-
公开(公告)号:US11405802B2
公开(公告)日:2022-08-02
申请号:US16905210
申请日:2020-06-18
Applicant: Cisco Technology, Inc.
Inventor: Pierre-André Savalle , Grégory Mermoud , Jean-Philippe Vasseur , Javier Cruz Mota
Abstract: In one embodiment, a device receives data regarding usage of access points in a network by a plurality of clients in the network. The device maintains an access point graph that represents the access points in the network as vertices of the access point graph. The device generates, for each of the plurality of clients, client trajectories as trajectory subgraphs of the access point graph. A particular client trajectory for a particular client comprises a set of edges between a subset of the vertices of the access point graph and represents transitions between access points in the network performed by the particular client. The device identifies a transition pattern from the client trajectories by deconstructing the trajectory subgraphs. The device uses the identified transition pattern to effect a configuration change in the network.
-
公开(公告)号:US11310141B2
公开(公告)日:2022-04-19
申请号:US16710836
申请日:2019-12-11
Applicant: Cisco Technology, Inc.
Inventor: Vinay Kumar Kolar , Jean-Philippe Vasseur , Grégory Mermoud , Pierre-Andre Savalle
Abstract: In one embodiment, a service tracks performance of a machine learning model over time. The machine learning model is used to monitor one or more computer networks based on data collected from the one or more computer networks. The service also tracks performance metrics associated with training of the machine learning model. The service determines that a degradation of the performance of the machine learning model is anomalous, based on the tracked performance of the machine learning model and performance metrics associated with training of the model. The service initiates a corrective measure for the degradation of the performance, in response to determining that the degradation of the performance is anomalous.
-
公开(公告)号:US11297079B2
公开(公告)日:2022-04-05
申请号:US16404153
申请日:2019-05-06
Applicant: Cisco Technology, Inc.
Inventor: Jean-Philippe Vasseur , Pierre-Andre Savalle , Grégory Mermoud , David Tedaldi
Abstract: In one embodiment, a device classification service forms a device cluster by applying clustering to telemetry data associated with a plurality of devices. The service obtains device type labels for the device cluster. The service generates a device type classification rule using the device type labels and the telemetry data. The service determines whether the device type classification rule should be revalidated by applying a revalidation policy to the device type classification rule. The service revalidates the device type classification rule, based on a determination that the device type classification rule should be revalidated.
-
公开(公告)号:US20210335505A1
公开(公告)日:2021-10-28
申请号:US16860581
申请日:2020-04-28
Applicant: Cisco Technology, Inc.
Inventor: David Tedaldi , Grégory Mermoud , Jürg Nicolaus Diemand , Jean-Philippe Vasseur , Pierre-André Savalle
IPC: G16Y40/35 , G06K9/62 , G06F3/0482
Abstract: In various embodiments, a device obtains a set of device classification rules. Each device classification rule specifies one or more attributes from a set of attributes and being configured to assign a device type to an endpoint in a network when the endpoint exhibits the one or more attributes specified by that rule. The device forms a graphical representation of the set of attributes. The device performs an analysis of the graphical representation of the set of attributes. The device provides a result of the analysis to a user interface.
-
公开(公告)号:US11146463B2
公开(公告)日:2021-10-12
申请号:US16431782
申请日:2019-06-05
Applicant: Cisco Technology, inc.
Inventor: David Tedaldi , Grégory Mermoud , Vinay Kumar Kolar , Jean-Philippe Vasseur , Pierre-Andre Savalle
Abstract: In one embodiment, a device constructs a set of controlled what-if input parameters for evaluating a what-if scenario in a network. The device uses the set of controlled what-if input parameters and state data indicative of a current state of the network as input to a network state model. The network state model predicts values for the state data conditioned on the what-if input parameters. The device predicts a key performance indicator (KPI) in the network by using the predicted values for the state data from the network state model as input to a machine learning-based KPI prediction model. The device initiates a routing change in the network based in part on the predicted KPI.
-
226.
公开(公告)号:US11140187B2
公开(公告)日:2021-10-05
申请号:US16517748
申请日:2019-07-22
Applicant: Cisco Technology, Inc.
Inventor: Laurent Sartran , Sébastien Gay , Pierre-André Savalle , Grégory Mermoud , Jean-Philippe Vasseur
Abstract: In one embodiment, a device in a network receives traffic records indicative of network traffic between different sets of host address pairs. The device identifies one or more address grouping constraints for the sets of host address pairs. The device determines address groups for the host addresses in the sets of host address pairs based on the one or more address grouping constraints. The device provides an indication of the address groups to an anomaly detector.
-
公开(公告)号:US20210297442A1
公开(公告)日:2021-09-23
申请号:US16823650
申请日:2020-03-19
Applicant: Cisco Technology, Inc.
Inventor: Jean-Philippe Vasseur , Grégory Mermoud , Pierre-André Savalle , David Tedaldi
IPC: H04L29/06
Abstract: In various embodiments, a device classification service clusters devices in a network into a device type cluster based on attributes associated with the devices. The device classification service tracks changes to the device type cluster over time. The device classification service detects an attack on the device classification service by one or more of the devices based on the tracked changes to the device type cluster. The device classification service initiates a mitigation action for the detected attack on the device classification service.
-
公开(公告)号:US11128534B2
公开(公告)日:2021-09-21
申请号:US16194466
申请日:2018-11-19
Applicant: Cisco Technology, Inc.
Inventor: Grégory Mermoud , Pierre-André Savalle , Jean-Philippe Vasseur
Abstract: In one embodiment, a device classification service receives data indicative of network traffic policies assigned to a plurality of device types. The device classification service associates measures of policy restrictiveness with the device types, based on the received data indicative of the network traffic policies assigned to the plurality of device types. The device classification service determines misclassification costs associated with a machine learning-based device type classifier of the service misclassifying an endpoint device of one of the plurality device types with another of the plurality of device types, based on their associated measures of policy restrictiveness. The device classification service adjusts the machine learning-based device type classifier to account for the determined misclassification costs.
-
公开(公告)号:US20210281492A1
公开(公告)日:2021-09-09
申请号:US16812517
申请日:2020-03-09
Applicant: Cisco Technology, Inc.
Inventor: Andrea Di Pietro , Javier Cruz Mota , Sukrit Dasgupta , Jean-Philippe Vasseur
Abstract: In one embodiment, a network assurance service that monitors a network detects a network issue in the network using a machine learning model and based on telemetry data captured in the network. The service assigns the detected network issue to an issue cluster by applying clustering to the detected network issue and to a plurality of previously detected network issues. The service selects a set of one or more actions for the detected network issue from among a plurality of actions associated with the previously detected network issues in the issue cluster. The service obtains context data for the detected network issue. The service provides, to a user interface, an indication of the detected network issue, the obtained context data for the detected network issue, and the selected set of one or more actions.
-
230.
公开(公告)号:US20210279632A1
公开(公告)日:2021-09-09
申请号:US16809060
申请日:2020-03-04
Applicant: Cisco Technology, Inc.
Inventor: Andrea Di Pietro , Javier Cruz Mota , Sukrit Dasgupta , Jean-Philippe Vasseur
Abstract: In one embodiment, a service receives telemetry data collected from a plurality of different networks. The service combines the telemetry data into a synthetic input trace. The service inputs the synthetic input trace into a plurality of machine learning models to generate a plurality of predicted key performance indicators (KPIs), each of the models having been trained to assess telemetry data from an associated network in the plurality of different networks and predict a KPI for that network. The service compares the plurality of predicted KPIs to identify one of the plurality of different networks as exhibiting an abnormal behavior.
-
-
-
-
-
-
-
-
-