知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

91 records (took 0.035 seconds)

    Identifying and using DNS contextual flows
    42.
    发明授权
    Identifying and using DNS contextual flows 有权

    公开(公告)号：US11303664B2

    公开(公告)日：2022-04-12

    申请号：US16669831

    申请日：2019-10-31

    Applicant: Cisco Technology, Inc.

    Inventor： David McGrew ,  Blake Harrell Anderson ,  Daniel G. Wing ,  Flemming Andreasen

    IPC: H04L29/06 ,  H04L29/12 ,  H04L61/4511

    Abstract: In one embodiment, a device in a network captures domain name system (DNS) response data from a DNS response sent by a DNS service to a client in the network. The device captures session data for an encrypted session of the client. The device makes a determination that the encrypted session is malicious by using the captured DNS response data and the captured session data as input to a machine learning-based or rule-based classifier. The device performs a mediation action in response to the determination that the encrypted session is malicious.

    Identity based domain name system (DNS) caching with security as a service (SecaaS)
    44.
    发明授权
    Identity based domain name system (DNS) caching with security as a service (SecaaS) 有权

    公开(公告)号：US10305934B2

    公开(公告)日：2019-05-28

    申请号：US15165032

    申请日：2016-05-26

    Applicant: Cisco Technology, Inc.

    Inventor： K. Tirumaleswar Reddy ,  Prashanth Patil ,  Daniel G. Wing

    IPC: H04L29/06 ,  H04L29/08 ,  H04L29/12

    Abstract: A local network element on an enterprise network caches Domain Name System (DNS) responses in association with user identifiers in accordance with a DNS-based access control policy. The network element receives a DNS request from a first endpoint device. The DNS request includes a domain name to resolve. The network element forwards the DNS request to a domain name server along with a first user identifier associated with the first endpoint device. The network element receives a DNS response from the domain name server. The DNS response includes a network address associated with the domain name, as well as the first user identifier and at least one other user identifier. The network element stores the network address in a DNS cache as a cached DNS response for the domain name. The cached DNS response is stored in association with the first user identifier and the other user identifier(s).

    Interposer with security assistant key escrow
    46.
    发明授权
    Interposer with security assistant key escrow 有权

    公开(公告)号：US10178181B2

    公开(公告)日：2019-01-08

    申请号：US14328094

    申请日：2014-07-10

    Applicant: Cisco Technology, Inc.

    Inventor： Eitan Ben-Nun ,  Michael Zayats ,  Daniel G. Wing ,  Kirtesh Patil ,  Jaideep Padhye ,  Manohar B. Hungund ,  Saravanan Agasaveeran

    IPC: H04L29/06 ,  H04L29/08

    Abstract: An interposer is provided that is configured to interpose into an application security protocol exchange by obtaining application session security state. The interposer does this without holding any private keying material of client or server. An out-of-band Security Assistant Key Escrow service (SAS/SAKE) is also provided. The SAKE resides in the secure physical network perimeter and holds the private keying material required to derive session keys for interposing into application security protocol. During a security protocol handshake, the interposer sends SAKE security protocol handshake messages and in return receives from the SAKE session security state that allows it to participate in application security protocol.

    INTER-DOMAIN DISTRIBUTED DENIAL OF SERVICE THREAT SIGNALING
    48.
    发明申请
    INTER-DOMAIN DISTRIBUTED DENIAL OF SERVICE THREAT SIGNALING 审中-公开

    公开(公告)号：US20180109555A1

    公开(公告)日：2018-04-19

    申请号：US15297241

    申请日：2016-10-19

    Applicant: Cisco Technology, Inc.

    Inventor： K Tirumaleswar Reddy ,  Daniel G. Wing ,  Flemming Stig Andreasen ,  Michael David Geller

    IPC: H04L29/06

    CPC classification number: H04L63/1458 ,  G06F21/554 ,  G06F2221/2111 ,  H04W4/70 ,  H04W12/12

    Abstract: In one embodiment, a primary server receives, from a client device, a first request to mitigate an external attack on the client device. The primary server sends, to a plurality of secondary servers, a second request to mitigate the external attack, wherein each one of the plurality of secondary servers has associated mitigation resources, and receives from at least one of the plurality of secondary servers an indication that it has mitigation resources capable of mitigating the external attack. The primary server sends, to the client device, a list including the secondary servers having mitigation resources capable of mitigating the attack, and receives, from the client device, an indication that a subset of the list is selected to mitigate the external attack. In response, the primary server sends a request for mitigation services to one of the secondary servers in the subset selected to mitigate the external attack.

Patent Agency Ranking