Free Declaration - District Court of Delaware - Delaware

Case 1:04-cv—01199—SLR Document 401 Filed 07/10/2006 Page 1 of 4
IN THE UNITED STATES DISTRICT COURT
FOR THE DISTRICT OF DELAWARE
SRI INTERNATIONAL, INC., )
a California Corporation, )
)
Plaintiff and )
Counterclaim—Defendant, )
)
v. )
) C. A. No. 04-1199 (SLR)
INTERNET SECURITY SYSTEMS, INC., )
a Delaware Corporation, INTERNET )
SECURITY SYSTEMS, INC., a Georgia )
Corporation, and SYMANTEC )
CORPORATION, a Delaware Corporation, )
)
Defendants and )
Cou1tte1‘c1ai1·n—Plaintiffs. )
SECOND DECLARATION OF DON HALL
Richard L. Horwitz (#2246)
OF COUNSEL: David E. Moore (#3983)
POTTER ANDERSON & CORROON LLP
Holmes J. Hawkins III Hercules Plaza 6th Floor
Bradley A. Slutsky 1313 N. Market Street
Natasha H. Moftitt Wilmington, DE 19801
KING & SPALDING LLP Tel: (30.2) 984-6000
1180 Peachtree Street rhorwitz@,gotteranderson.com
Atlanta, GA 30.309 dmoore@potte1‘a11der‘so11.cor11
Tel: (404) 572-4600
Airomeys For .D€](c?J?dC!I?{.S`
Theresa A. Moehlman [meme! Security Systems, Inc, cr Defczware
Bhavana Joneja Corgporcrtiozw; and Irnernet Security Systems,
KING & SPALDTNG LLP Inc., ar Georgia Corpomtion
1185 Avenue of the Americas
New York, New York 10036
Tel.: (212) 556-2100
Dated: July 10,2006

C · - - - .
ase 1.04 cv 01199 SLR Document 401 Filed 07/10/2006 Page 2 Of 4
IN THE UNITED STATES DISTRICT COURT
FOR TH`. DISTRICT OF DELAWARE
SRI INTERNATIONAL, INC., )
a California Corporation, )
)
Plaintiff and )
Connterciaim-D efendant, )
)
in )
)
nrranner secuarrv Svsrnrvrs, nrc., ) C. A., No: 0+1199 (SLR)
a Delaware Corporation, INTERNET )
SECURITY SYSTEMS, INC., a Georgia )
Corporation, and SYMANTEC )
CORPORATION, a Delaware Corporation, )
)
Defendants and )
Counterclaim-Plaintiffs. )
SECOND DECLARATION OF DON HALL
1.. My name is Don Hall and I have previously submitted a declaration in connection
with this litigation. The facts set forth herein are based upon my own experience, personal
knowledge, aud belief, and are true.
2. As I Set forth in my original declaration, RealSecure NT LO provided an Activity
Tree Window feature, which integrated and correlated the events or reports nom the RealSecure
Engines based on various criteria, including the network Source address that initiated the security
event or incident ("Source”’), the network destination address affected by the security event or
incident (“DBSilII1&I‘IO¥).”) and the type of security attack that was detected ("Event”). This was
done autcrnatically without user intervention.
3, As part of this functionality, RealSecure Console would create and maintain data
structures to track the grouped events. When a new event came into the Console, a data entry

Case 1:04-cv—01199—SLR Document 401 Filed 07/10/2006 Page 3 of 4
(node for the tree) was createdt When another event subsequently was seat to the Console by a
RealSecure agent that was to be combined as part of the group, the node for the tree was updated
to indicate the addition to the group, This data structure allowed new events to be added to the
group of combined events. The data structure was also used to display the grouping correctly in
the Activity Tree Window.
4( I reserve the right to supplement my declaration and to rely on additional
information that comes to my attention between new and the end of trial I declare under penalty
ofperjnry that the foregoing ls true and correct.
Dated: M O 6 Q'? g'
Doa Hall
2

Case 1:04-cv—01199—SLFi Document 401 Filed 07/10/2006 Page 4 of 4
IN THE UNITED STATES DISTRICT COURT
FOR THE DISTRICT OF DELAWARE
CERTIFICATE OF SERVICE
l, David E, Moore, hereby certify that on July 10, 2006, the foregoing
document was hand delivered to the following persons and was electronically tiled with
the Clerk of the Court using CM/ECP which will send notification of such tiling(s) to the
following and the document is available for viewing and downloading from CM/ECP:
John Horvath Richard K. Herrinann
Fish & Richardson P,.C. Morris James Hitchens & Williams LLP
919 Ni Market Street, Suite 1l00 222 Delaware Avenue, {tim Floor
P. O,. Box 1114 PD., Box 2306
Wilmington, DE 19899 Wilmington, DE 19899-2306
I hereby certify that on July 10, 2006, I have Electronically Mailed the attached
document to the following non-registered participants:
Howard Gt Pollack Paul S. Grewal
Michael J. Curley Day Casebeer Madrid & Batcheider LLP
Fish & Richardson P.C. 20300 Stevens Creek Boulevard
500 Argueilo Street, Suite 500 Suite 400
Redwood City, CA 94063 Cupertino, CA 95014
Q0ll21Cl(EDfI.COIT1 Qgrewal(a},daycaseheer·.com
[email protected]
/s/ David E. Moore
Richard L, Horwitz
David E, Moore
Porrsa ANDERSON & Cortnoon t,t,1¤
Hercules Plaza, 6th Floor
i3 13 North Market Street
Wilmington, DE l9899—095i
(302) 98445000
1'l101'WliZ@Q0lI€I`21l'iClGI'SOILCOHI
[email protected]
683314