Cisco Technology, Inc.

Amey Magar

Anand Pulicat Gopalakrishnan

Sanjay Kumar Hooda

Lio Cheng

Shashank Vinchurkar

Rajesh Arora

Payal Shah Rambhia

Leena Shrirang Chunekar

Ningjia Huang

Nayan Seth

Praveen Nagarajan

Sindhu Subramanya

In one embodiment, a supervisory device designates a particular networking device among a set of networking devices as a seed device and one or more interfaces of the seed device as discovery interfaces. The supervisory device coordinates, starting from the one or more discovery interfaces of the seed device, discovery of a Layer 2 topology of the set of networking devices, by designating one or more interfaces of a discovered networking device as discovery interfaces. The supervisory device converts, starting from at least one of the network devices farthest from the seed device in the Layer 2 topology and ending with the seed device, links of the Layer 2 topology into Layer 3 links, to form an underlay network.

Underlay network formation

A method is presented in which a system reduces the risk of an advanced persistent threat ('APT') detected at one or more network devices by implementing one or more mitigation actions depending on the nature of the detected threat. Accordingly, in response to detecting the risk of an APT at one or more network devices, a centralized controller implements one or more mitigation actions to minimize the vulnerability of an enterprise network to unauthorized access to one or more network resources. A centralized controller may therefore instruct one or more network devices to take appropriate mitigation actions depending on the nature of an APT detected on one or more network devices.

Advanced persistent threat mitigation

Growing community of inventors

San Jose, CA, United States of America

Amey Magar