中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

111 records (took 0.03 seconds)

    Systems and Methods to Determine Attack Paths to Application Assets
    21.
    发明公开
    Systems and Methods to Determine Attack Paths to Application Assets 审中-公开

    公开(公告)号：US20240265113A1

    公开(公告)日：2024-08-08

    申请号：US18330255

    申请日：2023-06-06

    Applicant: Cisco Technology, Inc.

    Inventor： Jeffrey M. Napper ,  Hendrikus G. P. Bosch ,  Jean Diaconu ,  Marcelo Yannuzzi ,  Alessandro Duminuco

    IPC: G06F21/57 ,  G06F21/55

    CPC classification number: G06F21/577 ,  G06F21/552 ,  G06F2221/033

    Abstract: A system and a method to determine attack paths to application assets may include storing in a memory asset inventory indicating multiple application assets, multiple attack vector parameters configured to indicate vulnerabilities of one or more of the application assets, and asset mapping information configured to associate each of the application assets to one or more of the application layers. A processor may determine multiple vulnerable assets in the application assets based at least in part upon the attack vector parameters. Further, the processor may determine feasibility parameters that indicate a likelihood of the attack path to occur in the system, generate a visual interface showing the vulnerable assets, determine an attack path connecting the vulnerable assets based at least in part upon the asset mapping information, and map the attack path to the application layers in the visual interface based at least in part upon the feasibility parameters.

    Data packet prioritization in multiplexed sessions
    22.
    发明授权
    Data packet prioritization in multiplexed sessions 有权

    公开(公告)号：US11902168B2

    公开(公告)日：2024-02-13

    申请号：US17357461

    申请日：2021-06-24

    Applicant: Cisco Technology, Inc.

    Inventor： Vincent Parla ,  Andrew Zawadowskiy ,  Oleg Bessonov ,  Hendrikus G. P. Bosch

    IPC: H04L47/24

    CPC classification number: H04L47/24

    Abstract: A method of defining priority of a number of data packets within a queue includes generating a policy. The policy defines a first multiplexed channel of a plurality of multiplexed channels. The first multiplexed channel having a first priority. The policy also defines a second multiplexed channel of the plurality of multiplexed channels. The second multiplexed channel having a second priority. The first priority is defined as being of a higher priority relative to the second priority. The method further includes receiving the number of data packets over the plurality of multiplexed channels associated with a session based at least in part on the policy.

    Automatic assessment of API service security standing with API reputation scoring
    23.
    发明授权
    Automatic assessment of API service security standing with API reputation scoring 有权

    公开(公告)号：US11899780B2

    公开(公告)日：2024-02-13

    申请号：US17226304

    申请日：2021-04-09

    Applicant: Cisco Technology, Inc.

    Inventor： Hendrikus G. P. Bosch ,  Alessandro Duminuco ,  Sape Jurriën Mullender ,  Jaffar Alaoui

    IPC: G06F21/57 ,  G06F21/52 ,  G06F9/54

    CPC classification number: G06F21/52 ,  G06F9/544 ,  G06F2221/031

    Abstract: The present disclosure is directed to assessing API service security and may include the steps of identifying an API service called by an application based on information provided by an agent embedded within the application; collecting telemetry associated with the API service, the telemetry collected from one or more telemetry sources and indicating any deficiencies in the API service; generating a reputation score for the API service based on analysis of the collected telemetry; and transmitting the reputation score to at least one of the following: the agent embedded within the application, wherein the reputation score is associated with at least one policy having at least one policy action, and wherein the reputation score is operable to be used by the agent to invoke the at least one policy action relating to use of the API service by the application; or a continuous integration/continuous delivery pipeline associated with the application.

    Steering traffic on a flow-by-flow basis by a single sign-on service
    25.
    发明授权
    Steering traffic on a flow-by-flow basis by a single sign-on service 有权

    公开(公告)号：US11457008B2

    公开(公告)日：2022-09-27

    申请号：US17069540

    申请日：2020-10-13

    Applicant: Cisco Technology, Inc.

    Inventor： Hendrikus G. P. Bosch ,  Alessandro Duminuco ,  Julien Barbot ,  Jeffrey Michael Napper ,  Sape Jurrien Mullender

    IPC: G06F7/04 ,  G06F15/16 ,  G06F17/30 ,  H04L29/06 ,  H04L9/40

    Abstract: Techniques for using a single sign-on (SSO) service as a software defined networking (SDN) controller for a virtual private network environment. The techniques disclosed herein may include receiving, at a first authentication service, first data including a first request to authenticate a user of a client device to access an application. The techniques may also include sending, to the client device, second data representing a second request configured to prompt a second authentication service to authenticate the user of the client device. Additionally, the first authentication service may receive an indication that the user was authenticated by the second authentication service and determine, based at least in part on an attribute associated with at least one of the client device or the application, whether the client device is to access the application using an unsecured connection or, alternatively, access the application using a secured connection.

    Techniques for efficient service chain analytics
    28.
    发明授权
    Techniques for efficient service chain analytics 有权

    公开(公告)号：US10284390B2

    公开(公告)日：2019-05-07

    申请号：US15177021

    申请日：2016-06-08

    Applicant: CISCO TECHNOLOGY, INC.

    Inventor： Surendra M. Kumar ,  Alessandro Duminuco ,  Hendrikus G. P. Bosch ,  Humberto J. La Roche ,  Jeffrey Napper ,  Burjiz Pithawala

    IPC: H04L12/46 ,  H04L29/06 ,  H04L12/70 ,  H04L29/12 ,  H04L12/725 ,  H04L12/715

    Abstract: A method is provided in one example embodiment and includes receiving at a network element an encapsulated packet including an encapsulation header, in which the encapsulation header includes an Analytics Proxy Function (“APF”) flag; determining whether the APF flag is set to a first value; if the APF flag is set to the first value, forwarding the encapsulated packet to a local APF instance associated with the network element, in which the encapsulated packet is processed by the local APF instance to replicate at least a portion of the encapsulated packet, construct a record of the encapsulated packet, or both; and if the APF flag is not set to the first value, omitting forwarding the encapsulated packet to the local APF instance associated with the network element. The local APF instance is implemented as a service function anchored at the forwarding element.

Patent Agency Ranking