Cisco Technology, Inc.

Bharathwaj Sankara Viswanathan

Navindra Yadav

Ashutosh Kulshreshtha

Rohit Chandra Prasad

Hoang Viet Nguyen

Varun Sagar Malhotra

Vimalkumar Jeyakumar

Supreeth Hosur Nagesh Rao

Roberto Fernando Spadaro

Shashidhar R Gandham

Anubhav Gupta

Shih-Chun Chang

Abhishek Ranjan Singh

Khawar Deen

Hai Trong Vu

Ali Parandehgheibi

Jackson Ngoc Ki Pang

Omid Madani

Sunil Gupta

Michael Standish Watts

Ellen Christine Scheib

Fnu Rachita Agasthy

Duane Thomas Barlow

Andy Sloane

Alok Lalit Wadhwa

Aria Rahadian

Oliver Kempe

Yiwei Wang

Vasil Dochkov Yordanov

Zhiwen Zhang

Ravi Sankuratri

Ravi Shanker Prasad

Uday Krishnaswamy Chettiar

Matthew Finn

Hiral Shashikant Patel

Paul John Lesiak

Muhammada Furqan

Soumyadeep Choudhury

Udayan Joshi

Brady Schulman

Manish Arigala

Sunil Kumar Gupta

An example method includes detecting, using sensors, packets throughout a datacenter. The sensors can then send packet logs to various collectors which can then identify and summarize data flows in the datacenter. The collectors can then send flow logs to an analytics module which can identify the status of the datacenter and detect an attack.

System for monitoring and managing datacenters

In one aspect, a method for implementing a cloud-platform push for one or more known data breaches includes the step of, for each data breach of the one or more known data breaches, providing a functionality that maps one or more kill chains or Tactics, Techniques, and Procedures (TTPs) for a specified set of security dimensions. A step includes generating a security rule for each mapped kill chain or TTP based on the functionality that maps the one or more kill chains or Tactics, Techniques, and Procedures (TTPs) for a specified set of security dimensions. A step includes pushing the security rule to an enterprise so that the enterprise is aware of a vulnerability in the data breach. A step includes generating a customized posture for a Virtual private cloud (VPC) in the enterprise's cloud-based network. A step includes determining that the data breach can occur within the enterprise's cloud-based network.

Cloud-platform push for known data breaches

The present disclosure provides systems, methods, and computer-readable media for implementing security polices at software call stack level. In one example, a method includes generating a call stack classification scheme for an application, detecting a call stack during deployment of the application; using the call stack classification scheme during runtime of the application, classifying the detected call stack as one of an authorized call stack or an unauthorized call stack to yield a classification; and applying a security policy based on the classification.

Security policies for software call stacks

In one aspect, a computerized method for automatically identifying and solving for vendor data abuse in an enterprise network, includes the step of implementing a vendor detection at one or more gateways of the enterprise network. The method includes the step of mapping a set of data along with any associated data attributes of the set of data that are being shared with a vendor via the one or more gateways. The method includes the step of detecting and identifying an access anomaly with respect to the set of data associated with a vendor access. The method includes the step of implementing a specified data minimization process to the access anomaly.

Methods and systems for prevention of vendor data abuse

An example method can include choosing a pattern or patterns of network traffic. This pattern can be representative of a certain type of traffic such as an attack. The pattern can be associated with various components of a network and can describe expected behavior of these various components. A system performing this method can then choose a nodes or nodes to generate traffic according to the pattern and send an instruction accordingly. After this synthetic traffic is generated, the system can compare the behavior of the components with the expected behavior. An alert can then be created to notify an administrator or otherwise remedy any problems.

Synthetic data for determining health of a network security system

Growing community of inventors

Mountain View, CA, United States of America

Bharathwaj Sankara Viswanathan