US 10,567,441 B2Granted

Distributed security system

AssigneeCisco Technology, Inc.

InventorsNagendra Kumar Nainar, Rajiv Asati, Carlos M. Pignataro

Life of this patent

Estimating the term…

Loading patent…

Abstract

In one embodiment, a system includes a first host computer including a host interface configured to receive traffic from a domain ingress node of a first domain, and processing machinery configured to instantiate worker nodes, instantiate a master node and a security gateway agent on the master node, instantiate a plurality of security clients on the worker nodes, wherein each worker node includes at least one security client, wherein each security client is configured to monitor at least part of the traffic being forwarded in the one worker node for malicious traffic, and report a first data item about the malicious traffic to the security gateway agent, and wherein the security gateway agent is configured to forward a second data item about the malicious traffic to a security server to determine at least one security policy to mitigate the malicious traffic, and to be enforced by a node.

Claims20

Dependent claims

A system comprising a first host computer including:

a host interface configured to receive traffic from a first domain ingress node of a first domain;
and
processing machinery configured to:
instantiate a plurality of worker nodes, each one worker node of the plurality of worker nodes including a plurality of software applications;
instantiate a master node and a security gateway agent on the master node;
and
instantiate a plurality of security clients on the plurality of worker nodes, wherein each one worker node of the plurality of worker nodes includes at least one security client of the plurality of security clients,
wherein each one security client of the plurality of security clients is configured to:
monitor at least part of the traffic being forwarded in the one worker node in which the one security client is instantiated for malicious traffic;
and report a first data item about the malicious traffic to the security gateway agent, and
wherein the security gateway agent is configured to receive the first data item about the malicious traffic from the one security client and forward a second data item about the malicious traffic to a security server, external to the first host computer, for the security server to determine at least one security policy, to mitigate the malicious traffic, and to be enforced by at least one domain ingress node external to the host computer and/or by a node external to the first domain.

8 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/870,957Filed 14 Jan 2018
Published: US 2019/0222612 A118 Jul 2019
Granted: 18 Feb 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification11 codes

H04L 63/205
For managing network security; network security policies in general: involving negotiation or determination of the one or more network security…
H04L 12/4633
Interconnection of networks: interconnection of networks using encapsulation techniques, e.g. tunneling
H04L 61/2592
Translation of Internet protocol [IP] addresses: using tunnelling or encapsulation
H04L 63/0218
Architectural arrangements, e.g. perimeter networks or demilitarized zones: distributed architectures, e.g. distributed firewalls