公开(公告)号：US20210173636A1

公开(公告)日：2021-06-10

申请号：US16709307

申请日：2019-12-10

Applicant: Cisco Technology, Inc.

Inventor： Vinay Kumar Kolar ,  Jean-Philippe Vasseur ,  Gregory Mermoud ,  Pierre-Andre Savalle

IPC: G06F8/71 ,  G06N20/00 ,  H04L12/26

Abstract: In one embodiment, a service receives software version data regarding versions of software executed by devices in a network. The service detects a version change in the version of software executed by one or more of the devices, based on the received software version data. The service makes a determination that a drop in data quality of input data for a machine learning model used to monitor the network is associated with the detected version change. The service reverts the one or more devices to a prior version of software, based on the determination that the drop in quality of the input data for the machine learning model used to monitor the network is associated with the detected version change.

公开(公告)号：US20200382553A1

公开(公告)日：2020-12-03

申请号：US16424912

申请日：2019-05-29

Applicant: Cisco Technology, Inc.

Inventor： Pierre-Andre Savalle ,  Jean-Philippe Vasseur ,  Gregory Mermoud

IPC: H04L29/06 ,  G06N5/02 ,  G06N20/00 ,  H04L29/08

Abstract: In one embodiment, a device in a network obtains data indicative of a device classification rule, a device type label associated with the rule, and a set of positive and negative feature vectors used to create the rule. The device replaces similar feature vectors in the set of positive and negative feature vectors with a single feature vector, to form a reduced set of feature vectors. The device applies differential privacy to the reduced set of feature vectors. The device sends a digest to a cloud service. The digest comprises the device classification rule, the device type label, and the reduced set of feature vectors to which differential privacy was applied. The service uses the digest to train a machine learning-based device classifier.

公开(公告)号：US20200076677A1

公开(公告)日：2020-03-05

申请号：US16120529

申请日：2018-09-04

Applicant: Cisco Technology, Inc.

Inventor： Gregory Mermoud ,  David Tedaldi ,  Jean-Philippe Vasseur

IPC: H04L12/24 ,  G06N3/08 ,  G06N3/04

Abstract: In one embodiment, a network assurance service that monitors a network detects a behavioral anomaly in the network using an anomaly detector that compares an anomaly detection threshold to a target value calculated based on a first set of one or more measurements from the network. The service uses an explanation model to predict when the anomaly detector will detect anomalies. The explanation model takes as input a second set of one or more measurements from the network that differs from the first set. The service determines that the detected anomaly is explainable, based on the explanation model correctly predicting the detection of the anomaly by the anomaly detector. The service provides an anomaly detection alert for the detected anomaly to a user interface, based on the detected anomaly being explainable. The anomaly detection alert indicates at least one measurement from the second set as an explanation for the anomaly.