公开(公告)号：US10121103B2

公开(公告)日：2018-11-06

申请号：US15374571

申请日：2016-12-09

申请人： Cisco Technology, Inc.

发明人： Hugo Mike Latapie ,  Enzo Fenoglio ,  Joseph T. Friel ,  Andre Surcouf ,  Pascal Thubert

IPC分类号： G06K9/00 ,  G06N3/08 ,  G06T7/246

摘要： In one embodiment, a method includes receiving training data, the training data including training video data representing video of a location in a quiescent state, training a neural network using the training data to obtain a plurality of metrics, receiving current data, the current data including current video data representing video of the location at a current time period, generating a reconstruction error based on the plurality of metrics and the current video data in the embedded space, and generating, in response to determining that the reconstruction error is greater than a threshold, a notification indicative of the location being in a non-quiescent state.

公开(公告)号：US09936438B2

公开(公告)日：2018-04-03

申请号：US15202161

申请日：2016-07-05

申请人： CISCO TECHNOLOGY, INC.

发明人： Paras Jain ,  Vimal Srivastava ,  Chitresh Yadav ,  Ravi K. Guntupalli

IPC分类号： H04B7/00 ,  H04W40/24 ,  H04L29/08 ,  H04L29/06 ,  H04W76/02 ,  H04W74/00 ,  H04L12/741 ,  H04L29/12 ,  H04W4/02 ,  H04W8/04 ,  H04W72/04 ,  H04W80/10 ,  H04W88/02 ,  H04W88/08 ,  H04W88/16

CPC分类号： H04W40/248 ,  H04L45/745 ,  H04L61/203 ,  H04L67/14 ,  H04L69/28 ,  H04W4/025 ,  H04W8/04 ,  H04W72/0493 ,  H04W74/004 ,  H04W76/18 ,  H04W80/10 ,  H04W88/02 ,  H04W88/08 ,  H04W88/16

摘要： An example method is provided in one example embodiment and may include receiving a session request for a user equipment (UE) at a node, wherein the session request includes a timestamp for the UE and a retry count; determining if the session request is a stray session request; and maintaining session information for an existing session for the UE at the node if the session request is a stray session request. The method can include identifying the received session request as a stray request if the timestamp received in the request is less than a timestamp stored for an existing session for the UE. The method can also include identifying the received request as a stray request if the timestamp received is equal to the timestamp stored for the existing session and if the retry count received is less than or equal to a retry count stored for the session.

公开(公告)号：US09237140B1

公开(公告)日：2016-01-12

申请号：US13788638

申请日：2013-03-07

申请人： Cisco Technology, Inc.

发明人： Eric Lerner ,  Isaac Eleftheriadis ,  Ruixiang Ray Liu ,  Ming He

IPC分类号： G06F17/00 ,  H04L29/06

CPC分类号： H04L63/08 ,  H04L63/104

摘要： A user associated with a first organization is authenticated, via a meeting server, for participation in an online session hosted by a second organization. It is determined, via the meeting server, that the first organization requires the user to accept a first policy. It is also determined, via the meeting server, that the second organization requires the user to accept a second policy. The first policy and the second policy are presented to the user for acceptance.

摘要翻译： 与第一组织相关联的用户通过会议服务器被认证，用于参与由第二组织主持的在线会话。 通过会议服务器确定第一个组织要求用户接受第一个策略。 还通过会议服务器确定第二组织要求用户接受第二策略。 第一个政策和第二个政策提交给用户接受。

公开(公告)号：US08259612B2

公开(公告)日：2012-09-04

申请号：US11423375

申请日：2006-06-09

申请人： Yiqun Cai ,  Toerless Eckert ,  Lorenzo Vicisano ,  Arjen Boers ,  Daniel A. Alvarez

发明人： Yiqun Cai ,  Toerless Eckert ,  Lorenzo Vicisano ,  Arjen Boers ,  Daniel A. Alvarez

IPC分类号： H04L12/28

CPC分类号： H04L45/028 ,  H04L12/18 ,  H04L12/4641 ,  H04L45/16 ,  H04L45/36 ,  H04L45/54 ,  H04L45/745

摘要： A method of routing multicast traffic in a computer network is disclosed. The method comprises associating a plurality of multicast group addresses on a network device with respective multicast routing topologies. A network device and a network are also disclosed.

摘要翻译： 公开了一种在计算机网络中路由多播流量的方法。 该方法包括将网络设备上的多个多播组地址与相应的多播路由拓扑结合起来。 还公开了网络设备和网络。

公开(公告)号：US20070206765A1

公开(公告)日：2007-09-06

申请号：US11359252

申请日：2006-02-21

申请人： Shmuel Shaffer ,  Labhesh Patel ,  Cullen Jennings ,  Shantanu Sarkar

发明人： Shmuel Shaffer ,  Labhesh Patel ,  Cullen Jennings ,  Shantanu Sarkar

IPC分类号： H04M3/00 ,  H04M5/00

CPC分类号： H04M3/5183 ,  H04M2203/6009

摘要： A method for granting access to secure information includes receiving from a caller a call for connection with one of a plurality of agents, distributing the call to the agent of the plurality of agents, initiating an active communication session between the caller and the agent for handling the call, and granting to the agent access to the secure caller information using a plurality of access authentication information that includes an active communication session between the caller and the agent.

摘要翻译： 用于授予对安全信息的访问的方法包括从呼叫者接收与多个代理之一的连接的呼叫，将呼叫分配给多个代理的代理，发起主叫方和代理之间的主动通信会话以进行处理 呼叫，并且使用包括呼叫者和代理之间的活动通信会话的多个接入认证信息来授权代理对安全呼叫者信息的访问。

公开(公告)号：US10171328B2

公开(公告)日：2019-01-01

申请号：US14304676

申请日：2014-06-13

申请人： Cisco Technology, Inc.

发明人： Davide Bergamasco ,  Andrea Baldini ,  Valentina Alaria ,  Flavio Bonomi ,  Rong Pan

IPC分类号： H04L12/825 ,  H04L12/26 ,  H04L12/801 ,  H04L12/835

摘要： The present invention provides improved methods and devices for managing network congestion. Preferred implementations of the invention allow congestion to be pushed from congestion points in the core of a network to reaction points, which may be edge devices, host devices or components thereof. Preferably, rate limiters shape individual flows of the reaction points that are causing congestion. Parameters of these rate limiters are preferably tuned based on feedback from congestion points, e.g., in the form of backward congestion notification (“BCN”) messages. In some implementations, such BCN messages include congestion change information and at least one instantaneous measure of congestion. The instantaneous measure(s) of congestion may be relative to a threshold of a particular queue and/or relative to a threshold of a buffer that includes a plurality of queues.

公开(公告)号：US10148500B2

公开(公告)日：2018-12-04

申请号：US14834915

申请日：2015-08-25

申请人： Cisco Technology, Inc.

发明人： Christopher C. Marino ,  Juergen Brendel ,  Patrick Amor ,  Pritesh Kothari

IPC分类号： G06Q30/04 ,  H04L12/24 ,  H04L12/741 ,  H04L29/06 ,  H04L12/46 ,  H04L12/931 ,  H04L29/08 ,  H04L12/721 ,  H04L12/713 ,  H04L12/715

摘要： A virtual network is overlaid upon physical networks. The virtual network is a layer-2 network that expands an organization's LAN using virtual MAC addresses. A VN device driver shim intercepts LAN packets and their virtual MAC and IP addresses and encapsulates them with physical packets. As new nodes are created, a VN switch table is expanded so that all nodes on the virtual network can reach the new node. A copy of the VN switch table is stored on each node by a virtual network management daemon on the node. A VN configuration controller in a central server updates the VN switch tables. Organizations can expand their virtual network as nodes are created at remote cloud computing providers without action by the staff at the cloud computing provider. Hybrid cloud virtual networks include on-premises physical and virtual-machine nodes, and off-premises guest nodes and instances.

公开(公告)号：US09245120B2

公开(公告)日：2016-01-26

申请号：US13942360

申请日：2013-07-15

申请人： Cisco Technology, Inc.

发明人： Oliver Friedrichs ,  Alfred Huger ,  Zulfikar Ramzan

IPC分类号： G06F12/14 ,  G06F21/56

CPC分类号： G06F21/565 ,  G06F17/30091 ,  G06F17/30368 ,  G06F21/552 ,  G06F21/56 ,  G06F21/562 ,  G06F21/564 ,  G06F2221/033

摘要： The present invention relates to the security of general purpose computing devices, such as laptop or desktop PCs, and more specifically to the detection of malicious software (malware) on a general purpose computing device. A challenge in detecting malicious software is that files are typically scanned for the presence of malicious intent only once (and subsequent rescanning is typically performed in a simplistic manner). Existing methods in the art do not address how to most effectively rescan collections of files in a way that tries to optimize performance and efficacy. Accordingly we present novel methods, components, and systems for intelligently rescanning file collections and thereby enabling retroactive detection of malicious software and also retroactive identification of clean software. These methods may also be useful if additional information is now available regarding a file that might be useful to an end-user or an administrator, even though the file's core disposition might not have changed. More specifically, we describe methods, components, and systems that perform data analytics to intelligently rescan file collections for the purpose of retroactively identifying malware and retroactively identifying clean files. The disclosed invention provides a significant improvement with regard to efficacy and performance compared to previous approaches.

摘要翻译： 本发明涉及通用计算设备（例如膝上型或台式PC）的安全性，更具体地涉及在通用计算设备上检测恶意软件（恶意软件）。 检测恶意软件的一个挑战是通常只扫描文件一次存在恶意意图（后来的重新扫描通常以简单的方式执行）。 本领域中现有的方法并不涉及如何以尝试优化性能和功效的方式最有效地重新扫描文件集合。 因此，我们提出了用于智能重新扫描文件集合的新方法，组件和系统，从而实现恶意软件的追溯检测，以及清理软件的追溯识别。 如果有关可能对最终用户或管理员可能有用的文件的附加信息，即使该文件的核心配置可能没有更改，这些方法也可能很有用。 更具体地说，我们描述执行数据分析以智能地重新扫描文件集合的方法，组件和系统，目的是追溯识别恶意软件和追溯识别干净的文件。 与先前的方法相比，所公开的发明提供了关于功效和性能的显着改进。

公开(公告)号：US08260908B2

公开(公告)日：2012-09-04

申请号：US11280539

申请日：2005-11-16

申请人： Steve Chen-Lin Chang ,  L. Alexander Clemm ,  Petre Dini ,  Shyyunn Sheran Lin

发明人： Steve Chen-Lin Chang ,  L. Alexander Clemm ,  Petre Dini ,  Shyyunn Sheran Lin

IPC分类号： G06F15/173

CPC分类号： H04L41/00

摘要： Techniques for system (syslog) messages are provided. As syslog messages are generated a dual sequence number is maintained for each syslog message. The first sequence number is consistent for each syslog message and represents a total number of syslog messages received. The second sequence number is maintained as a total message count for a specific session for which a syslog message is assigned.

摘要翻译： 提供了系统（syslog）消息的技术。 当系统日志消息生成时，为每个syslog消息维护双序列号。 第一个序列号对于每个syslog消息是一致的，并且表示接收到的系统日志消息的总数。 第二个序列号被保持为分配了syslog消息的特定会话的总消息计数。

公开(公告)号：US07792131B1

公开(公告)日：2010-09-07

申请号：US12401577

申请日：2009-03-10

申请人： Sha Ma ,  Karthik Mandakolathur

发明人： Sha Ma ,  Karthik Mandakolathur

IPC分类号： H04L12/28

CPC分类号： H04L47/6205 ,  H04L47/215 ,  H04L47/32 ,  H04L47/50

摘要： In one embodiment, separate rate meters are maintained for each flow enqueued an increased at a target rate while a packet from the flow occupies the head of a shared transmit queue. The meter value is decreased by the packet length when a packet in enqueued or dropped. The next packet that occupies the head of the shared transmit queue is dropped if the meter value corresponding to the flow is greater than a threshold.

摘要翻译： 在一个实施例中，针对以目标速率增加的每个流入队列保持单独的速率计，而来自流的分组占据共享发送队列的头部。 当数据包进入或删除时，仪表值减少包长度。 如果对应于流量的仪表值大于阈值，占用共享发送队列头部的下一个数据包将被丢弃。