The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
May. 19, 2020

Filed:

Feb. 19, 2018
Applicant:

Cisco Technology, Inc., San Jose, CA (US);

Inventors:

Saman Taghavi Zargar, Milpitas, CA (US);

Subharthi Paul, San Jose, CA (US);

Prashanth Patil, San Jose, CA (US);

Jayaraman Iyer, Sunnyvale, CA (US);

Hari Shankar, San Jose, CA (US);

Assignee:

Cisco Technology, Inc., San Jose, CA (US);

Attorneys:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04L 12/24 (2006.01); G06N 20/00 (2019.01);
U.S. Cl.
CPC ...
H04L 63/1425 (2013.01); G06N 20/00 (2019.01); H04L 41/145 (2013.01); H04L 63/145 (2013.01); H04L 63/1458 (2013.01); H04L 63/20 (2013.01); H04L 2463/142 (2013.01);
Abstract

In one embodiment, a centralized controller maintains a plurality of hierarchical behavioral modules of a behavioral model, and distributes initial behavioral modules to data plane entities to cause them to apply the initial behavioral modules to data plane traffic. The centralized controller may then receive data from a particular data plane entity based on its having applied the initial behavioral modules to its data plane traffic. The centralized controller then distributes subsequent behavioral modules to the particular data plane entity to cause it to apply the subsequent behavioral modules to the data plane traffic, the subsequent behavioral modules selected based on the previously received data from the particular data plane entity. The centralized controller may then iteratively receive data from the particular data plane entity and distribute subsequently selected behavioral modules until an attack determination is made on the data plane traffic of the particular data plane entity.


Find Patent Forward Citations

Loading…