Free Proposed Pretrial Order - District Court of Delaware - Delaware

Case 1:04-cv-01199-SLR

Document 524-11
EXHIBIT 10 ISS'S List of Exhibits

Filed 08/18/2008

Page 1 of 4

TRIAL DESCRIPTION EXH. NO. ISS' PROVENTIA MANAGEMENT SITEPROTECTOR USER GUIDE FOR 2500 SECURITY MANAGERS VERSION 2.0, SERVICE PACK 6.0 MANUAL ENTITLED "SITEPROTECTOR -- SECURITY FUSION MODULE 2501 GUIDE VERSION 2.0 2502 ISS PRESENTATION ENTITLED "FUSION UPDATE" SITEPROTECTOR USER GUIDE FOR SECURITY MANAGERS VERSION 2503 2.0, SERVICE PACK 5 2504 PROVENTIA A SERIES PROVENTIA - INTRUSION PREVENTION APPLIANCE, PREEMPTIVE 2505 ENTERPRISE PROTECTION FOR NETWORKS 2506 ISS' REALSECURE SIGNATURES REFERENCE GUIDE VERSION 6.5 2507 SITEPROTECTOR - SUPPORTED AGENTS AND APPLICATIONS PROVENTIA NETWORK, ANOMALY DETECTION SYSTEM 2508 MONITORING THE NETWORK TO ENHANCE VISIBILITY, INTEGRITY, AND PREEMPTIVE PROTECTION INTERNET SECURITY SYSTEMS© PROVENTIA NETWORK ANOMALY 2509 DETECTION SYSTEM USER GUIDE VERSION 3.5 FUSION UPDATED 2510 2511 2512 SECURITY FUSION MODULE 2.0 TECH SUPPORT CHALK TALK BY D. COOK, P. GRISWOLD HTTP://DOCUMENTS.ISS.NET/LITERATURE/SITEPROTECTOR/DATASHE ET-FUSION2.0.PDF HEALTHSOUTH NO. 28 - SECURITY NETWORK DESIGN DIAGRAM SHOWING THE DEPLOYMENT OF MULTIPLE PROVENTIA G, ALONG WITH SITEPROTECTOR AND THE SECURITY FUSION MODULE, IN THE HEALTHSOUTH NETWORK REALSECURE NETWORK SENSOR AND GIGABIT NETWORK SENSOR FREQUENTLY ASKED QUESTIONS ISS ENHANCED DYNAMIC THREAT PROTECTION VIA AUTOMATED CORRELATION AND ANALYSIS REALSECURE NETWORK 10/100 PRODUCT DESCRIPTION REALSECURE NETWORK GIGABIT PRODUCT DESCRIPTION HTTP://DOCUMENTS.ISS.NET/LITERATURE/REALSECURE/RSN10100_DATASHEET.PDF HTTP://DOCUMENTS.ISS.NET/LITERATURE/PROVENTIA/PROVENTIA_P LATFORM_BROCHURES.PDF REALSECURE GUARD REALSECURE GUARD FREQUENTLY ASKED QUESTIONS REALSECURE SIGNATURE REFERENCE GUIDE, VERSION 6.5

BEG. BATES NO. CRIST 321 GRISWOLD 334 ISS60287 ISS19569 MCEWIN 122 MCEWIN 123 ISS17243 RAJASEKHARAN 113 STEWART 99 ISS_01927908 ISS60287 ISS_00535783

END BATES NO.

OBJECTION BASIS

FRE IN SUPPORT DATE OF ADMISSION ADMITTED

ISS60300 ISS19838

ISS18096

ISS_01928091 ISS60300 ISS_00535821 106 Irregularity in Bates Number; Should reference ISS 00535783-821 106

KESIDIS REPORT ­ ISS KESIDIS REPORT ­ ISS

2513

2514 2515 2516 2517 2518 2519 2520 2521 2522

SRI 000001 SRI 000020 SRI 000034 SRI 000036 KESIDIS REPORT ­ ISS KESIDIS REPORT ­ ISS ISS 06012 ISS 06011 ISS 17243 ISS2_00105902

SRI 000009 SRI 000033 SRI 000035 SRI 000037

106 ISS 06017 ISS 18096 ISS2_00105904

106

MODULE 5: REALSECURE UNDER THE HOOD
2523

Exhibit does not match description; clarification needed - SRI reserves all objections

2524

EXHIBIT NO. NOT USED Page 1 ISS TRIAL EXHIBIT LIST

Case 1:04-cv-01199-SLR

Document 524-11

Filed 08/18/2008
END BATES NO.

Page 2 of 4
FRE IN SUPPORT DATE OF ADMISSION ADMITTED

TRIAL DESCRIPTION BEG. BATES NO. EXH. NO. ROBERT MCEWIN EXHIBIT 123 - PROVENTIA INTRUSION PREVENTION KESIDIS REPORT ­ ISS 2525 APPLIANCES REAL PROTECTOR THIRD PARTY MODULE PRODUCT DESCRIPTION; SRI 000047 2526 SITE PROTECTOR THIRD PARTY MODULE FREQUENTLY ASKED QUESTIONS ADS USER GUIDE AT 5, 23 (AVAILABLE AT KESIDIS REPORT ­ ISS 2527 HTTP://DOCUMENTS.ISS.NET/LITERATURE/PROVENTIA/ADSUSERGUID E.PDF THIRD PARTY ANALYSIS BY BURTON GROUP DESCRIBING ARBOR SYM_P_0052701 2528 NETWORK'S PEAKFLOW 2529 EXPERT REPORT OF DR. GEORGE KESIDIS ON INFRINGEMENT TO ISS KESIDIS 1 ISS PAMPHLET: PROVENTIA NETWORK ANOMALY DETECTION MORVILLE 539 2530 SYSTEM 2531 ISS PROVENTIA NETWORK QUICK START GUIDE VERSION 3.5 ARB 00693 2532 ISS PROVENTIA NETWORK USER GUIDE VERSION 3.5 ARB 00094 ISS PROVENTIA NETWORK ADVANCED CONFIGURATION GUIDE ARB 00001 2533 VERSION 3.5 (BURTON 2003) BURTON GROUP, "SECURITY THE ENTERPRISE WITH SYM_P_0052675 2534 NETWORK BEHAVIOR ANOMALY DETECTION" SMAHA REBUTTAL (CISCO 6350) CISCO SYSTEMS WEBSITE: 2535 HTTP://WWW.CISCO.COM/EN/US/PRODUCTS/PS6350/PRODUCTS_CONFI REPORT GURATION GUIDE CHAPTER09186A00805E7C53.HTML (CISCO 6601) CISCO SYSTEMS WEBSITE, AVAILABLE AT SMAHA REBUTTAL 2536 HTTP://WWW.CISCO.COM/EN/US/PRODUCTS/PS6601/PRODUCTS_WHITE REPORT PAPER0900AECD80406232.SHTML (FED-STD-1037C) FEDERAL STANDARD 1037C, SMAHA REBUTTAL 2537 TELECOMMUNICATIONS: GLOSSARY OF TELECOMMUNICATIONS REPORT TERMS, GENERAL SERVICES ADMINISTRATION Y.F. JOU, S.F. WU ET AL. "ARCHITECTURE DESIGN OF A SCALABLE ISS 27334 INTRUSION DETECTION SYSTEM FOR THE EMERGING NETWORK", 2538 TECHNICAL REPORT CDRL A005, DARPA ORDER NO. E296, DEPT. OF COMPUTER SCIENCE, NORTH CAROLINA STATE UNIVERSITY EXPERT REPORT OF DR. GEORGE KESIDIS ON INFRINGEMENT SMAHA REBUTTAL 2539 REPORT (PNADS OV) ISS, "PROVENTIA NETWORK ANOMALY DETECTION SMAHA REBUTTAL SYSTEM - COMPARE MODELS", REPORT 2540 HTTP://WWW.ISS.NET/PRODUCTS_SERVICES/ENTERPRISE_PROTECTIO N/PROVENTIA/ANOMALY DETECTION/MODELS.PHP (PROVENTIA SERVER) 2541 HTTP://DOCUMENTS.ISS.NET/LITERATURE/PROVENTIA/PROVENTIA_S ERVER WINDOWS DATA SHEET.PDF (REALSECURE NT 1.0 UG) "REALSECURE RELEASE 1.0 FOR WINDOWS ISS 02126117 2542 NT 4.0 USER GUIDE AND REFERENCE MANUAL" SECURITY FOCUS WEBSITE: SMAHA REBUTTAL 2543 HTTP://WWW.SECURITYFOCUS.COM/INFOCUS/1796 REPORT (SMAHA 1988) S. SMAHA: "HAYSTACK: AN INTRUSION DETECTION ISS 04072 SYSTEM" PROCEEDINGS OF THE IEEE 4TH AEROSPACE COMPUTER SECURITY APPLICATIONS CONFERENCE, ORLANDO, FL SMAHA REBUTTAL (SOURCEFORGE NETFLOW) SOURCEFORGE ONLINE OPEN SOURCE REPORT REPOSITORY: HTTP://SOURCEFORGE.NET/SEARCH/?WORDS=NETFLOW&TYPE_OF_SE ARCH=SOFT

OBJECTION BASIS

SRI 000052

106

106

106 802

106 801; 803; 807

ARB 00740 ARB 00273 ARB 00093 SYM_P_0052717 FRCP 37 (untimely produced); SRI reserves all other objections FRCP 37 (untimely produced); SRI reserves all other objections FRCP 37 (untimely produced); SRI reserves all other objections 602; 802 Disclosed no later than May 16, 2006. Disclosed no later than May 16, 2006. Disclosed no later than May 16, 2006. 801; 803; 807

ISS 27374

802

801; 803; 807

ISS 02126244

602; 802 FRCP 37 (untimely produced); 802; 602

801; 803; 807 801; 803; 807; Disclosed no later than May 16, 2006. 801; 803; 807

ISS 04079

802; 602

2544

2545

FRCP 37 (untimely Disclosed no later produced); SRI reserves all than May 16, 2006. other objections

Page 2

ISS TRIAL EXHIBIT LIST

Case 1:04-cv-01199-SLR

Document 524-11

Filed 08/18/2008
END BATES NO. ISS 03722

Page 3 of 4
FRE IN SUPPORT DATE OF ADMISSION ADMITTED

TRIAL DESCRIPTION BEG. BATES NO. EXH. NO. A. VALDES, D. ANDERSON: "STATISTICAL METHODS FOR COMPUTER ISS 03717 USAGE ANOMALY DETECTION USING NIDES", PROCEEDINGS OF THE 2546 3RD INTERNATIONAL WORKSHOP ON ROUGH SETS AND SOFT COMPUTING (ARBOR PFX) ARBOR NETWORKS WEBSITE: SMAHA REBUTTAL 2547 HTTP://WWW.ARBORNETWORKS.COM/DOWNLOADS/ARBOR_PEAKFLOREPORT W XDATA SHEET.PDF SITEPROTECTOR TECHNICAL REFERENCE GUIDE VERSION 2.0, ISS19497 2548 SERVICE PACK SITEPROTECTOR SUPPORTED AGENTS AND APPLIANCES VERSION 2.0, ISS19457 2549 SERVICE PACK 5.2, MARCH 30, 2005 2550 PROVENTIA DESKTOP AGENT ADMINISTRATOR GUIDE VERSION 8.0 ISS04207 REALSECURE AGENT ADVANCED ADMINISTRATION GUIDE VERSION ISS04769 2551 7.0 2552 ADVANCED TUNING PARAMETERS REFERENCE DOCUMENT ISS07737 PROVENTIA INTEGRATED SECURITY APPLIANCE M SERIES ISS09162 2553 APPLIANCE USER GUIDE ISS SERVER SENSOR VERSION 7.0 FOR WINDOWS ADVANCED TUNING ISS18138 2554 PARAMETERS REFERENCE DOCUMENT 2555 ISS PRODUCT SUPPORT MATRIX ISS42950 EMAIL FROM JENNIFER DAVIS TO ISS-WORLDWIDE RE ANNOUNCING ISS_00943078 2556 REALSECURE SITEPROTECTOR SECURITY FUSION MODULE 2.0 2557 N/A PROVENTIA NETWORK ANOMALY DETECTION SYSTEM ADVANCED CONFIGURATION GUIDE VERSION 3.5 SOURCE CODE RELATING TO SITEPROTECTOR -- RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING TO REALSECURE -- RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING TO SECURITYFUSION -- RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING TO REALSECURE NETWORK SENSOR -RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING TO REALSECURE GUARD -- RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING TO REALSECURE SERVER SENSOR N/A SOURCE CODE RELATING TO REALSECURE DESKTOP -- RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING TO PROVENTIA A -- RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING TO PROVENTIA G -- RESTRICTED CONFIDENTIAL SOURCE CODE ISS_01928092

OBJECTION BASIS

ISS19568 ISS19460 ISS04302 ISS04958 ISS07757 ISS09751 ISS18151 ISS42952 IS_00943079

ISS_01928184 Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified.

N/A

N/A

N/A

N/A

N/A

N/A

N/A

Page 3

ISS TRIAL EXHIBIT LIST

Case 1:04-cv-01199-SLR
TRIAL DESCRIPTION EXH. NO. SOURCE CODE RELATING TO PROVENTIA M -- RESTRICTED N/A CONFIDENTIAL SOURCE CODE

Document 524-11
BEG. BATES NO.

Filed 08/18/2008
END BATES NO.

Page 4 of 4

OBJECTION BASIS

FRE IN SUPPORT DATE OF ADMISSION ADMITTED Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified.

N/A

SOURCE CODE RELATING TO PROVENTIA SERVER -- RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING PROVENTIA DESKTOP -- RESTRICTED CONFIDENTIAL SOURCE CODE PROVENTIA NETWORK, ANOMALY DETECTION SYSTEM MONITORING THE NETWORK TO ENHANCE VISIBILITY, INTEGRITY, SONG 361 AND PREEMPTIVE PROTECTION 6/16/06 DECLARATION OF DOUGLAS SONG SUPPLEMENTAL REPORT OF DR. GEORGE KESIDIS ON INFRINGEMENT

N/A

2558 2559 2560

802; 403; 602 802

801; 803; 807; 403 801; 803; 807

ISS reserves the right to use any trial exhibit listed by any other party.

Page 4

ISS TRIAL EXHIBIT LIST