Abstract: In some examples, a system applies an inline detection of a write of data in a storage, the inline detection to detect potential data encryption of the data. In response to an indication of the potential data encryption, the system creates a first object that represents a first version of the data, and applies a further analysis to determine whether the potential data encryption constitutes unauthorized data encryption, the further analysis based on the first object and a second object that represents a second version of the data that is prior to the first version of the data.

Abstract: The system receives, from a client, a first request for a document which is parsed based on a syntax. The system parses and returns an initial number of lines of the document, thereby allowing the client to display the parsed initial number of lines in a visible window. Subsequent to successfully parsing a remainder of the lines, the system stores a fully-parsed version. Responsive to a scrolling action in the visible window, the system provides a relevant portion of an unparsed document associated with the first request. Responsive to detecting a termination of the scrolling action, the system receives a second request for parsed lines corresponding to a first set of lines. The system returns the corresponding parsed lines, thereby allowing the client to display the corresponding parsed lines in the visible window.

Abstract: The system determines a syntax for each line in a switch configuration file. The system creates, based on the syntax, one or more groups of line specifications, wherein each line specification in a group includes matching terms or values specified by a user. The system generates and deploys a new configuration to a first device. The system obtains one or more changed lines by determining a difference between a pre-deployment state and a post-deployment state. The system identifies, based on the created groups of line specifications and a set of criteria, other devices to which to deploy the new configuration. A user selects a device of the identified other devices to which to deploy the new configuration. The system deploys the new configuration to the selected device and validates the deployed new configuration. The system displays a second list which indicates whether the deployed new configuration is successfully validated.

Abstract: An example method is described for monitoring a network. The method includes detecting that a network attribute has been updated at a network device. The method further includes selecting, based in part on the updated network attribute, a set of network functionality tests from a group of network functionality tests. The method further includes executing the set of network functionality tests. The method further includes receiving information describing functionality of the network during the set of network functionality tests at the network device. The method further includes determining results of the set of network functionality tests based on the information describing functionality of the network. The method further includes calculating a network functionality score based, in part, on the results of the set of network functionality tests.

Abstract: A method and apparatus for use in a trusted network environment together or separately employ an implicit attestation that a requesting computing resource is in a trusted state before access to a network resource is granted. The method includes: verifying that a requesting computing resource is in a trusted state; accessing the private key using the released key authorization value; and creating a digital signature for the requesting device from the accessed private key. The apparatus may implement the method.

Abstract: A network configuration development environment is disclosed. In particular, an editor configured to interface with multiple network devices simultaneously, to view and adjust their device configuration settings, is provided. The network configuration development environment allows a system administrator to manage configuration definitions (e.g., run-time or start-up device configuration parameters) relative to a plurality of network devices simultaneously to achieve correctness and appropriate consistency for each of those devices in a network infrastructure. The network development environment may include an ability to apply changes directly to one or more network devices or to apply changes to stored “configuration files” that are associated with individual devices.

Abstract: Systems and methods are provided for managing network devices using policy graph representations. In some embodiments, the method includes receiving configurations for a plurality of network devices; extracting one or more policies from the configurations; extracting a label hierarchy from the configurations, the label hierarchy describing an organization of nodes in a network comprising the network devices; generating a connectivity of a network comprising the network devices based on the one or more policies and the label hierarchy; generating a policy graph representation of the connectivity of the network; and displaying the policy graph representation of the connectivity to a user.

Abstract: An event analysis system in a network is provided. During operation, the system can determine a set of monitoring elements in the network. A respective monitoring element can facilitate monitoring of events in the network. The system can then represent a respective monitoring element as a node of a graph. If the corresponding monitoring elements are related based on a relationship definition, the system can connect a node pair of the graph with an edge. The system can activate a set of nodes of the graph corresponding to an issue in the network based on notifications from one or more monitoring agents on one or more switches in the network. Subsequently, the system can determine a root cause of the issue by traversing the set of activated nodes of the graph and determine a recovery action for mitigating the root cause.

Abstract: Systems and methods are provided for self-tuning networks using distributed analytics for network devices. In some embodiments, the method includes instantiating, in a network device, an agent for a network protocol, wherein the agent: monitors a performance parameter for a resource of the network protocol, and responsive to a value of the performance parameter exceeding a threshold value, reports an anomaly for the network protocol to a remote management server, receives a new threshold value from the remote management server, the new threshold value being based on the anomaly reported by the network device, and anomalies reported by other network devices according to respective thresholds employed by the network devices for the performance parameter for the resource of the network protocol, and replaces the threshold value of the performance parameter for the resource of the network protocol with the new threshold value received from the remote management server.

Abstract: Examples described herein configure a network based on a centroid configuration of a group of network entities. Examples herein include classifying a plurality of network entities into a classification, wherein the network entities are configured on a plurality of network devices that are connected to the network. Examples herein include, based on the classification of the network entities, grouping the network entities into a plurality of groups. Examples herein include determining, for each of the groups, a centroid configuration of the network entities in the group. Examples herein include sending instructions to configure the network according to the centroid configuration of a selected one of the groups, wherein at least one network entity is configured according to the centroid configuration of the selected group in response to receiving the instructions.

Abstract: An event analysis system in a network is provided. During operation, the system can determine a set of monitoring elements in the network. A respective monitoring element can facilitate monitoring of events in the network. The system can then represent a respective monitoring element as a node of a graph. If the corresponding monitoring elements are related based on a relationship definition, the system can connect a node pair of the graph with an edge. The system can activate a set of nodes of the graph corresponding to an issue in the network based on notifications from one or more monitoring agents on one or more switches in the network. Subsequently, the system can determine a root cause of the issue by traversing the set of activated nodes of the graph and determine a recovery action for mitigating the root cause.

Abstract: Disclosed is a method and system to obtain a structured grammar, based on a restricted language (e.g., a known subset of a full language such as a computer language) that may assist with automated parsing and correlation of configuration files conforming to the structured grammar. Once obtained, a plurality of different network device configuration documents (e.g., config file information) may be parsed to create a scaffold view using slots for correlated data across the plurality of different network devices. For example, the scaffold view may include populated branches of the scaffold representative of the plurality of different network device configuration documents. Maintaining a correlation of source data to changes in a single view based on the scaffolding may be used to comprehensively view and edit configuration information.

Abstract: Embodiments herein relate to transmitting specific traffic along a blocked link. A status of links between switches of a network is monitored. The status of the links is one of blocked and non-blocked. A blocked link is not used by a Spanning Tree Protocol (STP). At least one of the network switches is configured to transmit the specific traffic along the blocked link.

Abstract: Examples described herein configure a network based on a centroid configuration of a group of network entities. Examples herein include classifying a plurality of network entities into a classification, wherein the network entities are configured on a plurality of network devices that are connected to the network. Examples herein include, based on the classification of the network entities, grouping the network entities into a plurality of groups. Examples herein include determining, for each of the groups, a centroid configuration of the network entities in the group.

Abstract: Embodiments herein relate to transmitting specific traffic along a blocked link. A status of links between switches of a network is monitored. The status of the links is one of blocked and non-blocked. A blocked link is not used by a Spanning Tree Protocol (STP). At least one of the network switches is configured to transmit the specific traffic along the blocked link.

Abstract: A network configuration change validation environment is disclosed. In particular, this disclosure is related to an interface to initiate automated test actions (e.g., network monitoring commands, application monitoring commands, etc.) and to view results in an efficient manner to support a network communication infrastructure. In one example, results of a set of commands executed prior to a configuration change may serve as a baseline and one or more results of the same set of commands may be intelligently compared to the baseline to identify any potential issues that have arisen. For example, as a result of a specific network configuration change or application update. The disclosed network change validation command initiator and validation report viewer represent part of an overall network configuration change validation environment that includes automated techniques such that it may be used within a given change window.

Abstract: A method and apparatus for use in a trusted network environment together or separately employ an implicit attestation that a requesting computing resource is in a trusted state before access to a network resource is granted. The method includes: verifying that a requesting computing resource is in a trusted state; accessing the private key using the released key authorization value; and creating a digital signature for the requesting device from the accessed private key. The apparatus may implement the method.

Abstract: An example method is described for monitoring a network. The method includes detecting that a network attribute has been updated at a network device. The method further includes selecting, based in part on the updated network attribute, a set of network functionality tests from a group of network functionality tests. The method further includes executing the set of network functionality tests. The method further includes receiving information describing functionality of the network during the set of network functionality tests at the network device. The method further includes determining results of the set of network functionality tests based on the information describing functionality of the network. The method further includes calculating a network functionality score based, in part, on the results of the set of network functionality tests.

Abstract: Example implementations disclosed herein can be used to generate composite network policy graphs based on multiple network policy graphs input by network users that may have different goals for the network. The resulting composite network policy graph can be used to program a network so that it meets the requirements necessary to achieve the goals of at least some of the network users. In one example implementation, a method can include receiving multiple network policy graphs, generating composite endpoint groups based on relationships between endpoint groups and policy graph sources, generating composite paths based on the relationships between the endpoints and the network policy graphs, generating a composite network policy graph based on the composite endpoint groups and the composite paths, and analyzing the composite network policy graph to determine conflicts or errors.

Abstract: A network configuration development environment is disclosed. In particular, an editor configured to interface with multiple network devices simultaneously, to view and adjust their device configuration settings, is provided. The network configuration development environment allows a system administrator to manage configuration definitions (e.g., run-time or start-up device configuration parameters) relative to a plurality of network devices simultaneously to achieve correctness and appropriate consistency for each of those devices in a network infrastructure. The network development environment may include an ability to apply changes directly to one or more network devices or to apply changes to stored “configuration files” that are associated with individual devices.