公开(公告)号：US20190026460A1

公开(公告)日：2019-01-24

申请号：US15654169

申请日：2017-07-19

Applicant: Cisco Technology, Inc.

Inventor： Michael J. Robertson ,  Magnus Mortensen ,  Jay K. Johnston ,  David C. White, JR.

IPC: G06F21/53 ,  H04L29/06

Abstract: An application security monitors data traffic from computing devices to a remote application in a first computing environment, such as a production service chain. The application security monitor detects an anomaly in the data traffic from a computing device. Based on the anomaly, the remote application is substantially reproduced in a second computing environment, such as a scrubbing environment. The application security monitor redirects the anomalous data to the remote application in the second computing environment. The application security monitor determines whether the data traffic from the first computing device corresponds to malicious activity or legitimate activity by the computing device. Responsive to a determination that the data traffic from the first computing device corresponds to legitimate activity, the application security monitor applies to the first computing environment any changes in the second computing environment caused by the redirected traffic from the computing device.