Cisco Technology, Inc.

Chui-Tin Yen

Carlos M Pignataro

Kent Kinchu Leung

Paul M Quinn

Jianxin Wang

Snigdhendu Mukhopadhyay

Reinaldo Penno

Hung The Chau

Vivek Kansal

Saumyavapuh Lugani

Jerome Henry

Robert Edgar Barton

Sumeet Singh

Aamer Saeed Akhter

Rajiv Raghunarayan

Kuntal Daftary

In one embodiment, a master on-boarding agent establishes a virtual private network (VPN) connection with a local on-boarding agent executed by a gateway of a vehicle. The master on-boarding agent receives, via the VPN connection, vehicle data obtained by the local on-boarding agent from a co-pilot system of the vehicle. The master on-boarding agent configures, based on the received vehicle data, the gateway of the vehicle with a network configuration, wherein the network configuration includes an Internet Protocol (IP) address for the gateway. The master on-boarding agent coordinates, based on the network configuration, application of a security policy to the gateway.

Automatic on-boarding agent for IOT edge routers in connected vehicles

Embodiments are directed to receiving an original packet at a service function; determining, for a reverse packet, a reverse service path identifier for a previous hop on a service function chain; determining, for the reverse packet, a service index for the reverse service path identifier; and transmitting the reverse packet to the previous hop on the service function chain.

Method, medium, and apparatus for inserting a placeholder service function

Generating packets in a reverse direction of a service function chain

Embodiments of the present disclosure provide techniques for distributing information about possible anomalies in a network. A sensor in a network may detect packets with payloads that match an anomaly signature. Address dispersion information, for example, in the form of source and address bitmaps, may be gathered at the sensor. The address dispersion information may be distributed to one or more peer sensors if the information indicates that the number of different addresses of the detected matching packets exceeds a threshold.

Anomaly information distribution with threshold

A method is disclosed for distributed detection of botnets via a plurality of sensors on a network. According to embodiments, DNS information, including domain names and addresses, is received at a sensor, the number of unique subnets corresponding to a domain name is determined and an alert is sent to other sensors when the number of unique subnets exceeds a first threshold. Other embodiments are also disclosed.

Detecting botnets

Growing community of inventors

San Jose, CA, United States of America

Chui-Tin Yen