Cisco Technology, Inc.

Chris A Shenefiel

David A McGrew

Blake Harrell Anderson

Robert M Waitman

Stephen R Quatrano

Rafael Mantilla Montalvo

Mark Buonanno

Michael Swailes

Max Pritikin

Steven Joseph Rich

William Michael Hudson, Jr

Roy Michael Brooks

John D White

Jean Seo

Brian Carrier

According to certain embodiments, a method comprises monitoring a request for use of memory requested by a container manager application on behalf of a given one of a plurality of containers during runtime of the given container. The method further comprises determining that the request for use of memory has caused an exception. The exception indicates that the request has requested an invalid operation on a memory table or that the request has requested a previously not seen memory table. In response, the method further comprises determining an action to perform. The action depends on both first trustworthiness information associated with the given container and second trustworthiness information associated with the given container. The first trustworthiness information is obtained from a Third Party Reputation Service (TPRS). The second trustworthiness information is obtained based on monitoring the runtime behavior of the given container.

Runtime container protection

In one embodiment, a service that monitors a network obtains file characteristic data of a file stored on a first endpoint in the network. The service infers characteristics of encrypted content within encrypted traffic in the network between the first endpoint and a second endpoint, by applying a machine learning-based classifier to traffic data regarding the encrypted traffic session. The service compares the file characteristic data of the file to the inferred content characteristics of the encrypted content within the encrypted traffic, to detect the file within the encrypted traffic. The service enforces a network policy in the network, based on the detection of the file within the encrypted traffic.

Detecting targeted data exfiltration in encrypted traffic

In one embodiment, a traffic analysis service that monitors a network obtains file metadata regarding an electronic file. The traffic analysis service determines a sensitivity score for the electronic file based on the file metadata. The traffic analysis service detects the electronic file within traffic in the network. The traffic analysis service causes performance of a mitigation action regarding the detection of the electronic file within the traffic, based on the sensitivity score of the electronic file.

Unstructured data sensitivity inference for file movement tracking in a network

A root-of-trust of geolocation is provided for an apparatus that includes a trust anchor module with a cryptographic processor and a secure memory. The apparatus further includes a main processor coupled to the trust anchor module and configured to receive a digital geolocation certificate, the geolocation certificate including information identifying the apparatus, information regarding a physical location of the apparatus, information identifying an authorized entity that has verified the physical location of the apparatus, and a digital signature of the authorized entity. The main processor is further configured to cause the trust anchor module to store the digital geolocation certificate in the secure memory such that the digital geolocation certificate is cryptographically bound to the apparatus. The trust anchor module may also include, or otherwise communicate over a secure channel with, a movement sensor associated with the apparatus.

Root of trust of geolocation

Techniques are presented herein for attesting the trustworthiness of devices in a secure network during run-time operation. A security management device is configured to perform network trust attestation operations in order to generate an access control policy that defines access rights for a device in a network. The access control policy is assured by creating a hash value for the access control policy and then signing the hash value to generate a signed hash value. The signed hash value is integrated with the access control policy, and the access control policy is sent with the signed hash value to the operator device for verification.

Techniques for improved run time trustworthiness

A method and system for automatically handling exceptions in a business-to-business transaction. E-commerce internet gateways through which the business-to-business transaction passes are monitored for exceptions. When an exception is detected, an intelligent contact manager automatically determines and then locates the representative(s) authorized to resolve this exception. A unified communication system is then utilized to automatically contact and notify the authorized representative(s) of the exception. A web collaboration system is then utilized to automatically establish a collaboration session between representatives of the business-to-business transaction so that the exception can be readily resolved.

Multimedia B2B opportunity and error detection and resolution engine

A proactive call center which detects problems, resolves the problems, and then contacts the customers before customers initiate calls themselves. In the present invention, the workflow process is monitored to ensure that a transaction is completed without problems. If a problem occurs, a call center agent is notified of the problem. The call center agent can then take immediate steps to research the problem, fix the problem, or otherwise find alternative solutions to help ameliorate the problem. The call center agent then contacts the customer to explain the problem and what steps were taken to address the problem. By proactively taking steps to address problems as they occur rather than in response to customer complaints, businesses can maintain goodwill.

Proactive call and contact center system

A method in an application server for accessing a messaging server includes receiving, from a browser configured for dynamic control of audio operations, an HTTP request having an audio file that stores received voice signals specifying a messaging operation; identifying the messaging operation in the application server by interpreting the audio file; outputting a function call specifying the messaging operation to the messaging server according to IP protocol; receiving from the messaging server a response to the function call that specifies a stored message; and sending an HTML page to the browser for playback of a second audio file representing the stored message. The step of receiving from the messaging server a response includes receiving the stored message as one of an e-mail message and a voice mail message.

Arrangement for accessing an IP-based messaging server by telephone for management of stored messages

An arrangement for accessing messages in an IMAP message store via telephone using a unified web-based voice messaging system as an e-mail client for the IMAP message store. The unified Web-based voice messaging system includes a browser configured for generating an audio file that stores received voice signals specifying a messaging operation, and an application server. The application server is configured for outputting an HTML page in response to a user request via the HTTP connection, the HTML page having an XML element that defines data for an audio operation to be performed by an executable audio resource within a web browser or a proxy browser. The application server includes a speech recognition process configured for identifying the messaging operation by interpreting the audio file. Upon identifying the messaging operation and associated operand, the application server outputs a function call for the identified messaging operation to the IMAP message store. The application server also includes text to speech capabilities, enabling an e-mail message or fax message to be converted to an audible format for playback by the browser for the telephony user. Hence, a telephony user can access and manage voice, e-mail, or fax messages stored on the IMAP message store.

Growing community of inventors

Oakton, VA, United States of America

Chris A Shenefiel