公开(公告)号：US20220038471A1

公开(公告)日：2022-02-03

申请号：US17026093

申请日：2020-09-18

Applicant: Cisco Technology, Inc.

Inventor： Travis Nathan Sugarbaker ,  Srivatsa Shripathi Modambu

IPC: H04L29/06

Abstract: This disclosure describes techniques for identifying the criticality of an asset in a network. In an example method, a first security metric of a first asset in a network, as well as network data that identifies data flows associated with a second asset in the network are identified. The second asset is a nearest neighbor of the first asset in the network. The method includes determining, based on the network data, a number of hosts in the network that exchanged data traffic with the second asset during a time period and generating a second security metric of the second asset based on the first security metric and the number of hosts. A security policy of the second asset is adjusted based on the security metric.

公开(公告)号：US11503048B2

公开(公告)日：2022-11-15

申请号：US17026093

申请日：2020-09-18

Applicant: Cisco Technology, Inc.

Inventor： Travis Nathan Sugarbaker ,  Srivatsa Shripathi Modambu

IPC: H04L9/40

Abstract: This disclosure describes techniques for identifying the criticality of an asset in a network. In an example method, a first security metric of a first asset in a network, as well as network data that identifies data flows associated with a second asset in the network are identified. The second asset is a nearest neighbor of the first asset in the network. The method includes determining, based on the network data, a number of hosts in the network that exchanged data traffic with the second asset during a time period and generating a second security metric of the second asset based on the first security metric and the number of hosts. A security policy of the second asset is adjusted based on the security metric.

公开(公告)号：US12244616B2

公开(公告)日：2025-03-04

申请号：US17986661

申请日：2022-11-14

Applicant: Cisco Technology, Inc.

Inventor： Travis Nathan Sugarbaker ,  Srivatsa Shripathi Modambu

IPC: H04L9/40

Abstract: This disclosure describes techniques for identifying the criticality of an asset in a network. In an example method, a first security metric of a first asset in a network, as well as network data that identifies data flows associated with a second asset in the network are identified. The second asset is a nearest neighbor of the first asset in the network. The method includes determining, based on the network data, a number of hosts in the network that exchanged data traffic with the second asset during a time period and generating a second security metric of the second asset based on the first security metric and the number of hosts. A security policy of the second asset is adjusted based on the security metric.

公开(公告)号：US20230072859A1

公开(公告)日：2023-03-09

申请号：US17986661

申请日：2022-11-14

Applicant: Cisco Technology, Inc.

Inventor： Travis Nathan Sugarbaker ,  Srivatsa Shripathi Modambu

IPC: H04L9/40

Abstract: This disclosure describes techniques for identifying the criticality of an asset in a network. In an example method, a first security metric of a first asset in a network, as well as network data that identifies data flows associated with a second asset in the network are identified. The second asset is a nearest neighbor of the first asset in the network. The method includes determining, based on the network data, a number of hosts in the network that exchanged data traffic with the second asset during a time period and generating a second security metric of the second asset based on the first security metric and the number of hosts. A security policy of the second asset is adjusted based on the security metric.