知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

91 records (took 0.064 seconds)

    Recording encrypted media session
    21.
    发明授权
    Recording encrypted media session 有权

    公开(公告)号：US10798067B2

    公开(公告)日：2020-10-06

    申请号：US14643802

    申请日：2015-03-10

    Applicant: Cisco Technology, Inc.

    Inventor： Tirumaleswar Reddy ,  Daniel G. Wing ,  Prashanth Patil ,  Ram Mohan R.

    IPC: H04L9/32 ,  H04L29/06 ,  H04L9/08

    Abstract: In one implementation, a media stream is recorded using one or more keys. The one or more keys are also encrypted. The one or more encrypted keys may be stored with the encrypted media session at a cloud storage service. A network device receives a request to record a media stream and accesses at least one stream key for the media stream. The stream key is for encrypting the media stream. The network device encrypts the stream key with a master key. The encrypted stream key is stored in association with the encrypted media stream.

    IDENTIFYING AND USING DNS CONTEXTUAL FLOWS
    23.
    发明申请
    IDENTIFYING AND USING DNS CONTEXTUAL FLOWS 审中-公开

    公开(公告)号：US20200067972A1

    公开(公告)日：2020-02-27

    申请号：US16669831

    申请日：2019-10-31

    Applicant: Cisco Technology, Inc.

    Inventor： David McGrew ,  Blake Harrell Anderson ,  Daniel G. Wing ,  Flemming Andreasen

    IPC: H04L29/06 ,  H04L29/12

    Abstract: In one embodiment, a device in a network captures domain name system (DNS) response data from a DNS response sent by a DNS service to a client in the network. The device captures session data for an encrypted session of the client. The device makes a determination that the encrypted session is malicious by using the captured DNS response data and the captured session data as input to a machine learning-based or rule-based classifier. The device performs a mediation action in response to the determination that the encrypted session is malicious.

    Security policy for HTTPS using DNS
    24.
    发明授权
    Security policy for HTTPS using DNS 有权

    公开(公告)号：US10375020B2

    公开(公告)日：2019-08-06

    申请号：US15408616

    申请日：2017-01-18

    Applicant: Cisco Technology, Inc.

    Inventor： Daniel G. Wing ,  K. Tirumaleswar Reddy ,  Prashanth Patil

    IPC: H04L29/06 ,  H04L29/12 ,  H04L29/08

    Abstract: In one embodiment, a browser operating on a host device receives, from a user, a request to access a web server that includes a Uniform Resource Locator (URL) associated with the web server. In response, the browser sends, to a Domain Name System (DNS) server, a request for an Internet Protocol (IP) address correlated with the domain hosting the URL, and receives, from the DNS server, a response that comprises a block policy IP address and an appropriate error code. Based on this IP address and the error code indicated in the response, the browser renders an access denied page indicating that access to the web server associated with the URL is not permitted, wherein at least a portion of the access denied page is stored in memory accessible to the browser prior to sending the request for the IP address correlated with the domain that is hosting the URL.

    Detection of malware and malicious applications
    25.
    发明授权
    Detection of malware and malicious applications 有权

    公开(公告)号：US10305928B2

    公开(公告)日：2019-05-28

    申请号：US14820265

    申请日：2015-08-06

    Applicant: Cisco Technology, Inc.

    Inventor： David McGrew ,  Andrew Zawadowskiy ,  Donovan O'Hara ,  Saravanan Radhakrishnan ,  Tomas Pevny ,  Daniel G. Wing

    IPC: H04L29/06

    Abstract: A method comprises receiving, at a network infrastructure device, a flow of packets, determining, using the network infrastructure device and for a first subset of the packets, that the first subset corresponds to a first datagram and determining a first length of the first datagram, determining, using the network infrastructure device and for a second subset of the packets, that the second subset corresponds to a second datagram that was received after the first datagram, and determining a second length of the second datagram, determining, using the network infrastructure device, a duration value between a first arrival time of the first datagram and a second arrival time of the second datagram, sending, to a collector device that is separate from the network infrastructure device, the first length, the second length, and the duration value for analysis.

    DISTRIBUTED DENIAL OF SERVICE ATTACK PROTECTION FOR INTERNET OF THINGS DEVICES
    27.
    发明申请
    DISTRIBUTED DENIAL OF SERVICE ATTACK PROTECTION FOR INTERNET OF THINGS DEVICES 审中-公开

    公开(公告)号：US20180109554A1

    公开(公告)日：2018-04-19

    申请号：US15292503

    申请日：2016-10-13

    Applicant: Cisco Technology, Inc.

    Inventor： K Tirumaleswar Reddy ,  Daniel G. Wing ,  Carlos M. Pignataro

    IPC: H04L29/06

    CPC classification number: H04L63/1458 ,  H04L63/0245 ,  H04L63/0428 ,  H04L63/08 ,  H04L63/10 ,  H04L2463/143 ,  H04W4/70 ,  H04W12/08

    Abstract: Presented herein are techniques for remediating a distributed denial of service attack. A methodology includes, at a network device, such as a constrained resource Internet of Things (IoT) device, receiving from an authorization server cryptographic material sufficient to validate and decrypt tokens carried in packets, detecting a denial of service attack that employs packets containing invalid tokens, and in response to detecting the denial of service attack, signaling a remediation server for assistance to remediate the denial of service attack, and sending to the remediation server the cryptographic material over a secure communication channel such that the remediation server enables validation and decryption of tokens carried in packets, subsequent to detection of the denial of service attack, that are destined for the network device.

Patent Agency Ranking