知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

111 records (took 0.03 seconds)

    Sharing network security threat information using a blockchain network
    21.
    发明授权
    Sharing network security threat information using a blockchain network 有权

    公开(公告)号：US10735203B2

    公开(公告)日：2020-08-04

    申请号：US15728208

    申请日：2017-10-09

    Applicant: Cisco Technology, Inc.

    Inventor： K. Tirumaleswar Reddy ,  Prashanth Patil ,  Puneeth Rao Lokapalli ,  Carlos M. Pignataro

    IPC: H04L9/32 ,  H04L9/06 ,  H04L29/06

    Abstract: In an example embodiment, a validating peer of a plurality of validating peers in a blockchain network receives, from a non-validating peer, a request to create a root block of a blockchain. The root block includes information related to a potential computer security threat. The validating peer creates the root block with a root block pending validation status. The validating peer shares, with other validating peers of the plurality of validating peers, a notification of the root block with the root block pending validation status to provide an indication of the information. The validating peer determines whether the information is authentic. If the information is determined to be authentic, the validating peer changes the root block pending validation status to a root block authenticated validation status and shares, with the other validating peers, a notification of the root block authenticated validation status to indicate that the information is authentic.

    ENGAGEMENT AND DISENGAGEMENT OF TRANSPORT LAYER SECURITY PROXY SERVICES WITH ENCRYPTED HANDSHAKING
    23.
    发明申请
    ENGAGEMENT AND DISENGAGEMENT OF TRANSPORT LAYER SECURITY PROXY SERVICES WITH ENCRYPTED HANDSHAKING 审中-公开

    公开(公告)号：US20190356694A1

    公开(公告)日：2019-11-21

    申请号：US15984637

    申请日：2018-05-21

    Applicant: Cisco Technology, Inc.

    Inventor： Jianxin Wang ,  Prashanth Patil ,  Flemming Andreasen ,  Nancy Cam-Winget ,  Hari Shankar

    IPC: H04L29/06

    Abstract: Techniques are presented herein for engagement and disengagement of Transport Layer Security proxy services with encrypted handshaking. In one embodiment, a first initial message of a first encrypted handshaking procedure for a first secure communication session between a first device and a second device is intercepted at a proxy device. The first initial message includes first key exchange information for encrypting the first encrypted handshaking procedure. A copy of the first initial message is stored at the proxy device. A second initial message of a second encrypted handshaking procedure for a second secure communication session between the proxy device and the second device is sent from the proxy device to the second device. The second initial message includes second key exchange information for encrypting the second encrypted handshaking procedure. The proxy device determines, based on the second encrypted handshaking procedure, whether to remain engaged or to disengage.

    HIERARCHICAL ACTIVATION OF BEHAVIORAL MODULES ON A DATA PLANE FOR BEHAVIORAL ANALYTICS
    25.
    发明申请
    HIERARCHICAL ACTIVATION OF BEHAVIORAL MODULES ON A DATA PLANE FOR BEHAVIORAL ANALYTICS 审中-公开

    公开(公告)号：US20190260776A1

    公开(公告)日：2019-08-22

    申请号：US15898915

    申请日：2018-02-19

    Applicant: Cisco Technology, Inc.

    Inventor： Saman Taghavi Zargar ,  Subharthi Paul ,  Prashanth Patil ,  Jayaraman Iyer ,  Hari Shankar

    IPC: H04L29/06 ,  H04L12/24 ,  G06N99/00

    Abstract: In one embodiment, a centralized controller maintains a plurality of hierarchical behavioral modules of a behavioral model, and distributes initial behavioral modules to data plane entities to cause them to apply the initial behavioral modules to data plane traffic. The centralized controller may then receive data from a particular data plane entity based on its having applied the initial behavioral modules to its data plane traffic. The centralized controller then distributes subsequent behavioral modules to the particular data plane entity to cause it to apply the subsequent behavioral modules to the data plane traffic, the subsequent behavioral modules selected based on the previously received data from the particular data plane entity. The centralized controller may then iteratively receive data from the particular data plane entity and distribute subsequently selected behavioral modules until an attack determination is made on the data plane traffic of the particular data plane entity.

    SECURE COMMUNICATION SESSION RESUMPTION IN A SERVICE FUNCTION CHAIN
    27.
    发明申请
    SECURE COMMUNICATION SESSION RESUMPTION IN A SERVICE FUNCTION CHAIN 审中-公开

    公开(公告)号：US20180316724A1

    公开(公告)日：2018-11-01

    申请号：US15582026

    申请日：2017-04-28

    Applicant: Cisco Technology, Inc.

    Inventor： K Tirumaleswar Reddy ,  Prashanth Patil ,  Carlos M. Pignataro

    IPC: H04L29/06 ,  H04L9/08

    CPC classification number: H04L63/166 ,  H04L9/0822 ,  H04L9/0827 ,  H04L63/0435 ,  H04L2463/062

    Abstract: A method for resuming a Transport Layer Security (TLS) session in a Service Function Chain comprising a plurality of Service Function nodes coupled to a Service Function Forwarder. A request is received at a first Service Function node to establish a TLS session, and a Pre-Shared Key (PSK) and a PSK identifier that uniquely correspond to the first Service Function node and the TLS session are generated. The PSK identifier is forwarded to one or more of the Service Function Forwarder and the plurality of Service Function nodes. A request to resume the TLS session is received from a client device that previously disconnected. It is determined that the connection request contains the PSK identifier, a second Service Function node is selected, and the TLS session is re-established between the client device and the second Service Function node using the same PSK as the prior TLS session.

    OPTIMIZED DOMAIN WHITELISTING
    29.
    发明申请
    OPTIMIZED DOMAIN WHITELISTING 审中-公开

    公开(公告)号：US20170331780A1

    公开(公告)日：2017-11-16

    申请号：US15152841

    申请日：2016-05-12

    Applicant: Cisco Technology, Inc.

    Inventor： K. Tirumaleswar Reddy ,  Prashanth Patil ,  Daniel G. Wing

    IPC: H04L29/12 ,  H04L29/08 ,  H04L12/851

    CPC classification number: H04L47/2483 ,  H04L45/306 ,  H04L45/66 ,  H04L61/1511 ,  H04L61/6009 ,  H04L61/6013 ,  H04L67/02 ,  H04L69/16

    Abstract: An optimized approach to whitelisting includes, at a domain name service server, determining whether a first domain and a second domain resolve to a same Internet Protocol (IP) address, and in response to a request from a domain name service proxy as to whether the first domain resolves to an IP address shared by another domain, notifying the domain name service proxy that the first domain resolves to an IP address shared by another domain. The method further includes the domain name service proxy receiving from the domain name service server a response that indicates that the first domain resolves to an IP address shared by another domain, and storing, in memory, the IP address and an indication that the IP address is shared by another domain. A data flow associated with a shared IP address is subjected to further scrutiny even if the IP address is on a whitelist.

Patent Agency Ranking