Cisco Technology, Inc.

Bloomreach Inc.

Valtix, Inc.

Praveen K Patnala

Anand Girish Parthasarathy

Vijay K Chander

Makarand Deshmukh

Ashutosh Garg

Vishal Jain

William Uppington

Jason Mellblom

Michael L Chan

Amit Aggarwal

Gagandeep Singh

Abhay Vardhan

Raj K De Datta

Manojit Sarkar

Srinath Sridhar

Joshua Levy

Sunil Kumar

Chandra Sekhar Kondamuri

Shao-Chuan Wang

Vache Moroyan

Renuka Khandelwal

Siddharth Balwani

Maksim Zanko

Ganesh Narayanaswamy

Prateek Gupta

Raghu Ram Duddumpudi

Gurashish Singh Brar

Kannan Nitin Sharma

The present technology provides intercloud connectivity as a service by discovering components of the organization's deployment in various sites, irrespective of the cloud provider, such that two sites can merely be selected along with a few standard options, and the controller can handle the complexity of instantiating a tunnel between the cloud sites automatically. Further, the controller can monitor the health of one or more tunnels between the cloud sites to automatically scale bandwidth up or down.

Multi-cloud site-site secure connectivity as a service

A computer-implemented method of managing security services for one or more cloud computing platforms is disclosed. The method comprises receiving, by a security gateway system having a processor, a digital communication related to one of one or more computing applications hosted by a virtual cluster for private use on a cloud computing platform, the security gateway system residing within the cloud computing platform, the security gateway system performing network security gateway functions for the one or more computing applications. The method also comprises storing the digital communication in association with a timestamp in a storage device. The method further comprises receiving a piece of threat intelligence data indicating a security threat from a main controller residing outside the virtual cluster; storing the piece of threat intelligence data in a database; and determining whether the piece of threat intelligence data applies to any of the digital communications in the storage device. Finally, the method comprises transmitting an estimate of an extent or timing of an impact of the security threat based on the determining.

Managing computer security services for cloud computing platforms

Techniques for performing content performance analytics are disclosed in accordance with some embodiments. In some embodiments, a process for performing content performance analytics includes receiving content on a web site; performing content performance analytics of content available on the web site using a processor; generating a report that includes a recommended action based on the content performance analytics for the content on the web site; and automatically performing a recommended action based on the content performance analytics for the content on the web site.

Content performance analytics

A computer-implemented method of managing security services for one or more cloud computing platforms is disclosed. The method comprises receiving, by a main controller, a security policy from a client device, the client device being associated with a set of computing applications hosted by one or more independent, private virtual clusters on one or more cloud computing platforms, the main controller residing outside the one or more virtual clusters, each of the one or more virtual clusters to be served by a security gateway system residing within the one or more cloud computing platforms, the security policy indicating how threat intelligence data is to be applied to the set of computing applications with respect to a plurality of application scopes; receiving application data from the client device, the application data indicating whether a specific computing application of the set of computing applications has one or more application properties of a plurality of application properties, the plurality of application properties corresponding to the plurality of application scopes, the one or more application properties including a functional attribute related to a function of the specific computing application, obtaining a piece of threat intelligence data from a data source; mapping the piece of threat intelligence data to the plurality of application scopes; determining to which of the one or more security gateway systems to send the piece of threat intelligence data based on the security policy; transmitting the piece of threat intelligence data to at least one of the one or more security gateway systems based on the determining.

Techniques for providing a distributed and fast data storage layer for large scale web data services are disclosed. In some embodiments, a distributed data storage layer for web data services includes storing web related data for a plurality of merchants in the distributed data storage layer; and copying on demand a data store and a search index for web related data for a first merchant to perform a job for updating the web related data for the first merchant.

Distributed and fast data storage layer for large scale web data services

One or more integrated circuits for implementing a network firewall for a cloud computing platform are disclosed. The one or more integrated circuits comprise: special-purpose hardware, configured to perform: receiving an item in a transport layer from a second hardware portion through a communication bus, the item being derived from original data received by the second hardware portion from a source computer device; and applying processing in increasingly higher communication layers to the item to obtain processed data in an application layer. The applying comprises identifying a payload in the item; determining whether the item includes a security attack based on the payload, the original data, and additional data received from the source computer device before or after the original data was received; and transmitting the processed data, including a result of the determining, to the second hardware portion.

High-performance computer security gateway for cloud computing platform

Mechanisms are provided for generating a master key used to secure key objects associated with data blocks in a data center. A cryptographic node creation request is received. It is determined that a master key can not be obtained from another cryptographic node in the data center. A master key is generated. The master key is included in a key hierarchy used to encrypt a data center key object, the data center key object corresponding to a data block maintained in a storage area network (SAN), where the data center key object includes a unique identifier, an encrypted key, and a wrapper unique identifier. The master key is split into N shares, with M shares required to recreate the master key, wherein M is less than N. The N shares are distributed to different entities.

Master key generation and distribution for storage area network devices

An encryption key management system is provided for storage area network devices. A create key request is received at a storage area network switch. The key is created at the storage area network switch and the created key request is transmitted to a key management center. The key object is stored in the key management center and includes a unique identifier, an encrypted key, a wrapper unique identifier, and a key entity. The encrypted key can later be decrypted to generate a decrypted key. The encrypted key is decrypted using keying material accessed using the wrapper unique identifier that identifies another key object.

Encryption key management for storage area network devices

Efficient mechanisms are provided for transferring key objects associated with disk logical unit numbers and tape cartridges from one data center to another data center. A request is received to transfer a source data center key object from a source data center to a destination data center. The source data center key object corresponds to a data block, such as a disk logical unit number (LUN) or a tape cartridge, maintained in a storage area network (SAN) and includes a unique identifier, an encrypted key, and a wrapper unique identifier. The encrypted key is decrypted using a source data center key hierarchy. Key information is transmitted from the source data center to the destination data center. A destination data center key object is generated using a destination data center key hierarchy.

Distribution of storage area network encryption keys across data centers

Techniques for enhancing content are disclosed. In some embodiments, enhancing content includes automatically identifying a set of modifications to the existing content of a page that would result in the page satisfying a set of search properties and applying at least a subset of the set of modifications to the page. Furthermore, techniques for enhancing link structure are disclosed. In some embodiments, enhancing link structure includes automatically determining a constrained link structure for a set of pages that satisfies a set of one or more constraints and that is at least in part different from an existing link structure of the set of pages and making one or more modifications to the existing link structure to at least in part realize the constrained link structure for the set of pages.

Enhancing the content and structure of a corpus of content

Growing community of inventors

Santa Clara, CA, United States of America

Praveen K Patnala