ACTIVE LEARNING FOR INTERACTIVE LABELING OF NEW DEVICE TYPES BASED ON LIMITED FEEDBACK

    公开(公告)号:US20200160100A1

    公开(公告)日:2020-05-21

    申请号:US16194442

    申请日:2018-11-19

    Abstract: In one embodiment, a device clusters traffic feature vectors for a plurality of endpoints in a network into a set of clusters. Each traffic feature vector comprises traffic telemetry data captured for one of the endpoints. The device selects one of the clusters for labeling, based in part on contextual data associated with the clusters that was not used to form the clusters. The device obtains a device type label for the selected cluster by providing data regarding the selected cluster and the contextual data associated with that cluster to a user interface. The device provides the device type label and the traffic feature vectors associated with the selected cluster for training a machine learning-based device type classifier.

    SEAMLESS ROTATION OF KEYS FOR DATA ANALYTICS AND MACHINE LEARNING ON ENCRYPTED DATA

    公开(公告)号:US20200153616A1

    公开(公告)日:2020-05-14

    申请号:US16186662

    申请日:2018-11-12

    Abstract: In one embodiment, a network assurance service maintains a first set of telemetry data from the network anonymized using a first key regarding a plurality of network entities in a monitored network. The service receives a key rotation notification indicative of a key changeover from the first key to a second key for anonymization of a second set of telemetry data from the network. The service forms, during a key rotation time period associated with the key changeover, a mapped dataset by converting anonymized tokens in the second set of telemetry data into anonymized tokens in the first set of telemetry data. The service augments, during the key rotation time period, the first set of telemetry data with the mapped dataset. The service assesses, during the time period, performance of the network by applying a machine learning-based model to the first set of telemetry data augmented with the mapped dataset.

    Distributed constrained tree formation for deterministic multicast

    公开(公告)号:US10652135B2

    公开(公告)日:2020-05-12

    申请号:US15216007

    申请日:2016-07-21

    Abstract: In one embodiment, a multicast listener device floods a path lookup request to search for a multicast tree, and may then receive path lookup responses from candidate nodes on the multicast tree, where each of the path lookup responses indicates a unicast routing cost from a respective candidate node to the multicast listener device, and where each of the candidate nodes is configured to suppress a path lookup response if a total path latency from a source of the multicast tree to the multicast listener device via that respective candidate node is greater than a maximum allowable path latency. The multicast listener device may then select a particular candidate node as a join point for the multicast tree based on the particular node having a lowest associated unicast routing cost to the multicast listener device from among the candidate nodes, and joins the multicast tree at the selected join point.

    PRIVACY-AWARE MODEL GENERATION FOR HYBRID MACHINE LEARNING SYSTEMS

    公开(公告)号:US20200099590A1

    公开(公告)日:2020-03-26

    申请号:US16697344

    申请日:2019-11-27

    Abstract: In one embodiment, a network assurance service executing in a local network clusters measurements obtained from the local network regarding a plurality of devices in the local network into measurement clusters. The network assurance service computes aggregated metrics for each of the measurement clusters. The network assurance service sends a machine learning model computation request to a remote service outside of the local network that includes the aggregated metrics for each of the measurement clusters. The remote service uses the aggregated metrics to train a machine learning-based model to analyze the local network. The network assurance service receives the trained machine learning-based model to analyze performance of the local network. The network assurance service uses the receive machine learning-based model to analyze performance of the local network.

    Cross-organizational network diagnostics with privacy awareness

    公开(公告)号:US10601676B2

    公开(公告)日:2020-03-24

    申请号:US15705462

    申请日:2017-09-15

    Abstract: In one embodiment, a service identifies a performance issue exhibited by a first device in a first network. The service forms a set of one or more time series of one or more characteristics of the first device associated with the identified performance issue. The service generates a mapping between the set of one or more time series of one or more characteristics of the first device to one or more time series of one or more characteristics of a second device in a second network. The mapping comprises a relevancy score that quantifies a degree of similarity between the characteristics of the first and second devices. The service determines a likelihood of the second device exhibiting the performance issue based on the generated mapping and on the relevancy score. The service provides an indication of the determined likelihood to a user interface associated with the second network.

    DEEP LEARNING ARCHITECTURE FOR COLLABORATIVE ANOMALY DETECTION AND EXPLANATION

    公开(公告)号:US20200076677A1

    公开(公告)日:2020-03-05

    申请号:US16120529

    申请日:2018-09-04

    Abstract: In one embodiment, a network assurance service that monitors a network detects a behavioral anomaly in the network using an anomaly detector that compares an anomaly detection threshold to a target value calculated based on a first set of one or more measurements from the network. The service uses an explanation model to predict when the anomaly detector will detect anomalies. The explanation model takes as input a second set of one or more measurements from the network that differs from the first set. The service determines that the detected anomaly is explainable, based on the explanation model correctly predicting the detection of the anomaly by the anomaly detector. The service provides an anomaly detection alert for the detected anomaly to a user interface, based on the detected anomaly being explainable. The anomaly detection alert indicates at least one measurement from the second set as an explanation for the anomaly.

    Deterministic data collection from mobile network device traveling within a deterministic network

    公开(公告)号:US10567267B2

    公开(公告)日:2020-02-18

    申请号:US15642657

    申请日:2017-07-06

    Abstract: In one embodiment, a method comprises: determining access point devices providing network coverage for a mobile network device within a prescribed coverage area of a deterministic network; establishing a deterministic reception tree comprising a root and switching devices associated with the access point devices, the deterministic reception tree enabling any one or more of the switching devices to forward toward the root a data packet, transmitted by the mobile network device at a prescribed transmission time, for deterministic reception by the root at a prescribed reception time regardless of any distance of any of the access point devices from the root; and causing the switching devices to implement the deterministic reception tree enabling the root to deterministically receive the data packet, received by any one or more of the access point devices, at the prescribed reception time.

    Traffic-based inference of influence domains in a network by using learning machines

    公开(公告)号:US10540605B2

    公开(公告)日:2020-01-21

    申请号:US13946386

    申请日:2013-07-19

    Abstract: In one embodiment, techniques are shown and described relating to traffic-based inference of influence domains in a network by using learning machines. In particular, in one embodiment, a management device computes a time-based traffic matrix indicating traffic between pairs of transmitter and receiver nodes in a computer network, and also determines a time-based quality parameter for a particular node in the computer network. By correlating the time-based traffic matrix and time-based quality parameter for the particular node, the device may then determine an influence of particular traffic of the traffic matrix on the particular node.

    Privacy-aware model generation for hybrid machine learning systems

    公开(公告)号:US10536344B2

    公开(公告)日:2020-01-14

    申请号:US15996645

    申请日:2018-06-04

    Abstract: In one embodiment, a network assurance service executing in a local network clusters measurements obtained from the local network regarding a plurality of devices in the local network into measurement clusters. The network assurance service computes aggregated metrics for each of the measurement clusters. The network assurance service sends a machine learning model computation request to a remote service outside of the local network that includes the aggregated metrics for each of the measurement clusters. The remote service uses the aggregated metrics to train a machine learning-based model to analyze the local network. The network assurance service receives the trained machine learning-based model to analyze performance of the local network. The network assurance service uses the receive machine learning-based model to analyze performance of the local network.

Patent Agency Ranking