Detecting attacks on computing devices

    公开(公告)号:US10897470B2

    公开(公告)日:2021-01-19

    申请号:US15885447

    申请日:2018-01-31

    Abstract: An example system may comprise a first computing device comprising instructions executable by a hardware processor to: create, responsive to detecting a second computing device initially attempting to connect to a network, an unpopulated baseline profile for the second computing device; populate the baseline profile with initial processes running on the second computing device and initial system calls made by the initial processes during an initial operation time period of the second computing device; monitor, during a subsequent operation time period of the second computing device, subsequent processes running on the second computing device and subsequent system calls made by the subsequent processes; and detect an attack on the second computing device based on a comparison of the subsequent processes and the subsequent system calls to the populated baseline profile.

    ENCODING AND VERIFYING NETWORK INTENTS FOR STATEFUL NETWORKS

    公开(公告)号:US20200136917A1

    公开(公告)日:2020-04-30

    申请号:US16176905

    申请日:2018-10-31

    Abstract: Example method includes: identifying three relationships about a network function in an intent-based stateful network—(1) the network function forwarding a network packet implies that at least one previous network packet was received by the network function in the same direction prior to the network packet is forwarded, (2) an established state in the network function implies that at least one previous network packet was received at the network function, (3) the network function receiving the network packet as a downward network function implies the network packet was previously sent by a second network function acting as an upward network function; encoding the network function using a combination of at least one of the three identified relationships; and verifying a plurality of network intents in the intent-based stateful network based at least in part on the encoding of the network function.

    PACKET BATCHING IDENTIFICATION
    16.
    发明申请

    公开(公告)号:US20200007426A1

    公开(公告)日:2020-01-02

    申请号:US16025749

    申请日:2018-07-02

    Abstract: The present disclosure provides a method, apparatus, and system for identifying packet batching within computer networks. A method consistent with the present disclosure includes sending a probe train of packets to traverse a network path within a computer network. Next, identifying a contiguous set of packets that traversed the network path with a negative DIAD time. Further, classifying the contiguous set of packets as a packet batch when a packet that traversed the network path right before the contiguous set of packets traversed the network path has a positive DIAD time. In addition, a size of a next probe train of packets that are to be sent to traverse the network path can be adjusted based on the size of the contiguous set of packets. Accurately identifying packet batching can enable more precise computer network bandwidth estimation and network traffic engineering solutions.

    DEVICE FOR ORCHESTRATING DISTRIBUTED APPLICATION DEPLOYMENT WITH END-TO-END PERFORMANCE GUARANTEE

    公开(公告)号:US20190363954A1

    公开(公告)日:2019-11-28

    申请号:US15990554

    申请日:2018-05-25

    Abstract: A method for receiving, in an application orchestrator, a request for executing an application. The method includes identifying a function sequence to complete the application, each function in the function sequence is executed in one instance, and identifying an instance chain of the functions to complete the application, wherein the instance chain includes an instance for each function in the function sequence. The method includes tracking a performance of each instance for each function in the chain, and selecting an application execution route based on the performance that includes the instance chain of the functions to complete the application. The method includes allocating a server resource to each instance for each function and modifying the application execution route based on a performance and a performance policy. A system and a computer readable medium storing instructions to perform the above method are also provided.

    SELF-CLOCKED ROUND ROBIN SCHEDULER
    18.
    发明申请

    公开(公告)号:US20240385876A1

    公开(公告)日:2024-11-21

    申请号:US18456709

    申请日:2023-08-28

    Abstract: A system maintains ordered sub-queues used for storing packets, which are to be dequeued by a scheduler. A respective is enqueued into a sub-queue, and a virtual time associated with the respective packet is based on a current sub-queue virtual time corresponding to a previously enqueued packet in the sub-queue. The system dequeues, by the scheduler, a first packet from a selected sub-queue and determines a packet virtual time associated with a next packet in the currently selected sub-queue. Responsive to determining that the packet virtual time associated with the next packet is greater than a current global virtual time, the system selects a next sub-queue in the ordered plurality of sub-queues. The system updates the current global virtual time based on a packet virtual time of the dequeued first packet.

    Network-aware resource allocation
    19.
    发明授权

    公开(公告)号:US12132668B2

    公开(公告)日:2024-10-29

    申请号:US18311430

    申请日:2023-05-03

    Abstract: Systems and methods are provided for updating resource allocation in a distributed network. For example, the method may comprise allocating a plurality of resource containers in a distributed network in accordance with a first distributed resource configuration. Upon determining that a processing workload value exceeds a stabilization threshold of the distributed network, determining a resource efficiency value of the plurality of resource containers in the distributed network. When a resource efficiency value is greater than or equal to the threshold resource efficiency value, the method may generate a second distributed resource configuration that includes a resource upscaling process, or when the resource efficiency value is less than the threshold resource efficiency value, the method may generate the second distributed resource configuration that includes a resource outscaling process. The resource allocation may transmit the second to update the resource allocation.

    DISTRIBUTED NETWORK MONITORING
    20.
    发明公开

    公开(公告)号:US20240333622A1

    公开(公告)日:2024-10-03

    申请号:US18193879

    申请日:2023-03-31

    CPC classification number: H04L43/0876 H04L43/045 H04L43/16

    Abstract: A device and corresponding method are provided determining a consumed computing capacity of a first networking device exceeds the threshold for total capacity for processing monitoring data for a monitoring metric. An optimization engine determines a second networking device with unused computing capacity sufficient for processing the monitoring data generated by the first networking device. The optimization engine automatically moves the monitoring data for the monitoring metric generated by the first networking device to the second networking device and causes the second networking device to process the monitoring data.

Patent Agency Ranking