Cisco Technology, Inc.

Piotr Jerzy Kupisiewicz

Frédéric René Philippe Detienne

Jonathan Maria Jan Slenders

Michal Wladyslaw Garcarz

Alexandre Honoré

Frederic Detienne

Paweł Tybinka

Olaf Meller

Michael Chomicz

Radoslaw Konrad Ruchala

David Pryor

Methods and systems provide a library of various language bindings for application programming interface enabled network devices. The library is generated on-demand based on respective capabilities of a target network device. In these methods, a computing device obtains a selection of a target network device among a plurality of network devices and one or more data models that represent capabilities of the target network device. The computing device generates a library of one or more object models, each of which respectively corresponds to one of the one or more data models. The one or more object models define command line options for interfacing with the target network device. In these methods, the computing device provides a language shell for interacting with the target network device based on the one or more object models in the library.

Generating application programming interface based on object models from network devices

Methods are presented herein for a reduced state machine that describes nodes and relationship dynamics representing real network elements (networking devices and software processes) in a computer/data network, and abstracted logical items. Logical states of networking features of the network elements are reflected in the graph, while configuration data is stored for completeness. A method called a 'Versioner Algorithm' is provided to record the temporal history of a node and its state over time within the node's metadata itself, while recorded relationships represent logical relations between observed nodes. A method is also provided to time-travel back to observe a historical view of the network. Further still, a method is provided to a difference of two historical topologies and return that data in human-readable or machine consumable form.

Methods for implementing time-travelling networks using extensions to graph databases

Methods are provided for synchronizing task execution and/or data collection on multiple network devices. The methods involve obtaining a command to be executed on a plurality of target network devices and splitting the command into a plurality of single device execution tasks. Each single device execution task is for a respective network device of the plurality of target network devices. The methods further involve providing each of the plurality of single device execution tasks, via a command line interface or an application programming interface, to a respective one of the plurality of target network devices. The plurality of single device execution tasks being provided within a bounded time interval.

Common synchronization of device command into multiple synchronized single device tasks

Methods are provided in which a computer device provides, to a network device, an editing probe instruction for a cursor movement on a command line interface for interfacing with the network device. In these methods, the computer device obtains, from the network device, data output and determines whether the network device completed a command output based on whether the data output indicates the cursor movement on the command line interface.

Patternless prompt detection of command completion

A network management system is configured to detect one or more malicious activities at one or more devices connected to a network. The network management system is configured to determine a malware root of the one or more malicious activities and generate a network-wide indicating a hierarchical relationship between the malicious activities spawned by the malware root and the malware root. The malicious activities spawned by the malware root represented in the network-wide malware include the one or more malicious activities and include a plurality of malicious activities spawned across a plurality of devices connected to the network.

Network-wide malware mapping

A security gateway security gateway provisions a web browser hosted on a user device with a proxy auto-configuration file configured to automatically redirect the web browser to the security gateway as a proxy server for clientless virtual private network (VPN) operation when the web browser browses any uniform resource locator including a particular domain name that encompasses a private network. Upon receiving from the web browser over a public network a request to access a private resource on the private network, the security gateway establishes a secure public connection to the web browser, establishes a private connection to the private resource, and associate the private connection with the secure public connection to form a clientless VPN connection between the web browser and the private resource. The security gateway forwards content between the private resource and the web browser over the clientless VPN connection without performing any content rewrite operations.

Proxy-based clientless VPN with web browser proxy auto-configuration (PAC) file and extension

In one example embodiment, a proxy server obtains, from a client, a query regarding a server with which the client is attempting to establish a communication session. Based on the query, the proxy server evaluates dynamically updated stored data to determine whether the dynamically updated stored data indicates that the server supports a secure transport protocol. Based on determining that the dynamically updated stored data indicates that the server supports the secure transport protocol, the proxy server provides a response to the client. The response causes the client to provide, to the server, an initial secure transport protocol message in the communication session.

Growing community of inventors

Cracow, Poland

Piotr Jerzy Kupisiewicz