Detection and resolution of rule conflicts in device classification systems

    公开(公告)号:US11290331B2

    公开(公告)日:2022-03-29

    申请号:US16428202

    申请日:2019-05-31

    Abstract: In one embodiment, a service receives a plurality of device type classification rules, each rule comprising a device type label and one or more device attributes used as criteria for application of the label to a device in a network. The service estimates, across a space of the device attributes, device densities of devices having device attributes at different points in that space. The service uses the estimated device densities to identify two or more of the device type classification rules as having overlapping device attributes. The service determines that the two or more device type classification rules are in conflict, based on the two or more rules having different device type labels. The service generates a rule conflict resolution that comprises one of the device type labels from the conflicting two or more device type classification rules.

    OPTIMAL PROACTIVE ROUTING WITH GLOBAL AND REGIONAL CONSTRAINTS

    公开(公告)号:US20220070086A1

    公开(公告)日:2022-03-03

    申请号:US17007362

    申请日:2020-08-31

    Abstract: In one embodiment, a device in a network obtains probabilities of service level agreement violations predicted to occur in the network. The device generates, based in part on the probabilities, a plurality of rerouting patches for the network that reroute traffic in the network to avoid the service level agreement violations predicted to occur in the network. The device forms, based on the plurality, a set of rerouting patches that comprises at least a portion of the plurality, by applying an objective function to the plurality of rerouting patches and using one or more size constraints. The device applies the set of rerouting patches to the network, prior to when the service level agreement violations are predicted to occur in the network.

    PREDICTIVE ROUTING USING MACHINE LEARNING IN SD-WANs

    公开(公告)号:US20220038347A1

    公开(公告)日:2022-02-03

    申请号:US17500200

    申请日:2021-10-13

    Abstract: In one embodiment, a supervisory service for a software-defined wide area network (SD-WAN) obtains telemetry data from one or more edge devices in the SD-WAN. The service trains, using the telemetry data as training data, a machine learning-based model to predict tunnel failures in the SD-WAN. The service receives feedback from the one or more edge devices regarding failure predictions made by the trained machine learning-based model. The service retrains the machine learning-based model, based on the received feedback.

    Self organizing learning topologies

    公开(公告)号:US11240259B2

    公开(公告)日:2022-02-01

    申请号:US16508398

    申请日:2019-07-11

    Abstract: In one embodiment, a networking device at an edge of a network generates a first set of feature vectors using information regarding one or more characteristics of host devices in the network. The networking device forms the host devices into device clusters dynamically based on the first set of feature vectors. The networking device generates a second set of feature vectors using information regarding traffic associated with the device clusters. The networking device models interactions between the device clusters using a plurality of anomaly detection models that are based on the second set of feature vectors.

    Scoring policies for predictive routing suggestions

    公开(公告)号:US11240153B1

    公开(公告)日:2022-02-01

    申请号:US16944334

    申请日:2020-07-31

    Abstract: In one embodiment, a device makes a determination that a first predictive routing policy generated by a predictive routing engine for a network would have performed better than a preexisting routing policy that is active in the network. The device adjusts, based on the determination, a level of trust associated with the predictive routing engine. The device obtains information regarding a second predictive routing policy generated by the predictive routing engine for the network. The device activates the second predictive routing policy in the network, based on the level of trust associated with the predictive routing engine.

    Preserving privacy in exporting device classification rules from on-premise systems

    公开(公告)号:US11153347B2

    公开(公告)日:2021-10-19

    申请号:US16424912

    申请日:2019-05-29

    Abstract: In one embodiment, a device in a network obtains data indicative of a device classification rule, a device type label associated with the rule, and a set of positive and negative feature vectors used to create the rule. The device replaces similar feature vectors in the set of positive and negative feature vectors with a single feature vector, to form a reduced set of feature vectors. The device applies differential privacy to the reduced set of feature vectors. The device sends a digest to a cloud service. The digest comprises the device classification rule, the device type label, and the reduced set of feature vectors to which differential privacy was applied. The service uses the digest to train a machine learning-based device classifier.

Patent Agency Ranking