公开(公告)号：US11463365B1

公开(公告)日：2022-10-04

申请号：US17150525

申请日：2021-01-15

Applicant: Cisco Technology, Inc.

Inventor： Jean-Philippe Vasseur ,  Grégory Mermoud ,  Vinay Kumar Kolar

IPC: H04L47/2425 ,  H04L47/122 ,  H04L12/46 ,  H04L43/0864 ,  H04L43/087 ,  H04L43/0852 ,  H04L45/00

Abstract: In one embodiment, a device identifies a sudden change in a time series of a quality of service metric for a first path in a network that violates a service level agreement threshold associated with application traffic conveyed via the first path. The device predicts a length of time that the sudden change in the time series will last. The device determines, based in part on the length of time that the sudden change in the time series is predicted to last, that the application traffic should be rerouted onto a second path in the network. The device causes the application traffic to be rerouted onto the second path in the network.

公开(公告)号：US11451456B2

公开(公告)日：2022-09-20

申请号：US16389013

申请日：2019-04-19

Applicant: Cisco Technology, Inc.

Inventor： David Tedaldi ,  Grégory Mermoud ,  Pierre-Andre Savalle ,  Jean-Philippe Vasseur

IPC: H04L43/065 ,  H04L41/12 ,  G06N20/00 ,  H04L43/0817 ,  H04L41/16

Abstract: In one embodiment, a device classification service obtains telemetry data for a plurality of devices in a network. The device classification service repeatedly assigns the devices to device clusters by applying clustering to the obtained telemetry data. The device classification service determines a measure of stability loss associated with the cluster assignments. The measure of stability loss is based in part on whether a device is repeatedly assigned to the same device cluster. The device classification service determines, based on the measure of stability loss, that the cluster assignments have stabilized. The device classification service obtains device type labels for the device clusters, after determining that the cluster assignments have stabilized.

公开(公告)号：US20220294730A1

公开(公告)日：2022-09-15

申请号：US17196429

申请日：2021-03-09

Applicant: Cisco Technology, Inc.

Inventor： Jean-Philippe Vasseur ,  Grégory Mermoud ,  Vinay Kumar Kolar ,  Jürg Nicolaus Diemand

IPC: H04L12/723 ,  H04L12/721 ,  H04L12/725 ,  H04L12/24 ,  H04L12/46

Abstract: In one embodiment, a controller for a network receives, via a user interface, a downgrade policy for the network that specifies an objective for path downgrades in the network. The controller identifies traffic of an application conveyed by an edge router in the network via a particular path in the network and using a first type of link. The controller predicts an effect of downgrading the particular path from using the first type of link to using a second type of link to convey the traffic of the application. The controller causes the edge router to convey the traffic of the application via the second type of link, when the effect predicted by the controller satisfies the objective specified by the downgrade policy.

公开(公告)号：US11438406B2

公开(公告)日：2022-09-06

申请号：US16865517

申请日：2020-05-04

Applicant: Cisco Technology, Inc.

Inventor： Grégory Mermoud ,  Jean-Philippe Vasseur ,  Pierre-André Savalle ,  Vinay Kumar Kolar ,  David Tedaldi

IPC: H04L67/10 ,  H04W4/02 ,  G06N20/00 ,  G06K9/62 ,  G06V10/75 ,  H04L41/16

Abstract: In one embodiment, a device deploys a first machine learning model to an inference location in a network. The first machine learning model is used at the inference location to make inferences about the network. The device receives, from the inference location, an indication that the first machine learning model is exhibiting poor performance. The device identifies a corrective measure for the poor performance that minimizes resource consumption by a model training pipeline of the device. The device deploys, based on the corrective measure, a second machine learning model to the inference location. The second machine learning model is used in lieu of the first machine learning model to make the inferences about the network.

公开(公告)号：US11416522B2

公开(公告)日：2022-08-16

申请号：US16830717

申请日：2020-03-26

Applicant: Cisco Technology, Inc

Inventor： Grégory Mermoud ,  David Tedaldi ,  Pierre-André Savalle ,  Jean-Philippe Vasseur ,  Jürg Nicolaus Diemand

IPC: G06F16/28 ,  G06F16/23

Abstract: In various embodiments, a device classification service obtains data indicative of device attributes of a plurality of devices. The device classification service forms, based on the obtained data indicative of the device attributes, a concept graph that comprises nodes that represent different sets of the device attributes. The device classification service determines, by analyzing the concept graph, a relevance score for each of the device attributes that quantifies how relevant that attribute is to classifying a device by its device type. The device classification service uses the relevance scores for the device attributes to cluster the plurality of devices into device type clusters by their device attributes.

公开(公告)号：US11283830B2

公开(公告)日：2022-03-22

申请号：US16823650

申请日：2020-03-19

Applicant: Cisco Technology, Inc.

Inventor： Jean-Philippe Vasseur ,  Grégory Mermoud ,  Pierre-André Savalle ,  David Tedaldi

IPC: H04L29/06

Abstract: In various embodiments, a device classification service clusters devices in a network into a device type cluster based on attributes associated with the devices. The device classification service tracks changes to the device type cluster over time. The device classification service detects an attack on the device classification service by one or more of the devices based on the tracked changes to the device type cluster. The device classification service initiates a mitigation action for the detected attack on the device classification service.

公开(公告)号：US11258673B2

公开(公告)日：2022-02-22

申请号：US16402384

申请日：2019-05-03

Applicant: Cisco Technology, Inc.

Inventor： Jean-Philippe Vasseur ,  Grégory Mermoud ,  Vinay Kumar Kolar

IPC: H04L12/24 ,  G06N20/00 ,  H04L29/08

Abstract: In one embodiment, a supervisory service for one or more networks receives telemetry data samples from a plurality of networking devices in the one or more networks. The service trains a failure prediction model to predict failures in the one or more networks, using a training dataset comprising the received telemetry data samples. The service assesses performance of the failure prediction model. The service trains, based on the assessed performance of the failure prediction model, a machine learning-based classification model to determine whether a networking device should send a particular telemetry data sample to the service. The service sends the machine learning-based classifier to one or more of the plurality of networking devices, to control which telemetry data samples the one or more networking devices send to the supervisory service.

公开(公告)号：US20210367847A1

公开(公告)日：2021-11-25

申请号：US16878780

申请日：2020-05-20

Applicant: Cisco Technology, Inc.

Inventor： Jean-Philippe Vasseur ,  Grégory Mermoud ,  Pierre-André Savalle ,  David Tedaldi

IPC: H04L12/24 ,  H04L12/26 ,  H04L29/12 ,  H04L29/06

Abstract: In various embodiments, a device classification service makes a determination that an endpoint device in a network is eligible for expedited device classification based on a policy. The device classification service obtains, after making the determination that the endpoint device in the network is eligible for expedited device classification, telemetry data regarding the endpoint device generated by actively probing the endpoint device. The device classification service determines whether the telemetry data regarding the endpoint device matches any existing device classification rules. The device classification service generates, based on the telemetry data, a device classification rule that assigns a device type to the endpoint device, when the telemetry data does not match any existing device classification rules.

公开(公告)号：US20210360059A1

公开(公告)日：2021-11-18

申请号：US16875182

申请日：2020-05-15

Applicant: Cisco Technology, Inc.

Inventor： Pierre-André Savalle ,  Jean-Philippe Vasseur ,  Grégory Mermoud ,  Vinay Kumar Kolar

IPC: H04L29/08 ,  H04L12/24

Abstract: In one embodiment, a network assurance service that monitors one or more networks identifies changes in a key performance indicator for each of a plurality of network entities in the one or more networks. The service forms a peer group of network entities from the plurality of network entities whose changes in the key performance indicator are correlated. The service monitors the key performance indicator for network entities in the peer group of network entities. The service, based on the monitoring, detects an anomalous change in the key performance indicator for a particular network entity in the peer group of network entities relative to other network entities in the peer group of network entities.

公开(公告)号：US11171975B2

公开(公告)日：2021-11-09

申请号：US16141007

申请日：2018-09-25

Applicant: Cisco Technology, Inc.

Inventor： Jean-Philippe Vasseur ,  Grégory Mermoud ,  Santosh Ghanshyam Pandey

IPC: G06F21/00 ,  H04L29/06 ,  H04L12/24 ,  H04L12/707 ,  H04W88/12 ,  H04L12/747 ,  G06N20/00

Abstract: In one embodiment, a network assurance service that monitors a network detects, using a machine learning-based anomaly detector, network anomalies associated with source nodes in the monitored network. The network assurance service identifies, for each of the detected anomalies, a set of network paths between the source nodes associated with the anomaly and one or more potential destinations of traffic for that source node. The network assurance service correlates networking devices along the network paths in the identified sets of network paths with the detected network anomalies. The network assurance service adjusts the machine learning-based anomaly detector to use a performance measurement for a particular one of the networking devices as an input feature, based on the correlation between the particular networking device and the detected network anomalies.