知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

16 records (took 0.018 seconds)

    DYNAMIC HONEYPOTS
    11.
    发明申请
    DYNAMIC HONEYPOTS 有权

    公开(公告)号：US20220131898A1

    公开(公告)日：2022-04-28

    申请号：US17569285

    申请日：2022-01-05

    Applicant: Cisco Technology, Inc.

    Inventor： Sanjay Kumar Hooda ,  Anand Oswal ,  Nehal Bhau ,  Victor Moreno

    IPC: G06F21/41 ,  H04L47/125

    Abstract: A mapping system, under administrative control of a Wide Area Network (WAN) controller, can track each host, authorized to access a plurality of Local Area Networks (LANs), in one or more mapping databases including a first network address representing an identifier and a second network addressing representing a locator for each host. The mapping system can receive a request for resolution of a first identifier of a host not presently connected to the network. The mapping system can determine the mapping databases exclude a mapping for the first identifier. The mapping system can update the mapping databases with a first mapping including the first identifier and a first locator corresponding to a honeypot network device. The mapping system can transmit, to one or more LANs of the plurality of LANs, routing information to route traffic destined for the first identifier to the honeypot network device.

    END-TO-END IDENTITY-AWARE ROUTING ACROSS MULTIPLE ADMINISTRATIVE DOMAINS
    12.
    发明申请
    END-TO-END IDENTITY-AWARE ROUTING ACROSS MULTIPLE ADMINISTRATIVE DOMAINS 审中-公开

    公开(公告)号：US20200177503A1

    公开(公告)日：2020-06-04

    申请号：US16535519

    申请日：2019-08-08

    Applicant: Cisco Technology, Inc.

    Inventor： Sanjay Kumar Hooda ,  Anand Oswal ,  Nehal Bhau ,  Anil Edathara ,  Munish Mehta

    IPC: H04L12/715 ,  H04L12/46

    Abstract: Systems and methods provide for end-to-end identity-aware routing across multiple administrative domains. A first ingress edge device of a second overlay network can receive a first encapsulated packet from a first egress edge device of a first overlay network. The first ingress edge device can de-encapsulate the first encapsulated packet to obtain an original packet and a user or group identifier. The first ingress edge device can apply a user or group policy matching the user or group identifier to determine a next hop for the original packet. The first ingress edge device can encapsulate the original packet and the user or group identifier to generate a second encapsulated packet. The first ingress edge device can forward the second encapsulated packet to the next hop.

    Communication between distinct network domains
    15.
    发明授权
    Communication between distinct network domains 有权

    公开(公告)号：US10397102B2

    公开(公告)日：2019-08-27

    申请号：US15466817

    申请日：2017-03-22

    Applicant: Cisco Technology, Inc.

    Inventor： Atif Khan ,  Himanshu H. Shah ,  Nehal Bhau

    IPC: H04L12/24 ,  H04L12/723 ,  H04L12/745 ,  H04L12/715

    Abstract: A system may include a first border network device located between a first network domain and a third network domain, and a first edge network device in the first network domain, where the first edge network device may be configured to receive a packet. The packet may be directed to a second edge network device in a second network domain. The first edge network device may also be configured to add a second label to the packet that identifies a second border network device located at the border of a second network domain and the third network domain. The third network domain may be located between the first network domain and the second network domain. The first edge network device may additionally be configured to add a first label to the packet that identifies the first border network device, and route the packet to the first border network device.

    Overlay management protocol for secure routing based on an overlay network
    16.
    发明授权
    Overlay management protocol for secure routing based on an overlay network 有权

    公开(公告)号：US10277558B2

    公开(公告)日：2019-04-30

    申请号：US15677001

    申请日：2017-08-14

    Applicant: Cisco Technology, Inc.

    Inventor： Atif Khan ,  Syed Khalid Raza ,  Nehal Bhau ,  Himanshu H. Shah

    IPC: H04L29/06 ,  H04L12/751 ,  H04L12/715 ,  H04L12/701 ,  H04L12/28

    Abstract: A method for creating a secure network is provided. The method comprises establishing an overlay domain to control routing between overlay edge routers based on an underlying transport network, wherein said establishing comprises running an overlay management protocol to exchange information within the overlay domain; in accordance with the overlay management protocol defining service routes that exist exclusively within the overlay domain wherein each overlay route includes information on at least service availability within the overlay domain; and selectively using the service routes to control routing between the overlay edge routers; wherein the said routing is through the underlying transport network in a manner in which said overlay routes is shared with the overlay edge routers but not with the underlying transport network via the overlay management protocol.

Patent Agency Ranking