公开(公告)号：US20180020017A1

公开(公告)日：2018-01-18

申请号：US15208176

申请日：2016-07-12

Applicant: Cisco Technology, Inc.

Inventor： Sindhu Subramanya ,  Anand Pulicat Gopalakrishnan ,  Payal Shah Rambhia ,  Amey Magar ,  Lio Cheng ,  Ningjia Huang

IPC: H04L29/06 ,  H04L12/24 ,  G06F21/57

CPC classification number: H04L63/1433 ,  G06F21/552 ,  G06F21/575 ,  H04L41/0816 ,  H04L41/0853 ,  H04L41/0863 ,  H04L41/28 ,  H04L63/101 ,  H04L63/1441

Abstract: A method is presented in which a system reduces the risk of an advanced persistent threat (“APT”) detected at one or more network devices by implementing one or more mitigation actions depending on the nature of the detected threat. Accordingly, in response to detecting the risk of an APT at one or more network devices, a centralized controller implements one or more mitigation actions to minimize the vulnerability of an enterprise network to unauthorized access to one or more network resources. A centralized controller may therefore instruct one or more network devices to take appropriate mitigation actions depending on the nature of an APT detected on one or more network devices.

公开(公告)号：US10205738B2

公开(公告)日：2019-02-12

申请号：US15208176

申请日：2016-07-12

Applicant: Cisco Technology, Inc.

Inventor： Sindhu Subramanya ,  Anand Pulicat Gopalakrishnan ,  Payal Shah Rambhia ,  Amey Magar ,  Lio Cheng ,  Ningjia Huang

IPC: H04L29/06 ,  H04L12/24 ,  G06F21/57 ,  G06F21/55

Abstract: A method is presented in which a system reduces the risk of an advanced persistent threat (“APT”) detected at one or more network devices by implementing one or more mitigation actions depending on the nature of the detected threat. Accordingly, in response to detecting the risk of an APT at one or more network devices, a centralized controller implements one or more mitigation actions to minimize the vulnerability of an enterprise network to unauthorized access to one or more network resources. A centralized controller may therefore instruct one or more network devices to take appropriate mitigation actions depending on the nature of an APT detected on one or more network devices.