Fortinet, Inc.

Sophos Limited

Juniper Networks, Inc.

Symbol Technologies, LLC

Motorola Solutions, Inc.

Extreme Networks, Inc.

Quick Heal Technologies Private Limited

Portinet, Inc.

Anil Kaushik

Saurabh Bhargava

Sreenivas Voruganti

Siva Rama Krishna Rao Yogendra Jupudi

Pradeep Mohan

Pc Sridhar

Stephen Grau

Sathwikh Gopady Narasimha

Ajay Malik

Dirk Bolte

Mohan Ram

Senthilraj Shanmugavadivel

Shail R Talati

Naga Kishore Reddy Tarimala

Raj Kiran

Andrew James Thomas

Vaduvur Bharghavan

Sung-Wook Han

Berend Dunsbergen

Abhishek Kumar

Joseph Alan Epstein

Saravanan Balasubramaniyan

Hari Surender Sharma

Subrahmanyam Bhamidipati

Sainath Reddy Cheruvu

Vineet Verma

Sachin P Dohre

Pragada Kranthi Kiran Dharani

Rishikesh Basu

Srivatsan Sankaranarayanan

Sirivatsan Sankaranarayanan

Teodoro Fornoles, Jr

Bibhuti Bhusan Kar

Vijay Yadav

Ravjibhai Kamani Bhaveshkumar

Tushar Mathur

Rajkiran Klran

Klran Cherian

Sanjeev Belambi

Azif Abdul Salaam

Stutz Daniel

Methods, systems and computer readable media for rogue device detection are described. The method may include automatically generating one or more dummy network identifiers associated with a wireless network, advertising the one or more dummy network identifiers, and identifying a device as a suspect device based on receiving a connection attempt to at least one of the one or more dummy network identifiers by the device. The method can also include allocating a virtual local area network within the wireless network to process traffic associated with the at least one of the one or more dummy network identifiers, and monitoring network traffic of the suspect device on the virtual local area network. The method can further include, if the monitored network traffic meets an abnormality threshold, determining that the suspect device is a rogue device, and performing an action to protect the wireless network from the rogue device.

System and method for rogue device detection

Aspects of the present disclosure are directed to controlling access to resources in a network. In an embodiment, a gateway system receives a packet requesting access to a resource in the network, and identifies access control policies to be applied in determining whether or not to permit access to said first resource. The gateway system applies a higher-layer policy and then a lower-layer policy on the packet to determine whether or not to forward the packet to the network and forwards the packet to the network only if it is determined to forward the packet. The higher-layer policy and lower-layer policies are according to respective layers of a networking model.

Controlling access to resources based on policies at different layers of a networking model

Methods, systems and computer readable media for rogue access point detection are described.

Point-controlled rogue AP avoidance + rogue AP detection using synchronized security

Methods, systems and computer readable media for secure VLAN within a wireless network are described.

System and method for providing a secure VLAN within a wireless network

Methods, systems and computer readable media for location-based endpoint security are described.

System and method for location-based endpoint security

Methods, systems, and computer readable media for rogue device detection are described. A method may include identifying a device type of a device transmitting data over a network and obtaining one or more uniform resource locators (URLs) from the data, where the one or more URLs form a portion of a request transmitted over the network by the device. The method can also include programmatically analyzing the data to determine a pattern of network data within a given time period. The method can further include determining that the device is a rogue device if the pattern of network data deviates from a baseline pattern of the device type, or at least one of the one or more URLs matches one or more rogue URL criteria. The method can also include taking an action in response to determining the device is a rogue device to improve security of the network.

Endpoint-controlled rogue AP avoidance + rogue AP detection using synchronized security

Methods, systems and computer readable media for protecting networks and devices from network security attack using physical communication layer characteristics are described.

Detecting IoT security attacks using physical communication layer characteristics

System and method for rogue access point detection

A battery saving controller toggles between a normal mode and a battery saving mode which selectively processing location beacons using mobile inbuilt sensors. Bluetooth location beacons are periodically sent by nearby Bluetooth location devices for updating a current location of mobile devices. Battery power within the mobile devices is selectively used for processing the location beacon. The processing exposes the unique tag id from Bluetooth LE data packets, and determines the RSSI value of the data packets received from Bluetooth devices. The battery saving controller deactivates location beacon processing to save power usage from the battery, responsive to detecting identical packets over a time interval. Additionally, the battery saving controller reactivates location beacon responsive to at least one of the sensors inbuilt to the mobile device detecting movement of the mobile device.

Mobile device battery optimization for processing location beacons using mobile inbuilt sensors

Poisoning attacks by spoofing location beacons in a WLAN are detected using silence periods. A location beacon identifier is received from a mobile device allegedly within range of a location device transmitting location beacons, along with a timestamp of transmission for each of the location beacons. Also silence periods associated with the location device, during which transmissions of location beacons are temporarily discontinued, and which are unknown to the public, are determined or retrieved. The location beacon transmission time is compared to the silence periods. Responsive to the location beacon transmission time corresponding to at least one of the silence periods, the location device flagged as poisoned.

Detecting poisoning attacks of internet of things (IOT) location beacons in wireless local area networks (WLANS) with silence periods

An access point associated on Wi-Fi portion of the communication network selectively groups stations according to a mobility profile. The mobility profile includes factors that characterize at least an amount of movement and current location for a station. Each station is assigned to a beamforming group of similar mobility profiles. A type of beamforming transmission is selected for each beamforming group based on mobility profiles of associated stations. The type of beamforming transmissions including at least MU-MIMO and SU-MIMO. Data is then transmitted to the stations of each beamforming group according to the selected type of beamforming transmissions. A Wi-Fi controller, having a network-wide view of conditions and being able to collect historical information about stations during connections to other access points, is able to provide data unique data to group selections.

Optimization of MU-MIMO beamforming in a Wi-Fi communication network based on mobility profiles

Reliable call hand-offs from a cellular network to a Wi-Fi network. A hand-off controller detects a hand-off condition (e.g., hand-off request, potential/predicted hand-off request) and, in response, initiates a test call. For example, a telephone call made through a smart phone, using a cellular network (e.g., Verizon, AT&T or Sprint) can be handed over to a hot spot at a Starbucks. In response to detecting an available data network, transmission quality for VOIP conditions is automatically tested. If the network conditions meet a certain predetermined threshold, the VOIP hand-off is executed. If the predetermined threshold is not met, the VOIP hand-off may not be executed, or may be delayed.

Reliable call hand-off from cellular networks to Wi-Fi networks

A wireless communication network is self-provisioned using coordination of data plane behavior to steer stations to preferred access points. To do so, a policy concerning traffic flow for the wireless communication network is received. Data plane traffic flow is monitored at each of the plurality of access points distributed around the wireless communication network. At some point, it may be determined the data plane traffic flow at a first access point from needs to be reduced based on the data plane traffic flow relative to the policy. In response, a station is steered to a preferred access point using OpenFlow rules to affect data plane routing decisions at the access point (e.g., drop, delay, or reprioritize packets).

SDN (software-defined networking) controller for self-provisioning of a wireless communication network using coordination of data plane behavior to steer stations to preferred access points

Growing community of inventors

Bengaluru, India

Anil Kaushik