Automatic segment naming in microsegmentation
AssigneeZscaler, Inc.
InventorsJohn O'Neil, Peter Smith
Life of this patent
Estimating the term…
Abstract
Systems and methods include obtaining network communication information about hosts in a network and applications executed on the hosts; automatically generating one or more microsegments in the network based on analysis of the obtained network communication information, wherein each microsegment of the one or more microsegments is a grouping of resources including the hosts and the applications executed on the hosts that have rules for network communication; automatically generating a meaningful name for the one or more microsegments based on a plurality of techniques applied to information associated with the hosts; and displaying the automatically generated one or more microsegments and the corresponding automatically generated meaningful name.
Claims18
A non-transitory computer-readable storage medium having computer-readable code stored thereon for programming a processing device to perform steps of:
- obtaining network communication information about hosts in a network and applications executed on the hosts;
- automatically generating one or more microsegments in the network based on analysis of the obtained network communication information, wherein each microsegment of the one or more microsegments is a grouping of resources including the hosts and the applications executed on the hosts that have rules for network communication;
- automatically configuring and applying rules for each of one or more desired behaviors in one or more microsegments, wherein the rules are executed by agents on the hosts;
- automatically generating a meaningful name for the one or more microsegments based on a plurality of techniques applied to information associated with the hosts, wherein a technique of the plurality of techniques includes use of a string similarity among hostnames of the hosts in a given microsegment, and wherein the string is modified by utilizing a second substring and/or appending something random to the string;
- responsive to a first microsegments generated name being similar to a second microsegments name, forcing the second microsegment to change its name, this process being repeated until the naming is stabilized;
- and
- displaying the automatically generated one or more microsegments and the corresponding automatically generated meaningful name.
A method comprising:
- obtaining network communication information about hosts in a network and applications executed on the hosts;
- automatically generating one or more microsegments in the network based on analysis of the obtained network communication information, wherein each microsegment of the one or more microsegments is a grouping of resources including the hosts and the applications executed on the hosts that have rules for network communication;
- automatically configuring and applying rules for each of one or more desired behaviors in one or more microsegments, wherein the rules are executed by agents on the hosts;
- automatically generating a meaningful name for the one or more microsegments based on a plurality of techniques applied to information associated with the hosts, wherein a technique of the plurality of techniques includes use of a string similarity among hostnames of the hosts in a given microsegment, and wherein the string is modified by utilizing a second substring and/or appending something random to the string;
- responsive to a first microsegments generated name being similar to a second microsegments name, forcing the second microsegment to change its name, this process being repeated until the naming is stabilized;
- and
- displaying the automatically generated one or more microsegments and the corresponding automatically generated meaningful name.
A server comprising:
- one or more processors;
- and
- memory comprising instructions that, when executed, cause the one or more processors to
- obtain network communication information about hosts in a network and applications executed on the hosts,
- automatically generate one or more microsegments in the network based on analysis of the obtained network communication information, wherein each microsegment of the one or more microsegments is a grouping of resources including the hosts and the applications executed on the hosts that have rules for network communication,
- automatically configuring and applying rules for each of one or more desired behaviors in one or more microsegments, wherein the rules are executed by agents on the hosts,
- automatically generate a meaningful name for the one or more microsegments based on a plurality of techniques applied to information associated with the hosts, wherein a technique of the plurality of techniques includes use of a string similarity among hostnames of the hosts in a given microsegment, and wherein the string is modified by utilizing a second substring and/or appending something random to the string,
- responsive to a first microsegments generated name being similar to a second microsegments name force the second microsegment to change its name, this process being repeated until the naming is stabilized, and
- cause display of the automatically generated one or more microsegments and the corresponding automatically generated meaningful name.
Dependencies are inferred from the claim text.