Free Redacted Document - District Court of Delaware - Delaware

Case 1 :04-cv-01199-SLR Document 303 Filed 06/20/2006 Page 1 of 4
IN THE UNITED STATES DISTRICT COURT
FOR THE DISTRICT OF DELAWARE
SRI NTERNATIONAL, INC., )
a California Corporation, )
)
Plaintiff, )
) C. A. No. 04-E 199 (SLR)
v- )
) PUBLIC ERSION
INTERNET SECURITY SYSTEMS, INC., )
a Delaware Corporation, )
INTERNET SECURITY SYSTEMS, ENC., )
a Georgia Corporation and )
SYMANTEC CORPORATION, )
a Delaware Corporation, )
)
Defendairtsr )
DECLARATION OF DAVID E. MOORE IN SUPPORT OF JOINT OPENING
CLAIM CONSTRUCTION BRIEF OF DEFENDANTS ISS AND SYMANTEC
Richard L. Horwitz (#2246) Richard K,. I-lerrrnann (#405)
David E. Moore (#3983) Mary B. Matterer (#2696)
POTTER ANDERSON & CORROON LLP MORRIS JAMES I-IITCHENS & WILLIAMS LLP
Hercules Plaza 6th Floor 222 Delaware Avenue, l0"' Floor
I313 N. Market Street Wilmington, DE 1980}
Wilmington, DE. i980l rherrrnann{rr}inorris`|ames.eoin
[email protected] rnmatterer(@.morris]amescom
dmoore@_potterandersonxzoin
OF COUNSEL:
OF COUNSEL:
Lloyd R. Day, Jr.
Holmes J. Hawkins III Robert M. Galvin
Natasha H, Moflitt Paul S. Grewal
KING & SPALDING LLP DAY, CASEBEER MADRID &
i9l Peachtree Street BATCHELDER LLP
Atlanta, GA 30303 20300 Stevens Creek Blvd.
Cupertino, CA 950l4
Theresa A. Moehlman
KING & SPALDING LLP Miehaei I . Schallop
1 185 Avenue ofthe Americas Symantec Corporation
New York, New York 10036 20330 Stevens Creek Bivd.
Cupertino, CA 95014
Attorneys for Deferrdarrtr Irrterrret Secrrrity
Systerrrs, rr Delawcrre Corpomtiorr cmd Irrtervret Attor·r·rey.s for Deferrdrrrrt Syrrrrrrrtec Coryyorncrtiorr
Security Systerrrs, cr Georgie: Corporation
Dated: June 9, 2006
Public Version Dated: June 20, 2006

Case 1:04-cv—01199—SLFi Document 303 Filed 06/20/2006 Page 2 of 4
i, David E. Moore, hereby declare as follows:
1. Attached hereto as Exhibits A—D are true and correct copies of U.S. Patent
Nos. 6,484,203 (“the ‘203 patent”), 6,71 1,615 (“the ‘6i5 patent”), 6,321,338 ("the ‘338
patent") and 6,708,212 (‘°tlie ‘2l2 patent”)
2. Attached hereto as Exhibit E are true and correct copies of selected pages
ofthe Expert Report of Stuart Staniford.
3i
_
4
_
5»
_
6. Attached hereto as Exhibit I are true and correct copies of selected pages
of the Deposition Transcript of George Kesiclis.
7. Attached hereto as Exhibit J is a true and correct copy of` “Emerald:
Event Monitoring Enabling Responses to Anomalous Live Disturbances," by Phillip A.
Porras and Peter G. Neumann, published in the Proceedings of the NISTZNCSC National
information Systems Security Conference (NISSC), October 7—10, 1997, Baltimore, MD.
8. Attached hereto as Exhibit K are true and correct copies of selected pages
ofthe Deposition Transcript of Y. Frank J ou.
9. Attached hereto as Exhibit L are true and correct copies of selected pages
from the Random House Dictionary of the English Language (2d Ed. Unabridged 1983).

Case 1:04-cv—01199—SLR Document 303 Filed 06/20/2006 Page 3 of 4
10
l l, Attached hereto as Exhibit N is a true and correct copy of "Statistical
Methods for Computer Usage Anomaiy Detection Using NIDES,’” by Alfonso Valdes and
Debra Anderson, published in the Proceedings of the Third International Workshop on
Rough Sets and Soft Computing (Jan, 1995),.
I2, Attached hereto as Exhibit O is a true and correct copy of "Live Trafiic
Analysis of`TCP/IP Gateways," by i°hi1iip A. Porras and Alfonso Valdes, published on
SRI’s website in 1997 and in the proceedings of the 1998 {SOC Symposium on Network
and Distributed Systems Securityn
EXECUTED this 9"` day of June, 2006 in Wilmington, Delaware
/s/ David E. Moore
David E. Moore
Public Version Dated: June 20, 2006
73778E
2.

Case 1:04-cv—01199—SLR Document 303 Filed 06/20/2006 Page 4 of 4
IN THE UNITED STATES DISTRICT COEERT
FOR THE DISTRICT OF DELAWARE
CERTIFICATE OF SERVTCE
E, David E. Moore, hereby certify that on June 2.0, 2006, the foregoing
document was hand delivered to the following persons and was electronically tiled with
the Clerk ofthe Court using CM/ECF which will send notitication of such tiling(s) to the
following and the document is available for viewing and downloading from CM/ECP:
John Horvath Richard K. Herrmann
Fish & Richardson P.C. Morris James Hitchens & Wiiliarns LLP
9l9 N. Market Street, Suite 1 l00 222 Delaware Avenue, 10th Floor
P. O. Box 1114 P.O. Box 2306
Wilmington, DE 19899 Wilmington, DE 19899-23 06
I hereby certify that on June .20, 2006, I have Federal Expressed the attached
document to the foliowing non-registered participants:
Howard G. Pollack Paul S. Grewal
Michael J i Curley Day Casebeer Madrid & Batclielder LLP
Fish & Richardson P.C. 20300 Stevens Creek Boulevard
500 Arguello Street, Suite 500 Suite 400
Redwood City, CA 94063 Cupertino, CA 95014
poi1acl<@fr·.co1n _QgI`BW&l§fQd&XC&S€D€€I`.CO1’1’l
cu1‘[email protected]
/s/ David E. Moore
Richard L. Horwitz
David E.. Moore
Porrea Anoensou & Common rw
Hercules Plaza, 6th Floor
1313 North Market Street
Wilmington, DE 19899-0951
(3 02) 984-6000
rhorwitz(?;i>potteranderson.com
dmoore@ potterandersorrcom
683314