Cisco Technology, Inc.

Amazon Technologies, Inc.

Pure Networks LLC

Xin Yi Liu

Navindra Yadav

Shih-Chun Chang

Hoang Viet Nguyen

Shashi Gandham

Thanh Trung Ngo

Xuan Loc Bui

William Alexander Stevenson

Rameez Loladia

Ashutosh Thakur

Ramkishore Bhattacharyya

Andrew John Kiggins

Rodrigo Diaz Martin

Xiaofei Guo

Duan Tran

Hai Trong Vu

Varun Sagar Malhotra

Sunil Gupta

Kendra S Harrington

Aaron H Averbuch

Ron Oded Gery

Steve G Bush

Matthew Tebbs

Kyle Benjamin Schultheiss

Brett Marl

Yohanes Santoso

Yu Gu

Lee-Ming Zen

Daniel Lee McCarriar

Mike Mouawad

Thanh Nhan Nguyen

Fan Xiang

Vaishali Palkar

Steve Mooney

William Tuttle

John Mevissen

Josh J Hinds

Andrew Charles Wantuch

Leonardo Lizcano

Steven Hunton Ngo

Systems and methods are disclosed herein for enforcing digital signature on a token useable by a network-addressable device to invoke service calls on services of a service provider. A device platform service of the service provider may receive service calls from the network-addressable device and cause one or more operations to be performed by other services of the service provider in response to receiving a notification that the request is authentic. An authentication service analyses a fingerprint associated with a request submitted by the device and determines whether it is a match to a fingerprint generated from cryptographic authentication information provided by the user in connection with registering the network-addressable device.

Custom authorization of network connected devices using signed credentials

Systems, methods, and computer-readable media for gathering network intrusion counter-intelligence. A system can maintain a decoy network environment at one or more machines. The system can identify a malicious user accessing network services through the network environment. Further, the system can receive network service access requests from the user at one or more machines in the network environment and subsequently direct the network service access requests from the malicious user to the decoy network environment based on an identification of the malicious user. The network services access requests can be satisfied with network service access responses generated in the decoy network environment. Subsequently, the system can maintain malicious user analytics based on the network service access requests of the malicious user that are directed to the decoy network environment.

Network intrusion counter-intelligence

Systems, methods, and non-transitory computer-readable storage media are disclosed for detecting vulnerabilities in real-time during execution of a process or an application. In one example, a device may have one or more memories storing computer-readable instructions and one or more processors configured to execute the computer-readable instructions to obtain real-time process information associated with a process executing in an endpoint. The device can then determine package information for a package associated with the process based on the process information. The device can then identify at least one vulnerability associated with the package information using a database of vulnerabilities stored on a backend component of the network. The backend component may have a database of vulnerabilities for packages.

Systems and methods for detecting vulnerabilities in network processes during runtime

Systems, methods, and computer-readable for defining host functionalities in a computing environment include obtaining two or more snapshots comprising information pertaining to two or more processes executing in two or more hosts, the two or more snapshots being obtained at two or more points in time from the two or more hosts. One or more long-running processes amongst the two or more processes are identified based on one or more criteria associated with long-running processes. One or more priorities associated with the one or more long-running processes and used for defining functionalities for at least a subset of the two or more hosts, where high priorities are assigned to long-running processes, such as web server or database server processes, which are unique to at least the subset of the two or more hosts. Resources may be provisioned based on these host functionalities.

Provisioning resources for monitoring hosts based on defined functionalities of hosts

Domain Name System (DNS) requests can be routed to either a private DNS server or a public DNS server based on a determination made by a DNS classifier. The private DNS server allows customers to use custom DNS names for internal resources without exposing the names or IP addresses to the public Internet.

Selective routing of domain name system (DNS) requests

A system and method for causing concurrent setup of a wireless network adapter and a network host device. The method involves receiving a request to install either a wireless network adapter or a network host device. If the request is to install the wireless network adapter, then the method further involves detecting that the network host device is not yet installed, and prompting a user to connect to the network host device. Alternatively, if the request is to install the network host device, then the method further involves detecting that the wireless network adapter is not yet installed, and prompting the user to connect to the wireless network adapter. The method also involves causing a connection to be established between the wireless network adapter and the network host device.

Simultaneous setup of a wireless network adapter and a network host device

Network management to establish and maintain the health and security of a computing network, such as a home network. A network management tool may identify the media access control (MAC) address for each device in the network, and allow a user to identify which devices are authorized to be a member of the network. If the network gateway device supports MAC address filtering, a user can then employ the network management tool to configure the router to exclude non-authorized devices from joining or remaining in the network based upon their MAC addresses. Further, the network management tool may allow a user to configure a wireless gateway device to stop broadcasting its service set identifier (SSID), change the SSID, or both, identify to the user when a wireless gateway device is using encryption, and, if so, what type of encryption. Still further, the tool may monitor the status of various software applications on devices in the network, and then alert a user if the status of any of the devices in the network requires attention. Further, the network management tool may provide recommendations to a user for correcting or changing the status of the monitored software applications.

Network management providing network health information and lockdown security

Growing community of inventors

Seattle, WA, United States of America

Xin Yi Liu