Cisco Technology, Inc.

Alex Wang

David Bainbridge

Xiaohui Zhou

Beecher Adams

Shahrokh Sadjadi

Lin Zhang

Srinivas Tenneti

Erika Franco Acevedo

Heather Riley Hilldale

According to various embodiments, a networking device in a network receives traffic from the network. The networking device duplicates the traffic into a duplicate traffic copy. The networking device encapsulates the duplicate traffic copy into a multicast frame. The networking device sends, via a multicast address, the multicast frame to a network sensor in the network for analysis, wherein the multicast address is reserved in the network for traffic analysis.

Traffic capture mechanisms for industrial network security

An example embodiment of the present invention provides a process that uses IP flow information to selectively notify users of an application server of the server's unavailability. In the example embodiment, the process, which might run on a system comprising a router, monitors IP flow records as to dropped packets and learns that an application server has become unavailable. The process then uses the IP flow records to identify active users of the application server, for example, by passing a source IP address to a presence service. Once the process has identified an active user, the process determines a means of notification for the user, which might be through the presence service, and transmits a notification to the user as to the unavailability of the application server. In the example embodiment, the process transmits a later notification as to the availability of the application server, using reverse camp-on functionality.

Selective user notification based on IP flow information

In one embodiment, a method for persistent data authorization includes receiving a query at a management device and identifying authorization constraints at the management device utilizing an authorization model. The authorization model includes at least one group hierarchy defining authorization based on a relationship between levels in the hierarchy. The query is modified based on the authorization constraints and the modified query is sent to the database. Data is received in response to the modified query and is configured for transmission from the management device without further filtering. The query received at the management device and the modified query are both configured for communication directly with the database with no modification to the database required for the modified query. A system and apparatus for persistent data authorization are also disclosed.

Instance-based authorization utilizing query augmentation

Growing community of inventors

Cary, NC, United States of America

Alex Wang