公开(公告)号：US20230102271A1

公开(公告)日：2023-03-30

申请号：US17484999

申请日：2021-09-24

Applicant: Cisco Technology, Inc.

Inventor： Robert Warren Webb ,  Bernard Wayne CLAIRMONT ,  Kyle Andrew Donald MESTERY

IPC: H04L29/06

Abstract: In one embodiment, a device receives results of a plurality of load tests for a web application, the results comprising information about one or more domains accessed when loading the web application during the plurality of load tests. The device determines a baseline of expected domains that are accessed during loading of the web application based on normalizing the results of the plurality of load tests. The device identifies, based on the baseline of expected domains, an anomalous domain that is loaded during a loading of the web application. The device performs one or more mitigation actions in response to identifying the anomalous domain.

公开(公告)号：US20230099370A1

公开(公告)日：2023-03-30

申请号：US17487100

申请日：2021-09-28

Applicant: Cisco Technology, Inc.

Inventor： Vincent E. Parla ,  Kyle Andrew Donald MESTERY ,  Andrew ZAWADOWSKIY

IPC: H04L12/26 ,  H04L29/08 ,  H04L12/24

Abstract: In one embodiment, a monitoring engine obtains mesh flow data for traffic flows between nodes in a service mesh. The monitoring engine associates the mesh flow data with network traffic between an endpoint device and an edge of the service mesh. The monitoring engine identifies, based on the mesh flow data, a particular container workload associated with the traffic flows. The monitoring engine provides an indication that the particular container workload is associated with the network traffic between the endpoint device and the edge of the service mesh.