Free Proposed Pretrial Order - District Court of Delaware - Delaware

Case 1:04-cv-01199-SLR

Document 524-10

Filed 08/18/2008

Page 1 of 8

SRI International, Inc. v. Symantec Corp. and Internet Security Systems, Inc. C.A. No. 04-1199-SLR Symantec Corp.'s Trial Exhibit List to SRI International, Inc.

TRIAL DESCRIPTION EXH. NO. 3000 IPS Selection Criteria & SNS 3001 Symantec Gateway Security 5400 Series Sales Overview 3002 Symantec Gateway Security 5400 Series Administrator's Guide 3003 The Complete ManHunt 3004 Unit 18 SESA Collection 3005 3006 3007 3008 3009 3010 3011 3012 3013 3014 3015 3016 3017 3018 3019 3020 3021 3022 SNS Administration Guide FlowChaser Data Store (FDS) Specification Invensys/Foxboro outline

BEG. BATES NO. SYM_P_0341091 SYM_P_0366436 SYM_P_0372848 SYM_P_0381128 SYM_P_0383815 SYM_P_0053881 SYM_P_0134095 SRIE 0373481

END BATES NO. SYM_P_0341121 SYM_P_0366501 SYM_P_0373313 SYM_P_0381191 SYM_P_0383848 SYM_P_0054272 SYM_P_0134099 SRIE 0373499 ISS_00178741 ISS_01452910 ISS_02035543 ISS2_00472650 SYM_P_0000003 SYM_P_0009048 SYM_P_0010110 SYM_P_0013420 SYM_P_0013984 SYM_P_0015162 SYM_P_0016456 SYM_P_0019214 SYM_P_0036749 SYM_P_0037727 SYM_P_0050707

OBJECTION BASIS 402; 403; 602; 802

FRE IN SUPPORT OF ADMISSION 401, 402, 403, 801, 803, 807

402; 403; 602; 802

401, 402, 403, 801, 803, 807 401, 402, 403, 801, 803, 807 401, 402, 403, 801, 803, 807

402; 403; 602; 802 402; 403; 602; 802

Email from Robert Graham (ISS) re: IDS thoughts ISS_00178740 Email from Thomas Ptacek (Arbor) IDS Product Feature Comparison PP: Management Competitive Update SNS 4.0 Product Sample FAQ: iFoce IDS v2.0 ManHunt 3.0 R2 Administration Guide SGS Reference Guide SGS 5400 Series Administrator's Guide SNS User Guide SNS Administration Guide (432 page version) PP: ManHunt Data Processing PP: SNS 4.0 Sensor Architecture PP: ManHunt's Layered Detection Functional Specification for Symantec ManHunt ISS_01452909 ISS_02035540 ISS2_00472636 SYM_P_0000003 SYM_P_0009044 SYM_P_0009721 SYM_P_0012889 SYM_P_0013471 SYM_P_0015029 SYM_P_0016025 SYM_P_0019204 SYM_P_0036739 SYM_P_0037697 SYM_P_0050683

402; 403; 602; 802

401, 402, 403, 801, 803, 807

Page 1 of 8

1009833_2.xls

Case 1:04-cv-01199-SLR

Document 524-10

Filed 08/18/2008

Page 2 of 8

SRI International, Inc. v. Symantec Corp. and Internet Security Systems, Inc. C.A. No. 04-1199-SLR Symantec Corp.'s Trial Exhibit List to SRI International, Inc.

TRIAL DESCRIPTION EXH. NO. 3023 PP: Recourse Product Review 3024

BEG. BATES NO. SYM_P_0050735

END BATES NO. SYM_P_0050752 SYM_P_0187245

OBJECTION BASIS FRCP 26 106; 402; 403; 602; 802 106 402; 403 402; 403 402; 403 402; 403; 602; 802 402; 403 402; 403 402; 403 106; 402; 403; 602; 802

ManHunt Technology vs Traditional Technology: SYM_P_0187244 Protocol Anomaly vs Behavior Anomaly Sony Electronics, Inc. IDS Evaluation [incomplete version] NSS Group IDS Product Questionnaire for ManHunt 3.0 NSS Group IPS Product Review Questionnaire for SNS 7120 and 7160 Symantec Technical Brief re SNS Clustering Email thread re ManHunt / SNS Flow Alert Rules RFI Response for Ziff Davis Media re SNS 7100 Email from Wheeler to Janczura re: Response Rules for SNS Gartner Questionnaire re SNS 7100 FlowChaser Database Parameters Summary of configurable parameters for SNS Email re SNS functionality ManHunt 2.0 Sensor Architecture Spec Corrections to article re ManHunt 2.0 eNDC 2.0 PFR Symantec ManHunt Smart Agents FAQ ManHunt 3.0 User Guide PP: ManHunt Architecture FlowNavigator Parameters SSIM 9500 Series QuickStart! SYM_P_0187889 SYM_P_0195683 SYM_P_0195883 SYM_P_0199907 SYM_P_0203835 SYM_P_0204307 SYM_P_0204480 SYM_P_0208880 SYM_P_0224570 SYM_P_0229173 SYM_P_0237863 SYM_P_0244837 SYM_P_0251741 SYM_P_0251780 SYM_P_0255664 SYM_P_0256545 SYM_P_0258837 SYM_P_0264136 SYM_P_0283045

FRE IN SUPPORT OF ADMISSION SRI's objection requires clarification 401, 402, 403, 801, 803, 807

3025 3026 3027 3028 3029 3030 3031 3032 3033 3034 3035 3036 3037 3038 3039 3040 3041 3042 3043

SYM_P_0187895 SYM_P_0195687 SYM_P_0195889 SYM_P_0199916 SYM_P_0203838 SYM_P_0204314 SYM_P_0204483 SYM_P_0208898 SYM_P_0224571 SYM_P_0229199 SYM_P_0237867 SYM_P_0244839 SYM_P_0251743 SYM_P_0251806 SYM_P_0255668 SYM_P_0256688 SYM_P_0258851 SYM_P_0264137 SYM_P_0283071

401, 402, 403 401, 402, 403 401, 402, 403 401, 402, 403, 801, 803, 807 401, 402, 403 401, 402, 403 401, 402, 403 401, 402, 403, 801, 803, 807

402; 403 402; 403

401, 402, 403 401, 402, 403

402; 403; 602; 802

401, 402, 403, 801, 803, 807

Page 2 of 8

1009833_2.xls

Case 1:04-cv-01199-SLR

Document 524-10

Filed 08/18/2008

Page 3 of 8

SRI International, Inc. v. Symantec Corp. and Internet Security Systems, Inc. C.A. No. 04-1199-SLR Symantec Corp.'s Trial Exhibit List to SRI International, Inc.

TRIAL DESCRIPTION EXH. NO. 3044 Email from Catahan to Tolle re: Sumantec: Network Computing's Secure Enterprise: Review of Network Traffic Anomaly Detection Products 3045 3046 3047 3048 3049 3050 3051 3052 3053 3054 3055 3056 3057 3058 Ursa Major (ManHunt 4.0) PFR SSIM Support Team Training (Student Guide) SSIM 4.0 Installation Guide SGS 5400 Series QuickStart! PP: xNDC Portscan Detection Email thread re SNS customer questions Email thread re DoS detection ManHunt 3.0 Product Sample SNS 7100 Series Product Sample SGS 5400 Series Product Sample SSIM 9500 Series Product Sample RFI Response for Ziff Davis Media re SNS 7100 (alternate version) Email thread re anomaly detection Financial data indicating which customers have purchased which accused products - produced in response to SRI's Rog 17 Declaration of Jeremy F. Bennett

BEG. BATES NO. SYM_P_0297896

END BATES NO. SYM_P_0297900

OBJECTION BASIS 402; 403; 602; 802

FRE IN SUPPORT OF ADMISSION 401, 402, 403, 801, 803, 807

SYM_P_0333695 SYM_P_0370343 SYM_P_0379015 SYM_P_0379673 SYM_P_0413567 SYM_P_0456813 SYM_P_0476684 SYM_0513086 SYM_0513087 SYM_0513088 SYM_0513089 SYM_P_0532554 SYM_P_0541803 SYM_P_0553071

SYM_P_0333726 SYM_P_0370644 SYM_P_0379049 SYM_P_0379693 SYM_P_0413586 SYM_P_0456816 SYM_P_0476687 SYM_0513086 SYM_0513087 SYM_0513088 SYM_0513089 SYM_P_0532560 SYM_P_0541809 SYM_P_0553071

106; 402; 403; 602; 802

401, 402, 403, 801, 803, 807

402; 403; 602; 802 402; 403; 602; 802 402; 403; 602; 802

401, 402, 403, 801, 803, 807 401, 402, 403, 801, 803, 807 401, 402, 403, 801, 803, 807 401, 402, 403, 801, 803, 807

106; 402; 403; 602; 802

402; 403; 602; 802

401, 402, 403, 801, 803, 807

3059

SYM_P_0605159

SYM_P_0605162

802; FRCP 37 (untimely produced)

801, 803, 807, Disclosed no later than 6/1/06 in Symantec's Summary Judgment re NonInfringement

Page 3 of 8

1009833_2.xls

Case 1:04-cv-01199-SLR

Document 524-10

Filed 08/18/2008

Page 4 of 8

SRI International, Inc. v. Symantec Corp. and Internet Security Systems, Inc. C.A. No. 04-1199-SLR Symantec Corp.'s Trial Exhibit List to SRI International, Inc.

TRIAL DESCRIPTION EXH. NO. 3060 Declaration of Brandon Suzuki

BEG. BATES NO. SYM_P_0605163

END BATES NO. SYM_P_0605166

OBJECTION BASIS 802; FRCP 37 (untimely produced)

FRE IN SUPPORT OF ADMISSION 801, 803, 807, Disclosed no later than 6/1/06 in Symantec's Summary Judgment re NonInfringement

3061 3062 3063

Copy Port and ManHunt Sensor Interface Nodes

SYM_P_0263725

SYM_P_0263727 SRIE 0305734 SRIE 0077329

Email from Stavridou to Bercow re: Recourse SRIE 0305733 Moran no longer at Recourse. Email from Bercow to Karl Hutter re: follow-up on SRIE 0077329 prior conversation re: areas Recourse might want to consider that SRI has put its efforts into. Document entitled, "Introduction" - outline for SRIE 0126661 developing relationship involving technology transfer with Recourse SYM_P_0266896 ManHunt Release History Press Release: MH 1.2 available SYM_P_0344432 TEA_0002879 Teal Invoices and Billing Records SRIE 0042166 Email from Staudenraus to Porras with copy to Bercow, Platon and Staudenraus re: Technical Due Diligence Slide Descriptions Technical Plan Summary v0.1. SRI 098098 Contributors include Phil Porras (SRI), Oliver Friedrichs (Symantec), Brian Hernacki (Symantec), Juanita Koilpillai (Symantec), Patrick Lincoln (SRI) and Carey Nachenberg (Symantec) Email from Lindqvist to Siciliano et al re: SOW for Symantec SRIE 0061887

3064

SRIE 0126662

402; 403; 602; 802

401, 402, 403, 801, 803, 807

3065 3066 3067 3068

SYM_P_0266907 SYM_P_0344435 TEA_0002884 SRIE 0042166

802 402; 403; 602; 802

801, 803, 807 401, 402, 403, 801, 803, 807

3069

SRI 098105

3070

SRIE 0061887

Page 4 of 8

1009833_2.xls

Case 1:04-cv-01199-SLR

Document 524-10

Filed 08/18/2008

Page 5 of 8

SRI International, Inc. v. Symantec Corp. and Internet Security Systems, Inc. C.A. No. 04-1199-SLR Symantec Corp.'s Trial Exhibit List to SRI International, Inc.

TRIAL DESCRIPTION EXH. NO. 3071 Memo re EMERALD commercial discussions 3072 3073 3074 3075 3076 3077 3078 3079 3080 3081 3082 3083 3084 3085 3086 3087 3088 3089 Email re Chat + Symantec Letter from Schallop to Abramson declining license to SRI's patents SYMC Corporate Info Webpage Email from Porras to EMERALD development team re ManHunt sql slammer filter rule Email from Stsudenraus to Bercow re: Symantec and AlertSoft/SRI Email re Symantec RFP WS088 Email enclosing Hernacki Bio Email re Draft CyberShield Technical Plan Email from Bercow to Porras et al. re: SQL Slammer Filter Rule Email re: Final version of DIME proposal Minutes from Weekly CyberShield Team Telecon Email re FYI: Symantec VP picked as gov't cybersecurity czar SYMC 2001 Annual Report SYMC 2002 Annual Report SYMC 2003 Annual Report SYMC 2005 Annual Report SYMC 2004 Annual Report 2006 SYMC Corporate Fact Sheet

BEG. BATES NO. SRI 087670 SRI 284008 SRI 284281 SRI 286548 SRIE 0001234 SRIE 0044184 SRIE 0061770 SRIE 0063759 SRIE 0080941 SRIE 0246467 SRIE 0289942 SRIE 0320604 SRIE 0474267 SYM_P_0185935 SYM_P_0185993 SYM_P_0186102 SYM_P_0186258 SYM_P_0186178 SYM_P_0605200

END BATES NO. SRI 087670 SRI 284008 SRI 284281 SRI 286552 SRIE 0001234 SRIE 0044184 SRIE 0061770 SRIE 0063759 SRIE 0080942 SRIE 0246467 SRIE 0289942 SRIE 0320606 SRIE 0474267 SYM_P_0185992 SYM_P_0186012 SYM_P_0186177 SYM_P_0186279 SYM_P_0186257 SYM_P_0605204

OBJECTION BASIS 402; 403; 602; 802

FRE IN SUPPORT OF ADMISSION 401, 402, 403, 801, 803, 807

402; 403 402; 403; 602; 802

401, 402, 403 401, 402, 403, 801, 803, 807 801, 803, 807, 901 401, 402, 403, 801, 803, 807

602; 802; 901 402; 403; 602; 802

602; 802; 901

801, 803, 807, 901

Page 5 of 8

1009833_2.xls

Case 1:04-cv-01199-SLR

Document 524-10

Filed 08/18/2008

Page 6 of 8

SRI International, Inc. v. Symantec Corp. and Internet Security Systems, Inc. C.A. No. 04-1199-SLR Symantec Corp.'s Trial Exhibit List to SRI International, Inc.

TRIAL DESCRIPTION EXH. NO. 3090 Source Code in "manhunt/src/flownav/fds" directory

BEG. BATES NO. Exhibit 3090 is a compilation of each file in the indicated directory. It was identified as "relevant source code" associated with Manhunt's Flow Alert mechanism and FlowChaser data store. 5/16/06 Hansen Report at 13. This source code has been available to SRI at Symantec's escrow facility since 12/2/05. SYM_P_0605158 SYM_P_0605145 SYM_P_0263725 SRI 109482 SRI 011417 SRI 144564 SRI 097738 SRIE 0018952

END BATES NO.

FRE IN SUPPORT OF ADMISSION Insufficient description Disclosed no later - SRI reserves all than 5/16/06 in objections Hansen Report OBJECTION BASIS

3091 3092 3093 3094 3095 3096 3097 3098 3099

SSIM 9500 Event Collectors Sony Electronics, Inc. IDS Evaluation Copy Port and ManHunt Sensor Interface Nodes Emerald Business Plan Eighth Intrusion Detection Workshop schedule and attendees list Exhibit A: Business Issues Outlines for Emerald Development Environment Business Issues Outline for Emerald Development Environment Email from Porras to Lindqvist re P-Best and IPR

SYM_P_0605158 SYM_P_0605157 SYM_P_0263727 SRI 109486 SRI 011420 SRI 144572 SRI 097746 SRIE 0018952 SRI 144693

FRCP 37 (untimely produced) FRCP 37 (untimely produced) 402; 403 402; 403; 602; 802

Disclosed no later than 9/13/06 Disclosed no later than 9/13/06 401, 402, 403 401, 402, 403, 801, 803, 807

402; 403; 602; 802 402; 403; 602; 802

401, 402, 403, 801, 803, 807 401, 402, 403, 801, 803, 807

Outline of Terms for Software Distribution SRI 144689 Agreement Between SRI International and Infinity Technology Services, Inc.

402; 403; 602; 802

401, 402, 403, 801, 803, 807

Page 6 of 8

1009833_2.xls

Case 1:04-cv-01199-SLR

Document 524-10

Filed 08/18/2008

Page 7 of 8

SRI International, Inc. v. Symantec Corp. and Internet Security Systems, Inc. C.A. No. 04-1199-SLR Symantec Corp.'s Trial Exhibit List to SRI International, Inc.

TRIAL DESCRIPTION EXH. NO. 3100 Emerald Licensing Program, VLB 3101 3102

BEG. BATES NO. SRIE 0354883

END BATES NO. SRIE 0354899 SRI 019379

OBJECTION BASIS 402; 403; 602; 802 402; 403; 602; 802

3103

3104

3105

3106

3107

Evaluation Software License Agreement, Contract SRIE 019375 No. BET-090903-083 End of Live and End of Support dates for Symantec security gateway products from service1.symantec.com/support/entgate.nsf/854fa02b4f5013678825731a007d06af/d4e 655703caabe7d8825745f007bfa6c?OpenDocumen t Release Details - Gateway Security 5000 Series versions 1.0, 2.0, 2.0.1, 3.0, and 3.0.1 from www.symantec.com/business/support/release_detai ls.jsp?pid=51963 Release Details - Gateway Security 1600 Series versions 3.0, and 3.0.1 from www.symantec.com/business/support/release_detai ls.jsp?pid=53078 Release Details - Network Security version 4.0.x from www.symantec.com/business/support/release_detai ls.jsp?pid=51994 Release Details - Incident Manager version 3.0 from www.symantec.com/business/support/release_detai ls.jsp?pid=51969 Press release: "Symantec Announces Beta Availability Of Revolutionary Security Information Management Appliance"

402, 403, 901, FRCP 37 (untimely produced)

FRE IN SUPPORT OF ADMISSION 401, 402, 403, 801, 803, 807 401, 402, 403, 801, 803, 807 401, 402, 403, 901, 902, FRCP 26(e), 37(c)

401, 402, 403, 901, 402, 403, 901, FRCP 902, FRCP 26(e), 37 (untimely produced) 37(c) 401, 402, 403, 901, 402, 403, 901, FRCP 902, FRCP 26(e), 37 (untimely produced) 37(c) 401, 402, 403, 901, 402, 403, 901, FRCP 902, FRCP 26(e), 37 (untimely produced) 37(c) 401, 402, 403, 901, 402, 403, 901, FRCP 902, FRCP 26(e), 37 (untimely produced) 37(c) 402, 403, 801, 802, 901, FRCP 37 (untimely produced) 401, 402, 403, 801, 803, 807, 901, 902, FRCP 26(e), 37(c)

Page 7 of 8

1009833_2.xls

Case 1:04-cv-01199-SLR

Document 524-10

Filed 08/18/2008

Page 8 of 8

SRI International, Inc. v. Symantec Corp. and Internet Security Systems, Inc. C.A. No. 04-1199-SLR Symantec Corp.'s Trial Exhibit List to SRI International, Inc.

TRIAL DESCRIPTION EXH. NO. 3108 Symantec Security Response - ManHunt Security Updates from www.symantec.com/avcenter/security/Content/Pro duct/Product MH.html 3109 Introduction to Symantec ManHunt 3.0 from service1.symantec.com/SUPPORT/intrusiondetect kb.nsf/docid/2003050909004553?OpenDocument &src=ent_hot&dtype=corp&prod=Symantec%20 ManHunt&ver=3.0.x&tpre= 3110 Release Details - ManHunt versions 1.0, 1.1, 1.2, 2.0, 2.1, 2.11, 2.2, and 3.0 from www.symantec.com/business/support/release_detai ls.jsp?pid=51988 3111 SGS 5600 Series Product Sample 3112 3113 SGS 1600 Series Product Sample Symantec Incident Manager 3.0 Product Sample

BEG. BATES NO.

END BATES NO.

FRE IN SUPPORT OF ADMISSION 401, 402, 403, 901, 402, 403, 901, FRCP 902, FRCP 26(e), 37 (untimely produced) 37(c) OBJECTION BASIS 401, 402, 403, 901, 902, FRCP 26(e), 37(c)

402, 403, 901, FRCP 37 (untimely produced)

401, 402, 403, 901, 402, 403, 901, FRCP 902, FRCP 26(e), 37 (untimely produced) 37(c) 403, 901, FRCP 37 (untimely produced) 403, 901, FRCP 37 (untimely produced) 403, 901, FRCP 37 (untimely produced) 401, 403, 901, 902, FRCP 26(e), 37(c) 401, 403, 901, 902, FRCP 26(e), 37(c) 401, 403, 901, 902, FRCP 26(e), 37(c)

Page 8 of 8

1009833_2.xls