公开(公告)号：US20230114050A1

公开(公告)日：2023-04-13

申请号：US18051686

申请日：2022-11-01

Applicant: Google LLC

Inventor： Kan Cai ,  Vikas Aggarwal ,  Gargi Adhav ,  Rajendra Yavatkar ,  Ning Zhao ,  Vishal Gupta

IPC: H04L9/40 ,  H04L43/026 ,  H04L41/16 ,  G06F9/54 ,  G06N20/00 ,  H04L41/14

Abstract: A firewall intelligence system, includes a data storage storing a set of firewall rules for a network; a recommendation engine that receives, from a log service, traffic logs detailing traffic for the network and firewall logs detailing the usage of firewall rules in response to the traffic for the network, accesses, from the data storage, the set of firewall rules for the network; processes the set of firewall rules to evaluate the firewall rules against a set of quantitative evaluation rules to determine one or more firewall rule recommendations, wherein each firewall rule recommendation is a recommendation to change at least one of the firewall rules in the set of firewall rules; and a front end API that provides data describing the one or more firewall rule recommendations to a user device.

公开(公告)号：US20240187379A1

公开(公告)日：2024-06-06

申请号：US18443233

申请日：2024-02-15

Applicant: Google LLC

Inventor： Kan Cai ,  Vikas Aggarwal ,  Gargi Adhav ,  Rajendra Yavatkar ,  Ning Zhao ,  Vishal Gupta

IPC: H04L9/40 ,  G06F9/54 ,  G06N20/00 ,  H04L41/14 ,  H04L41/16 ,  H04L43/026

CPC classification number: H04L63/0263 ,  G06F9/547 ,  G06N20/00 ,  H04L41/145 ,  H04L41/16 ,  H04L43/026 ,  H04L63/1425

Abstract: A firewall intelligence system, includes a data storage storing a set of firewall rules for a network; a recommendation engine that receives, from a log service, traffic logs detailing traffic for the network and firewall logs detailing the usage of firewall rules in response to the traffic for the network, accesses, from the data storage, the set of firewall rules for the network; processes the set of firewall rules to evaluate the firewall rules against a set of quantitative evaluation rules to determine one or more firewall rule recommendations, wherein each firewall rule recommendation is a recommendation to change at least one of the firewall rules in the set of firewall rules; and a front end API that provides data describing the one or more firewall rule recommendations to a user device.

公开(公告)号：US12294565B2

公开(公告)日：2025-05-06

申请号：US18443233

申请日：2024-02-15

Applicant: Google LLC

Inventor： Kan Cai ,  Vikas Aggarwal ,  Gargi Adhav ,  Rajendra Yavatkar ,  Ning Zhao ,  Vishal Gupta

IPC: H04L12/00 ,  G06F9/54 ,  G06N20/00 ,  H04L9/40 ,  H04L41/14 ,  H04L41/16 ,  H04L43/026

Abstract: A firewall intelligence system, includes a data storage storing a set of firewall rules for a network; a recommendation engine that receives, from a log service, traffic logs detailing traffic for the network and firewall logs detailing the usage of firewall rules in response to the traffic for the network, accesses, from the data storage, the set of firewall rules for the network; processes the set of firewall rules to evaluate the firewall rules against a set of quantitative evaluation rules to determine one or more firewall rule recommendations, wherein each firewall rule recommendation is a recommendation to change at least one of the firewall rules in the set of firewall rules; and a front end API that provides data describing the one or more firewall rule recommendations to a user device.

公开(公告)号：US11924168B2

公开(公告)日：2024-03-05

申请号：US18051686

申请日：2022-11-01

Applicant: Google LLC

Inventor： Kan Cai ,  Vikas Aggarwal ,  Gargi Adhav ,  Rajendra Yavatkar ,  Ning Zhao ,  Vishal Gupta

IPC: H04L12/00 ,  G06F9/54 ,  G06N20/00 ,  H04L9/40 ,  H04L41/14 ,  H04L41/16 ,  H04L43/026

CPC classification number: H04L63/0263 ,  G06F9/547 ,  G06N20/00 ,  H04L41/145 ,  H04L41/16 ,  H04L43/026 ,  H04L63/1425

Abstract: A firewall intelligence system, includes a data storage storing a set of firewall rules for a network; a recommendation engine that receives, from a log service, traffic logs detailing traffic for the network and firewall logs detailing the usage of firewall rules in response to the traffic for the network, accesses, from the data storage, the set of firewall rules for the network; processes the set of firewall rules to evaluate the firewall rules against a set of quantitative evaluation rules to determine one or more firewall rule recommendations, wherein each firewall rule recommendation is a recommendation to change at least one of the firewall rules in the set of firewall rules; and a front end API that provides data describing the one or more firewall rule recommendations to a user device.

公开(公告)号：US11516182B2

公开(公告)日：2022-11-29

申请号：US16845771

申请日：2020-04-10

Applicant: Google LLC

Inventor： Kan Cai ,  Vikas Aggarwal ,  Gargi Adhav ,  Rajendra Yavatkar ,  Ning Zhao ,  Vishal Gupta

IPC: H04L12/00 ,  H04L9/40 ,  H04L43/026 ,  H04L41/16 ,  G06F9/54 ,  G06N20/00 ,  H04L41/14

Abstract: A firewall intelligence system, includes a data storage storing a set of firewall rules for a network; a recommendation engine that receives, from a log service, traffic logs detailing traffic for the network and firewall logs detailing the usage of firewall rules in response to the traffic for the network, accesses, from the data storage, the set of firewall rules for the network; processes the set of firewall rules to evaluate the firewall rules against a set of quantitative evaluation rules to determine one or more firewall rule recommendations, wherein each firewall rule recommendation is a recommendation to change at least one of the firewall rules in the set of firewall rules; and a front end API that provides data describing the one or more firewall rule recommendations to a user device.

公开(公告)号：US20200329011A1

公开(公告)日：2020-10-15

申请号：US16845771

申请日：2020-04-10

Applicant: Google LLC

Inventor： Kan Cai ,  Vikas Aggarwal ,  Gargi Adhav ,  Rajendra Yavatkar ,  Ning Zhao ,  Vishal Gupta

IPC: H04L29/06 ,  H04L12/26 ,  H04L12/24 ,  G06F9/54 ,  G06N20/00

Abstract: A firewall intelligence system, includes a data storage storing a set of firewall rules for a network; a recommendation engine that receives, from a log service, traffic logs detailing traffic for the network and firewall logs detailing the usage of firewall rules in response to the traffic for the network, accesses, from the data storage, the set of firewall rules for the network; processes the set of firewall rules to evaluate the firewall rules against a set of quantitative evaluation rules to determine one or more firewall rule recommendations, wherein each firewall rule recommendation is a recommendation to change at least one of the firewall rules in the set of firewall rules; and a front end API that provides data describing the one or more firewall rule recommendations to a user device.