-
公开(公告)号:US20190163548A1
公开(公告)日:2019-05-30
申请号:US15825248
申请日:2017-11-29
Applicant: Cisco Technology, Inc.
Inventor: Patrick Wetterwald , Pascal Thubert , Eric Levy-Abegnoli , Jean-Philippe Vasseur
IPC: G06F11/07 , H04L29/08 , H04B17/309
Abstract: In one embodiment, a supervisory device in a network receives a help request from a first node in the network indicative of a problem in the network detected by the first node. The supervisory device identifies a second node in the network that is hosting a repair walker agent able to address the detected problem. The supervisory device determines a network path via which the second node is to send repair walker agent to the first node. The supervisory device instructs the second node to send the repair walker agent to the first node via the determined path.
-
公开(公告)号:US20190141540A1
公开(公告)日:2019-05-09
申请号:US15804064
申请日:2017-11-06
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Jean-Philippe Vasseur , Patrick Wetterwald , Eric Levy-Abegnoli
Abstract: In one embodiment, a first actuator in a network of sensors and actuators executes a walker agent configured to adjust an actuation setting of the first actuator. The actuation setting controls an area of coverage of the first actuator when actuated. The executing agent on the first actuator receives one or more sensor measurements from one or more of the sensors that are in communication range of the first actuator. The executing agent also controls, based on the received one or more sensor measurements, the area of coverage of the first actuator by adjusting its actuation setting, in an attempt to optimize coverage of the sensors in the network by the areas of coverage of the actuators. The first actuator unloads the executing walker agent after adjusting the actuation setting of the first actuator and propagates the agent to another one of the actuators in the network for execution.
-
公开(公告)号:US10285108B1
公开(公告)日:2019-05-07
申请号:US15782197
申请日:2017-10-12
Applicant: Cisco Technology, Inc.
Inventor: Vinay Kumar Kolar , Jean-Philippe Vasseur , Santosh Pandey
Abstract: In one embodiment, a service maintains a mobility path graph that represents roaming transitions between wireless access points in a network by one or more client devices in the network. The service identifies, using the mobility path graph, one of the wireless access points in the network to which a particular client device is predicted to roam. The service performs, in advance of the particular client device initiating roaming to the one or more wireless access points, one or more roaming handshakes on behalf of the particular client device and with respect to the wireless access point to which the particular client device is predicted to roam. The service sends handshake data from the performed one or more roaming handshakes to the identified access point to which the particular client device is predicted to roam.
-
公开(公告)号:US20190116539A1
公开(公告)日:2019-04-18
申请号:US15782197
申请日:2017-10-12
Applicant: Cisco Technology, Inc.
Inventor: Vinay Kumar Kolar , Jean-Philippe Vasseur , Santosh Pandey
Abstract: In one embodiment, a service maintains a mobility path graph that represents roaming transitions between wireless access points in a network by one or more client devices in the network. The service identifies, using the mobility path graph, one of the wireless access points in the network to which a particular client device is predicted to roam. The service performs, in advance of the particular client device initiating roaming to the one or more wireless access points, one or more roaming handshakes on behalf of the particular client device and with respect to the wireless access point to which the particular client device is predicted to roam. The service sends handshake data from the performed one or more roaming handshakes to the identified access point to which the particular client device is predicted to roam.
-
公开(公告)号:US10243980B2
公开(公告)日:2019-03-26
申请号:US15205732
申请日:2016-07-08
Applicant: Cisco Technology, Inc.
Inventor: Jean-Philippe Vasseur , Grégory Mermoud , Pierre-André Savalle , Alexandre Honoré
IPC: H04L29/06 , H04L12/751
Abstract: In one embodiment, a device in a network receives an indication that a network anomaly detected by an anomaly detector of a first node in the network is associated with scanning activity in the network. The device receives labeled traffic data associated with the detected anomaly that identifies whether the traffic data is associated with legitimate or illegitimate scanning activity. The device trains a machine learning-based classifier using the labeled traffic data to distinguish between legitimate and illegitimate scanning activity in the network. The device deploys the trained classifier to the first node, to distinguish between legitimate and illegitimate scanning activity in the network.
-
公开(公告)号:US20190081973A1
公开(公告)日:2019-03-14
申请号:US16190756
申请日:2018-11-14
Applicant: Cisco Technology, Inc.
Inventor: Pierre-André Savalle , Grégory Mermoud , Laurent Sartran , Jean-Philippe Vasseur
CPC classification number: H04L63/1425 , H04L41/142 , H04L63/0236 , H04L63/1416 , H04L63/1458
Abstract: In one embodiment, a device in a network maintains a plurality of anomaly detection models for different sets of aggregated traffic data regarding traffic in the network. The device determines a measure of confidence in a particular one of the anomaly detection models that evaluates a particular set of aggregated traffic data. The device dynamically replaces the particular anomaly detection model with a second anomaly detection model configured to evaluate the particular set of aggregated traffic data and has a different model capacity than that of the particular anomaly detection model. The device provides an anomaly event notification to a supervisory controller based on a combined output of the second anomaly detection model and of one or more of the anomaly detection models in the plurality of anomaly detection models.
-
公开(公告)号:US20190068474A1
公开(公告)日:2019-02-28
申请号:US15682674
申请日:2017-08-22
Applicant: Cisco Technology, Inc.
Inventor: Jean-Philippe Vasseur , Grégory Mermoud , Abhishek Kumar
Abstract: In one embodiment, a service in a network samples application traffic throughputs for a set of applications present in a network. The service generates a throughput model based on the sampled application throughputs for the set of applications. The service performs anomaly detection on wireless throughput measurements from the network by comparing the wireless throughput measurements to the generated throughput model. The service sends an anomaly detection notification based on a determination that the wireless throughput measurements from the network are anomalous.
-
公开(公告)号:US10218729B2
公开(公告)日:2019-02-26
申请号:US15205122
申请日:2016-07-08
Applicant: Cisco Technology, Inc.
Inventor: Sébastien Gay , Laurent Sartran , Jean-Philippe Vasseur
Abstract: In one embodiment, a device in a network receives sets of traffic flow features from an unsupervised machine learning-based anomaly detector. The sets of traffic flow features are associated with anomaly scores determined by the anomaly detector. The device ranks the sets of traffic flow features based in part on their anomaly scores. The device applies a genetic programming approach to the ranked sets of traffic flow features to generate new sets of traffic flow features. The genetic programming approach uses a fitness function that is based in part on the rankings of the sets of traffic flow features. The device specializes the anomaly detector to emphasize a particular type of anomaly using the new sets of traffic flow features.
-
公开(公告)号:US10218726B2
公开(公告)日:2019-02-26
申请号:US15180540
申请日:2016-06-13
Applicant: Cisco Technology, Inc.
Inventor: Jean-Philippe Vasseur , Grégory Mermoud , Pierre-André Savalle , Andrea Di Pietro , Sukrit Dasgupta
Abstract: In one embodiment, a networking device in a network causes formation of device clusters of devices in the network. The devices in a particular cluster exhibit similar characteristics. The networking device receives feedback from a device identity service regarding the device clusters. The feedback is based in part on the device identity service probing the devices. The networking device adjusts the device clusters based on the feedback from the device identity service. The networking device performs anomaly detection in the network using the adjusted device clusters.
-
公开(公告)号:US10187413B2
公开(公告)日:2019-01-22
申请号:US15212597
申请日:2016-07-18
Applicant: Cisco Technology, Inc.
Inventor: Jean-Philippe Vasseur , Andrea Di Pietro , Grégory Mermoud , Fabien Flacher
Abstract: In one embodiment, a supervisory device in a network receives traffic data from a security device that uses traffic signatures to assess traffic in the network. The supervisory device receives traffic data from one or more distributed learning agents that use machine learning-based anomaly detection to assess traffic in the network. The supervisory device trains a traffic classifier using the received traffic data from the security device and from the one or more distributed learning agents. The supervisory device deploys the traffic classifier to a selected one of the one or more distributed learning agents.
-
-
-
-
-
-
-
-
-