Free Proposed Pretrial Order - District Court of Delaware - Delaware

Case 1:04-cv-01199-SLR
TRIAL DESCRIPTION EXH. NO. ISS' PROVENTIA MANAGEMENT SITEPROTECTOR USER GUIDE FOR 2500 SECURITY MANAGERS VERSION 2.0, SERVICE PACK 6.0 MANUAL ENTITLED "SITEPROTECTOR -- SECURITY FUSION MODULE 2501 GUIDE VERSION 2.0 2502 ISS PRESENTATION ENTITLED "FUSION UPDATE" SITEPROTECTOR USER GUIDE FOR SECURITY MANAGERS VERSION 2503 2.0, SERVICE PACK 5 2504 PROVENTIA A SERIES PROVENTIA - INTRUSION PREVENTION APPLIANCE, PREEMPTIVE 2505 ENTERPRISE PROTECTION FOR NETWORKS 2506 ISS' REALSECURE SIGNATURES REFERENCE GUIDE VERSION 6.5 2507 SITEPROTECTOR - SUPPORTED AGENTS AND APPLICATIONS PROVENTIA NETWORK, ANOMALY DETECTION SYSTEM 2508 MONITORING THE NETWORK TO ENHANCE VISIBILITY, INTEGRITY, AND PREEMPTIVE PROTECTION INTERNET SECURITY SYSTEMS© PROVENTIA NETWORK ANOMALY 2509 DETECTION SYSTEM USER GUIDE VERSION 3.5 FUSION UPDATED 2510 2511 2512 SECURITY FUSION MODULE 2.0 TECH SUPPORT CHALK TALK BY D. COOK, P. GRISWOLD HTTP://DOCUMENTS.ISS.NET/LITERATURE/SITEPROTECTOR/DATASHE ET-FUSION2.0.PDF HEALTHSOUTH NO. 28 - SECURITY NETWORK DESIGN DIAGRAM SHOWING THE DEPLOYMENT OF MULTIPLE PROVENTIA G, ALONG WITH SITEPROTECTOR AND THE SECURITY FUSION MODULE, IN THE HEALTHSOUTH NETWORK REALSECURE NETWORK SENSOR AND GIGABIT NETWORK SENSOR FREQUENTLY ASKED QUESTIONS ISS ENHANCED DYNAMIC THREAT PROTECTION VIA AUTOMATED CORRELATION AND ANALYSIS REALSECURE NETWORK 10/100 PRODUCT DESCRIPTION REALSECURE NETWORK GIGABIT PRODUCT DESCRIPTION HTTP://DOCUMENTS.ISS.NET/LITERATURE/REALSECURE/RSN10100_DATASHEET.PDF HTTP://DOCUMENTS.ISS.NET/LITERATURE/PROVENTIA/PROVENTIA_P LATFORM_BROCHURES.PDF REALSECURE GUARD REALSECURE GUARD FREQUENTLY ASKED QUESTIONS REALSECURE SIGNATURE REFERENCE GUIDE, VERSION 6.5 LIST OF ISS AGENTS THAT PERFORM PROTOCOL ANOMALY DETECTION MODULE 5: REALSECURE UNDER THE HOOD

Document 465-11
BEG. BATES NO. CRIST 321 GRISWOLD 334 ISS60287 ISS19569 MCEWIN 122 MCEWIN 123 ISS17243 RAJASEKHARAN 113 STEWART 99 ISS_01927908 ISS60297 ISS60287 ISS_00535783 ISS18096 ISS60300 ISS19838

Filed 10/06/2006
OBJECTION BASIS

Page 1 of 4
FRE IN SUPPORT DATE OF ADMISSION ADMITTED

END BATES NO.

ISS_01928091 ISS60300 ISS_00535821 106 Irregularity in Bates Number; Should reference ISS_00535783-821 106

KESIDIS REPORT ­ ISS KESIDIS REPORT ­ ISS

2513

2514 2515 2516 2517 2518 2519 2520 2521 2522

SRI 000001 SRI 000020 SRI 000034 SRI 000036 KESIDIS REPORT ­ ISS KESIDIS REPORT ­ ISS ISS 06012 ISS 06011 ISS 17243 ISS2_00105902

SRI 000009 SRI 000033 SRI 000035 SRI 000037

106 ISS 06017 ISS 18096 ISS2_00105904

106

2523

Exhibit does not match description; clarification needed - SRI reserves all objections Exhibit does not match description; clarification needed - SRI reserves all objections

2524

LIST OF ISS PROTOCOLS RECOGNIZED BY PAM, INCLUDING FINGER, FTP, HTTP, ICMP, POP3, REALAUDIO, SMTP, SNMP EXHIBIT NO. NOT USED

ISS_00105903

Page 1

804996_1.xls -- ISS TRIAL EXHIBIT LIST

Case 1:04-cv-01199-SLR

Document 465-11

Filed 10/06/2006
OBJECTION BASIS

Page 2 of 4
FRE IN SUPPORT DATE OF ADMISSION ADMITTED

TRIAL DESCRIPTION BEG. BATES NO. EXH. NO. ROBERT MCEWIN EXHIBIT 123 - PROVENTIA INTRUSION PREVENTION KESIDIS REPORT ­ ISS 2525 APPLIANCES REAL PROTECTOR THIRD PARTY MODULE PRODUCT DESCRIPTION; SRI 000047 2526 SITE PROTECTOR THIRD PARTY MODULE FREQUENTLY ASKED QUESTIONS ADS USER GUIDE AT 5, 23 (AVAILABLE AT KESIDIS REPORT ­ ISS 2527 HTTP://DOCUMENTS.ISS.NET/LITERATURE/PROVENTIA/ADSUSERGUID E.PDF THIRD PARTY ANALYSIS BY BURTON GROUP DESCRIBING ARBOR SYM_P_0052701 2528 NETWORK'S PEAKFLOW 2529 EXPERT REPORT OF DR. GEORGE KESIDIS ON INFRINGEMENT TO ISS KESIDIS 1 MORVILLE 539 ISS PAMPHLET: PROVENTIA NETWORK ANOMALY DETECTION 2530 SYSTEM 2531 ISS PROVENTIA NETWORK QUICK START GUIDE VERSION 3.5 ARB 00693 2532 ISS PROVENTIA NETWORK USER GUIDE VERSION 3.5 ARB 00094 ARB 00001 ISS PROVENTIA NETWORK ADVANCED CONFIGURATION GUIDE 2533 VERSION 3.5 (BURTON 2003) BURTON GROUP, "SECURITY THE ENTERPRISE WITH SYM_P_0052675 2534 NETWORK BEHAVIOR ANOMALY DETECTION" (CISCO 6350) CISCO SYSTEMS WEBSITE: SMAHA REBUTTAL 2535 HTTP://WWW.CISCO.COM/EN/US/PRODUCTS/PS6350/PRODUCTS_CONFI REPORT GURATION_GUIDE_CHAPTER09186A00805E7C53.HTML (CISCO 6601) CISCO SYSTEMS WEBSITE, AVAILABLE AT SMAHA REBUTTAL 2536 HTTP://WWW.CISCO.COM/EN/US/PRODUCTS/PS6601/PRODUCTS_WHITE REPORT _PAPER0900AECD80406232.SHTML (FED-STD-1037C) FEDERAL STANDARD 1037C, SMAHA REBUTTAL 2537 TELECOMMUNICATIONS: GLOSSARY OF TELECOMMUNICATIONS REPORT TERMS, GENERAL SERVICES ADMINISTRATION Y.F. JOU, S.F. WU ET AL. "ARCHITECTURE DESIGN OF A SCALABLE ISS 27334 INTRUSION DETECTION SYSTEM FOR THE EMERGING NETWORK", 2538 TECHNICAL REPORT CDRL A005, DARPA ORDER NO. E296, DEPT. OF COMPUTER SCIENCE, NORTH CAROLINA STATE UNIVERSITY EXPERT REPORT OF DR. GEORGE KESIDIS ON INFRINGEMENT SMAHA REBUTTAL 2539 REPORT (PNADS OV) ISS, "PROVENTIA NETWORK ANOMALY DETECTION SMAHA REBUTTAL SYSTEM - COMPARE MODELS", REPORT 2540 HTTP://WWW.ISS.NET/PRODUCTS_SERVICES/ENTERPRISE_PROTECTIO N/PROVENTIA/ANOMALY_DETECTION/MODELS.PHP (PROVENTIA SERVER) 2541 HTTP://DOCUMENTS.ISS.NET/LITERATURE/PROVENTIA/PROVENTIA_S ERVER_WINDOWS_DATA_SHEET.PDF (REALSECURE NT 1.0 UG) "REALSECURE RELEASE 1.0 FOR WINDOWS ISS 02126117 2542 NT 4.0 USER GUIDE AND REFERENCE MANUAL" SECURITY FOCUS WEBSITE: SMAHA REBUTTAL 2543 HTTP://WWW.SECURITYFOCUS.COM/INFOCUS/1796 REPORT (SMAHA 1988) S. SMAHA: "HAYSTACK: AN INTRUSION DETECTION SYSTEM" PROCEEDINGS OF THE IEEE 4TH AEROSPACE COMPUTER SECURITY APPLICATIONS CONFERENCE, ORLANDO, FL ISS 04072

END BATES NO.

SRI 000052

106

106

106 802

106 801; 803; 807

ARB 00740 ARB 00273 ARB 00093 SYM_P_0052717 FRCP 37 (untimely produced); SRI reserves all other objections FRCP 37 (untimely produced); SRI reserves all other objections FRCP 37 (untimely produced); SRI reserves all other objections 602; 802 Disclosed no later than May 16, 2006. Disclosed no later than May 16, 2006. Disclosed no later than May 16, 2006. 801; 803; 807

ISS 27374

802

801; 803; 807

ISS 02126244

602; 802 FRCP 37 (untimely produced); 802; 602

801; 803; 807 801; 803; 807; Disclosed no later than May 16, 2006. 801; 803; 807

ISS 04079

802; 602

2544

2545

(SOURCEFORGE NETFLOW) SOURCEFORGE ONLINE OPEN SOURCE SMAHA REBUTTAL REPOSITORY: REPORT HTTP://SOURCEFORGE.NET/SEARCH/?WORDS=NETFLOW&TYPE_OF_SE ARCH=SOFT Page 2

Disclosed no later FRCP 37 (untimely produced); SRI reserves all than May 16, 2006. other objections

804996_1.xls -- ISS TRIAL EXHIBIT LIST

Case 1:04-cv-01199-SLR

Document 465-11
ISS 03722

Filed 10/06/2006
OBJECTION BASIS

Page 3 of 4
FRE IN SUPPORT DATE OF ADMISSION ADMITTED

TRIAL DESCRIPTION BEG. BATES NO. EXH. NO. A. VALDES, D. ANDERSON: "STATISTICAL METHODS FOR COMPUTER ISS 03717 USAGE ANOMALY DETECTION USING NIDES", PROCEEDINGS OF THE 2546 3RD INTERNATIONAL WORKSHOP ON ROUGH SETS AND SOFT COMPUTING (ARBOR PFX) ARBOR NETWORKS WEBSITE: SMAHA REBUTTAL 2547 HTTP://WWW.ARBORNETWORKS.COM/DOWNLOADS/ARBOR_PEAKFLOREPORT W_XDATA_SHEET.PDF SITEPROTECTOR TECHNICAL REFERENCE GUIDE VERSION 2.0, ISS19497 2548 SERVICE PACK SITEPROTECTOR SUPPORTED AGENTS AND APPLIANCES VERSION 2.0, ISS19457 2549 SERVICE PACK 5.2, MARCH 30, 2005 2550 PROVENTIA DESKTOP AGENT ADMINISTRATOR GUIDE VERSION 8.0 ISS04207 REALSECURE AGENT ADVANCED ADMINISTRATION GUIDE VERSION ISS04769 2551 7.0 2552 ADVANCED TUNING PARAMETERS REFERENCE DOCUMENT ISS07737 ISS09162 PROVENTIA INTEGRATED SECURITY APPLIANCE M SERIES 2553 APPLIANCE USER GUIDE ISS SERVER SENSOR VERSION 7.0 FOR WINDOWS ADVANCED TUNING ISS18138 2554 PARAMETERS REFERENCE DOCUMENT 2555 ISS PRODUCT SUPPORT MATRIX ISS42950 EMAIL FROM JENNIFER DAVIS TO ISS-WORLDWIDE RE ANNOUNCING ISS_00943078 2556 REALSECURE SITEPROTECTOR SECURITY FUSION MODULE 2.0 2557 N/A PROVENTIA NETWORK ANOMALY DETECTION SYSTEM ADVANCED CONFIGURATION GUIDE VERSION 3.5 SOURCE CODE RELATING TO SITEPROTECTOR -- RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING TO REALSECURE -- RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING TO SECURITYFUSION -- RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING TO REALSECURE NETWORK SENSOR -RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING TO REALSECURE GUARD -- RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING TO REALSECURE SERVER SENSOR N/A SOURCE CODE RELATING TO REALSECURE DESKTOP -- RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING TO PROVENTIA A -- RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING TO PROVENTIA G -- RESTRICTED CONFIDENTIAL SOURCE CODE ISS_01928092

END BATES NO.

ISS19568 ISS19460 ISS04302 ISS04958 ISS07757 ISS09751 ISS18151 ISS42952 IS_00943079

ISS_01928184 Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified.

N/A

N/A

N/A

N/A

N/A

N/A

N/A

Page 3

804996_1.xls -- ISS TRIAL EXHIBIT LIST

Case 1:04-cv-01199-SLR
TRIAL DESCRIPTION EXH. NO. SOURCE CODE RELATING TO PROVENTIA M -- RESTRICTED N/A CONFIDENTIAL SOURCE CODE N/A SOURCE CODE RELATING TO PROVENTIA SERVER -- RESTRICTED CONFIDENTIAL SOURCE CODE SOURCE CODE RELATING PROVENTIA DESKTOP -- RESTRICTED CONFIDENTIAL SOURCE CODE PROVENTIA NETWORK, ANOMALY DETECTION SYSTEM MONITORING THE NETWORK TO ENHANCE VISIBILITY, INTEGRITY, AND PREEMPTIVE PROTECTION 6/16/06 DECLARATION OF DOUGLAS SONG SUPPLEMENTAL REPORT OF DR. GEORGE KESIDIS ON INFRINGEMENT

Document 465-11
BEG. BATES NO.

Filed 10/06/2006
OBJECTION BASIS

Page 4 of 4

END BATES NO.

FRE IN SUPPORT DATE OF ADMISSION ADMITTED Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified. Insufficient description Sufficiently SRI reserves all objections identified.

N/A

2558

SONG 361 802; 403; 602 801; 803; 807; 403

2559 2560

802

801; 803; 807

ISS reserves the right to use any trial exhibit listed by any other party.

Page 4

804996_1.xls -- ISS TRIAL EXHIBIT LIST