Free Proposed Pretrial Order - District Court of Delaware - Delaware


File Size: 207.5 kB
Pages: 49
Date: August 18, 2008
File Format: PDF
State: Delaware
Category: District Court of Delaware
Author: unknown
Word Count: 11,266 Words, 65,559 Characters
Page Size: Letter (8 1/2" x 11")
URL

https://www.findforms.com/pdf_files/ded/8551/524-8.pdf

Download Proposed Pretrial Order - District Court of Delaware ( 207.5 kB)


Preview Proposed Pretrial Order - District Court of Delaware
Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 1 of 49

SRI v. ISS and Symantec Exhibit 7 to the Proposed PreTrial Order SRI'S List of Exhibits L.R. 16.4(d)(6)

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

1

U.S. Patent No. 6,321,338 (Porras et al.)

1

PTX-

2

n/a

U.S. Patent No. 6,484,203 (Porras et al.)

2

PTX-

3

n/a

U.S. Patent No. 6,708,212 (Porras et al.)

3

PTX-

4

n/a

U.S. Patent No. 6,711,615 (Porras et al.)

4

PTX-

5

n/a

File History for U.S. Patent 6,321,338, Serial No. 09/188,793

106 Document complete.

Document inadequately identified.

Document adequately identified.

5

PTX-

6

n/a

File History for U.S. Patent 6,484,203, Serial No. 09/658,137 File History for U.S. Patent 6,708,212, Serial No. 10/429,607 File History for U.S. Patent 6,711,615, Serial No. 10/254,457

106 Document complete.

Document inadequately identified. Document inadequately identified. Document inadequately identified.

Document adequately identified. Document adequately identified. Document adequately identified.

6

PTX-

7

n/a

106 Document complete.

7

PTX-

8

n/a

106 Document complete.

8

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 2 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

9

NT

Produced during summary judgment briefing; publicly available Produced during summary judgment briefing; publicly available Produced during summary judgment briefing; publicly available; identification adequate

Not timely: produced after the close of discovery.

Produced during summary judgment briefing; publicly available Produced during summary judgment briefing; publicly available Produced during summary judgment briefing; publicly available

699

Contents of the website at http://www.faqs.org/rfcs/ PTX10 NT Not timely: produced after the close of discovery. 700

PTX-

11

Contents of the website at http://www.rfc-editor.org/overview.html NT; DI

Not timely: produced after the close of discovery.

703

PTX-

12

ISS-02892 ­ 02904

http://www.isoc.org/isoc.org/isoc/conferences/ndss/98cfp.shtml "EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances" by Phillip Porras and Peter G. Neumann An e-mail dated April 15, 2005 DM, 106 Document complete; description accurate 802, 901(a), 402 401; 402; 801; 803; 807; 901; PTO para. 24

705

PTX-

13

SYM_P_02806340280644

706

PTXPTXPTX-

14 15 16

SRI_287656 ­ SRI_287659 SRI_E_0018138 SRIE_0052257 ­ SRIE_0052258

SRI Invention Disclosure Form for Emerald

105, 802

105, 802 Email regarding the acceptance of the Live Traffic paper for publication A string of emails between Gary Jackson and Phillip 105, 802 Porras Re Live Traffic Analysis

401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24

105, 802 105, 802 105, 802

401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24

733 712 732

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 3 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

17

SYM_P_0507977SYM_P_0507996

HTML version of the publication by Phillip Porras 105, 802 and Alfonso Valdes, Live Traffic Analysis of TCP/IP Gateways. www.web.arcive.org/eb/19980124000949/www.csl.s ri.com/emerald/live-traffic.html

401; 402; 803; 807; PTO para. 24

105, 802

401; 402; 803; 807; PTO para. 24

713

PTX-

18

NT

Produced during summary judgment briefing; publicly available

Not timely: produced after the close of discovery.

Produced during summary judgment briefing; publicly available

702

PTX-

19

PTX-

20

SUN 0000501-SUN 0000506; SUN 0000600-SUN 0000608

http://web.archive.org/web/19970713122019/www.isoc.org/conferences/ndss98/ Excerpts from SunScreen EFS, Configuration and Management Guide An abstract of the publication by Phillip Porras and NT Alfonso Valdes, Live Traffic Analysis of TCP/IP Gateways, located at web.archive.org/web/19980124003236/http:/www.cs l.sri.com/ememerald/traffic-short.html Letter to Macchia re SRI_Network Security Patents Folder entitled Symantec re Letter to Schallop re SRI_Network Security Patents Letter to Schallup from Abramson re Symantec's infringement of SRI_patents Letter to Michael Schallup from Abramson re network-based intrusion Fedex packing slip to Schallup from SRI 105, 802 105, 802 105, 802 105, 802 105, 802 Produced during summary judgment briefing; publicly available

802

803; 807

710

901(a), 802; 402, 403. Not timely: produced after the close of discovery.

Produced during summary judgment briefing; publicly available; 401; 402; 803; 807; 901 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24

711

PTXPTXPTXPTXPTX-

21 22 23 24 25

SRI_17515 ­ 17516 SRI_18069 ­ 18071 SRI_18075 SRI_18076 -18078 SRI_18080

401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para.24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24

105, 802, 402, 403 105, 802 105, 802 105, 802 105, 802

622 620 619 617 618

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 4 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

26

SRI_2184144 ­2184147 SRI_9430 ­ 9431

Letter to Petty from Abramson re prior art to SRI_Patents

DI

Identification adequate

105, 802, 402, 403, 408, document inadequately identified 105, 802, 402, 403

401; 402; 803; 807; PTO para. 24; identification adequate 401; 402; 803; 807; PTO para. 24

627

PTX-

27

Letter to Richard `Macchia re SRI_Network Security 105, 802 Patents

401; 402; 803; 807; PTO para. 24

621

PTXPTX-

28 29

Agabian: 449 SYM_P_00943640094390 SYM_P_01633030163305 SYM_P_02818340281836 SYM_P_02856480285684 SYM_P_02860990286152 SYM_P_02866630286704 SYM_P_02885510288587 SYM_P_03649580364997 SYM_P_03689780369898 SYM_P_03703430370644 SYM_P_03726170372666 SYM_P_03755350375571 PNC 001-PNC 039

White Paper: Enterprise Security, Symantec, Security Information Management Symantec Security Management System, Integrating 402, 403 Product Data, Requirements, Draft 1.3 Symantec Correlation Capabilities Rev 3 106, 402, 403

402, 901(a), 802, 403, 105 401; 402 402, 901(a), 802, 403, 105

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24

389 380

PTXPTX-

30 31

401; 402

402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105

378 390

PTXPTXPTXPTXPTXPTXPTXPTXPTX-

32 33 34 35 36 37 38 39 40

Email thread btwn Schwarz and Smith re Security Information Manager 4.0 installed and performing well Symantec, Draft, SIMA 4.0, Minardi, F24H, 901(a) Walkthrough Global Technical Training, Symantec Security 901(a) Information Manager Overview, Costco Symantec Response for JPMorgan Chase Security Information and Even Management RFI Symantec Security Information Manager 4.0; Product Functional Requirements ­ Draft Symantec Security Management Strategy Transformation FAQ Symantec Incident Manager, SSMS Solution General 402, 403 RFI Symantec Security Information, Manager 4.0, Support Team Training, Student Guide Unit 5, Symantec Incident Manager Managing incidents with Symantec Security Information Manager 4.0, Support Team ­ Minardi Training Course Statement of work between PNC and Symantec 106, 403

901; PTO para. 24 901; PTO para. 24

402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105

392 385 393 384 382 379 388 381 387

401; 402

402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105

106 Document complete 401; 402

402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105

PTX-

41

901(a)

901; PTO para. 24

802, 901(a), 402, 403, 105

401; 402; 801; 803; 807; 901 468

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 5 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTXPTXPTXPTX-

42 43 44 45

PNC 040-PNC 071 PNC 72-102 Bagley: 200 Bagley: 201

Symantec Sales Quote

901(a)

901; PTO para. 24 901; PTO para. 24

802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105.

401; 402; 801; 803; 807; 901 469 401; 402; 801; 803; 807; 901 470 401; 402; 801; 803; 807; 901 184 401; 402; 801; 803; 807; 901; Description accurate 185

White Paper provided by Symantec explaining real 901(a) time security monitoring Data Sheet: Security Technology Symantec Network Security 7100 Series Data Sheet: Symantec Gateway Security 5600 Series

PTXPTXPTXPTXPTXPTXPTXPTX-

46 47 48 49 50 51 52 53

SYM_P_00305440030552 SYM_P_00319010031933 SYM_P_00944470094457 SYM_P_00967180096749 SYM_P_00976940097711 SYM_P_0195825-47

How ManHunt Detects Threats How ManHunt Detects Threats

802, 901(a) 901(a)

801; 803; 807; 901; PTO para. 24 901; PTO para. 24

402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105

Global Marketing Communications Plan ­FINAL Symantec ManHunt 3.0 Symantec ManHunt Product Launch Kit, Enterprise 402, 403 Edition Symantec ManHunt Product Launch Guide, Enterprise Edition Symantec Proposal to XXXX for Intrusion Protection

401; 402

402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105

PTXPTXPTXPTXPTXPTX-

54 55 56 57 58 59

SNS 7100 Deployment/ Evaluation Strategies SYM_P_02004300200442 SYM_P_0237443-458 White Paper: Enterprise Solutions Effective Intrusion Prevention: Protecting Networks Against the Threats of Today and Tomorrow SYM_P_03055325Technical FAQ; Symantec Network Security 7100 030532 Series Appliances FAQs Email thread from Bagley to Wheeler re SNS SYM_P01049320104936_ Correlation technote ­ DRAFT1 Symantec Network Security User Guide SYM_P_00150290015162 ManHunt Data Processing- Jeremy Bennett SYM_P_00192040019214 Symantec SNS 4.0 Sensor Architecture SYM_P_00367390036749 Paper: Symantec ManHunt detection 901(a) SYM_P_00368890036893

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24

175 161 180 176 177 168 166 183

402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 901; PTO para. 24 402, 901(a), 802, 403, 105

163 164 43 35 30 32

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 6 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTXPTXPTX-

60 61 62

SYM_P_00371070037119 SYM_P_00373500037365 SYM_P_00374800037501 SYM_P_00376970037727 SYM_P_00485720048593 SYM_P_00487660048815 SYM_P_00494280049461 SYM_P_00495310049559 SYM_P_00497580049781 SYM_P_00506830050707 SYM_P_01628710162882 SYM_P_02911510291586 SYM_P_03304180330443 SYM_P_05314540531503 SYM_P_025584025598 SYM_P_550390550465 ISS_0055186200551863 SRIE_0005021 SRIE_0082984

Recourse Technologies ManHunt; Reducing the Risk 802, 402, 403 of Compromise Symantec Network Detection Components Symanted Blackbird 4.0 (Ursa Major Detection Engine) Product Functional Requirement" Revision 0.97 Symantec "ManHunt's Layered Detection" Jeremy Bennett Symantec Corporation ManHunt Intrusion Detection System Symantec ManHunt System Training Robert Geiger Symantec "Ballymeade/Captiva PFR" Symantec Usra Major (ManHunt 4.0) Product Functional Requirements Revision 1.3 Recourse Technologies ManHunt Training 802, 402, 403, 901(a) Introduction Module, Version 2.11 Symantec Corp ManHunt Intrusion Detection System Ursa Major (ManHunt 4.0) High Level Design Document by Mark Janazura "Manhunt Setup, Application and Maintenance" Symantec "NGS Quarterly Business Review SNS and SGS Product Lines" Symantec ManHunt 3.0 Technical Evaluation and 802, 402, 901(a) 403 NSS Group Report Aberdeen Group Financial White paper 901(a), 802, 402, 403 Symantec 2003 annual report Anomaly Detection Demo email Email thread Valdes to Porras re EMERALD Email Moran to Porras 105, 402, 403, 802 802, 901(a), 402, 403 802, 901(a), 402, 403

401; 402; 801; 803; 807; PTO para. 24 106 Document complete 106 Document complete

402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901 401; 402; 803; 807; 901 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402 401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24

20 24 28

PTXPTXPTXPTXPTXPTXPTXPTXPTXPTXPTXPTXPTXPTXPTXPTX-

63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78

402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 401; 402; 801; 803; 807; 901; PTO para. 24 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 401; 402; 803; 807; 901 401; 402; 803; 807; 901 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 401; 402; 801; 803; 807; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24 402 402, 901(a), 802, 403 402, 901(a), 802, 403

29 22 27 40 26 31 25 36 44 41 34 241 242 297 55 57

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 7 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

79

SYM_P_00463220046364 SYM_P_00490690049071 SYM_P_00506520050659 SYM_P_00516420051647

PTXPTXPTX-

80 81 82

Symantec Network Security 7100 Series, Project Galileo, Commit to Solution Presentation, EMEA 415-04 ManHunt Enterprise, Architecture & Requirements 802, 402, 403, 901(a) [Draft] White Paper: Why is Symantec's Approach to IPS best? Email thread, Kumar to Bennett, Smith, et al re ManHunt

402, 901(a), 802, 403, 105

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24

59

401; 402; 801; 803; 807; 901; PTO para. 24

402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105

52 67 61

PTXPTXPTXPTXPTXPTX-

83 84 85 86 87 88

SYM_P_00918870091889 SYM_P_01312140131222 SYM_P_033549703355537 SYM_P_04087520408780 Geyer: 272 SYM_P_05425540542563 Griswold: 343 (ISS_02125736-742)

402, 403 Suzuki email to [email protected] Third Party Event Reception for ManHunt, Mike 802, 402, 403, 901(a) Lyle, Bob Geiger Symantec ManHunt v2.11, Technical Evaluation, An 802, 901(a), 403, 402 NSS Group Report Symantec, Brighton, Acquisition of High Speed 901(a) Intrusion Detection Notes from site visit to Symantec MSS site Email string from Andy Sell to Angela Halliwell and Tony McDonald re favor Source code for attack for compromised host rule 105, 402, 403, 802

401; 402 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901 901; PTO para. 24

402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105 901(a), 802; 402, 403, 105 402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24

63 66 70 76 249 248

PTX-

89

401; 402; 801; 803; 807; PTO para. 24

Description mischaracterizes Identification adequate. document. Description accurate.

317

PTX-

90

Griswold: 344 (ISS_02125743-860)

Compilation of source code documents

105, 402, 403, 802

401; 402; 801; 803; 807; PTO para. 24

Description mischaracterizes Identification adequate. document. Description accurate.

318

PTX-

91

ISS_0006028700060300

Fusion Update August 9th, 2002

105, 402, 403, 802

401; 402; 801; 803; 807; PTO Para. 24

312

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 8 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

92

ISS_0052559600525600

Project Status Report

105, 402, 403, 802

401; 402; 801; 803; 807; PTO Para. 24

402

401; 402

310

PTX-

93

ISS_00535783-821

Security Fusion Module 2.0 Tech Support Chalk Talk 105, 402, 403, 802

401; 402; 801; 803; 807; PTO para. 24

313

PTXPTXPTX-

94 95 96

ISS_0054161000541631 ISS_0054183400541847 ISS_00687640068778

Development Stories RealSecure Fusion Sensor 2.0 Market Requirements Document RealSecure Fusion Sensor 2.0 Attack Definitions

105, 402, 403, 802 105, 402, 403, 802 105, 402, 403, 802

401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24

402 802, 402 402. .Illegible, at least part.

401; 402

311

401; 402; 801; 803; 807; 309 PTO para.24 401; 402; Description 307 accurate; sufficiently legible

PTX-

97

ISS2_01445521001445522

Email string btwn Griswold, Ward, and Craig re quick questions

105, 402, 403, 802

401; 402; 801; 803; 807; PTO para. 24

402; 802.

401; 402; 801; 803; 807; PTO para. 24; description accurate 401; 402; 801; 803; 807

315

PTXPTX-

98 99

Hall: 500 Hall: 512

Proventia Enterprise Security Platform (ESP) RealSecure® Network Gigabit datasheet from iss.net

802, 403, 402, 901(a), 105 401; 402; 801; 803; 807; 901; PTO para. 24

Cumulative, 802.

428 440

Description mischaracterizes Description accurate document. 106 Document complete.

PTX-

100

Hall: 513

ISS SiteProtector 2.0 Comparison Guide for RealSecure Workgroup Manager (http://documents.iss.net/literature/SiteProtector/WG MTORSSPComparison.pdf) Symantec; The Complete ManHunt Symantec ManHunt Release History 402, 403 901(a) 401; 402 901; PTO Para. 24

441

PTXPTX-

101 102

SYM_P_00495960049645 SYM_P_00505390050549

402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24

198 200

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 9 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTXPTXPTXPTX-

103 104 105 106

SYM_P_01629880163028 SYM_P_01630860163100 Innes: 434 Innes: 435

Symantec; ManHunt Tech Exchange Symantec; ManHunt Architecture Product Lifecycle Announcement Proventia Network Anomaly Detection System data sheet

402, 403 402, 403 105, 402, 403, 802 105, 402, 403, 802

401; 402 401; 402 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24

402, 901(a), 802, 403, 105 402, 901(a), 802, 403, 105

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24

196 197 366 367

Description mischaracterizes Description accurate document. Description accurate

PTX-

107

Innes: 436

Proventia Network Anomaly Detection System User 105, 402, 403, 802 Guide Version 3.5 Q & A re Manhunt's intrusion detection technology Symantec; Ursa Major; Requirements Checkpoint Presentation Symantec; ManHunt 3.0/ Orion; Product Functional Requirements Symantec; Orion ­ Symantec ManHunt 3.0, Requirement Checkpoint/ Commit to Solution Symantec; Symantec ManHunt 3.0 Ballymeade Project Commit to Solution Checkpoint Symantec Gateway Security 5400 Series, Version 1.0a Product Frequently Asked Questions Symantec Gateway Security 1600 Series, Mini-Me Project Everything you wanted to know about IDS/IPS but were afraid to ask Asbestos (Blackbird) Product Functional Requirements Reviewer's Guide Symantec Gateway Security Appliance 5400 Series

368

PTXPTXPTXPTXPTXPTXPTXPTXPTXPTXPTX-

108 109 110 111 112 113 114 115 116 117 118

SYM_P_0176251SYM_P_0176253 SYM_P_0047130047173 SYM_P_00601210060152 SYM_P_00603360060396 SYM_P_01175280117548 SYM_P_00215990021663 SYM_P_00662900066304 SYM_P_01108380110841 SYM_P_01476110147648 SYM_P_01577500157765 SYM_P_01906150190649

901(a), 106, 402, 403, 802 401; 402; 801; 803; 807; 901; PTO para. 24

802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24

676 138 132 133 136 148 152 160 159 150 153

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 10 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

119

SYM_P_02109100210912

IDS Guidance for Sugarbush

802, 901(a), 402, 403, 105

401; 402; 801; 803; 807; 901; PTO para. 24

156

PTX-

120

SYM_P_03836130383763

Symantec Enterprise Firewall, Symantec Enterprise Firewall with BPN, Symantec Gateway Security Symantec Client VPN Functional Specification, Code Name: Ballymeade/Captive

802, 901(a), 402, 403, 105

401; 402; 801; 803; 807; 901; PTO para. 24

149

PTXPTXPTXPTX-

121 122 123 124

Sugarbush Product Functional Requirements SYM_P_044284700442954 SRI_163635 ­ 163674 Emerald Net ­ IDS Appliance User's Guide Ver. 2.0 105, 802 and related EMERALD Network Appliance 105, 802 SRI_88192 ­ 88203 Presentation re Emerald Business Strategy Framework SYM_P_0032023Symantec, ManHunt Appliance 1.0, Galileo, High 0032031 Level Design Document (HLDD) SYM_P_00320540032058 SYM_P_00349640034981 SRIE_2225 ISS48496-48511 McEwin: 122 Symantec, ManHunt Appliance 1.0, Galileo, In-Line, Monitoring High Level Specifications Galileo, Performance Test Plan

802, 901(a), 402, 403, 105 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 105, 802 105, 802 901(a),802, 402, 403, 105

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402

155 516 522 78

PTXPTX-

125 126

901(a),802, 402, 403, 105 901(a),802, 402, 403, 105

79 85

PTXPTXPTX-

127 128 129

Email from Winarsky to Mark et al re Nokia ISS Product Line Architecture: A Glossary Proventia A Series

105, 802 105, 402, 403, 802 105, 402, 403, 802

401; 402; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24

105, 802 402

610 123 125

PTX-

130

McEwin: 123

Proventia G line products Data Sheet

105, 402, 403, 802

126

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 11 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

131

GAP 00019-GAP 00048 GAP 00108-GAP 00179 SRI_44834 SRI_75871 ­ 75873 ISS_0212572002125735 ISS_17243-18096 ISS_201256902125728 SYM_P_0517609SYM_P_0517610 ARB00660-00692

Symantec Master Services Agreement

402, 901(a), 802, 403, 105

401; 402; 801; 803; 807; 901 265

PTX-

132

Symantec Enterprise Security Solutions Proposal for GAP Inc. Email from Neumann to Lunt re Intrusion detection, 105, 802 survivability Email from Neumann re software Engineer 105, 802 105, 402, 403, 802 Module from the Network Sensor RS_PAM_NetworkSensor/Dev/RealSecure/Sensordll/issPAMSensorLib/issPamSensor.h RealSecure Signatures Reference Guide, Version 6.5 105, 402, 403, 802 Source Code 105, 402, 403, 802 RS_PAM_NetworkSensors/dev/RealSecure/Sensor_d ll/issPamSensorLib/issPamSensor.cpp Email, Horvath to Little and Castles, 09/20/02 402, 403 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402

402, 901(a), 802, 403, 105

401; 402; 801; 803; 807; 901 269

PTXPTXPTXPTXPTXPTX-

133 134 135 136 137 138

105, 802 105, 802

401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 Description accurate

602 607 375 377

Description mischaracterizes Description accurate document. 402, 901(a), 802, 403, 105 401; 402; 801; 803; 807; 901; PTO para. 24 401;402; 801; 803; 807

376 276

PTX-

139

Amendment No. 1 to License and Distribution 105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901 402, 802, 403 Agreement btwn Arbor Networks, Inc. and ISS- GA Proventia Network Anomaly Detection System Quick 105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901 802 Start Guide Version 3.5 Arbor Networks Press Release: News & Events from 105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901 402, 802, 403; 901(a) their website 105, 402, 403, 802, 901(a) 401; 402; 803; 807; 901 802, 901(a), 402, 403 Arbor Networks' Peakflow solutions ensure the security and operational integrity of the world's most critical networks; from website~Corporate Profile page U.S. Patent Application Pub. No. 2005/0005017 105, 402, 403, 802, 901(a) 401; 402; 803; 807; 901; 902 402, 403, 802 401; 402; 803; 807; PTO para. 24 105, 802

657

PTXPTXPTX-

140 141 142

ARB00693-00740 Morville: 537 Morville: 538

801; 803; 807

662

401; 402; 801; 803; 807; 901 658 401; 402; 803; 807; 901 659

PTXPTX-

143 144

Morville: 548

401; 402; 803; 807 401; 402; 803; 807; PTO para. 24

667 596

SRI_105503 - 105524 Summary of Advanced Network Security and 105, 802 Information Warfare Research in CSL/SRI_by Porras

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 12 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

145

SYM_P_05355485 ­ EMERALD: Event Monitoring Enabling Responses 535497 to Anomalus Live Disturbances by Porras And Neumann

DI

Identification adequate

Document inadequately identified.

Identification adequate.

540

PTXPTX-

146 147

Pruss: 231 ISS04439-0440

ISS ­ Advanced SiteProtector RealSecure Server Sensor marketing brochure

105, 402, 403, 802 105, 402, 403, 802

401; 402; 801; 803; 807 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24

Description mischaracterizes Description accurate document. 402,cumulative. Description 401; 402; description mischaracterizes document. accurate; identification Document inadequately adequate identified.

213 115

PTX-

148

ISS_05991-059989

RealSecure SiteProtector Security Fusion Module 2.0 105; 402; 403; 802; Frequently Asked Questions multiple documents

372

PTXPTXPTXPTXPTX-

149 150 151 152 153

ISS16455-16466 ISS2_00105902-04

RealSecure Server Sensor FAQ The Protocol Analysis Module

ISS2_00653565+C178 Meet with Dell email HEALTHSOUTH 028 Security Network design diagram SYM_P_05489940549907 Network Surveillance by Porras et al

401; 402; 801; 803; 807; PTO para. 24 105, 402, 403, 802 401; 402; 801; 803; 807; PTO para. 24 105, 402, 403, 802 401; 402; 801; 803; 807; PTO para. 24 105, 402, 403, 802, 901(a) 401; 402; 803; 807; 901 105, 802 401; 402; 803; 807; PTO para. 24

105, 402, 403, 802

118 106 402, 802 802, 901(a), 402, 403 105, 802 Document complete 401; 402; 801; 803; 807; PTO para. 24 401; 402; 803; 807; 901 401; 402; 803; 807; PTO para. 24 117 109 443 656

PTX-

154

M00001-00050

Managed Security Services Agreement

901(a)

901

802, 901(a), 402, 403, 105

401; 402; 801; 803; 807; 901 462

PTX-

155

M00070-00083

Symantec Invoice

901(a)

901

802, 901(a), 402, 403, 105

401; 402; 801; 803; 807; 901 463

PTX-

156

M00225-00260

Symantec MSS Implementation: Implementation Method of Procedure

901(a)

901

802, 901(a), 402, 403, 105

401; 402; 801; 803; 807; 901 467

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 13 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

157

ISS05920-21

SiteProtector Security Fusion Module datasheet

105, 402, 403, 802

401; 402; 801; 803; 807; PTO para. 24

Description mischaracterizes Description accurate. document (more pages included in exhibit than listed).

92

PTXPTXPTXPTXPTXPTX-

158 159 160 161 162 163

ISS2_01396595-615 ISS68417-68431 ISS68461-68476 ISS68487-68505 ISS68535-68551 ISS68738-69746

RealSecure SiteProtector Security Fusion Module presentation; Holly Turner Third-Party Module 2003 Project Plans

105, 402, 403, 802 105, 402, 403, 802

105, 402, 403, 802 RealSecure SiteProtector Security Fusion Module Presentation- Hollly Turner 105, 402, 403, 802 RealSecure SiteProtector Security Fusion Module presentation; Holly Turner ISS: "Fusion Less is More" Holly Turner and Carolyn 105, 402, 403, 802 Reuss Security Fusion Module Upcoming Releases and 105, 402, 403, 802 Competitive Info Presentation- Holly Turner Symantec IDS & IPS capability in SNS 7100 Series vs. SGS 5400 Series Symantec Gateway Security 5400 Technical Briefing Tasha Van Es Introduction to Symantec Incident Manager 402, 403 Symantec Security Information Manager 9500 Series "Computer Security research and Development at SRI_International" article 105, 802

401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24

93 402, 802 401; 402; 801; 803; 807; PTO para.24 103 100 94 401; 402; 801; 803; 807; PTO para. 24 802, 402, 403. Description 401; 402; 801; 803; 807; mischaracterizes document. PTO para. 24; Description accurate 402, 901(a), 802, 403, 105 401; 402; 801; 803; 807; 901; PTO para. 24 402, 901(a), 802, 403, 105 401; 402; 801; 803; 807; 901; PTO para. 24 402, 901(a), 802, 403, 105 401; 402; 801; 803; 807; 901; PTO para. 24 402, 901(a), 802, 403, 105 401; 402; 801; 803; 807; 901; PTO para. 24 105, 802 401; 402; 803; 807; PTO para. 24 802, 402, 403 96 99

PTXPTXPTXPTXPTX-

164 165 166 167 168

SYM_P_00479890047991 SYM_P_00200600020142 Van Es: 248 SYM_P_0283903SYM_P_0283916

47 229 230 233 648

401; 402 401; 402 401; 402; 803; 807; PTO para. 24

PTX-

169

SRI_051898- 51903

"Knowledge-Based Intrusion Detection" article

105, 802

401; 402; 803; 807; PTO para. 24

105, 802

401; 402; 803; 807; PTO para. 24

646

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 14 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

170

SRI_142069SRI_142154

"Detecting Unusual Program Behavior Using the Statistical Component of the Next-generation Intrusion Detection expert System (NIDES)" "IDES: An Intelligent System for Detecting Intruders" article

105, 802

401; 402; 803; 807; PTO para. 24

105, 802

401; 402; 803; 807; PTO para. 24

650

PTX-

171

TL 0010-0021

105, 802

401; 402; 803; 807

105, 802

401; 402; 803; 807

647

PTX-

172

SRI_047974-47984

SRI_IDES Statistical Anomaly Detector by Javitz, Valdes and Tamaru

105, 802

401; 402; 803; 807; PTO para. 24

105, 802

401; 402; 803; 807; PTO para. 24

541

PTX-

173

SRI_13361-13404

Darpa Order D985-Award/Contract

105, 802

401; 402; 803; 807; PTO para. 24

105, 802

401; 402; 803; 807; PTO para. 24

545

PTXPTX-

174 175

SRI_48679-48694 SRIE_18565

Emerald- Statistical-Analyzer TCP Monitor Documentation Valdes email to Porras re Stats work

105, 802 105, 802

401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24

105, 802 105, 802

401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24

569 554

PTX-

176

SRIE_274329-274414 MIT Lincoln Laboratory Offline Component of the 1999 DARPA Intrusion Detection Evaluation SRIE_399156-399159 Lunt email to Valdes and others re Tentative Agenda 105, 802 for DARPA-Intrusion Detection Conference 401; 402; 803; 807; PTO para. 24

105, 802

401; 402; 803; 807

581

PTX-

177

105, 802

401; 402; 803; 807; PTO para. 24

566

PTX-

178

SRIE_449229-449232 Neumann email to Porras Valdes, Gilham, Frivold, Japan re Notes on New NIDES; SRI_Proprietary

105, 802

401; 402; 803; 807; PTO para. 24

105, 802

401; 402; 803; 807; PTO para. 24

546

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 15 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

179

SRIE_53628

Valdes email to Porras and Neumann re Frank Jou meeting Article titled, History re SRI

105, 802

401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24

105, 802

401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24

561

PTX-

180

SYM_P_554967

105, 802

105, 802

568

PTX-

181

SYM_P_68937-68942 Statistical Methods for Computer Usage Anomaly Detection Using NIDES SYM_P_79206-79370 SRI_International- Final Technical Report SYM_P_01598180159845 Bennett: 41 ISS_01744269 American Express- Resource Technologies 802, 402, 403 401; 402; 801; 803; 807; PTO para. 24

105, 802

571

PTXPTX-

182 183

105, 802 402, 901(a), 802, 403, 105

575 251

PTXPTX-

184 185

List of resellers and end users of Symantec (Appendix I to Interrogatory Responses) ISS Financial data

Partially illeg. 106, 402, 403, 802, 901(a)

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 802, 901(a), 402, 403. 401; 402; 801; 803; 807; PTO para. 24; document Illegible, at least in part. 901; PTO para. 24; complete; sufficiently legible Description mischaracterizes description accurate; document. sufficiently legible 401; 402; 801; 803; 807; PTO para. 24; document complete 401; 402; 801; 803; 807; 901; PTO para. 24 802, 901(a), 402, 403. Illegible, at least in part. Description mischaracterizes document. 802, 402, 403 401; 402; 801; 803; 807; 901; PTO para. 24; Description accurate; sufficiently legible 401; 402; 801; 803; 807; PTO para. 24

402, 901(a), 802, 403, 105

42 922

PTX-

186

ISS_01832561

ISS Financial data

Partially illeg. 106, 402, 403, 802, 901(a)

923

PTX-

187

ISS_11292-299

Proventia Security Product Family brochure

901(a), 802, 402, 403

812

PTX-

188

ISS_20657-ISS_20662 ISS WGM to SP comparison guide- Figures and Appendix

105, 402, 403, 802

401; 402; 801; 803; 807; PTO para. 24

802, 402, 403

401; 402; 801; 803; 807; PTO para. 24

847

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 16 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

189

ISS_21064-66

Proventia Intrusion Prevention Appliance brochure

901(a), 802, 402, 403

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24; description accurate

802, 402, 403

401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24

811

PTX-

190

ISS_353052- 353405

ISS RealSecure 5.5 Student Guide

802, 901(a), 402, 403

802, 402, 403

816

PTX-

191

ISS_4387-4393

Proventia Enterprise Security Platform (ESP) brochure

DM, 106, 901(a), 802, 402, 403

802, 402, 403, 106. Document inadequately identified.

401; 402; 801; 803; 807; 813 PTO para. 24; identification adequate; document complete 401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24 808 814

PTXPTX-

192 193

ISS_541632-541642 ISS_592180- 592291

ISS Market Requirements Document Security Fusion 802, 402, 403 Module 2.0 License and Distrubution Agreement dated August 802, 901(a), 402, 403 12, 2005 between Arbor Networks and ISS 105, 802

401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 803; 807; PTO para. 24

802, 402, 403 802, 402, 403

PTX-

194

ISS02126097

(more pages included in exhibit than listed)

825

PTXPTXPTX-

195 196 197

ISS04149-04157 ISS06011-06017 ISS23541-557

The EMERALD Project Current Downloads as of (9/4/97) from http://web.arcive.org/web/19980124000015/www.csl.sri.com/emerald/downloads.html Heberlein, Dias, Levitt, Mukherjee, Wood, and Wolber, A Network Security Monitor 802, 402 401; 402; 801; 803; 807; "RealSecure Guard FAQ" 402; 403; 802; 105 401; 402; 801; 803; 807; PTO para. 24 PTO para. 24 Mukherjee, Heberlein, and Levitt, Network Intrusion Detection

890 1225 1236

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 17 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

198

N/A

Symantec Buys Spam Killer, gets Street Cred 802, 403, 402, 901(a) http://www.baselinemag.com/article.2/0,1540,19818 94,00.asp "RealSecure Network Sensor and Gigabit Network Sensor Frequently Asked Questions" Illegible, 105, 106, 402, 403, 802, 901(a)

401; 402; 803; 807; 901; 902 802,403, 402, 901(a), 401; 402; 803; 807; 901; 779 105.Document inadequately 902; identification adequate identified. Sufficiently legible; 401; 402; complete; 801; 803; 807; 901; PTO para.24 802, 901(a), 402, 401; 402; 801; 803; 807; 106.Illegible, at least in part. 901; PTO para. 24; sufficiently legible 879

PTX-

199

SRI_000001-000052

PTX-

200

SRI_00001-9

RealSecure Network Sensor and Gigabit Network Sensor FAQs

105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901; PTO para. 24

802, 901(a), 402, 403

401; 402; 801; 803; 807; 901; PTO para. 24

850

PTX-

201

SRI_000020-33

ISS Enhanced Dynamic Threat Protection via Automated Correlation and Analysis

105,402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901; PTO para. 24

802, 901(a), 402, 403

401; 402; 801; 803; 807; 901; PTO para. 24

851

PTX-

202

SRI_000034-35

RealSecure 10/100 brochure

105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901; PTO para. 24

802, 901(a), 106. Illegible, at 801; 803; 807; 901; PTO 852 least in part. para. 24; sufficiently legible; document complete 802, 901(a), 106. Illegible, at 801; 803; 807; 901; PTO 853 least in part. para. 24; sufficiently legible; document complete 802, 901(a), 106.Illegible, at 401; 402; 801; 803; 807; least in part, 402, 403. 901; PTO para. 24; sufficiently legible; document complete 802, 901(a), 106, 403, 402 401; 402; 801; 803; 807; 901; PTO para. 24; document complete 105, 802. Document 401; 402; 803; 807; PTO inadequately identified. para. 24; identification adequate 854

PTX-

203

SRI_000035-36-37

RealSecure Network Gigabit brochure

105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901; PTO para. 24 105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; 901; PTO para. 24

PTX-

204

SRI_000047-48

SiteProtector Third Party Module brochure

PTX-

205

SRI_000049-520

Site Protector Third Party Module Frequently Asked 105, 402, 403, 802, 901(a) 401; 402; 801; 803; 807; Questions 901; PTO para. 24 EMERALD Site-wide Correlation Engine 105, 402, 403, 802, DM 401; 402; 803; 807; 901; PTO para. 24

855

PTX-

206

SRI_05165688051693

1270

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 18 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTXPTXPTX-

207 208 209

Threat Analytics- A Cybershield Initiative version 2-0-802, 403, 402, 901(a) 12-04, 0, 4 Abstract of Live Traffic Analysis of TCP/IP Gateways 105, 802 SRI_112470 by Porras and Valdes SRI_277983 -277997 EMERALD eXpert/estat Draft 0.1 DM, 802, 105, 106

SRI_110331-110357

401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; PTO para. 24 401; 402; 803; 807; PTO para. 24; description accurate; document complete

401; 402; 803; 807; 901; 1305 PTO para. 24 802, 901(a), 402, 403 401; 402; 803; 807; 901; 819 PTO para. 24 106, 403, 802. Description 401; 402; 803; 807; PTO 742 mischaracterizes document. para. 24; description accurate; document complete 402, 802, 901(a), 403, 106 401; 402; 803; 807; 901; document complete 829

802, 901(a), 402, 403

PTX-

210

SRI_287660SRI_287662

USPTO Notice of Allowance and Fees Due re Application 10/429,611

106, 402, 403, 802,901(a) 401; 402; 803; 807; 901; document complete

PTX-

211

SRI_287663

USPTO Notice of Allowability re Application 10/429,611 USPTO Information Disclosure Statement by Applicant for Application 10/429,611

106, 402, 403, 802,901(a) 401; 402; 803; 807; 901; document complete 106, 402, 403, 802,901(a) 401; 402; 803; 807; 901; PTO para. 24; document complete 106, 402, 403, 802,901(a) 401; 402; 803; 807; 901; document complete

402, 802, 901(a), 403, 106

401; 402; 803; 807; 901; document complete 401; 402; 803; 807; 901; PTO para. 24; document complete 401; 402; 803; 807; 901; document complete

830

PTX-

212

SRI_287664SRI_287681

402, 802, 901(a), 403, 106

831

PTX-

213

SRI_287682SRI_287683

Issue Classification for Application 10/429,611

402, 802, 901(a), 403, 106

832

PTXPTX-

214 215

SRI_287684SRI_287690 SRI_287691SRI_287692

Confirmation No. 3015 and Amendments to the Claims re 10/429,611 Fold out poster/cd- SRI_Timeline of Innovations

106, 402, 403, 802,901(a) 401; 402; 803; 807; 901; 402, 802, 901(a), 403, 106 document complete 106, 402, 403, 802, 901(a), 401; 402; 803; 807; 901; 402, 802, 901(a), 403, 106. partially illeg. PTO para. 24; sufficiently Illegible, at least in part. legible; document complete 401; 402; 803; 807; 901(a); PTO para. 24 802, 901(a), 402, 403

401; 402; 803; 807; 901; 833 document complete 401; 402; 803; 807; 901; 834 PTO para. 24; sufficiently legible; document complete 401; 402; 803; 807; 901; PTO para. 24 835

PTX-

216

SRI_287693SRI_287697

SRI_International ­ 60 years ­ 1946-2006 - Timeline 802, 403, 402, 901(a) of Innovations

PTX-

217

SRI_287698SRI_287701

SRI_International's Timeline of InnovationsInventing the Future for More Than 55 Years

802, 403, 402, 901(a)

401; 402; 803; 807; 901(a); PTO para. 24

802, 901(a), 402, 403

401; 402; 803; 807; 901; PTO para. 24

836

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 19 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTXPTXPTX-

218 219 220

SRI_287706SRI_287709 SRI_287710SRI_287713 SRI_287714

SRI_International's Timeline of InnovationsInventing the Future for the Past 55 Years SRI_International's Timeline of InnovationsInventing the Future for the Past 50 Years SRI- What They Are Saying About Us

802, 403, 402, 901(a) 802, 403, 402, 901(a) 802, 403, 402, 901(a)

401; 402; 803; 807; 901(a); PTO para. 24 401; 402; 803; 807; 901(a); PTO para. 24 401; 402; 803; 807; 901(a); PTO para. 24 401; 402; 803; 807; 901(a); PTO para. 24

802, 901(a), 402, 403 802, 901(a), 402, 403 802, 901(a), 402, 403

401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24; sufficiently legible 401; 402; 803; 807; 901; PTO para. 24; sufficiently legible 401; 402; 803; 807; 901; 902; document complete 401; 402; 803; 807; 901; PTO para. 24

837 838 839

PTX-

221

SRI_287715SRI_287716 SRI_287717SRI_287746 SRI_287747SRI_287749 SRI_287750SRI_287765

SRI_International - Breakthrough Ideas- Real-World 802, 403, 901(a) Solutions World-Changing Innovations

802, 901(a), 402, 106, 403. Illegible, at least in part. 802, 901(a), 402, 403, 106. Illegible, at least in part. 802, 901(a), 402, 403, 106

840

PTX-

222

partially illeg, 802, 901(a), 401; 402; 803; 807; 901; 402, 403, 106 PTO para. 24; legible

841

PTX-

223

San Jose Mercury News "For the Love of Research" 802, 901(a), 402, 403, 106 401; 402; 803; 807; 901; 902; document complete Discover What We're Discovering 802, 901(a), 402, 403 401; 402; 803; 807; 901; PTO para. 24

842

PTX-

224

802, 901(a), 402, 403

843

PTX-

225

SRI_287766SRI_287769

Donna Linne letter to Nilsa Monina of DCMS-San Francisco dated October 29, 1998

802, 901(a), 402, 403

401; 402; 803; 807; 901; PTO para. 24

802, 901(a), 402, 403. Not timely: produced after the close of discovery.

401; 402; 803; 807; 901; PTO para. 24; produced timely

844

PTX-

226

SRI_37174-37175

Article titled "DARPA's EMERALD Proves Worth in 802, 402, 403, 901(a) Cyperdefens" from U.S. Department of Defense from http://www.defenselink.mil/news/aug2000/n0814200 0_20008144.html

401; 402; 803; 807; 901; 902 802, 901(a), 402, 403

401; 402; 803; 807; 901; 902 1293

PTX-

227

SRI_37176-37179

SRI_Timeline of SRI_International Innovations: 2000s

802, 402, 403, 901(a)

401; 402; 803; 807; 901; PTO para. 24

802, 901(a), 402, 403

401; 402; 803; 807; 901; PTO para. 24

1294

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 20 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

228

SRI_37192-37195

SRI_Timeline of SRI_International Innovations 1980s

DM, 802, 403, 402, 901(a) 401; 402; 803; 807; 901; PTO para. 24; description accurate 802, 403, 402, 901(a) 401; 402; 803; 807; 901; PTO para. 24

802, 901(a), 402, 403

401; 402; 803; 807; 901; PTO para. 24

1295

PTX-

229

SRI_37196-37202

SRI_Timeline of SRI_International Innovations 1990s

802, 901(a), 402, 403

401; 402; 803; 807; 901; PTO para. 24

1296

PTX-

230

SRI_72894-72897

Article titled "EMERALD's Component-Based Approach to Network Security Distrubuted RealTime Security Monitoring by Claude J. Bauer

901(a), 802, 403, 402

401; 402; 803; 807; 901; 902 802, 901(a), 402, 403

401; 402; 803; 807; 901; 902 1299

PTX-

231

SRI_E_0017849

Email exchange between Jerzy Rub and Porras re Live Traffic Analysis paper

802, 402, 403, 901(a)

401; 402; 803; 807; 901; PTO para. 24

802, 901(a), 402, 403

401; 402; 803; 807; 901; PTO para. 24

714

PTX-

232

SRI_E_0017912

Email exchange between Shyhtsun Felix Wu and Porras re Live Traffic Analysis paper, 11/1997

802, 402, 403, 901(a)

401; 402; 803; 807; 901; PTO para. 24

802, 901(a), 402, 403

401; 402; 803; 807; 901; PTO para. 24

715

PTX-

233

SRI_E_00179290017930

Email exchange between Aziz Mounji and Porras re Live Traffic Analysis paper, 11/1997

802, 402, 403, 901(a)

401; 402; 803; 807; 901; PTO para. 24

802, 901(a), 402, 403

401; 402; 803; 807; 901; PTO para. 24

716

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 21 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

234

SRI_E_00180340018038

Email/authors kit from Steve Welke to Porras and 802, 402, 403, 901(a) others whose papers were accepted for publication in NDSS '98

401; 402; 803; 807; 901

802, 901(a), 402, 403

401; 402; 803; 807; 901

717

PTX-

235

SRI_E_0018138

Email exchange between Valdes and Porras re the acceptance of Live Traffic Analysis paper, presentation

105, 802

401; 402; 803; 807; PTO para. 24

105, 802

401; 402; 803; 807; PTO para. 24

718

PTX-

236

SRI_E_0018143

10/21/97 email to Emerald Team requesting a copy of 802, 402, 403, 901(a) Live Traffic Analysis article for [email protected]

401; 402; 803; 807; 901

901(a), 802, 402, 403

401; 402; 803; 807; 901

723

PTX-

237

SRI_E_0018147

PTX-

238

SRI_E_0018233

PTX-

239

SRI_E_0018234

10/1/97 email from Matt Schonlau of AT&T to Emerald Team asking to be sent a copy of Live Traffic paper when available 11/11/97 email from Sal Stolfo to Porras thanking him for sending a copy of the Live Traffic Analysis paper 9/10/87 email from Stolfo to Porras re Live Traffic Analysis paper Email from Valdes to Porras forwarding an email re the Live Traffic Analysis

802, 402, 403, 901(a)

401; 402; 803; 807; 901

901(a), 802, 402, 403

401; 402; 803; 807; 901

724

802, 402, 403, 901(a)

401; 402; 803; 807; 901

901(a), 802, 402, 403

401; 402; 803; 807; 901

720

802, 402, 403, 901(a)

401; 402; 803; 807; 901

901(a), 802, 402, 403

401; 402; 803; 807; 901

721

PTX-

240

SRI_E_0018239

105, 802

401; 402; 803; 807; PTO para. 24

105, 802

401; 402; 803; 807; PTO para. 24

722

PTX-

241

SRI_E_0018242

9/5/07 email from George Lentz to Emerald Team 105, 802 requesting 2 papers, including Live Traffic Analysis paper

401; 402; 803; 807

105, 802

401; 402; 803; 807; PTO para. 24

725

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 22 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

242

SRI_E_0018248

9/4/07 email from Lentz to Emerald Team requesting 901(a),802, 403, 402 papers

401; 402; 803; 807; 901

901(a), 802, 402, 403

401; 402; 803; 807; 901

726

PTX-

243

SRI_E_0018254

9/3/07 email from Jennifer Dealy to Emerald Team requesting Live Traffic Analysis paper

802, 402, 403, 901(a)

401; 402; 803; 807; 901

901(a), 802, 402, 403

401; 402; 803; 807; 901

727

PTX-

244

SRI_E_00399112

8/29/97 email from Gary Jackson to Emerald Team requesting Live Traffic Analysis paper

802, 402, 403, 901(a)

401; 402; 803; 807; 901

901(a), 802, 402, 403

401; 402; 803; 807; 901

728

PTX-

245

SRI_E_00522320052233

12/7/97 email from Porras to [email protected] and [email protected] re requests for Live Traffic paper

802, 402, 403, 901(a)

401; 402; 803; 807; 901; PTO para. 24

901(a), 802, 402, 403

401; 402; 803; 807; 901; PTO para. 24

729

PTX-

246

SRIE_0004894

Email from Valdes to Porras, Bercow and Skinner w/ 802, 403, 402, 901(a) disappointment over Atomic Tangerine/commercialization btw Valdes, Porras and Doug Moran

401; 402; 803; 807; 901; PTO para. 24

802, 901(a), 402, 403

401; 402; 803; 807; 901; PTO para. 24

1286

PTX-

247

SRIE_00438130043814

Email from Porras to Moran re Lunch and discussing 403, 802, 402, 901(a) EMERALD and Recourse

401; 402; 803; 807; 901; PTO para. 24

802, 901(a), 402, 403

401; 402; 803; 807; 901; PTO para. 24

1251

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 23 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

248

SRIE_0052257SRIE_0052258

Gary Jackson email to Phil Porras re Live Traffic Analysis

105, 802

401; 402; 803; 807

105, 802

401; 402; 803; 807

732

PTXPTX-

249 250

SRIE_0077330 SRIE_0077373

Email from Bercow to Valdes re Valdes' input about 802, 403, 402, 901(a) Recourse (SRIE_0077330) Email from Bercow to Moran re Phil and Moran's lunch, EMERALD and Recourse 802, 403, 402, 901(a)

401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24

802, 901(a), 402, 403 402, 802, 901(a), 403

401; 402; 803; 807; 901; PTO para. 24 401; 402; 803; 807; 901; PTO para. 24

909 1252

PTX-

251

SRIE_186231

Porras email to Skinner and Valdes dated June 21, 1998 re estat delivery

901(a), 802, 402, 403

401; 402; 803; 807; 901; PTO para. 24

901(a), 802, 402, 403

401; 402; 803; 807; 901; PTO para. 24

748

PTX-

252

SRIE_38302

Porras email to Skinner, Fong and Porras dated December 30,1998 re EMERALD near-term deliverables status

901(a), 802, 403, 402

401; 402; 803; 807; 901; PTO para. 24

901(a), 802, 402, 403

401; 402; 803; 807; 901; PTO para. 24

751

PTX-

253

SYM_P_0019055SYM_P_0019074

Symantec Guide to Correlation Techniques by Darrell 403, 402 M. Keinzle, PhD., dated November 6, 2003

401; 402

802, 901(a), 402, 105

401; 402; 801; 803; 807; 901; PTO para. 24

776

PTX-

254

SYM_P_0020640SYM_P_0020675

Symantec Security 5400 Series PowerPoint Presentation

802, 901(a), 402, 105

401; 402; 801; 803; 807; 901; PTO para. 24

736

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 24 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

255

SYM_P_0031160SYM_P_0031299

Event Correlation Overview Darrell Kienzle Symantec Research Labs

Range incl. mult. docs 401; 402 Assuming SRI intended to designate SYM_P_0031160-199. 402, 403

802, 901(a), 402, 105

401; 402; 801; 803; 807; 901; PTO para. 24

762

PTX-

256

SYM_P_0036968SYM_P_0036976

ManHunt's Event Dictionary Requirements for a 403, 402 Normalized Event Dictionary by Mike Smith, Jeremy Bennett

401; 402

802, 901(a), 402, 403, 105

401; 402; 801; 803; 807; 901; PTO para. 24

775

PTX-

257

SYM_P_0052675SY M_P_0052717 SYM_P_0053881SY M_P_0054272 SYM_P_0092443SYM_P_0092447 SYM_P_0097932SYM_P_0094941 SYM_P_0104928SYM_P_0104931 SYM_P_01049340104936 SYM_P_01124200112444 SYM_P_0137493SY M_P_0137545 SYM_P_0158602SY M_P_0158648

Burton Group In-Depth Research Report: Security Enterprise w/Network Behavior Anomaly Symantec TM network Security Administration Guide

802, 402, 403, 901(a)

401; 402; 803; 807; 901

802, 901(a), 402, 403

401; 402; 803; 807; 901

862

PTXPTX-

258 259

802, 901(a), 402, 105 401; 402 802, 901(a), 402, 105

PTX-

260

PTX-

261

402, 403 Symantec Global Enterprise Marketing Communications Brief v 3.0 Symantec NEW IDS Story Commbrief Symantec Iforce IDs Appliance, Powered By Sun and Symantec V2 Business Infrastructure Readiness Project Pandora Dated 7/29/03 Patrick Wheeler email to Sandeep Kumar dated August `4, 2004 re SS correlated technote- Draft 1 TechNote: Symantec Network Security's Real-Time Event Correlation Feature Symantec ManHunt Strategy and Roadmap v. 1.11 402, 403 Blackbird Event Metadata 2.2 Specification Manhunt 2.1 Q2 2002 402, 403 402, 403

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24

764 783

802, 901(a), 402, 403, 105

872

802, 901(a), 402, 105

760

PTXPTXPTXPTX-

262 263 264 265

802, 901(a), 402 401; 402 401; 402 401; 402 802, 901(a), 402 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105

1265 1261 789 790

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 25 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTXPTXPTX-

266 267 268

SYM_P_0163052SY M_P_0163055 SYM_P_0187490189001 SYM_P_0209016SYM_P_0209094 SYM_P_0209981SY M_P_0210011 SYM_P_0236964SYM_P_0236967 SYM_P_0284104SY M_P_0284130 SYM_P_0286483SY M_P_0286498 SYM_P_0300071SY M_P_0300099 SYM_P_0336255SYM_P_0336259

PTXPTXPTXPTXPTXPTX-

269 270 271 272 273 274

AF: Event Receiver Specification by Michael Smith, modified February 24, 2004 Symantec Universal Event Collector Configuration Guide 402, 403 Symantec K2 (Symantec Network Security 7100 Series Product functional requirements dated March 18, 2005 IPS Selection Criteria and SNS - Patrick Wheeler, Product Manager, dated July 26, 2005 Tolly Test Summary Draft Outline 802, 403 Product: Symantec Security Information Manager 4.0 Sim 4.0 fy06 Business Plan Version 5 Symantec Worldwide Sales & Marketing Conference Symantec Network Security Analyst quarterly dated 802, 402, 403 August 2005

802, 901(a), 402, 403, 105 802, 901(a), 402, 403 401; 402 802, 901(a), 402, 403, 105

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24

792 1267 737

802, 901(a), 402, 403, 105 401; 402; 801; 803; 807; PTO para. 24 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 802, 901(a), 402, 403, 105 401; 402; 801; 803; 807; PTO para. 24 802, 901(a), 402, 403, 105

797 798 800 801 802 804

PTXPTX-

275 276

SYM_P_0384490SY M_P_0384493 SYM_P_0407795SYM_P_0407800

Manhunt Deployment Guide Manhunt Event Stream Provider Specification by Brian Hernacki, Bob Geiger created 4/26/00

802, 402, 403 802, 403, 402

401; 402; 801; 803; 807; PTO para. 24 401; 402; 801; 803; 807; PTO para. 24

802, 901(a), 402, 403, 105 802, 901(a), 402, 105

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24

805 753

PTX-

277

SYM_P_0553071

Interrogatory 17 Supplemental Data

Document inadequately Identification adequate; identified. Description description accurate mischaracterizes document.

924

PTXPTX-

278 279

SYM_P_385550SYM_P_385660 SYM_P_415808SYM_P_415839

Recourse ManHunt v. 1.1 Deployment Guide- 802, 403, 402 Beta Proprietary and Confidential Manhunt 3.0 "Orion" Engineering Design Document created December 27, 2001

401; 402; 801; 803; 807; PTO para. 24

802, 901(a), 402, 403, 105 802, 901(a), 402, 105

401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24

778 754

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 26 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTXPTXPTXPTXPTX-

280 281 282 283 284

SYM_P_53323SYM_P_53396 SRI 287824 SYM-P-0049575SYM_P_0049583 SYM-P-0057094SYM-P-0057237

Symantec SGS 2.0 Gateway Network Detection Component (gNDC) Workshop Welcome Message on SRI CSL FTP Server 802, 402, 403, 106 Symantec Halon component Functional Requirements 402, 403 Symantec TM Manhunt 3.0 User Guide ISS RealSecure SiteProtector Comparison Guide for 402, 403, 802 ICEcap Manager Version 1.5 dated January 2002 (http://documents.iss.net/literature/SiteProtector/KEC aptorRSSPComparison.pdf)

802, 901(a), 402, 403, 105 401, 402, 801, 803 401; 402 402, 403, 802, 106, NT 802, 901(a), 402, 403, 105 802, 901(a), 402, 105 401; 402; 801; 803; 807 402, 802. Document inadequately identified.

401; 402; 801; 803; 807; 901; PTO para. 24 401, 402, 801, 803, part of 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; 901; PTO para. 24 401; 402; 801; 803; 807; Identification adequate

738

763 765 806

PTXPTXPTX-

285 286 287

US Patent Application Publication re US 2002/0019945 A1 US Patent Application Publication re US 2002/0078381A1

NP, DM

106. Not timely: never produced or disclosed. 106. Not timely: never produced or disclosed. Publicly available; identified 901(a), 802, 402, 403. Not in Dr. Kesidis' expert report; timely: never produced or description accurate disclosed.

Document complete; 809 publicly available Document complete; 810 publicly available 401; 402; 801; 803; 807; 818 identification adequate; publicly available; identified in Dr. Kesidis' expert report

PTX-

288

Proventia Security Product Family Datasheet http://documents.iss.net/literature/proventia/proventia_platform-brochure.pdf NT Publicly available; produced Not timely: produced after during summary judgment the close of discovery. briefing

Identification adequate; 827 publicly available; produced during summary judgment briefing

Live Traffic Analysis of TCP/IP Gateways dated November 10, 1997 from http://web.archive.org/web/19980124000949.www.csl.sri.com/emerald/live-traffic.html

Case 1:04-cv-01199-SLR

Document 524-8

Filed 08/18/2008

Page 27 of 49

Final Ex. No.

BATES RANGE

DOCUMENT DESCRIPTION

Symantec's Objections

Basis for Admission: Response to Symantec's Objections

ISS's objections

Basis for Admission: Response to ISS's Objections

Prev. PTX No.

PTX-

289

Abstract of Live Traffic Analysis of TCP/IP Gateways dated August 1, 1997 from http://web.archive.org/web/19980124003236/www.c sl.sri.com/emerald/

Document inadequately identified. Not timely: produced after the close of discovery.

Identification adequate; 828 publicly available; produced during summary judgment briefing

PTX-

290

Book titled A Heritage of Innovation ­SRI_'s First Half Century by Donald Nielsen

NP

Publicly available

Not timely: never produced or disclosed.

Publicly available

845

PTX-

291

RealSecure Network Datasheet NP (http://documents.iss.net/literature/realsecure/rsn/10100datasheet.pdf) NP "SiteProtector Security Fusion" (http://documents.iss.net/literature/SiteProtector/Data sheet-Fusion2.0.pdf) Curriculum vitae Dr. George Kesidis 105, 802 ISS webpage http://www.iss.net/education/schedules/bycourses/by_course-course=94=north-america.php Ex. A to Symantec's Supplemental Responses to Interrogatory No. 9 and 17 Ex. A to Symantec's Supplemental Response to Interrogatory No. 18 Ex. B to Symantec's Supplemental Response to Interrogatory No. 18 ISS's Response to SRI_Interrogatory No. 1 Symantec's Response to SRI_Interrogatory No. 9 NP, DI

Publicly available; identified Document inadequately Identification adequate; 848 in Dr. Kesidis' expert report identified. Not timely: never publicly available; identified produced or disclosed. in Dr. Kesidis' expert report Publicly available; identified Not timely: never produced in Dr. Kesidis' expert report or disclosed. 402; 403; 803; 807 105, 802 Publicly available; identified 875 in Dr. Kesidis' expert report 401; 402; 803; 807 915

PTX-

292

PTXPTX-

293 294

PTXPTXPTXPTXPTX-

295 296 297 298 299

Publicly available; produced Document inadequately during summary judgment identified. briefing; adequately identifi