知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

85 records (took 0.01 seconds)

    Systems and Methods to Determine Attack Paths to Application Assets
    41.
    发明公开
    Systems and Methods to Determine Attack Paths to Application Assets 审中-公开

    公开(公告)号：US20240265113A1

    公开(公告)日：2024-08-08

    申请号：US18330255

    申请日：2023-06-06

    Applicant: Cisco Technology, Inc.

    Inventor： Jeffrey M. Napper ,  Hendrikus G. P. Bosch ,  Jean Diaconu ,  Marcelo Yannuzzi ,  Alessandro Duminuco

    IPC: G06F21/57 ,  G06F21/55

    CPC classification number: G06F21/577 ,  G06F21/552 ,  G06F2221/033

    Abstract: A system and a method to determine attack paths to application assets may include storing in a memory asset inventory indicating multiple application assets, multiple attack vector parameters configured to indicate vulnerabilities of one or more of the application assets, and asset mapping information configured to associate each of the application assets to one or more of the application layers. A processor may determine multiple vulnerable assets in the application assets based at least in part upon the attack vector parameters. Further, the processor may determine feasibility parameters that indicate a likelihood of the attack path to occur in the system, generate a visual interface showing the vulnerable assets, determine an attack path connecting the vulnerable assets based at least in part upon the asset mapping information, and map the attack path to the application layers in the visual interface based at least in part upon the feasibility parameters.

    Automatic assessment of API service security standing with API reputation scoring
    42.
    发明授权
    Automatic assessment of API service security standing with API reputation scoring 有权

    公开(公告)号：US11899780B2

    公开(公告)日：2024-02-13

    申请号：US17226304

    申请日：2021-04-09

    Applicant: Cisco Technology, Inc.

    Inventor： Hendrikus G. P. Bosch ,  Alessandro Duminuco ,  Sape Jurriën Mullender ,  Jaffar Alaoui

    IPC: G06F21/57 ,  G06F21/52 ,  G06F9/54

    CPC classification number: G06F21/52 ,  G06F9/544 ,  G06F2221/031

    Abstract: The present disclosure is directed to assessing API service security and may include the steps of identifying an API service called by an application based on information provided by an agent embedded within the application; collecting telemetry associated with the API service, the telemetry collected from one or more telemetry sources and indicating any deficiencies in the API service; generating a reputation score for the API service based on analysis of the collected telemetry; and transmitting the reputation score to at least one of the following: the agent embedded within the application, wherein the reputation score is associated with at least one policy having at least one policy action, and wherein the reputation score is operable to be used by the agent to invoke the at least one policy action relating to use of the API service by the application; or a continuous integration/continuous delivery pipeline associated with the application.

    Steering traffic on a flow-by-flow basis by a single sign-on service
    45.
    发明授权
    Steering traffic on a flow-by-flow basis by a single sign-on service 有权

    公开(公告)号：US11457008B2

    公开(公告)日：2022-09-27

    申请号：US17069540

    申请日：2020-10-13

    Applicant: Cisco Technology, Inc.

    Inventor： Hendrikus G. P. Bosch ,  Alessandro Duminuco ,  Julien Barbot ,  Jeffrey Michael Napper ,  Sape Jurrien Mullender

    IPC: G06F7/04 ,  G06F15/16 ,  G06F17/30 ,  H04L29/06 ,  H04L9/40

    Abstract: Techniques for using a single sign-on (SSO) service as a software defined networking (SDN) controller for a virtual private network environment. The techniques disclosed herein may include receiving, at a first authentication service, first data including a first request to authenticate a user of a client device to access an application. The techniques may also include sending, to the client device, second data representing a second request configured to prompt a second authentication service to authenticate the user of the client device. Additionally, the first authentication service may receive an indication that the user was authenticated by the second authentication service and determine, based at least in part on an attribute associated with at least one of the client device or the application, whether the client device is to access the application using an unsecured connection or, alternatively, access the application using a secured connection.

    METHOD FOR POLICY-DRIVEN, CLASSIFYING, AND ROUTING TRAFFIC USING THE DOMAIN NAME SYSTEM
    47.
    发明申请
    METHOD FOR POLICY-DRIVEN, CLASSIFYING, AND ROUTING TRAFFIC USING THE DOMAIN NAME SYSTEM 审中-公开

    公开(公告)号：US20200252374A1

    公开(公告)日：2020-08-06

    申请号：US16373055

    申请日：2019-04-02

    Applicant: Cisco Technology, Inc.

    Inventor： Peter Bosch ,  Alessandro Duminuco ,  Jeffrey Napper ,  Sape Jurrien Mullender ,  David Delano Ward

    IPC: H04L29/06 ,  H04L29/12 ,  H04L12/46

    Abstract: Systems, methods, and computer-readable storage media are provided for managing application traffic. A routing policy defines the data flow path between the client device (which uses a virtual private network (VPN) client) and the appropriate network-based service. Based on various factors associated with the user, the client device, and the destination (e.g. network-based service), the routing policy will direct the VPN client to communicate with either a public DNS (via the public Internet) or to a private DNS (via the private Intranet). The resulting IP addresses will be used to establish a particular route (either over a public Internet or private Intranet) between the client device and the network-based service in accordance to the routing policy.

    METHOD FOR MANAGING APPLICATION CONFIGURATION STATE WITH CLOUD BASED APPLICATION MANAGEMENT TECHNIQUES
    48.
    发明申请
    METHOD FOR MANAGING APPLICATION CONFIGURATION STATE WITH CLOUD BASED APPLICATION MANAGEMENT TECHNIQUES 审中-公开

    公开(公告)号：US20190303212A1

    公开(公告)日：2019-10-03

    申请号：US16294861

    申请日：2019-03-06

    Applicant: Cisco Technology, Inc.

    Inventor： Hendrikus GP Bosch ,  Alessandro Duminuco ,  Baton Daullxhi

    IPC: G06F9/50 ,  G06F16/9035 ,  G06F9/455 ,  H04L29/06 ,  H04L29/08

    Abstract: In an embodiment, a computer-implemented method is presented for updating a configuration of a deployed application, the method comprising: receiving a request to update an application profile model hosted in a database, the request specifying a change of a first set of application configuration parameters of the deployed application to a second set of application configuration parameters, the first set of application configuration parameters indicating a current configuration state of the deployed application and the second set of application configuration parameters indicating a target configuration state of the deployed application, in response to the request, updating the application profile model using the second set of application configuration parameters, and generating, based on the updated application profile model, a solution descriptor comprising a description of the first set of application configuration parameters and the second set of application configuration parameters, and updating the deployed application based on the solution descriptor.

    Techniques for efficient service chain analytics
    50.
    发明授权
    Techniques for efficient service chain analytics 有权

    公开(公告)号：US10284390B2

    公开(公告)日：2019-05-07

    申请号：US15177021

    申请日：2016-06-08

    Applicant: CISCO TECHNOLOGY, INC.

    Inventor： Surendra M. Kumar ,  Alessandro Duminuco ,  Hendrikus G. P. Bosch ,  Humberto J. La Roche ,  Jeffrey Napper ,  Burjiz Pithawala

    IPC: H04L12/46 ,  H04L29/06 ,  H04L12/70 ,  H04L29/12 ,  H04L12/725 ,  H04L12/715

    Abstract: A method is provided in one example embodiment and includes receiving at a network element an encapsulated packet including an encapsulation header, in which the encapsulation header includes an Analytics Proxy Function (“APF”) flag; determining whether the APF flag is set to a first value; if the APF flag is set to the first value, forwarding the encapsulated packet to a local APF instance associated with the network element, in which the encapsulated packet is processed by the local APF instance to replicate at least a portion of the encapsulated packet, construct a record of the encapsulated packet, or both; and if the APF flag is not set to the first value, omitting forwarding the encapsulated packet to the local APF instance associated with the network element. The local APF instance is implemented as a service function anchored at the forwarding element.

Patent Agency Ranking