-
公开(公告)号:US11483207B2
公开(公告)日:2022-10-25
申请号:US17513989
申请日:2021-10-29
Applicant: Cisco Technology, Inc.
Inventor: David Tedaldi , Grégory Mermoud , Pierre-André Savalle , Jean-Philippe Vasseur
IPC: H04L41/0893 , H04L41/00 , H04L43/065 , H04L43/04 , H04L43/08
Abstract: In various embodiments, a device classification service obtains traffic telemetry data for a plurality of devices in a network. The service applies clustering to the traffic telemetry data, to form device clusters. The service generates a device classification rule based on a particular one of the device clusters. The service receives feedback from a user interface regarding the device classification rule. The service adjusts the device classification rule based on the received feedback.
-
22.
公开(公告)号:US11451456B2
公开(公告)日:2022-09-20
申请号:US16389013
申请日:2019-04-19
Applicant: Cisco Technology, Inc.
Inventor: David Tedaldi , Grégory Mermoud , Pierre-Andre Savalle , Jean-Philippe Vasseur
IPC: H04L43/065 , H04L41/12 , G06N20/00 , H04L43/0817 , H04L41/16
Abstract: In one embodiment, a device classification service obtains telemetry data for a plurality of devices in a network. The device classification service repeatedly assigns the devices to device clusters by applying clustering to the obtained telemetry data. The device classification service determines a measure of stability loss associated with the cluster assignments. The measure of stability loss is based in part on whether a device is repeatedly assigned to the same device cluster. The device classification service determines, based on the measure of stability loss, that the cluster assignments have stabilized. The device classification service obtains device type labels for the device clusters, after determining that the cluster assignments have stabilized.
-
公开(公告)号:US11438406B2
公开(公告)日:2022-09-06
申请号:US16865517
申请日:2020-05-04
Applicant: Cisco Technology, Inc.
Inventor: Grégory Mermoud , Jean-Philippe Vasseur , Pierre-André Savalle , Vinay Kumar Kolar , David Tedaldi
Abstract: In one embodiment, a device deploys a first machine learning model to an inference location in a network. The first machine learning model is used at the inference location to make inferences about the network. The device receives, from the inference location, an indication that the first machine learning model is exhibiting poor performance. The device identifies a corrective measure for the poor performance that minimizes resource consumption by a model training pipeline of the device. The device deploys, based on the corrective measure, a second machine learning model to the inference location. The second machine learning model is used in lieu of the first machine learning model to make the inferences about the network.
-
24.
公开(公告)号:US11416522B2
公开(公告)日:2022-08-16
申请号:US16830717
申请日:2020-03-26
Applicant: Cisco Technology, Inc
Inventor: Grégory Mermoud , David Tedaldi , Pierre-André Savalle , Jean-Philippe Vasseur , Jürg Nicolaus Diemand
Abstract: In various embodiments, a device classification service obtains data indicative of device attributes of a plurality of devices. The device classification service forms, based on the obtained data indicative of the device attributes, a concept graph that comprises nodes that represent different sets of the device attributes. The device classification service determines, by analyzing the concept graph, a relevance score for each of the device attributes that quantifies how relevant that attribute is to classifying a device by its device type. The device classification service uses the relevance scores for the device attributes to cluster the plurality of devices into device type clusters by their device attributes.
-
公开(公告)号:US11283830B2
公开(公告)日:2022-03-22
申请号:US16823650
申请日:2020-03-19
Applicant: Cisco Technology, Inc.
Inventor: Jean-Philippe Vasseur , Grégory Mermoud , Pierre-André Savalle , David Tedaldi
IPC: H04L29/06
Abstract: In various embodiments, a device classification service clusters devices in a network into a device type cluster based on attributes associated with the devices. The device classification service tracks changes to the device type cluster over time. The device classification service detects an attack on the device classification service by one or more of the devices based on the tracked changes to the device type cluster. The device classification service initiates a mitigation action for the detected attack on the device classification service.
-
公开(公告)号:US20210367847A1
公开(公告)日:2021-11-25
申请号:US16878780
申请日:2020-05-20
Applicant: Cisco Technology, Inc.
Inventor: Jean-Philippe Vasseur , Grégory Mermoud , Pierre-André Savalle , David Tedaldi
Abstract: In various embodiments, a device classification service makes a determination that an endpoint device in a network is eligible for expedited device classification based on a policy. The device classification service obtains, after making the determination that the endpoint device in the network is eligible for expedited device classification, telemetry data regarding the endpoint device generated by actively probing the endpoint device. The device classification service determines whether the telemetry data regarding the endpoint device matches any existing device classification rules. The device classification service generates, based on the telemetry data, a device classification rule that assigns a device type to the endpoint device, when the telemetry data does not match any existing device classification rules.
-
公开(公告)号:US20210344745A1
公开(公告)日:2021-11-04
申请号:US16865517
申请日:2020-05-04
Applicant: Cisco Technology, Inc.
Inventor: Grégory Mermoud , Jean-Philippe Vasseur , Pierre-André Savalle , Vinay Kumar Kolar , David Tedaldi
Abstract: In one embodiment, a device deploys a first machine learning model to an inference location in a network. The first machine learning model is used at the inference location to make inferences about the network. The device receives, from the inference location, an indication that the first machine learning model is exhibiting poor performance. The device identifies a corrective measure for the poor performance that minimizes resource consumption by a model training pipeline of the device. The device deploys, based on the corrective measure, a second machine learning model to the inference location. The second machine learning model is used in lieu of the first machine learning model to make the inferences about the network.
-
28.
公开(公告)号:US20210303598A1
公开(公告)日:2021-09-30
申请号:US16830717
申请日:2020-03-26
Applicant: Cisco Technology, Inc,
Inventor: Grégory Mermoud , David Tedaldi , Pierre-André Savalle , Jean-Philippe Vasseur , Jürg Nicolaus Diemand
Abstract: In various embodiments, a device classification service obtains data indicative of device attributes of a plurality of devices. The device classification service forms, based on the obtained data indicative of the device attributes, a concept graph that comprises nodes that represent different sets of the device attributes. The device classification service determines, by analyzing the concept graph, a relevance score for each of the device attributes that quantifies how relevant that attribute is to classifying a device by its device type. The device classification service uses the relevance scores for the device attributes to cluster the plurality of devices into device type clusters by their device attributes.
-
公开(公告)号:US20210126833A1
公开(公告)日:2021-04-29
申请号:US17142447
申请日:2021-01-06
Applicant: Cisco Technology, Inc.
Inventor: David Tedaldi , Grégory Mermoud , Pierre-Andre Savalle , Jean-Philippe Vasseur
Abstract: In various embodiments, a device classification service obtains traffic telemetry data for a plurality of devices in a network. The service applies clustering to the traffic telemetry data, to form device clusters. The service generates a device classification rule based on a particular one of the device clusters. The service receives feedback from a user interface regarding the device classification rule. The service adjusts the device classification rule based on the received feedback.
-
公开(公告)号:US11916777B2
公开(公告)日:2024-02-27
申请号:US17368165
申请日:2021-07-06
Applicant: Cisco Technology, Inc.
Inventor: Jean-Philippe Vasseur , Grégory Mermoud , Vinay Kumar Kolar , David Tedaldi , Pierre-André Savalle
IPC: H04L45/00 , H04L43/10 , H04L43/0829 , H04L43/087 , H04L43/0888 , H04L43/12
CPC classification number: H04L45/22 , H04L43/087 , H04L43/0829 , H04L43/0888 , H04L43/10 , H04L43/12
Abstract: In one embodiment, a device obtains a first set of measurements of a path metric for a path in a network that are measured using periodic probing of the path. The device obtains a second set of measurements of the path metric for the path that are measured using fine-grained probing of the path at a higher frequency than that of the periodic probing. The device generates a predictive model that predicts values of the path metric, based on the first set of measurements and on the second set of measurements. The device causes, based on a value of the path metric predicted by the predictive model, traffic to be rerouted from the path to another path in the network.
-
-
-
-
-
-
-
-
-