公开(公告)号：US10666671B2

公开(公告)日：2020-05-26

申请号：US15497806

申请日：2017-04-26

Applicant: Cisco Technology, Inc.

Inventor： David A. Maluf ,  Raghuram S. Sudhaakar ,  Sanjiv Doshi

IPC: H04L29/06 ,  H04L12/66 ,  H04L12/40 ,  G06N5/04 ,  G06N20/00

Abstract: In one embodiment, a device in a serial network determines that a suspicious event has occurred in the network. The suspicious event is identified based on timing information for one or more frames in the serial network. The device assesses whether the suspicious event is malicious by evaluating a sequence of events in the network that precede the suspicious event. The device causes a mitigation action to be performed in the network when the suspicious event is deemed malicious.

公开(公告)号：US20180316700A1

公开(公告)日：2018-11-01

申请号：US15497806

申请日：2017-04-26

Applicant: Cisco Technology, Inc.

Inventor： David A. Maluf ,  Raghuram S. Sudhaakar ,  Sanjiv Doshi

IPC: H04L29/06 ,  G06N99/00 ,  H04L12/40 ,  H04L29/08 ,  H04L12/66

CPC classification number: H04L63/1425 ,  G06N5/046 ,  G06N20/00 ,  H04L12/40 ,  H04L12/66 ,  H04L63/1416 ,  H04L63/145 ,  H04L2012/40215

Abstract: In one embodiment, a device in a serial network determines that a suspicious event has occurred in the network. The suspicious event is identified based on timing information for one or more frames in the serial network. The device assesses whether the suspicious event is malicious by evaluating a sequence of events in the network that precede the suspicious event. The device causes a mitigation action to be performed in the network when the suspicious event is deemed malicious.