公开(公告)号：US20240187444A1

公开(公告)日：2024-06-06

申请号：US18441414

申请日：2024-02-14

Applicant: Cisco Technology, Inc.

Inventor： Jan KOHOUT ,  Blake Harrell ANDERSON ,  Martin GRILL ,  David MCGREW ,  Martin KOPP ,  Tomas PEVNY

IPC: H04L9/40 ,  G06N20/00 ,  G06N20/20 ,  H04L41/0686 ,  H04L47/2441

CPC classification number: H04L63/1441 ,  G06N20/00 ,  H04L41/0686 ,  H04L47/2441 ,  H04L63/0428 ,  H04L63/1416 ,  H04L63/1425 ,  H04L63/145 ,  H04L63/168 ,  G06N20/20

Abstract: In one embodiment, a device in a network detects an encrypted traffic flow associated with a client in the network. The device captures contextual traffic data regarding the encrypted traffic flow from one or more unencrypted packets associated with the client. The device performs a classification of the encrypted traffic flow by using the contextual traffic data as input to a machine learning-based classifier. The device generates an alert based on the classification of the encrypted traffic flow.

公开(公告)号：US20250030703A1

公开(公告)日：2025-01-23

申请号：US18906331

申请日：2024-10-04

Applicant: Cisco Technology, Inc.

Inventor： Petr SOMOL ,  Martin KOPP ,  Jan KOHOUT ,  Jan BRABEC ,  Marc Rene Jacques Marie DUPONT ,  Cenek SKARDA ,  Lukas BAJER ,  Danila KHIKHLUKHA

IPC: H04L9/40 ,  G06N3/045 ,  G06N3/08

Abstract: In one embodiment, a device obtains input features for a neural network-based model. The device pre-defines a set of neurons of the model to represent known behaviors associated with the input features. The device constrains weights for a plurality of outputs of the model. The device trains the neural network-based model using the constrained weights for the plurality of outputs of the model and by excluding the pre-defined set of neurons from updates during the training.