公开(公告)号：US20190123983A1

公开(公告)日：2019-04-25

申请号：US15793473

申请日：2017-10-25

Applicant: Cisco Technology, Inc.

Inventor： Supreeth Rao ,  Navindra Yadav ,  Prasannakumar Jobigenahally Malleshaiah ,  Darshan Shrinath Purandare ,  Aiyesha Ma ,  Aria Rahadian ,  Umamaheswaran Arumugam ,  Xuan Zou

IPC: H04L12/26 ,  H04W28/08 ,  H04L12/803

Abstract: Systems, methods, and computer-readable media for correlating gathered network traffic data and analytics with external data for purposes of managing a cluster of nodes in a network. In some embodiments, a system can identify a cluster of nodes in a network. Network traffic data for the cluster of nodes in the network can be collected based on traffic flowing through the cluster of nodes using a group of sensors implemented in the network. The system can generate analytics for the cluster of nodes in the network using the collected network traffic data. The analytics can be correlated with external data to create correlated external analytics for use in controlling operation of the cluster of nodes in the network.

公开(公告)号：US20220070222A1

公开(公告)日：2022-03-03

申请号：US17003364

申请日：2020-08-26

Applicant: Cisco Technology, Inc.

Inventor： Supreeth Hosur Nagesh Rao ,  Navindra Yadav ,  Tapan Shrikrishna Patwardhan ,  Umamaheswaran Arumugam ,  Darshan Shrinath Purandare ,  Aiyesha Ma ,  Hongyang Zhang ,  Kai Zhu

IPC: H04L29/06

Abstract: The present disclosure relates to securing workloads of a network by identifying compromised elements in communication with the network and preventing their access to network resources. In one aspect, a method includes monitoring network traffic at network elements of a network; detecting a compromised element in communication with one or more of the network elements, the compromised element being associated with at least one network threat; and based on a defined network policy, applying one of a number of different access prevention schemes to the compromised element to prevent access to the network by the compromised element.

公开(公告)号：US10798015B2

公开(公告)日：2020-10-06

申请号：US16011427

申请日：2018-06-18

Applicant: Cisco Technology, Inc.

Inventor： Supreeth Rao ,  Navindra Yadav ,  Umamaheswaran Arumugam ,  Michael Watts ,  Shashi Gandham ,  Duy Nguyen ,  Hai Vu ,  Prasannakumar Jobigenahally Malleshaiah ,  Aiyesha Ma ,  Kai Zhu ,  Darshan Shrinath Purandare ,  Jothi Prakash Prabakaran

IPC: H04L12/891 ,  H04L29/08 ,  H04L12/26 ,  G06F9/455 ,  H04L12/721 ,  H04L29/06

Abstract: Systems, methods, and computer-readable media for flow stitching network traffic flow segments across middleboxes. A method can include collecting flow records of traffic flow segments at a first middlebox and a second middlebox in a network environment including one or more transaction identifiers assigned to the traffic flow segments. Sources and destinations of the traffic flow segments can be identified with respect to the first middlebox and the second middlebox. Corresponding subsets of the traffic flow segments can be stitched together to from a first stitched traffic flow at the first middlebox and a second stitched traffic flow at the second middlebox. The first and second stitched traffic flows can be stitched together to form a cross-middlebox stitched traffic flow across the first middlebox and the second middlebox. The cross-middlebox stitched traffic flow can be incorporated as part of network traffic data for the network environment.

公开(公告)号：US10523541B2

公开(公告)日：2019-12-31

申请号：US15793424

申请日：2017-10-25

Applicant: Cisco Technology, Inc.

Inventor： Supreeth Rao ,  Navindra Yadav ,  Prasannakumar Jobigenahally Malleshaiah ,  Darshan Shrinath Purandare ,  Aiyesha Ma ,  Aria Rahadian ,  Tapan Shrikrishna Patwardhan ,  Jackson Ngoc Ki Pang

IPC: G06F15/173 ,  H04L12/26 ,  H04L12/24

Abstract: Systems, methods, and computer-readable media for providing interoperability between nodes in separate networks as part of a federated network. In some embodiments, a system can identify a first cluster of nodes in a first network and a second cluster of nodes in a second network. The system can provide interoperability between the first cluster of nodes and the second cluster of nodes. First analytics for the first cluster of nodes can be generated using first network traffic data gathered based on first network traffic flowing through the first cluster of nodes by a group of sensors implemented in the first network. The second cluster of nodes can access the first analytics for the first cluster of nodes as part of providing the interoperability between the first cluster of nodes in the first network and the second cluster of nodes in the second network.

公开(公告)号：US20190238633A1

公开(公告)日：2019-08-01

申请号：US16024182

申请日：2018-06-29

Applicant: Cisco Technology, Inc.

Inventor： Supreeth Rao ,  Navindra Yadav ,  Umamaheswaran Arumugam ,  Michael Watts ,  Shashi Gandham ,  Darshan Shrinath Purandare ,  Duy Nguyen ,  Hai Vu ,  Kai Zhu ,  Aiyesha Ma ,  Tapan Shrikrishna Patwardhan ,  Jothi Prakash Prabakaran

IPC: H04L29/08 ,  H04L12/24 ,  H04L12/26

CPC classification number: H04L67/1031 ,  H04L41/0677 ,  H04L41/0816 ,  H04L41/0893 ,  H04L43/08 ,  H04L67/1017 ,  H04L67/1025 ,  H04L67/1029

Abstract: Aspects of the disclosed technology provide methods for automatically tuning load-balancer configurations in a network environment. In some implementations, a process of the disclosed technology includes steps for collecting flow records of traffic flow segments at a middle box in a network environment, the traffic flow segments corresponding to one or more traffic flows passing through the middle box, analyzing the flow records to identify one or more traffic patterns in the network environment, and automatically updating a load balancer configuration based on the one or more traffic patterns, wherein updating the load balancer configuration improves at least one traffic flow parameter for at least one of the traffic flows passing through the middle box. Systems and machine-readable media are also provided.

公开(公告)号：US20190230041A1

公开(公告)日：2019-07-25

申请号：US16011427

申请日：2018-06-18

Applicant: Cisco Technology, Inc.

Inventor： Supreeth Rao ,  Navindra Yadav ,  Umamaheswaran Arumugam ,  Michael Watts ,  Shashi Gandham ,  Duy Nguyen ,  Hai Vu ,  Prasannakumar Jobigenahally Malleshaiah ,  Aiyesha Ma ,  Kai Zhu ,  Darshan Shrinath Purandare ,  Jothi Prakash Prabakaran

IPC: H04L12/891 ,  H04L29/08

Abstract: Systems, methods, and computer-readable media for flow stitching network traffic flow segments across middleboxes. A method can include collecting flow records of traffic flow segments at a first middlebox and a second middlebox in a network environment including one or more transaction identifiers assigned to the traffic flow segments. Sources and destinations of the traffic flow segments can be identified with respect to the first middlebox and the second middlebox. Corresponding subsets of the traffic flow segments can be stitched together to from a first stitched traffic flow at the first middlebox and a second stitched traffic flow at the second middlebox. The first and second stitched traffic flows can be stitched together to form a cross-middlebox stitched traffic flow across the first middlebox and the second middlebox. The cross-middlebox stitched traffic flow can be incorporated as part of network traffic data for the network environment.

公开(公告)号：US20190230035A1

公开(公告)日：2019-07-25

申请号：US15966561

申请日：2018-04-30

Applicant: Cisco Technology, Inc.

Inventor： Supreeth Rao ,  Navindra Yadav ,  Umamaheswaran Arumugam ,  Micheal Watts ,  Shashi Gandham ,  Prasannakumar Jobigenahally Malleshaiah ,  Duy Nguyen ,  Hai Vu ,  Tapan Shrikrishna Patwardhan ,  Aiyesha Ma ,  Xuan Zou ,  Jothi Prakash Prabakaran

IPC: H04L12/801 ,  H04L12/26 ,  H04L12/24

Abstract: Systems, methods, and computer-readable media for flow stitching network traffic flow segments at a middlebox in a network environment. In some embodiments, a method can include collecting flow records of traffic flow segments at a middlebox in a network environment including one or more transaction identifiers assigned to the traffic flow segments. The traffic flow segments can correspond to one or more traffic flows passing through the middlebox and flow directions of the traffic flow segments with respect to the middlebox can be identified using the flow records. The traffic flow segments can be stitched together based on the one or more transaction identifiers and the flow directions of the traffic flow segments to form a stitched traffic flow of the one or more traffic flows passing through the middlebox. The stitched traffic flow can be incorporated as part of network traffic data for the network environment.

公开(公告)号：US20190229995A1

公开(公告)日：2019-07-25

申请号：US15985520

申请日：2018-05-21

Applicant: Cisco Technology, Inc.

Inventor： Supreeth Rao ,  Navindra Yadav ,  Umamaheswaran Arumugam ,  Michael Watts ,  Shashi Gandham ,  Prasannakumar Jobigenahally Malleshaiah ,  Duy Nguyen ,  Hai Vu ,  Aiyesha Ma ,  Tapan Shrikrishna Patwardhan ,  Kai Zhu ,  Jothi Prakash Prabakaran

IPC: H04L12/24 ,  H04L12/26

Abstract: Systems, methods, and computer-readable media for flow stitching network traffic flow segments at a middlebox in a network environment. In some embodiments, flow records of traffic flow segments at a middlebox in a network environment are collected. The flow records can include transaction identifiers assigned to the traffic flow segments. Sources and destinations of the traffic flow segments with respect to the middlebox can be identified using the flow records. Further, the traffic flow segments can be stitched together to form a plurality of stitched traffic flows at the middlebox based on the transaction identifiers and the sources and destinations of the traffic flow segments in the network environment with respect to the middlebox. A configuration of the middlebox operating in the network environment can be identified based on the stitched traffic flows at the middlebox in the network environment.

公开(公告)号：US20190123985A1

公开(公告)日：2019-04-25

申请号：US15793424

申请日：2017-10-25

Applicant: Cisco Technology, Inc.

Inventor： Supreeth Rao ,  Navindra Yadav ,  Prasannakumar Jobigenahally Malleshaiah ,  Darshan Shrinath Purandare ,  Aiyesha Ma ,  Aria Rahadian ,  Tapan Shrikrishna Patwardhan ,  Jackson Ngoc Ki Pang

IPC: H04L12/26 ,  H04L12/24

CPC classification number: H04L43/065 ,  H04L41/0816 ,  H04L41/0886 ,  H04L41/0893 ,  H04L41/0896 ,  H04L41/14 ,  H04L43/04 ,  H04L43/062 ,  H04L43/0876 ,  H04L43/12

Abstract: Systems, methods, and computer-readable media for providing interoperability between nodes in separate networks as part of a federated network. In some embodiments, a system can identify a first cluster of nodes in a first network and a second cluster of nodes in a second network. The system can provide interoperability between the first cluster of nodes and the second cluster of nodes. First analytics for the first cluster of nodes can be generated using first network traffic data gathered based on first network traffic flowing through the first cluster of nodes by a group of sensors implemented in the first network. The second cluster of nodes can access the first analytics for the first cluster of nodes as part of providing the interoperability between the first cluster of nodes in the first network and the second cluster of nodes in the second network.

公开(公告)号：US11895156B2

公开(公告)日：2024-02-06

申请号：US17931595

申请日：2022-09-13

Applicant: Cisco Technology, Inc.

Inventor： Supreeth Hosur Nagesh Rao ,  Navindra Yadav ,  Tapan Shrikrishna Patwardhan ,  Umamaheswaran Arumugam ,  Darshan Shrinath Purandare ,  Aiyesha Ma ,  Hongyang Zhang ,  Kai Zhu

IPC: H04L9/40

CPC classification number: H04L63/20 ,  H04L63/101 ,  H04L63/145 ,  H04L63/1416

Abstract: The present disclosure relates to securing workloads of a network by identifying compromised elements in communication with the network and preventing their access to network resources. In one aspect, a method includes monitoring network traffic at network elements of a network; detecting a compromised element in communication with one or more of the network elements, the compromised element being associated with at least one network threat; and based on a defined network policy, applying one of a number of different access prevention schemes to the compromised element to prevent access to the network by the compromised element.