Cisco Technology, Inc.

Altera Corporation

Other

Juniper Networks, Inc.

Sanjay Agarwal

Robin Edgard Martherus

Yedidya Dotan

Neil Mammen

James M Anderson

Blake Harrell Anderson

Mammen Thomas

Nancy Cam-Winget

Subharthi Paul

Denis Knjazihhin

Oleg Bessonov

Saman Taghavi Zargar

Sachin Vasant

Nadeem Khan

Amarnath Bachhu Satyan

Firdousi Zackariya

Robert Frederick Albach

Ahzam Ali

Burak Say

Kamil Imtiaz

M Varghese Ninan

Mark Steven Knellinger

Shawn Henry

Anoop Kartha

A trained model may be deployed to an Internet-of-Things (IOT) operational environment in order to ingest features and detect events extracted from network traffic. The model may be received and converted into a meta-language representation which is interpretable by a data plane engine. The converted model can then be deployed to the data plane and may extract features from network communications over the data plane. The extracted features may be fed to the deployed model in order to generate event classifications or device state classifications.

Intrusion detection model for an internet-of-things operations environment

A management entity imports information included in security policies from security devices configured to operate in accordance with respective ones of the security policies. The information is classified into security policy classifications based on commonality in the information across the security policies. The security policy classifications are displayed as selectable security policy classifications. An entry of a policy template name and selections of multiple security policy classifications are received. The security policies in the multiple selected security policy classifications are assigned to a security policy template identified by the entered policy template name.

Classification of security policies across multiple security products

A management entity discovers security devices connected to a network. Each security device controls access to resources by devices associated with the security device according to a corresponding native security policy that is based on a corresponding native policy model associated with the security device. The management entity imports the native security policies from the corresponding security devices over the network, and normalizes the imported native security policies across the security devices based on a generic policy model, to produce normalized security policies that are based on the generic policy model and representative of the native security polices. The management entity receives security events from the security devices, and processes the received security events among the security devices based on the normalized security policies.

Management of security policies across multiple security products

A management entity connects with multiple security devices across a network. Each security device operates in accordance with one or more security policies. The management entity imports, over the network, data describing the security policies from the multiple security devices. The management entity classifies the imported security policies into security policy classifications based on commonality in information included in the security policies across the multiple security devices.

A hygienic modular writing utensil and method of using for eliminating or minimizing the spread of germs, bacteria and the like between a first and a second user. The utensil has an External Protective Shield with a first holding area for use by the first user and a removable Internal Writing Utensil with a second holding area for use by the second user. The External Protective Shield has an internal cleaning element and the Internal Writing Utensil has a removable cap on its outer end, whereby when the first user pulls the Internal Writing Utensil out from the External Protective Shield or reinserts the Internal Writing Utensil back into the External Protective Shield by grasping the exterior surface of the removable cap, an outer surface of the Internal Writing Utensil, including the second holding area is cleaned.

Hygienic writing instrument and method of using

An example network system includes a plurality of endpoint computing resources, a business policy graph of a network that includes a set of the plurality of endpoint computing resources configured as a security domain, a set of policy enforcement points ('PEPs') configured to enforce network policies, and a network management module ('NMM'). The NMM is configured to receive an indication of a set of network policies to apply to the security domain, automatically determine a subset of PEPs of the set of PEPs are required to enforce the set of network policies based on physical network topology information readable by the NMM that includes information about the location of the endpoint computing resources and the set of PEPs within the network, and apply the network policies to the subset of PEPs in order to enforce the network policies against the set of endpoint computing resources of the security domain.

Domain-based security policies

According to one embodiment, a method of regulating traffic at a network hardware machine is disclosed. The method includes receiving a data packet, calculating a time stamp difference value, determining whether a maximum token bucket value has been exceeded by the time stamp difference value and determining whether there are enough tokens to transmit the packet.

Method of policing network traffic

According to one embodiment, a network hardware machine is disclosed. The network hardware machine includes a central processing unit (CPU) that processes data packets received at the network hardware machine, and a classifier, coupled to the CPU, that classifies the packets prior to the packets being received at the CPU.

Packet classification method

Growing community of inventors

San Jose, CA, United States of America

Sanjay Agarwal