Cisco Technology, Inc.

Qosmos Tech

Qosmos

Jérôme Tollet

Hugo Latapie

Enzo Fenoglio

Andre Surcouf

Mohammed Hawari

Aloys Augustin

Gautier Harmel

Eric Horlait

Guy Pujolle

Nathan Roland Maryan Skrzypczak

Syed Muhammad Mohsin Kazmi

Jérôme Abela

An approach to establish connections between clusters having overlapping IP address ranges. A method includes receiving, at a service discovery server, from a first node in a first cluster, a service discovery request including a unique name, determining, at the service discovery server, that the unique name resolves to a destination IP address of a second node in a second cluster, determining that the destination IP address overlaps with an IP address range associated with the first cluster, in response to determining that the destination IP address overlaps with the IP address range belonging to the first cluster, configuring a gateway to expect a network connection request from the first node that includes an IP address of the gateway, and sending a service discovery response to the first node, the service discovery response including the IP address of the gateway, but not the destination IP address.

Smart service discovery to interconnect clusters having overlapping IP address space

The invention concerns a method for identifying a protocol of a data stream exchanged between two entities of a telecommunication network, the processing method comprising the following steps: on receiving data of the data stream, grammatical parsing of said data stream in order to identify a protocol of the data stream; in the event of failure to identify the protocol of the data stream by grammatical parsing, consulting a signature engine mapping protocols with corresponding signatures, and sequentially applying signatures to the data flow in order to identify a data stream protocol.

Identification of a protocol of a data stream

The invention relates to a method for processing a data stream exchanged between a client and an entity via a telecommunications network, the data stream including a set of data packets, the processing method including the following steps: upon intercepting () a data packet belonging to a data stream&#x2014;the data stream including a source and a recipient, the client being the source or the recipient of the data stream&#x2014;copying () the data packet and transferring () the data packet to the recipient; transmitting said copy to a stream analyser capable of analyzing the data stream; receiving () a data stream analysis result from the stream analyser; and processing () the data stream in accordance with the receiver analysis result.

Asynchronous analysis of a data stream

A computing device running a local enforcement agent is configured to instantiate at least one application container at the computing device, where the at least one application container is part of a containerized application. The computing device is also configured to associate the local enforcement agent with the least one application container so that the local enforcement agent operates as an intra-application communication proxy for the least one application container. The local enforcement agent receives an intra-application Application Programming Interface (API) call that is sent to the at least one application container from a second application container that is part of the containerized application. The local enforcement agent is configured to analyze the intra-application API call for compliance with one or more security policies associated with the at least one container.

Securing micro-services

Presented herein are techniques for detecting anomalies in micro-service communications that are indicative of security issues/problems for the application. More specifically, a computing device receives a plurality of micro-service communication records each associated with traffic sent between pairs of executables (nodes) that are related to a micro-services application. Each of the micro-service communication records includes a time series entry and an associated trace sequence identifier and each of the micro-service communication records are generated during a time period. The computing device analyzes the plurality of micro-service communications to detect possible anomalous communication patterns associated with the micro-services application during the time period.

Anomaly detection for micro-service communications

Growing community of inventors

Paris, France

Jérôme Tollet