公开(公告)号：US20170262523A1

公开(公告)日：2017-09-14

申请号：US15068754

申请日：2016-03-14

Applicant: Cisco Technology, Inc.

Inventor： Steve EPSTEIN ,  Ezra DARSHAN ,  Harel CAIN ,  Shali MOR

IPC: G06F17/30 ,  H04L29/08

CPC classification number: G06F16/285 ,  G06F16/23 ,  H04L63/0876 ,  H04L63/1483 ,  H04L67/1095 ,  H04L67/12

Abstract: In one embodiment, a device discovery system includes a data storage medium to store a clustered data structure including device signatures grouped according to clusters. Each device signature includes device information. Each cluster from a sub-set of the clusters has a different device name. The system also includes an input/output sub-system to receive, from a remote device, a first device signature describing information about a first device, and a processor to perform a decision process based on the clustered data structure with the first device signature as input yielding an output including a first device name or an indication that a name associated with the first device signature is unknown. The processor is operative to prepare a response message including data about the output. The input/output sub-system is operative to send the response message to the remote device.

公开(公告)号：US20210294820A1

公开(公告)日：2021-09-23

申请号：US17343379

申请日：2021-06-09

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Steve EPSTEIN ,  Ezra DARSHAN ,  Harel CAIN ,  Shali MOR

IPC: G06F16/28 ,  H04L29/08 ,  G06F16/23 ,  H04L29/06

Abstract: In one embodiment, a device discovery system includes a data storage medium to store a clustered data structure including device signatures grouped according to clusters. Each device signature includes device information. Each cluster from a sub-set of the clusters has a different device name. The system also includes an input/output sub-system to receive, from a remote device, a first device signature describing information about a first device, and a processor to perform a decision process based on the clustered data structure with the first device signature as input yielding an output including a first device name or an indication that a name associated with the first device signature is unknown. The processor is operative to prepare a response message including data about the output. The input/output sub-system is operative to send the response message to the remote device.

公开(公告)号：US20170374082A1

公开(公告)日：2017-12-28

申请号：US15189023

申请日：2016-06-22

Applicant: Cisco Technology, Inc.

Inventor： Hillel SOLOW ,  Steve EPSTEIN ,  Ezra DARSHAN ,  Arnold ZUCKER ,  Shali MOR ,  Asaf COHEN

IPC: H04L29/06

Abstract: In one embodiment, a method includes for each one time period of a plurality of time periods performing a weighted random selection of a first set of intrusion detection/protection system rules from a plurality of rules, each rule of the plurality of rules having an associated probability of selection, preparing a packet inspection plan including the first set of intrusion detection/protection system rules, and sending the packet inspection plan to a network distribution device to inspect packets according to the packet inspection plan. Related apparatus and methods are also described.