807; 901; PTO para. 24 901; PTO para. 24
402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105
Global Marketing Communications Plan FINAL Symantec ManHunt 3.0 Symantec ManHunt Product Launch Kit, Enterprise 402, 403 Edition Symantec ManHunt Product Launch Guide, Enterprise Edition Symantec Proposal to XXXX for Intrusion Protection
401; 402
402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105
PTXPTXPTXPTXPTXPTX-
54 55 56 57 58 59
SNS 7100 Deployment/ Evaluation Strategies SYM_P_02004300200442 SYM_P_0237443-458 White Paper: Enterprise Solutions Effective Intrusion Prevention: Protecting Networks Against the Threats of Today and Tomorrow SYM_P_03055325Technical FAQ; Symantec Network Security 7100 030532 Series Appliances FAQs Email thread from Bagley to Wheeler re SNS SYM_P01049320104936_ Correlation technote DRAFT1 Symantec Network Security User Guide SYM_P_00150290015162 ManHunt Data Processing- Jeremy Bennett SYM_P_00192040019214 Symantec SNS 4.0 Sensor Architecture SYM_P_00367390036749 Paper: Symantec ManHunt detection 901(a) SYM_P_00368890036893
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24
175 161 180 176 177 168 166 183
402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 901; PTO para. 24 402, 901(a), 802, 403, 105
163 164 43 35 30 32
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 6 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTXPTXPTX-
60 61 62
SYM_P_00371070037119 SYM_P_00373500037365 SYM_P_00374800037501 SYM_P_00376970037727 SYM_P_00485720048593 SYM_P_00487660048815 SYM_P_00494280049461 SYM_P_00495310049559 SYM_P_00497580049781 SYM_P_00506830050707 SYM_P_01628710162882 SYM_P_02911510291586 SYM_P_03304180330443 SYM_P_05314540531503 SYM_P_025584025598 SYM_P_550390550465 ISS_0055186200551863 SRIE_0005021 SRIE_0082984
Recourse Technologies ManHunt; Reducing the Risk 802, 402, 403 of Compromise Symantec Network Detection Components Symanted Blackbird 4.0 (Ursa Major Detection Engine) Product Functional Requirement" Revision 0.97 Symantec "ManHunt's Layered Detection" Jeremy Bennett Symantec Corporation ManHunt Intrusion Detection System Symantec ManHunt System Training Robert Geiger Symantec "Ballymeade/Captiva PFR" Symantec Usra Major (ManHunt 4.0) Product Functional Requirements Revision 1.3 Recourse Technologies ManHunt Training 802, 402, 403, 901(a) Introduction Module, Version 2.11 Symantec Corp ManHunt Intrusion Detection System Ursa Major (ManHunt 4.0) High Level Design Document by Mark Janazura "Manhunt Setup, Application and Maintenance" Symantec "NGS Quarterly Business Review SNS and SGS Product Lines" Symantec ManHunt 3.0 Technical Evaluation and 802, 402, 901(a) 403 NSS Group Report Aberdeen Group Financial White paper 901(a), 802, 402, 403 Symantec 2003 annual report Anomaly Detection Demo email Email thread Valdes to Porras re EMERALD Email Moran to Porras 105, 402, 403, 802 802, 901(a), 402, 403 802, 901(a), 402, 403
401; 402; 801; 803; 807; PTO para. 24 106 Document complete 106 Document complete
402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901 401; 402; 803; 807; 901 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402 401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24
20 24 28
PTXPTXPTXPTXPTXPTXPTXPTXPTXPTXPTXPTXPTXPTXPTXPTX-
63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78
402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 401; 402; 801; 803; 807; 901; PTO para. 24 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 401; 402; 803; 807; 901 401; 402; 803; 807; 901 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 401; 402; 801; 803; 807; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24 402 402, 901(a), 802, 403 402, 901(a), 802, 403
29 22 27 40 26 31 25 36 44 41 34 241 242 297 55 57
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 7 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
79
SYM_P_00463220046364 SYM_P_00490690049071 SYM_P_00506520050659 SYM_P_00516420051647
PTXPTXPTX-
80 81 82
Symantec Network Security 7100 Series, Project Galileo, Commit to Solution Presentation, EMEA 415-04 ManHunt Enterprise, Architecture & Requirements 802, 402, 403, 901(a) [Draft] White Paper: Why is Symantec's Approach to IPS best? Email thread, Kumar to Bennett, Smith, et al re ManHunt
402, 901(a), 802, 403, 105
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24
59
401; 402; 801; 803; 807; 901; PTO para. 24
402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105
52 67 61
PTXPTXPTXPTXPTXPTX-
83 84 85 86 87 88
SYM_P_00918870091889 SYM_P_01312140131222 SYM_P_033549703355537 SYM_P_04087520408780 Geyer: 272 SYM_P_05425540542563 Griswold: 343 (ISS_02125736-742)
402, 403 Suzuki email to [email protected] Third Party Event Reception for ManHunt, Mike 802, 402, 403, 901(a) Lyle, Bob Geiger Symantec ManHunt v2.11, Technical Evaluation, An 802, 901(a), 403, 402 NSS Group Report Symantec, Brighton, Acquisition of High Speed 901(a) Intrusion Detection Notes from site visit to Symantec MSS site Email string from Andy Sell to Angela Halliwell and Tony McDonald re favor Source code for attack for compromised host rule 105, 402, 403, 802
401; 402 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901 901; PTO para. 24
402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 901(a), 802; 402, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24
63 66 70 76 249 248
PTX-
89
401; 402; 801; 803; 807; PTO para. 24
Description mischaracterizes Identification adequate. document. Description accurate.
317
PTX-
90
Griswold: 344 (ISS_02125743-860)
Compilation of source code documents
105, 402, 403, 802
401; 402; 801; 803; 807; PTO para. 24
Description mischaracterizes Identification adequate. document. Description accurate.
318
PTX-
91
ISS_0006028700060300
Fusion Update August 9th, 2002
105, 402, 403, 802
401; 402; 801; 803; 807; PTO Para. 24
312
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 8 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
92
ISS_0052559600525600
Project Status Report
105, 402, 403, 802
401; 402; 801; 803; 807; PTO Para. 24
402
401; 402
310
PTX-
93
ISS_00535783-821
Security Fusion Module 2.0 Tech Support Chalk Talk 105, 402, 403, 802
401; 402; 801; 803; 807; PTO para. 24
313
PTXPTXPTX-
94 95 96
ISS_0054161000541631 ISS_0054183400541847 ISS_00687640068778
Development Stories RealSecure Fusion Sensor 2.0 Market Requirements Document RealSecure Fusion Sensor 2.0 Attack Definitions
105, 402, 403, 802 105, 402, 403, 802 105, 402, 403, 802
401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24
402 802, 402 402. .Illegible, at least part.
401; 402
311
401; 402; 801; 803; 807; 309 PTO para.24 401; 402; Description 307 accurate; sufficiently legible
PTX-
97
ISS2_01445521001445522
Email string btwn Griswold, Ward, and Craig re quick questions
105, 402, 403, 802
401; 402; 801; 803; 807; PTO para. 24
402; 802.
401; 402; 801; 803; 807; PTO para. 24; description accurate 401; 402; 801; 803; 807
315
PTXPTX-
98 99
Hall: 500 Hall: 512
Proventia Enterprise Security Platform (ESP) RealSecure® Network Gigabit datasheet from iss.net
802, 403, 402, 901(a), 105 401; 402; 801; 803; 807; 901; PTO para. 24
Cumulative, 802.
428 440
Description mischaracterizes Description accurate document. 106 Document complete.
PTX-
100
Hall: 513
ISS SiteProtector 2.0 Comparison Guide for RealSecure Workgroup Manager (http://documents.iss.net/literature/SiteProtector/WG MTORSSPComparison.pdf) Symantec; The Complete ManHunt Symantec ManHunt Release History 402, 403 901(a) 401; 402 901; PTO Para. 24
441
PTXPTX-
101 102
SYM_P_00495960049645 SYM_P_00505390050549
402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24
198 200
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 9 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTXPTXPTXPTX-
103 104 105 106
SYM_P_01629880163028 SYM_P_01630860163100 Innes: 434 Innes: 435
Symantec; ManHunt Tech Exchange Symantec; ManHunt Architecture Product Lifecycle Announcement Proventia Network Anomaly Detection System data sheet
402, 403 402, 403 105, 402, 403, 802 105, 402, 403, 802
401; 402 401; 402 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24
402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24
196 197 366 367
Description mischaracterizes Description accurate document. Description accurate
PTX-
107
Innes: 436
Proventia Network Anomaly Detection System User 105, 402, 403, 802 Guide Version 3.5 Q & A re Manhunt's intrusion detection technology Symantec; Ursa Major; Requirements Checkpoint Presentation Symantec; ManHunt 3.0/ Orion; Product Functional Requirements Symantec; Orion Symantec ManHunt 3.0, Requirement Checkpoint/ Commit to Solution Symantec; Symantec ManHunt 3.0 Ballymeade Project Commit to Solution Checkpoint Symantec Gateway Security 5400 Series, Version 1.0a Product Frequently Asked Questions Symantec Gateway Security 1600 Series, Mini-Me Project Everything you wanted to know about IDS/IPS but were afraid to ask Asbestos (Blackbird) Product Functional Requirements Reviewer's Guide Symantec Gateway Security Appliance 5400 Series
368
PTXPTXPTXPTXPTXPTXPTXPTXPTXPTXPTX-
108 109 110 111 112 113 114 115 116 117 118
SYM_P_0176251SYM_P_0176253 SYM_P_0047130047173 SYM_P_00601210060152 SYM_P_00603360060396 SYM_P_01175280117548 SYM_P_00215990021663 SYM_P_00662900066304 SYM_P_01108380110841 SYM_P_01476110147648 SYM_P_01577500157765 SYM_P_01906150190649
901(a), 106, 402, 403, 802 401; 402; 801; 803; 807; 901; PTO para. 24
802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24
676 138 132 133 136 148 152 160 159 150 153
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 10 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
119
SYM_P_02109100210912
IDS Guidance for Sugarbush
802, 901(a), 402, 403, 105
401; 402; 801; 803; 807; 901; PTO para. 24
156
PTX-
120
SYM_P_03836130383763
Symantec Enterprise Firewall, Symantec Enterprise Firewall with BPN, Symantec Gateway Security Symantec Client VPN Functional Specification, Code Name: Ballymeade/Captive
802, 901(a), 402, 403, 105
401; 402; 801; 803; 807; 901; PTO para. 24
149
PTXPTXPTXPTX-
121 122 123 124
Sugarbush Product Functional Requirements SYM_P_044284700442954 SRI_163635 163674 Emerald Net IDS Appliance User's Guide Ver. 2.0 105, 802 and related EMERALD Network Appliance 105, 802 SRI_88192 88203 Presentation re Emerald Business Strategy Framework SYM_P_0032023Symantec, ManHunt Appliance 1.0, Galileo, High 0032031 Level Design Document (HLDD) SYM_P_00320540032058 SYM_P_00349640034981 SRIE_2225 ISS48496-48511 McEwin: 122 Symantec, ManHunt Appliance 1.0, Galileo, In-Line, Monitoring High Level Specifications Galileo, Performance Test Plan
802, 901(a), 402, 403, 105 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 105, 802 105, 802 901(a),802, 402, 403, 105
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402
155 516 522 78
PTXPTX-
125 126
901(a),802, 402, 403, 105 901(a),802, 402, 403, 105
79 85
PTXPTXPTX-
127 128 129
Email from Winarsky to Mark et al re Nokia ISS Product Line Architecture: A Glossary Proventia A Series
105, 802 105, 402, 403, 802 105, 402, 403, 802
401; 402; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24
105, 802 402
610 123 125
PTX-
130
McEwin: 123
Proventia G line products Data Sheet
105, 402, 403, 802
126
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 11 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
131
GAP 00019-GAP 00048 GAP 00108-GAP 00179 SRI_44834 SRI_75871 75873 ISS_0212572002125735 ISS_17243-18096 ISS_201256902125728 SYM_P_0517609SYM_P_0517610 ARB00660-00692
Symantec Master Services Agreement
402, 901(a), 802, 403, 105
401; 402; 801; 803; 807; 901 265
PTX-
132
Symantec Enterprise Security Solutions Proposal for GAP Inc. Email from Neumann to Lunt re Intrusion detection, 105, 802 survivability Email from Neumann re software Engineer 105, 802 105, 402, 403, 802 Module from the Network Sensor RS_PAM_NetworkSensor/Dev/RealSecure/Sensordll/issPAMSensorLib/issPamSensor.h RealSecure Signatures Reference Guide, Version 6.5 105, 402, 403, 802 Source Code 105, 402, 403, 802 RS_PAM_NetworkSensors/dev/RealSecure/Sensor_d ll/issPamSensorLib/issPamSensor.cpp Email, Horvath to Little and Castles, 09/20/02 402, 403 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402
402, 901(a), 802, 403, 105
401; 402; 801; 803; 807; 901 269
PTXPTXPTXPTXPTXPTX-
133 134 135 136 137 138
105, 802 105, 802
401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 Description accurate
602 607 375 377
Description mischaracterizes Description accurate document. 402, 901(a), 802, 403, 105 401; 402; 801; 803; 807; 901; PTO para. 24 401;402; 801; 803; 807
376 276
PTX-
139
Amendment No. 1 to License and Distribution 105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901 402, 802, 403 Agreement btwn Arbor Networks, Inc. and ISS- GA Proventia Network Anomaly Detection System Quick 105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901 802 Start Guide Version 3.5 Arbor Networks Press Release: News & Events from 105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901 402, 802, 403; 901(a) their website 105, 402, 403, 802, 901(a) 401; 402; 803; 807; 901 802, 901(a), 402, 403 Arbor Networks' Peakflow solutions ensure the security and operational integrity of the world's most critical networks; from website~Corporate Profile page U.S. Patent Application Pub. No. 2005/0005017 105, 402, 403, 802, 901(a) 401; 402; 803; 807; 901; 902 402, 403, 802 401; 402; 803; 807; PTO para. 24 105, 802
657
PTXPTXPTX-
140 141 142
ARB00693-00740 Morville: 537 Morville: 538
801; 803; 807
662
401; 402; 801; 803; 807; 901 658 401; 402; 803; 807; 901 659
PTXPTX-
143 144
Morville: 548
401; 402; 803; 807 401; 402; 803; 807; PTO para. 24
667 596
SRI_105503 - 105524 Summary of Advanced Network Security and 105, 802 Information Warfare Research in CSL/SRI_by Porras
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 12 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
145
SYM_P_05355485 EMERALD: Event Monitoring Enabling Responses 535497 to Anomalus Live Disturbances by Porras And Neumann
DI
Identification adequate
Document inadequately identified.
Identification adequate.
540
PTXPTX-
146 147
Pruss: 231 ISS04439-0440
ISS Advanced SiteProtector RealSecure Server Sensor marketing brochure
105, 402, 403, 802 105, 402, 403, 802
401; 402; 801; 803; 807 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24
Description mischaracterizes Description accurate document. 402,cumulative. Description 401; 402; description mischaracterizes document. accurate; identification Document inadequately adequate identified.
213 115
PTX-
148
ISS_05991-059989
RealSecure SiteProtector Security Fusion Module 2.0 105; 402; 403; 802; Frequently Asked Questions multiple documents
372
PTXPTXPTXPTXPTX-
149 150 151 152 153
ISS16455-16466 ISS2_00105902-04
RealSecure Server Sensor FAQ The Protocol Analysis Module
ISS2_00653565+C178 Meet with Dell email HEALTHSOUTH 028 Security Network design diagram SYM_P_05489940549907 Network Surveillance by Porras et al
401; 402; 801; 803; 807; PTO para. 24 105, 402, 403, 802 401; 402; 801; 803; 807; PTO para. 24 105, 402, 403, 802 401; 402; 801; 803; 807; PTO para. 24 105, 402, 403, 802, 901(a) 401; 402; 803; 807; 901 105, 802 401; 402; 803; 807; PTO para. 24
105, 402, 403, 802
118 106 402, 802 802, 901(a), 402, 403 105, 802 Document complete 401; 402; 801; 803; 807; PTO para. 24 401; 402; 803; 807; 901 401; 402; 803; 807; PTO para. 24 117 109 443 656
PTX-
154
M00001-00050
Managed Security Services Agreement
901(a)
901
802, 901(a), 402, 403, 105
401; 402; 801; 803; 807; 901 462
PTX-
155
M00070-00083
Symantec Invoice
901(a)
901
802, 901(a), 402, 403, 105
401; 402; 801; 803; 807; 901 463
PTX-
156
M00225-00260
Symantec MSS Implementation: Implementation Method of Procedure
901(a)
901
802, 901(a), 402, 403, 105
401; 402; 801; 803; 807; 901 467
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 13 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
157
ISS05920-21
SiteProtector Security Fusion Module datasheet
105, 402, 403, 802
401; 402; 801; 803; 807; PTO para. 24
Description mischaracterizes Description accurate. document (more pages included in exhibit than listed).
92
PTXPTXPTXPTXPTXPTX-
158 159 160 161 162 163
ISS2_01396595-615 ISS68417-68431 ISS68461-68476 ISS68487-68505 ISS68535-68551 ISS68738-69746
RealSecure SiteProtector Security Fusion Module presentation; Holly Turner Third-Party Module 2003 Project Plans
105, 402, 403, 802 105, 402, 403, 802
105, 402, 403, 802 RealSecure SiteProtector Security Fusion Module Presentation- Hollly Turner 105, 402, 403, 802 RealSecure SiteProtector Security Fusion Module presentation; Holly Turner ISS: "Fusion Less is More" Holly Turner and Carolyn 105, 402, 403, 802 Reuss Security Fusion Module Upcoming Releases and 105, 402, 403, 802 Competitive Info Presentation- Holly Turner Symantec IDS & IPS capability in SNS 7100 Series vs. SGS 5400 Series Symantec Gateway Security 5400 Technical Briefing Tasha Van Es Introduction to Symantec Incident Manager 402, 403 Symantec Security Information Manager 9500 Series "Computer Security research and Development at SRI_International" article 105, 802
401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24
93 402, 802 401; 402; 801; 803; 807; PTO para.24 103 100 94 401; 402; 801; 803; 807; PTO para. 24 802, 402, 403. Description 401; 402; 801; 803; 807; mischaracterizes document. PTO para. 24; Description accurate 402, 901(a), 802, 403, 105 401; 402; 801; 803; 807; 901; PTO para. 24 402, 901(a), 802, 403, 105 401; 402; 801; 803; 807; 901; PTO para. 24 402, 901(a), 802, 403, 105 401; 402; 801; 803; 807; 901; PTO para. 24 402, 901(a), 802, 403, 105 401; 402; 801; 803; 807; 901; PTO para. 24 105, 802 401; 402; 803; 807; PTO para. 24 802, 402, 403 96 99
PTXPTXPTXPTXPTX-
164 165 166 167 168
SYM_P_00479890047991 SYM_P_00200600020142 Van Es: 248 SYM_P_0283903SYM_P_0283916
47 229 230 233 648
401; 402 401; 402 401; 402; 803; 807; PTO para. 24
PTX-
169
SRI_051898- 51903
"Knowledge-Based Intrusion Detection" article
105, 802
401; 402; 803; 807; PTO para. 24
105, 802
401; 402; 803; 807; PTO para. 24
646
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 14 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
170
SRI_142069SRI_142154
"Detecting Unusual Program Behavior Using the Statistical Component of the Next-generation Intrusion Detection expert System (NIDES)" "IDES: An Intelligent System for Detecting Intruders" article
105, 802
401; 402; 803; 807; PTO para. 24
105, 802
401; 402; 803; 807; PTO para. 24
650
PTX-
171
TL 0010-0021
105, 802
401; 402; 803; 807
105, 802
401; 402; 803; 807
647
PTX-
172
SRI_047974-47984
SRI_IDES Statistical Anomaly Detector by Javitz, Valdes and Tamaru
105, 802
401; 402; 803; 807; PTO para. 24
105, 802
401; 402; 803; 807; PTO para. 24
541
PTX-
173
SRI_13361-13404
Darpa Order D985-Award/Contract
105, 802
401; 402; 803; 807; PTO para. 24
105, 802
401; 402; 803; 807; PTO para. 24
545
PTXPTX-
174 175
SRI_48679-48694 SRIE_18565
Emerald- Statistical-Analyzer TCP Monitor Documentation Valdes email to Porras re Stats work
105, 802 105, 802
401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24
105, 802 105, 802
401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24
569 554
PTX-
176
SRIE_274329-274414 MIT Lincoln Laboratory Offline Component of the 1999 DARPA Intrusion Detection Evaluation SRIE_399156-399159 Lunt email to Valdes and others re Tentative Agenda 105, 802 for DARPA-Intrusion Detection Conference 401; 402; 803; 807; PTO para. 24
105, 802
401; 402; 803; 807
581
PTX-
177
105, 802
401; 402; 803; 807; PTO para. 24
566
PTX-
178
SRIE_449229-449232 Neumann email to Porras Valdes, Gilham, Frivold, Japan re Notes on New NIDES; SRI_Proprietary
105, 802
401; 402; 803; 807; PTO para. 24
105, 802
401; 402; 803; 807; PTO para. 24
546
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 15 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
179
SRIE_53628
Valdes email to Porras and Neumann re Frank Jou meeting Article titled, History re SRI
105, 802
401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24
105, 802
401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24
561
PTX-
180
SYM_P_554967
105, 802
105, 802
568
PTX-
181
SYM_P_68937-68942 Statistical Methods for Computer Usage Anomaly Detection Using NIDES SYM_P_79206-79370 SRI_International- Final Technical Report SYM_P_01598180159845 Bennett: 41 ISS_01744269 American Express- Resource Technologies 802, 402, 403 401; 402; 801; 803; 807; PTO para. 24
105, 802
571
PTXPTX-
182 183
105, 802 402, 901(a), 802, 403, 105
575 251
PTXPTX-
184 185
List of resellers and end users of Symantec (Appendix I to Interrogatory Responses) ISS Financial data
Partially illeg. 106, 402, 403, 802, 901(a)
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 802, 901(a), 402, 403. 401; 402; 801; 803; 807; PTO para. 24; document Illegible, at least in part. 901; PTO para. 24; complete; sufficiently legible Description mischaracterizes description accurate; document. sufficiently legible 401; 402; 801; 803; 807; PTO para. 24; document complete 401; 402; 801; 803; 807; 901; PTO para. 24 802, 901(a), 402, 403. Illegible, at least in part. Description mischaracterizes document. 802, 402, 403 401; 402; 801; 803; 807; 901; PTO para. 24; Description accurate; sufficiently legible 401; 402; 801; 803; 807; PTO para. 24
402, 901(a), 802, 403, 105
42 922
PTX-
186
ISS_01832561
ISS Financial data
Partially illeg. 106, 402, 403, 802, 901(a)
923
PTX-
187
ISS_11292-299
Proventia Security Product Family brochure
901(a), 802, 402, 403
812
PTX-
188
ISS_20657-ISS_20662 ISS WGM to SP comparison guide- Figures and Appendix
105, 402, 403, 802
401; 402; 801; 803; 807; PTO para. 24
802, 402, 403
401; 402; 801; 803; 807; PTO para. 24
847
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 16 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
189
ISS_21064-66
Proventia Intrusion Prevention Appliance brochure
901(a), 802, 402, 403
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24; description accurate
802, 402, 403
401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24
811
PTX-
190
ISS_353052- 353405
ISS RealSecure 5.5 Student Guide
802, 901(a), 402, 403
802, 402, 403
816
PTX-
191
ISS_4387-4393
Proventia Enterprise Security Platform (ESP) brochure
DM, 106, 901(a), 802, 402, 403
802, 402, 403, 106. Document inadequately identified.
401; 402; 801; 803; 807; 813 PTO para. 24; identification adequate; document complete 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 808 814
PTXPTX-
192 193
ISS_541632-541642 ISS_592180- 592291
ISS Market Requirements Document Security Fusion 802, 402, 403 Module 2.0 License and Distrubution Agreement dated August 802, 901(a), 402, 403 12, 2005 between Arbor Networks and ISS 105, 802
401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 803; 807; PTO para. 24
802, 402, 403 802, 402, 403
PTX-
194
ISS02126097
(more pages included in exhibit than listed)
825
PTXPTXPTX-
195 196 197
ISS04149-04157 ISS06011-06017 ISS23541-557
The EMERALD Project Current Downloads as of (9/4/97) from http://web.arcive.org/web/19980124000015/www.csl.sri.com/emerald/downloads.html Heberlein, Dias, Levitt, Mukherjee, Wood, and Wolber, A Network Security Monitor 802, 402 401; 402; 801; 803; 807; "RealSecure Guard FAQ" 402; 403; 802; 105 401; 402; 801; 803; 807; PTO para. 24 PTO para. 24 Mukherjee, Heberlein, and Levitt, Network Intrusion Detection
890 1225 1236
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 17 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
198
N/A
Symantec Buys Spam Killer, gets Street Cred 802, 403, 402, 901(a) http://www.baselinemag.com/article.2/0,1540,19818 94,00.asp "RealSecure Network Sensor and Gigabit Network Sensor Frequently Asked Questions" Illegible, 105, 106, 402, 403, 802, 901(a)
401; 402; 803; 807; 901; 902 802,403, 402, 901(a), 401; 402; 803; 807; 901; 779 105.Document inadequately 902; identification adequate identified. Sufficiently legible; 401; 402; complete; 801; 803; 807; 901; PTO para.24 802, 901(a), 402, 401; 402; 801; 803; 807; 106.Illegible, at least in part. 901; PTO para. 24; sufficiently legible 879
PTX-
199
SRI_000001-000052
PTX-
200
SRI_00001-9
RealSecure Network Sensor and Gigabit Network Sensor FAQs
105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901; PTO para. 24
802, 901(a), 402, 403
401; 402; 801; 803; 807; 901; PTO para. 24
850
PTX-
201
SRI_000020-33
ISS Enhanced Dynamic Threat Protection via Automated Correlation and Analysis
105,402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901; PTO para. 24
802, 901(a), 402, 403
401; 402; 801; 803; 807; 901; PTO para. 24
851
PTX-
202
SRI_000034-35
RealSecure 10/100 brochure
105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901; PTO para. 24
802, 901(a), 106. Illegible, at 801; 803; 807; 901; PTO 852 least in part. para. 24; sufficiently legible; document complete 802, 901(a), 106. Illegible, at 801; 803; 807; 901; PTO 853 least in part. para. 24; sufficiently legible; document complete 802, 901(a), 106.Illegible, at 401; 402; 801; 803; 807; least in part, 402, 403. 901; PTO para. 24; sufficiently legible; document complete 802, 901(a), 106, 403, 402 401; 402; 801; 803; 807; 901; PTO para. 24; document complete 105, 802. Document 401; 402; 803; 807; PTO inadequately identified. para. 24; identification adequate 854
PTX-
203
SRI_000035-36-37
RealSecure Network Gigabit brochure
105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901; PTO para. 24 105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901; PTO para. 24
PTX-
204
SRI_000047-48
SiteProtector Third Party Module brochure
PTX-
205
SRI_000049-520
Site Protector Third Party Module Frequently Asked 105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; Questions 901; PTO para. 24 EMERALD Site-wide Correlation Engine 105, 402, 403, 802, DM 401; 402; 803; 807; 901; PTO para. 24
855
PTX-
206
SRI_05165688051693
1270
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 18 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTXPTXPTX-
207 208 209
Threat Analytics- A Cybershield Initiative version 2-0-802, 403, 402, 901(a) 12-04, 0, 4 Abstract of Live Traffic Analysis of TCP/IP Gateways 105, 802 SRI_112470 by Porras and Valdes SRI_277983 -277997 EMERALD eXpert/estat Draft 0.1 DM, 802, 105, 106
SRI_110331-110357
401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24; description accurate; document complete
401; 402; 803; 807; 901; 1305 PTO para. 24 802, 901(a), 402, 403 401; 402; 803; 807; 901; 819 PTO para. 24 106, 403, 802. Description 401; 402; 803; 807; PTO 742 mischaracterizes document. para. 24; description accurate; document complete 402, 802, 901(a), 403, 106 401; 402; 803; 807; 901; document complete 829
802, 901(a), 402, 403
PTX-
210
SRI_287660SRI_287662
USPTO Notice of Allowance and Fees Due re Application 10/429,611
106, 402, 403, 802,901(a) 401; 402; 803; 807; 901; document complete
PTX-
211
SRI_287663
USPTO Notice of Allowability re Application 10/429,611 USPTO Information Disclosure Statement by Applicant for Application 10/429,611
106, 402, 403, 802,901(a) 401; 402; 803; 807; 901; document complete 106, 402, 403, 802,901(a) 401; 402; 803; 807; 901; PTO para. 24; document complete 106, 402, 403, 802,901(a) 401; 402; 803; 807; 901; document complete
402, 802, 901(a), 403, 106
401; 402; 803; 807; 901; document complete 401; 402; 803; 807; 901; PTO para. 24; document complete 401; 402; 803; 807; 901; document complete
830
PTX-
212
SRI_287664SRI_287681
402, 802, 901(a), 403, 106
831
PTX-
213
SRI_287682SRI_287683
Issue Classification for Application 10/429,611
402, 802, 901(a), 403, 106
832
PTXPTX-
214 215
SRI_287684SRI_287690 SRI_287691SRI_287692
Confirmation No. 3015 and Amendments to the Claims re 10/429,611 Fold out poster/cd- SRI_Timeline of Innovations
106, 402, 403, 802,901(a) 401; 402; 803; 807; 901; 402, 802, 901(a), 403, 106 document complete 106, 402, 403, 802, 901(a), 401; 402; 803; 807; 901; 402, 802, 901(a), 403, 106. partially illeg. PTO para. 24; sufficiently Illegible, at least in part. legible; document complete 401; 402; 803; 807; 901(a); PTO para. 24 802, 901(a), 402, 403
401; 402; 803; 807; 901; 833 document complete 401; 402; 803; 807; 901; 834 PTO para. 24; sufficiently legible; document complete 401; 402; 803; 807; 901; PTO para. 24 835
PTX-
216
SRI_287693SRI_287697
SRI_International 60 years 1946-2006 - Timeline 802, 403, 402, 901(a) of Innovations
PTX-
217
SRI_287698SRI_287701
SRI_International's Timeline of InnovationsInventing the Future for More Than 55 Years
802, 403, 402, 901(a)
401; 402; 803; 807; 901(a); PTO para. 24
802, 901(a), 402, 403
401; 402; 803; 807; 901; PTO para. 24
836
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 19 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTXPTXPTX-
218 219 220
SRI_287706SRI_287709 SRI_287710SRI_287713 SRI_287714
SRI_International's Timeline of InnovationsInventing the Future for the Past 55 Years SRI_International's Timeline of InnovationsInventing the Future for the Past 50 Years SRI- What They Are Saying About Us
802, 403, 402, 901(a) 802, 403, 402, 901(a) 802, 403, 402, 901(a)
401; 402; 803; 807; 901(a); PTO para. 24 401; 402; 803; 807; 901(a); PTO para. 24 401; 402; 803; 807; 901(a); PTO para. 24 401; 402; 803; 807; 901(a); PTO para. 24
802, 901(a), 402, 403 802, 901(a), 402, 403 802, 901(a), 402, 403
401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24; sufficiently legible 401; 402; 803; 807; 901; PTO para. 24; sufficiently legible 401; 402; 803; 807; 901; 902; document complete 401; 402; 803; 807; 901; PTO para. 24
837 838 839
PTX-
221
SRI_287715SRI_287716 SRI_287717SRI_287746 SRI_287747SRI_287749 SRI_287750SRI_287765
SRI_International - Breakthrough Ideas- Real-World 802, 403, 901(a) Solutions World-Changing Innovations
802, 901(a), 402, 106, 403. Illegible, at least in part. 802, 901(a), 402, 403, 106. Illegible, at least in part. 802, 901(a), 402, 403, 106
840
PTX-
222
partially illeg, 802, 901(a), 401; 402; 803; 807; 901; 402, 403, 106 PTO para. 24; legible
841
PTX-
223
San Jose Mercury News "For the Love of Research" 802, 901(a), 402, 403, 106 401; 402; 803; 807; 901; 902; document complete Discover What We're Discovering 802, 901(a), 402, 403 401; 402; 803; 807; 901; PTO para. 24
842
PTX-
224
802, 901(a), 402, 403
843
PTX-
225
SRI_287766SRI_287769
Donna Linne letter to Nilsa Monina of DCMS-San Francisco dated October 29, 1998
802, 901(a), 402, 403
401; 402; 803; 807; 901; PTO para. 24
802, 901(a), 402, 403. Not timely: produced after the close of discovery.
401; 402; 803; 807; 901; PTO para. 24; produced timely
844
PTX-
226
SRI_37174-37175
Article titled "DARPA's EMERALD Proves Worth in 802, 402, 403, 901(a) Cyperdefens" from U.S. Department of Defense from http://www.defenselink.mil/news/aug2000/n0814200 0_20008144.html
401; 402; 803; 807; 901; 902 802, 901(a), 402, 403
401; 402; 803; 807; 901; 902 1293
PTX-
227
SRI_37176-37179
SRI_Timeline of SRI_International Innovations: 2000s
802, 402, 403, 901(a)
401; 402; 803; 807; 901; PTO para. 24
802, 901(a), 402, 403
401; 402; 803; 807; 901; PTO para. 24
1294
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 20 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
228
SRI_37192-37195
SRI_Timeline of SRI_International Innovations 1980s
DM, 802, 403, 402, 901(a) 401; 402; 803; 807; 901; PTO para. 24; description accurate 802, 403, 402, 901(a) 401; 402; 803; 807; 901; PTO para. 24
802, 901(a), 402, 403
401; 402; 803; 807; 901; PTO para. 24
1295
PTX-
229
SRI_37196-37202
SRI_Timeline of SRI_International Innovations 1990s
802, 901(a), 402, 403
401; 402; 803; 807; 901; PTO para. 24
1296
PTX-
230
SRI_72894-72897
Article titled "EMERALD's Component-Based Approach to Network Security Distrubuted RealTime Security Monitoring by Claude J. Bauer
901(a), 802, 403, 402
401; 402; 803; 807; 901; 902 802, 901(a), 402, 403
401; 402; 803; 807; 901; 902 1299
PTX-
231
SRI_E_0017849
Email exchange between Jerzy Rub and Porras re Live Traffic Analysis paper
802, 402, 403, 901(a)
401; 402; 803; 807; 901; PTO para. 24
802, 901(a), 402, 403
401; 402; 803; 807; 901; PTO para. 24
714
PTX-
232
SRI_E_0017912
Email exchange between Shyhtsun Felix Wu and Porras re Live Traffic Analysis paper, 11/1997
802, 402, 403, 901(a)
401; 402; 803; 807; 901; PTO para. 24
802, 901(a), 402, 403
401; 402; 803; 807; 901; PTO para. 24
715
PTX-
233
SRI_E_00179290017930
Email exchange between Aziz Mounji and Porras re Live Traffic Analysis paper, 11/1997
802, 402, 403, 901(a)
401; 402; 803; 807; 901; PTO para. 24
802, 901(a), 402, 403
401; 402; 803; 807; 901; PTO para. 24
716
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 21 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
234
SRI_E_00180340018038
Email/authors kit from Steve Welke to Porras and 802, 402, 403, 901(a) others whose papers were accepted for publication in NDSS '98
401; 402; 803; 807; 901
802, 901(a), 402, 403
401; 402; 803; 807; 901
717
PTX-
235
SRI_E_0018138
Email exchange between Valdes and Porras re the acceptance of Live Traffic Analysis paper, presentation
105, 802
401; 402; 803; 807; PTO para. 24
105, 802
401; 402; 803; 807; PTO para. 24
718
PTX-
236
SRI_E_0018143
10/21/97 email to Emerald Team requesting a copy of 802, 402, 403, 901(a) Live Traffic Analysis article for [email protected]
401; 402; 803; 807; 901
901(a), 802, 402, 403
401; 402; 803; 807; 901
723
PTX-
237
SRI_E_0018147
PTX-
238
SRI_E_0018233
PTX-
239
SRI_E_0018234
10/1/97 email from Matt Schonlau of AT&T to Emerald Team asking to be sent a copy of Live Traffic paper when available 11/11/97 email from Sal Stolfo to Porras thanking him for sending a copy of the Live Traffic Analysis paper 9/10/87 email from Stolfo to Porras re Live Traffic Analysis paper Email from Valdes to Porras forwarding an email re the Live Traffic Analysis
802, 402, 403, 901(a)
401; 402; 803; 807; 901
901(a), 802, 402, 403
401; 402; 803; 807; 901
724
802, 402, 403, 901(a)
401; 402; 803; 807; 901
901(a), 802, 402, 403
401; 402; 803; 807; 901
720
802, 402, 403, 901(a)
401; 402; 803; 807; 901
901(a), 802, 402, 403
401; 402; 803; 807; 901
721
PTX-
240
SRI_E_0018239
105, 802
401; 402; 803; 807; PTO para. 24
105, 802
401; 402; 803; 807; PTO para. 24
722
PTX-
241
SRI_E_0018242
9/5/07 email from George Lentz to Emerald Team 105, 802 requesting 2 papers, including Live Traffic Analysis paper
401; 402; 803; 807
105, 802
401; 402; 803; 807; PTO para. 24
725
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 22 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
242
SRI_E_0018248
9/4/07 email from Lentz to Emerald Team requesting 901(a),802, 403, 402 papers
401; 402; 803; 807; 901
901(a), 802, 402, 403
401; 402; 803; 807; 901
726
PTX-
243
SRI_E_0018254
9/3/07 email from Jennifer Dealy to Emerald Team requesting Live Traffic Analysis paper
802, 402, 403, 901(a)
401; 402; 803; 807; 901
901(a), 802, 402, 403
401; 402; 803; 807; 901
727
PTX-
244
SRI_E_00399112
8/29/97 email from Gary Jackson to Emerald Team requesting Live Traffic Analysis paper
802, 402, 403, 901(a)
401; 402; 803; 807; 901
901(a), 802, 402, 403
401; 402; 803; 807; 901
728
PTX-
245
SRI_E_00522320052233
12/7/97 email from Porras to [email protected] and [email protected] re requests for Live Traffic paper
802, 402, 403, 901(a)
401; 402; 803; 807; 901; PTO para. 24
901(a), 802, 402, 403
401; 402; 803; 807; 901; PTO para. 24
729
PTX-
246
SRIE_0004894
Email from Valdes to Porras, Bercow and Skinner w/ 802, 403, 402, 901(a) disappointment over Atomic Tangerine/commercialization btw Valdes, Porras and Doug Moran
401; 402; 803; 807; 901; PTO para. 24
802, 901(a), 402, 403
401; 402; 803; 807; 901; PTO para. 24
1286
PTX-
247
SRIE_00438130043814
Email from Porras to Moran re Lunch and discussing 403, 802, 402, 901(a) EMERALD and Recourse
401; 402; 803; 807; 901; PTO para. 24
802, 901(a), 402, 403
401; 402; 803; 807; 901; PTO para. 24
1251
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 23 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
248
SRIE_0052257SRIE_0052258
Gary Jackson email to Phil Porras re Live Traffic Analysis
105, 802
401; 402; 803; 807
105, 802
401; 402; 803; 807
732
PTXPTX-
249 250
SRIE_0077330 SRIE_0077373
Email from Bercow to Valdes re Valdes' input about 802, 403, 402, 901(a) Recourse (SRIE_0077330) Email from Bercow to Moran re Phil and Moran's lunch, EMERALD and Recourse 802, 403, 402, 901(a)
401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24
802, 901(a), 402, 403 402, 802, 901(a), 403
401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24
909 1252
PTX-
251
SRIE_186231
Porras email to Skinner and Valdes dated June 21, 1998 re estat delivery
901(a), 802, 402, 403
401; 402; 803; 807; 901; PTO para. 24
901(a), 802, 402, 403
401; 402; 803; 807; 901; PTO para. 24
748
PTX-
252
SRIE_38302
Porras email to Skinner, Fong and Porras dated December 30,1998 re EMERALD near-term deliverables status
901(a), 802, 403, 402
401; 402; 803; 807; 901; PTO para. 24
901(a), 802, 402, 403
401; 402; 803; 807; 901; PTO para. 24
751
PTX-
253
SYM_P_0019055SYM_P_0019074
Symantec Guide to Correlation Techniques by Darrell 403, 402 M. Keinzle, PhD., dated November 6, 2003
401; 402
802, 901(a), 402, 105
401; 402; 801; 803; 807; 901; PTO para. 24
776
PTX-
254
SYM_P_0020640SYM_P_0020675
Symantec Security 5400 Series PowerPoint Presentation
802, 901(a), 402, 105
401; 402; 801; 803; 807; 901; PTO para. 24
736
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 24 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
255
SYM_P_0031160SYM_P_0031299
Event Correlation Overview Darrell Kienzle Symantec Research Labs
Range incl. mult. docs 401; 402 Assuming SRI intended to designate SYM_P_0031160-199. 402, 403
802, 901(a), 402, 105
401; 402; 801; 803; 807; 901; PTO para. 24
762
PTX-
256
SYM_P_0036968SYM_P_0036976
ManHunt's Event Dictionary Requirements for a 403, 402 Normalized Event Dictionary by Mike Smith, Jeremy Bennett
401; 402
802, 901(a), 402, 403, 105
401; 402; 801; 803; 807; 901; PTO para. 24
775
PTX-
257
SYM_P_0052675SY M_P_0052717 SYM_P_0053881SY M_P_0054272 SYM_P_0092443SYM_P_0092447 SYM_P_0097932SYM_P_0094941 SYM_P_0104928SYM_P_0104931 SYM_P_01049340104936 SYM_P_01124200112444 SYM_P_0137493SY M_P_0137545 SYM_P_0158602SY M_P_0158648
Burton Group In-Depth Research Report: Security Enterprise w/Network Behavior Anomaly Symantec TM network Security Administration Guide
802, 402, 403, 901(a)
401; 402; 803; 807; 901
802, 901(a), 402, 403
401; 402; 803; 807; 901
862
PTXPTX-
258 259
802, 901(a), 402, 105 401; 402 802, 901(a), 402, 105
PTX-
260
PTX-
261
402, 403 Symantec Global Enterprise Marketing Communications Brief v 3.0 Symantec NEW IDS Story Commbrief Symantec Iforce IDs Appliance, Powered By Sun and Symantec V2 Business Infrastructure Readiness Project Pandora Dated 7/29/03 Patrick Wheeler email to Sandeep Kumar dated August `4, 2004 re SS correlated technote- Draft 1 TechNote: Symantec Network Security's Real-Time Event Correlation Feature Symantec ManHunt Strategy and Roadmap v. 1.11 402, 403 Blackbird Event Metadata 2.2 Specification Manhunt 2.1 Q2 2002 402, 403 402, 403
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24
764 783
802, 901(a), 402, 403, 105
872
802, 901(a), 402, 105
760
PTXPTXPTXPTX-
262 263 264 265
802, 901(a), 402 401; 402 401; 402 401; 402 802, 901(a), 402 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105
1265 1261 789 790
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 25 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTXPTXPTX-
266 267 268
SYM_P_0163052SY M_P_0163055 SYM_P_0187490189001 SYM_P_0209016SYM_P_0209094 SYM_P_0209981SY M_P_0210011 SYM_P_0236964SYM_P_0236967 SYM_P_0284104SY M_P_0284130 SYM_P_0286483SY M_P_0286498 SYM_P_0300071SY M_P_0300099 SYM_P_0336255SYM_P_0336259
PTXPTXPTXPTXPTXPTX-
269 270 271 272 273 274
AF: Event Receiver Specification by Michael Smith, modified February 24, 2004 Symantec Universal Event Collector Configuration Guide 402, 403 Symantec K2 (Symantec Network Security 7100 Series Product functional requirements dated March 18, 2005 IPS Selection Criteria and SNS - Patrick Wheeler, Product Manager, dated July 26, 2005 Tolly Test Summary Draft Outline 802, 403 Product: Symantec Security Information Manager 4.0 Sim 4.0 fy06 Business Plan Version 5 Symantec Worldwide Sales & Marketing Conference Symantec Network Security Analyst quarterly dated 802, 402, 403 August 2005
802, 901(a), 402, 403, 105 802, 901(a), 402, 403 401; 402 802, 901(a), 402, 403, 105
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24
792 1267 737
802, 901(a), 402, 403, 105 401; 402; 801; 803; 807; PTO para. 24 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 401; 402; 801; 803; 807; PTO para. 24 802, 901(a), 402, 403, 105
797 798 800 801 802 804
PTXPTX-
275 276
SYM_P_0384490SY M_P_0384493 SYM_P_0407795SYM_P_0407800
Manhunt Deployment Guide Manhunt Event Stream Provider Specification by Brian Hernacki, Bob Geiger created 4/26/00
802, 402, 403 802, 403, 402
401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24
802, 901(a), 402, 403, 105 802, 901(a), 402, 105
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24
805 753
PTX-
277
SYM_P_0553071
Interrogatory 17 Supplemental Data
Document inadequately Identification adequate; identified. Description description accurate mischaracterizes document.
924
PTXPTX-
278 279
SYM_P_385550SYM_P_385660 SYM_P_415808SYM_P_415839
Recourse ManHunt v. 1.1 Deployment Guide- 802, 403, 402 Beta Proprietary and Confidential Manhunt 3.0 "Orion" Engineering Design Document created December 27, 2001
401; 402; 801; 803; 807; PTO para. 24
802, 901(a), 402, 403, 105 802, 901(a), 402, 105
401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24
778 754
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 26 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTXPTXPTXPTXPTX-
280 281 282 283 284
SYM_P_53323SYM_P_53396 SRI 287824 SYM-P-0049575SYM_P_0049583 SYM-P-0057094SYM-P-0057237
Symantec SGS 2.0 Gateway Network Detection Component (gNDC) Workshop Welcome Message on SRI CSL FTP Server 802, 402, 403, 106 Symantec Halon component Functional Requirements 402, 403 Symantec TM Manhunt 3.0 User Guide ISS RealSecure SiteProtector Comparison Guide for 402, 403, 802 ICEcap Manager Version 1.5 dated January 2002 (http://documents.iss.net/literature/SiteProtector/KEC aptorRSSPComparison.pdf)
802, 901(a), 402, 403, 105 401, 402, 801, 803 401; 402 402, 403, 802, 106, NT 802, 901(a), 402, 403, 105 802, 901(a), 402, 105 401; 402; 801; 803; 807 402, 802. Document inadequately identified.
401; 402; 801; 803; 807; 901; PTO para. 24 401, 402, 801, 803, part of 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; Identification adequate
738
763 765 806
PTXPTXPTX-
285 286 287
US Patent Application Publication re US 2002/0019945 A1 US Patent Application Publication re US 2002/0078381A1
NP, DM
106. Not timely: never produced or disclosed. 106. Not timely: never produced or disclosed. Publicly available; identified 901(a), 802, 402, 403. Not in Dr. Kesidis' expert report; timely: never produced or description accurate disclosed.
Document complete; 809 publicly available Document complete; 810 publicly available 401; 402; 801; 803; 807; 818 identification adequate; publicly available; identified in Dr. Kesidis' expert report
PTX-
288
Proventia Security Product Family Datasheet http://documents.iss.net/literature/proventia/proventia_platform-brochure.pdf NT Publicly available; produced Not timely: produced after during summary judgment the close of discovery. briefing
Identification adequate; 827 publicly available; produced during summary judgment briefing
Live Traffic Analysis of TCP/IP Gateways dated November 10, 1997 from http://web.archive.org/web/19980124000949.www.csl.sri.com/emerald/live-traffic.html
Case 1:04-cv-01199-SLR
Document 524-8
Filed 08/18/2008
Page 27 of 49
Final Ex. No.
BATES RANGE
DOCUMENT DESCRIPTION
Symantec's Objections
Basis for Admission: Response to Symantec's Objections
ISS's objections
Basis for Admission: Response to ISS's Objections
Prev. PTX No.
PTX-
289
Abstract of Live Traffic Analysis of TCP/IP Gateways dated August 1, 1997 from http://web.archive.org/web/19980124003236/www.c sl.sri.com/emerald/
Document inadequately identified. Not timely: produced after the close of discovery.
Identification adequate; 828 publicly available; produced during summary judgment briefing
PTX-
290
Book titled A Heritage of Innovation SRI_'s First Half Century by Donald Nielsen
NP
Publicly available
Not timely: never produced or disclosed.
Publicly available
845
PTX-
291
RealSecure Network Datasheet NP (http://documents.iss.net/literature/realsecure/rsn/10100datasheet.pdf) NP "SiteProtector Security Fusion" (http://documents.iss.net/literature/SiteProtector/Data sheet-Fusion2.0.pdf) Curriculum vitae Dr. George Kesidis 105, 802 ISS webpage http://www.iss.net/education/schedules/bycourses/by_course-course=94=north-america.php Ex. A to Symantec's Supplemental Responses to Interrogatory No. 9 and 17 Ex. A to Symantec's Supplemental Response to Interrogatory No. 18 Ex. B to Symantec's Supplemental Response to Interrogatory No. 18 ISS's Response to SRI_Interrogatory No. 1 Symantec's Response to SRI_Interrogatory No. 9 NP, DI
Publicly available; identified Document inadequately Identification adequate; 848 in Dr. Kesidis' expert report identified. Not timely: never publicly available; identified produced or disclosed. in Dr. Kesidis' expert report Publicly available; identified Not timely: never produced in Dr. Kesidis' expert report or disclosed. 402; 403; 803; 807 105, 802 Publicly available; identified 875 in Dr. Kesidis' expert report 401; 402; 803; 807 915
PTX-
292
PTXPTX-
293 294
PTXPTXPTXPTXPTX-
295 296 297 298 299
Publicly available; produced Document inadequately during summary judgment identified. briefing; adequately identifi