公开(公告)号：US20230388346A1

公开(公告)日：2023-11-30

申请号：US17752987

申请日：2022-05-25

Applicant: Cisco Technology, Inc.

Inventor： Ashutosh Kulshreshtha ,  Dhruv Raithatha ,  Walter T. Hulick, JR.

IPC: H04L9/40 ,  G06K9/62

CPC classification number: H04L63/20 ,  H04L63/1433 ,  G06K9/6223

Abstract: A system of one embodiment that provides proactive security policy suggestions for applications based on the applications' software composition and runtime behavior. The system includes a memory and a processor. The system is operable to access data that represents one or more features of an application. The application is running on one or more nodes in a computer network, and a feature indicates an application library of the node. The system is operable to apply a clustering algorithm to the data to generate a plurality of cluster sets. The system is operable to determine a security policy to apply to a cluster set of the plurality of cluster sets and apply the security policy to an application whose features are represented by the data in the cluster set.