专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明申请

WO2022010650A1 DETERMINING APPLICATION ATTACK SURFACE FOR NETWORK APPLICATIONS 审中-公开
公开(公告)号：WO2022010650A1
公开(公告)日：2022-01-13
申请号：PCT/US2021/038505
申请日：2021-06-22
申请人： CISCO TECHNOLOGY, INC.
发明人： RAO, Supreeth Hosur Nagesh , YADAV, Navindra , MALLESHAIAH, Prasannakumar Jobigenahally , PATWARDHAN, Tapan Shrikrishna , ARUMUGAM, Umamaheswaran , PURANDARE, Darshan Shrinath , MA, Aiyesha , LI, Songlin
IPC分类号： H04L29/06 , G06F21/57
摘要： Systems, methods, and computer-readable media for attack surface score computation can include the following processes. An attack surface score service receives information identifying open ports associated with an application. The attack surface score service determines an attack surface score for the application based on the information and common attack ports. A policy engine determines whether to implement a policy for reducing vulnerability of the application to attacks to yield a determination. The policy engine implements a vulnerability reduction policy based on the determination.

22. 发明申请

WO2016196685A1 INTERACTIVE HIERARCHICAL NETWORK CHORD DIAGRAM FOR APPLICATION DEPENDENCY MAPPING 审中-公开
标题翻译：用于应用程序依赖映射的交互式分层网络图
公开(公告)号：WO2016196685A1
公开(公告)日：2016-12-08
申请号：PCT/US2016/035350
申请日：2016-06-01
申请人： CISCO TECHNOLOGY, INC.
发明人： PANG, Jackson Ngoc Ki , WATTS, Michael Standish , PARANDEHGHEIBI, Ali , YADAV, Navindra
IPC分类号： H04L12/24 , H04L12/26
CPC分类号： H04L43/026 , H04L41/22 , H04L43/062 , Y02D50/30
摘要： The technology visualizes data flows within a datacenter in an interactive hierarchical network chord diagram. Based on analyzed data describing data flows (304), a portion of the data flows that originate at the same first endpoint and terminate at the same second endpoint can be grouped (306). Subsequently, the dataflow monitoring system displays an interactive hierarchical network chord diagram (308) to include a chord with a first endpoint and a second endpoint. The chord represents the grouped portion of data flows that originate at the same first endpoint and terminate at the same second endpoint. Upon receiving a selection (310) of the chord or the first endpoint of the chord, the dataflow monitoring system expands (312) the grouped portion of the data flows into a more granular representation of the network by updating the displayed interactive chord diagram (314).
摘要翻译：该技术在交互式分层网络和弦图中可视化数据中心内的数据流。基于描述数据流（304）的分析数据，可以将源于相同第一端点并在同一第二端点终止的数据流的一部分分组（306）。随后，数据流监视系统显示交互式分级网络和弦图（308）以包括具有第一端点和第二端点的和弦。和弦表示源自相同第一个端点并终止于相同第二个端点的数据流的分组部分。在接收到和弦或和弦的第一端点的选择（310）之后，数据流监视系统通过更新所显示的交互和弦图（314）将数据流的分组部分扩展（312）成更细粒度的网络表示）。

23. 发明申请

WO2016196684A1 AUTOMATIC SOFTWARE UPGRADE 审中-公开
标题翻译：自动软件升级
公开(公告)号：WO2016196684A1
公开(公告)日：2016-12-08
申请号：PCT/US2016/035349
申请日：2016-06-01
申请人： CISCO TECHNOLOGY, INC.
发明人： CHANG, Shih-Chun , PANG, Jackson Ngoc Ki , MALHOTRA, Varun Sagar , VU, Hai Trong , SPADARO, Roberto Fernando , KULSHRESHTHA, Ashutosh , YADAV, Navindra
IPC分类号： H04L29/06 , G06F9/445 , G06F9/44 , G06F21/44
CPC分类号： G06F8/65 , G06F21/57 , H04L63/12
摘要： Systems, methods, and computer-readable media are provided for automatically downloading and launching a new version of software package on components in a network environment. In some examples, an upgrade server of a network environment keeps a copy of all versions of software packages running on nodes or sensors of the network environment, identifications of corresponding nodes or sensors, and public keys associated with the software packages. The upgrade server can authenticate a new version of a software package using a two-step process.
摘要翻译：提供了系统，方法和计算机可读介质，用于在网络环境中的组件上自动下载和启动软件包的新版本。在一些示例中，网络环境的升级服务器保留运行在网络环境的节点或传感器上的所有版本的软件包的副本，相应节点或传感器的标识以及与软件包相关联的公钥。升级服务器可以使用两步过程来验证软件包的新版本。

24. 发明申请

WO2022060625A1 SECURITY POLICIES FOR SOFTWARE CALL STACKS 审中-公开
公开(公告)号：WO2022060625A1
公开(公告)日：2022-03-24
申请号：PCT/US2021/049678
申请日：2021-09-09
申请人： CISCO TECHNOLOGY, INC.
发明人： KULSHRESHTHA, Ashutosh , SLOANE, Andy , PATEL, Hiral Shashikant , CHETTIAR, Uday Krishnaswamy , KEMPE, Oliver , VISWANATHAN, Bharathwaj Sankara , YADAV, Navindra
IPC分类号： G06F21/50
摘要： The present disclosure provides systems, methods, and computer-readable media for implementing security polices at software call stack level. In one example, a method includes generating a call stack classification scheme for an application, detecting a call stack during deployment of the application; using the call stack classification scheme during runtime of the application, classifying the detected call stack as one of an authorized call stack or an unauthorized call stack to yield a classification; and applying a security policy based on the classification.

25. 发明申请

WO2022031474A1 SYSTEMS AND METHODS FOR DETECTING HIDDEN VULNERABILITIES IN ENTERPRISE NETWORKS 审中-公开
公开(公告)号：WO2022031474A1
公开(公告)日：2022-02-10
申请号：PCT/US2021/043250
申请日：2021-07-26
申请人： CISCO TECHNOLOGY, INC.
发明人： RAO, Supreeth, Hosur, Nagesh , YADAV, Navindra , MALLESHAIAH, Prasannakumar, Jobigenahally , KUMAR, Ashok , ARUMUGAM, Umamaheswaran , PURANDARE, Darshan, Shrinath , LI, Songlin , HE, Hanlin
IPC分类号： H04L29/06 , G06F21/57
摘要： Systems, methods, and non-transitory computer-readable storage media are disclosed for detecting, identifying, and/or assessing hidden vulnerabilities in an enterprise network. In one example, a device may have one or more memories storing computer-readable instructions and one or more processors configured to execute the computer-readable instructions to receive vulnerability data of network components within an enterprise network. The vulnerability data can include identification of one or more vulnerabilities detected within the enterprise network. The device can then determine a vulnerability frequency and a machine frequency associated with each of the one or more vulnerabilities. The device can then determine a vulnerability score for each of the one or more vulnerabilities based on the vulnerability frequency and an inverse of the machine frequency, to yield a plurality of vulnerability scores. The device can then rank the one or more vulnerabilities based on the plurality of vulnerability scores.

26. 发明申请

WO2022010647A1 SYSTEMS AND METHODS FOR DETERMINING EFFECTIVENESS OF NETWORK SEGMENTATION POLICIES 审中-公开
公开(公告)号：WO2022010647A1
公开(公告)日：2022-01-13
申请号：PCT/US2021/038486
申请日：2021-06-22
申请人： CISCO TECHNOLOGY, INC.
发明人： WADHWA, Alok Lalit , FONTENOT, James Gabriel , KULSHRESHTHA, Ashutosh , YADAV, Navindra , GANDHAM, Shashidhar , ZENG, Weifei
IPC分类号： H04L29/06 , G06F21/57
摘要： Disclosed herein are methods, systems, and non-transitory computer-readable storage media for scoring network segmentation policies in order to determine their effectiveness before, during and after enforcement. In one aspect, a method includes identifying one or more applications within an enterprise network; identifying at least one network security policy in association with the one or more applications within the enterprise network; determining a score of the network security policy based on information corresponding to exposure of each of the one or more applications within the enterprise network; and executing the network security policy based on the score.

27. 发明申请

WO2021252454A1 IDENTIFYING HOST FUNCTIONALITIES BASED ON PROCESS CHARACTERIZATION 审中-公开
公开(公告)号：WO2021252454A1
公开(公告)日：2021-12-16
申请号：PCT/US2021/036346
申请日：2021-06-08
申请人： CISCO TECHNOLOGY, INC.
发明人： LIU, Xin , GUPTA, Sunil , NGO, Thanh Trung , BUI, Xuan Loc , NGUYEN, Hoang Viet , GANDHAM, Shashi , YADAV, Navindra
IPC分类号： G06F9/50 , G06F11/3409 , G06F2201/84 , G06F9/45558 , G06F9/5011
摘要： Systems, methods, and computer-readable for defining host functionalities in a computing environment include obtaining two or more snapshots comprising information pertaining to two or more processes executing in two or more hosts, the two or more snapshots being obtained at two or more points in time from the two or more hosts. One or more long-running processes amongst the two or more processes are identified based on one or more criteria associated with long-running processes. One or more priorities associated with the one or more long-running processes and used for defining functionalities for at least a subset of the two or more hosts, where high priorities are assigned to long-running processes, such as web server or database server processes, which are unique to at least the subset of the two or more hosts. Resources may be provisioned based on these host functionalities.

28. 发明申请

WO2019147680A1 DISCOVERY OF MIDDLEBOXES USING TRAFFIC FLOW STITCHING 审中-公开
公开(公告)号：WO2019147680A1
公开(公告)日：2019-08-01
申请号：PCT/US2019/014758
申请日：2019-01-23
申请人： CISCO TECHNOLOGY, INC.
发明人： RAO, Supreeth , YADAV, Navindra , ARUMUGAM, Umamaheswaran , WATTS, Micheal , GANDHAM, Shashi , NGUYEN, Duy , VU, Hai , MALLESHAIAH, Prasannakumar Jobigenahally , MA, Aiyesha , ZHU, Kai , PURANDARE, Darshan Shrinath , PRABAKARAN, Jothi Prakash
IPC分类号： H04L29/08
摘要： Systems, methods, and computer-readable media for flow stitching network traffic flow segments across middleboxes. A method can include collecting flow records of traffic flow segments at a first middlebox and a second middlebox in a network environment including one or more transaction identifiers assigned to the traffic flow segments. Sources and destinations of the traffic flow segments can be identified with respect to the first middlebox and the second middlebox. Corresponding subsets of the traffic flow segments can be stitched together to from a first stitched traffic flow at the first middlebox and a second stitched traffic flow at the second middlebox. The first and second stitched traffic flows can be stitched together to form a cross-middlebox stitched traffic flow across the first middlebox and the second middlebox. The cross-middlebox stitched traffic flow can be incorporated as part of network traffic data for the network environment.

29. 发明申请

WO2016196683A1 SYSTEM FOR MONITORING AND MANAGING DATACENTERS 审中-公开
标题翻译：监测和管理数据库系统
公开(公告)号：WO2016196683A1
公开(公告)日：2016-12-08
申请号：PCT/US2016/035348
申请日：2016-06-01
申请人： CISCO TECHNOLOGY, INC.
发明人： YADAV, Navindra , SINGH, Abhishek Ranjan , GANDHAM, Shashidhar , SCHEIB, Ellen Christine , MADANI, Omid , PARANDEHGHEIBI, Ali , PANG, Jackson Ngoc Ki , JEYAKUMAR, Vimalkumar , WATTS, Michael Standish , NGUYEN, Hoang Viet , DEEN, Khawar , PRASAD, Rohit Chandra , GUPTA, Sunil Kumar , RAO, Supreeth Hosur Nagesh , GUPTA, Anubhav , KULSHRESHTHA, Ashutosh , SPADARO, Roberto Fernando , VU, Hai Trong , MALHOTRA, Varun Sagar , CHANG, Shih-Chun , VISWANATHAN, Bharathwaj Sankara , RACHITA AGASTHY, Fnu , BARLOW, Duane Thomas
IPC分类号： H04L29/06 , H04L12/26
CPC分类号： H04L63/1408 , H04L43/04 , H04L43/062 , H04L43/0894 , H04L63/02 , H04L63/1425
摘要： An example method includes detecting, using sensors, packets throughout a datacenter. The sensors can then send packet logs to various collectors which can then identify and summarize data flows in the datacenter. The collectors can then send flow logs to an analytics module which can identify the status of the datacenter and detect an attack.
摘要翻译：示例性方法包括在整个数据中心中检测，使用传感器分组。然后，传感器可以将数据包日志发送到各种收集器，然后可以识别和汇总数据中心中的数据流。然后，收集器可以将流日志发送到分析模块，分析模块可以识别数据中心的状态并检测攻击。

30. 发明申请

WO2016195987A1 METHOD AND APPARATUS FOR GROUPING FEATURES INTO BINS WITH SELECTED BIN BOUNDARIES FOR USE IN ANOMALY DETECTION 审中-公开
标题翻译：将特征分组到具有选定的BIN边界以用于异常检测的方法和装置
公开(公告)号：WO2016195987A1
公开(公告)日：2016-12-08
申请号：PCT/US2016/032754
申请日：2016-05-16
申请人： CISCO TECHNOLOGY, INC.
发明人： YADAV, Navindra , SCHEIB, Ellen , AGASTHY, Rachita
IPC分类号： H04L12/26
CPC分类号： H04L63/1425 , H04L41/142 , H04L41/16 , H04L43/062 , H04L63/20
摘要： In one embodiment, a method includes receiving network data at an analytics device, identifying features for the network data at the analytics device, grouping each of the features into bins of varying width at the analytics device, the bins comprising bin boundaries selected based on a probability that data within each of the bins follows a discrete uniform distribution, and utilizing the binned features for anomaly detection. An apparatus and logic are also disclosed herein.
摘要翻译：在一个实施例中，一种方法包括在分析设备处接收网络数据，识别分析设备处的网络数据的特征，将每个特征分组成分析设备的不同宽度的分组，所述分组包括基于每个仓内的数据遵循离散均匀分布的概率，并利用装箱特征进行异常检测。本文还公开了一种装置和逻辑。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式