Cisco Technology, Inc.

Sonoa Networks India (pvt) Ltd.

Ramesh Nethi

Kousik Nandy

Bhalaji Narayanan

Arun Kumar Raghavendra

Daniel Khoe

Ravi Kumar Vadapalli

Prashanth Patil

Tirumaleswar Reddy

Arun Kumar

Srinivas Chivukula

Mehar Simhadri

Venkata Lakshmi Narayana Mehar Simhadri

Anand K Oswal

Daniel George Wing

Elango Ganesan

Rajesh Tarakkad Venkateswaran

Christopher A Wild

Christopher Wild

The present technology addresses deficiencies associated with common practices for handling out of order data in a streaming data database. An aspect of the present technology is avoid storing out of order data in a snapshot but just store the out of order data as additional data linked to the temporal graph. The present technology receives out of order data and records a modification time for the data and a next modification time for the data that equals a timestamp of data previously stored in the database. If there is also data in the database for a time earlier than the timestamp of the out of order data, the earlier data is adjusted so that its next modification time matches the timestamp of the out of order data.

Handling out-of-order data during stream processing and persisting it in a temporal graph database

In one embodiment, present disclosure discloses a method for partitioning a temporal graph is described. Embodiments of the method comprises creating a plurality of storage blocks for each type of the different types of graph elements based on predefined label groups, each of the plurality of storage blocks configured to store the telemetry information generated in a corresponding predefined time-range, recreating each of the plurality of storage blocks upon expiry of a configurable rollover time, and sharding each of the plurality of storage blocks into a plurality of shards based on a configurable sharding count.

Partitioning a temporal graph for distributed storage

The present technology addresses a need to automatically configure a new compute resource to join an existing cluster of computing resources. The present technology provides a mechanism to ensure that the new compute resource is executing the same kernel version which further permits subsequent exchange at least one configuration message informing the new compute resource of necessary configuration parameters and an address to retrieve required software packages.

Extending center cluster membership to additional compute resources

In one implementation, traffic in a mobile network is offloaded to a security as a service server or a cloud server. A mobile access gateway (MAG) in the mobile network identifies one or more mobile nodes that are configured for communication on the mobile network. The MAG receives a message that includes an address of a mobile node and sends a request based on the message to the security as a service server. The MAG forwards traffic flows to the security as a service server according to the message, which is configured to detect an indication of malicious software in the traffic flows and/or filter content of the traffic flows according to a user profile.

Offloaded security as a service

In one embodiment, a device in a network receives data from one or more other devices in the network via one or more protocol adaptors. The device transforms the received data into a common data model. The device executes a containerized application. The device exposes the transformed data to the application.

Distributed application hosting environment to mask heterogeneity

In one implementation, a network device provides a single signoff service to one or more endpoints in software as a service (SaaS) sessions. The network device is configured to monitor a session between a software as a service (SaaS) provider and an endpoint device and to identify a network event trigger associated with the session. In response to the network event trigger, a signoff message is generated to the SaaS provider by the network device. The SaaS provider is configured to purge the session in response to the signoff message.

Single sign off handling by network device in federated identity deployment

In one implementation, Web-Cache deployed in the Enterprise premises and cloud-based SecaaS are combined such that similar identity-based polices are enforced on both the SecaaS and content delivered from the Web-Cache. This identity-based policy implementation outside the network using SecaaS and within the network for web-cached content provides consistent identity-based security while still providing content to end-users with high performance. Content inspected and/or modified by SecaaS may be cached in the enterprise premises so that requests for content from an origin server decreases, freeing Internet bandwidth and reducing access time. Local caching of streaming content may decrease latency while local implementation of identity-based policy continues to limit the streamed content as appropriate. Local implementation of identity-based policy may reduce the load on SecaaS. Rather than using content delivery networks provided by a service provider for web-content, a cache server within the enterprise is used.

Web caching with security as a service

XML Document Validation. Structure information of an XML schema is stored in the XML schema node array for structure validation of an XML document. Further, datatype information of the XML schema is stored in the XML schema type node array for datatype validation of the XML schema. The XML schema node array and the XML schema type node array are one-dimensional arrays. The XML document is validated using information stored in the XML schema node array and in the XML schema type node array.

Extensible markup language (XML) document validation

Modifying a partially parsed Extensible Markup Language (XML) document. A stop node in an XML document is marked using at least one stop XPath expression. The XML document is then parsed till the stop node identified by the at least one stop XPath expression. Modifications to the XML document are specified in a modification script, including at least one modification instruction. A modification instruction includes a context node XPath expression which identifies a context nodeset requiring modifications, and the actual modification content. Sequence of event tokens corresponding to the parsed XML document are then stored. Further, the XML document is modified according to the modification script.

System and method for partial parsing of XML documents and modification thereof

Simplified XPath evaluation in Extensible Markup Language (XML) document validation. XML schema is compiled into a one dimensional array of schema nodes, where a schema node represents a complex/simple type definition in the XML scheme. Identity constraints are processed during compilation and Xpath expressions within these constraints are extracted and parsed. Further, these Xpath expressions are evaluated at compilation time to identify the schema nodes corresponding to the XML nodes referred in the identity constraints. The identity constraints are then enforced at runtime without the need to evaluate the Xpath expressions at the runtime.

Simplified XPath evaluation in XML document validation

Classifying Uniform Resource Identifier (URI) expression using one or more XPath expressions. A request comprising a URI expression and additional network information is modeled as a logical XML document representation. One or more XPath expressions are then created from the schema of the logical XML document. Each of the one or more XPath expressions represents a classification category of the request. Further, an XML document is generated from an incoming request. One or more XPath expressions are evaluated on the XML document for classifying the incoming request.

Growing community of inventors

Bengaluru, India

Ramesh Nethi