Patents by Inventor Sebastien Gay
Sebastien Gay has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 11240259Abstract: In one embodiment, a networking device at an edge of a network generates a first set of feature vectors using information regarding one or more characteristics of host devices in the network. The networking device forms the host devices into device clusters dynamically based on the first set of feature vectors. The networking device generates a second set of feature vectors using information regarding traffic associated with the device clusters. The networking device models interactions between the device clusters using a plurality of anomaly detection models that are based on the second set of feature vectors.Type: GrantFiled: July 11, 2019Date of Patent: February 1, 2022Assignee: Cisco Technology, Inc.Inventors: Jean-Philippe Vasseur, Sébastien Gay, Grégory Mermoud, Pierre-André Savalle, Alexandre Honoré, Fabien Flacher
-
Patent number: 11140187Abstract: In one embodiment, a device in a network receives traffic records indicative of network traffic between different sets of host address pairs. The device identifies one or more address grouping constraints for the sets of host address pairs. The device determines address groups for the host addresses in the sets of host address pairs based on the one or more address grouping constraints. The device provides an indication of the address groups to an anomaly detector.Type: GrantFiled: July 22, 2019Date of Patent: October 5, 2021Assignee: Cisco Technology, Inc.Inventors: Laurent Sartran, Sébastien Gay, Pierre-André Savalle, Grégory Mermoud, Jean-Philippe Vasseur
-
Patent number: 10701092Abstract: In one embodiment, a device in a network obtains characteristic data regarding one or more traffic flows in the network. The device incrementally estimates an amount of noise associated with a machine learning feature using bootstrapping. The machine learning feature is derived from the sampled characteristic data. The device applies a filter to the estimated amount of noise associated with the machine learning feature, to determine a value for the machine learning feature. The device identifies a network anomaly that exists in the network by using the determined value for the machine learning feature as input to a machine learning-based anomaly detector. The device causes performance of an anomaly mitigation action based on the identified network anomaly.Type: GrantFiled: November 30, 2016Date of Patent: June 30, 2020Assignee: Cisco Technology, Inc.Inventors: Laurent Sartran, Sébastien Gay, Jean-Philippe Vasseur, Grégory Mermoud
-
Patent number: 10659333Abstract: In one embodiment, a device in a network determines cluster assignments that assign traffic data regarding traffic in the network to activity level clusters based on one or more measures of traffic activity in the traffic data. The device uses the cluster assignments to predict seasonal activity for a particular subset of the traffic in the network. The device determines an activity level for new traffic data regarding the particular subset of traffic in the network. The device detects a network anomaly by comparing the activity level for the new traffic data to the predicted seasonal activity.Type: GrantFiled: June 21, 2016Date of Patent: May 19, 2020Assignee: Cisco Technology, Inc.Inventors: Laurent Sartran, Pierre-André Savalle, Jean-Philippe Vasseur, Grégory Mermoud, Javier Cruz Mota, Sébastien Gay
-
Publication number: 20190342321Abstract: In one embodiment, a device in a network receives traffic records indicative of network traffic between different sets of host address pairs. The device identifies one or more address grouping constraints for the sets of host address pairs. The device determines address groups for the host addresses in the sets of host address pairs based on the one or more address grouping constraints. The device provides an indication of the address groups to an anomaly detector.Type: ApplicationFiled: July 22, 2019Publication date: November 7, 2019Inventors: Laurent Sartran, Sébastien Gay, Pierre-André Savalle, Grégory Mermoud, Jean-Philippe Vasseur
-
Patent number: 10469511Abstract: In one embodiment, a device in a network receives feedback regarding an anomaly reporting mechanism used by the device to report network anomalies detected by a plurality of distributed learning agents to a user interface. The device determines an anomaly assessment rate at which a user of the user interface is expected to assess reported anomalies based in part on the feedback. The device receives an anomaly notification regarding a particular anomaly detected by a particular one of the distributed learning agents. The device reports, via the anomaly reporting mechanism, the particular anomaly to the user interface based on the determined anomaly assessment rate.Type: GrantFiled: July 15, 2016Date of Patent: November 5, 2019Assignee: Cisco Technology, Inc.Inventors: Jean-Philippe Vasseur, Grégory Mermoud, Javier Cruz Mota, Laurent Sartran, Sébastien Gay
-
Publication number: 20190334941Abstract: In one embodiment, a networking device at an edge of a network generates a first set of feature vectors using information regarding one or more characteristics of host devices in the network. The networking device forms the host devices into device clusters dynamically based on the first set of feature vectors. The networking device generates a second set of feature vectors using information regarding traffic associated with the device clusters. The networking device models interactions between the device clusters using a plurality of anomaly detection models that are based on the second set of feature vectors.Type: ApplicationFiled: July 11, 2019Publication date: October 31, 2019Inventors: Jean-Philippe Vasseur, Sébastien Gay, Grégory Mermoud, Pierre-André Savalle, Alexandre Honoré, Fabien Flacher
-
Patent number: 10404727Abstract: In one embodiment, a networking device at an edge of a network generates a first set of feature vectors using information regarding one or more characteristics of host devices in the network. The networking device forms the host devices into device clusters dynamically based on the first set of feature vectors. The networking device generates a second set of feature vectors using information regarding traffic associated with the device clusters. The networking device models interactions between the device clusters using a plurality of anomaly detection models that are based on the second set of feature vectors.Type: GrantFiled: June 8, 2016Date of Patent: September 3, 2019Assignee: Cisco Technology, Inc.Inventors: Jean-Philippe Vasseur, Sébastien Gay, Grégory Mermoud, Pierre-André Savalle, Alexandre Honoré, Fabien Flacher
-
Patent number: 10404728Abstract: In one embodiment, a device in a network receives traffic records indicative of network traffic between different sets of host address pairs. The device identifies one or more address grouping constraints for the sets of host address pairs. The device determines address groups for the host addresses in the sets of host address pairs based on the one or more address grouping constraints. The device provides an indication of the address groups to an anomaly detector.Type: GrantFiled: September 13, 2016Date of Patent: September 3, 2019Assignee: Cisco Technology, Inc.Inventors: Laurent Sartran, Sébastien Gay, Pierre-André Savalle, Grégory Mermoud, Jean-Philippe Vasseur
-
Patent number: 10218729Abstract: In one embodiment, a device in a network receives sets of traffic flow features from an unsupervised machine learning-based anomaly detector. The sets of traffic flow features are associated with anomaly scores determined by the anomaly detector. The device ranks the sets of traffic flow features based in part on their anomaly scores. The device applies a genetic programming approach to the ranked sets of traffic flow features to generate new sets of traffic flow features. The genetic programming approach uses a fitness function that is based in part on the rankings of the sets of traffic flow features. The device specializes the anomaly detector to emphasize a particular type of anomaly using the new sets of traffic flow features.Type: GrantFiled: July 8, 2016Date of Patent: February 26, 2019Assignee: Cisco Technology, Inc.Inventors: Sébastien Gay, Laurent Sartran, Jean-Philippe Vasseur
-
Publication number: 20180152466Abstract: In one embodiment, a device in a network obtains characteristic data regarding one or more traffic flows in the network. The device incrementally estimates an amount of noise associated with a machine learning feature using bootstrapping. The machine learning feature is derived from the sampled characteristic data. The device applies a filter to the estimated amount of noise associated with the machine learning feature, to determine a value for the machine learning feature. The device identifies a network anomaly that exists in the network by using the determined value for the machine learning feature as input to a machine learning-based anomaly detector. The device causes performance of an anomaly mitigation action based on the identified network anomaly.Type: ApplicationFiled: November 30, 2016Publication date: May 31, 2018Inventors: Laurent Sartran, Sébastien Gay, Jean-Philippe Vasseur, Grégory Mermoud
-
Publication number: 20180077182Abstract: In one embodiment, a device in a network receives traffic records indicative of network traffic between different sets of host address pairs. The device identifies one or more address grouping constraints for the sets of host address pairs. The device determines address groups for the host addresses in the sets of host address pairs based on the one or more address grouping constraints. The device provides an indication of the address groups to an anomaly detector.Type: ApplicationFiled: September 13, 2016Publication date: March 15, 2018Inventors: Laurent Sartran, Sébastien Gay, Pierre-André Savalle, Grégory Mermoud, Jean-Philippe Vasseur
-
Publication number: 20180013776Abstract: In one embodiment, a device in a network receives sets of traffic flow features from an unsupervised machine learning-based anomaly detector. The sets of traffic flow features are associated with anomaly scores determined by the anomaly detector. The device ranks the sets of traffic flow features based in part on their anomaly scores. The device applies a genetic programming approach to the ranked sets of traffic flow features to generate new sets of traffic flow features. The genetic programming approach uses a fitness function that is based in part on the rankings of the sets of traffic flow features. The device specializes the anomaly detector to emphasize a particular type of anomaly using the new sets of traffic flow features.Type: ApplicationFiled: July 8, 2016Publication date: January 11, 2018Inventors: Sébastien Gay, Laurent Sartran, Jean-Philippe Vasseur
-
Publication number: 20170310691Abstract: In one embodiment, a networking device at an edge of a network generates a first set of feature vectors using information regarding one or more characteristics of host devices in the network. The networking device forms the host devices into device clusters dynamically based on the first set of feature vectors. The networking device generates a second set of feature vectors using information regarding traffic associated with the device clusters. The networking device models interactions between the device clusters using a plurality of anomaly detection models that are based on the second set of feature vectors.Type: ApplicationFiled: June 8, 2016Publication date: October 26, 2017Inventors: Jean-Philippe Vasseur, Sébastien Gay, Grégory Mermoud, Pierre-André Savalle, Alexandre Honoré, Fabien Flacher
-
Publication number: 20170279834Abstract: In one embodiment, a device in a network receives feedback regarding an anomaly reporting mechanism used by the device to report network anomalies detected by a plurality of distributed learning agents to a user interface. The device determines an anomaly assessment rate at which a user of the user interface is expected to assess reported anomalies based in part on the feedback. The device receives an anomaly notification regarding a particular anomaly detected by a particular one of the distributed learning agents. The device reports, via the anomaly reporting mechanism, the particular anomaly to the user interface based on the determined anomaly assessment rate.Type: ApplicationFiled: July 15, 2016Publication date: September 28, 2017Inventors: Jean-Philippe Vasseur, Grégory Mermoud, Javier Cruz Mota, Laurent Sartran, Sébastien Gay
-
Publication number: 20170279698Abstract: In one embodiment, a device in a network determines cluster assignments that assign traffic data regarding traffic in the network to activity level clusters based on one or more measures of traffic activity in the traffic data. The device uses the cluster assignments to predict seasonal activity for a particular subset of the traffic in the network. The device determines an activity level for new traffic data regarding the particular subset of traffic in the network. The device detects a network anomaly by comparing the activity level for the new traffic data to the predicted seasonal activity.Type: ApplicationFiled: June 21, 2016Publication date: September 28, 2017Inventors: Laurent Sartran, Pierre-André Savalle, Jean-Philippe Vasseur, Grégory Mermoud, Javier Cruz Mota, Sébastien Gay
-
Patent number: 9748010Abstract: The present invention concerns a hood for handling and confinement of at least two objects of slender shape, including an external enclosure and internal enclosures inside the external enclosure and at least one motor fixed above an internal enclosure and inside a barrel, the motor(s) being adapted to rotate the screw of the screw-nut mechanism of each internal enclosure and therefore the nut over a stroke A, and first and second mechanical control means, arranged in part above the cover of the external enclosure, respectively for manually guiding the internal enclosures in translation over a stroke A0 and manually pivoting the barrel in order to bring a holding member of one of the internal enclosures opposite the opening in the bottom of the external enclosure. Application to the handling and confinement of nuclear material sample holders.Type: GrantFiled: April 9, 2014Date of Patent: August 29, 2017Assignee: COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVESInventors: Sebastien Gay, Xavier Mognot
-
Patent number: 9449722Abstract: A system for gripping an inner tube and locking/unlocking it into and from an outer tube concentric with the inner tube. The system according to the invention is provided with one or more catching devices which allow both sealed locking/unlocking of the inner tube to the gripper member and of the inner tube in the outer tube, achieving this with only a translational movement of the gripper member over a travel A or a travel B. The system according to the invention advantageously constitutes a system for inserting and extracting a specimen holder tube intended to house a specimen of nuclear materials, such as nuclear fuels, into and from a measurement instrumentation holder tube intended to house measurement sensors and a cooling system.Type: GrantFiled: December 4, 2013Date of Patent: September 20, 2016Assignee: COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVESInventors: Sebastien Gay, Niels Peyre
-
Publication number: 20140301521Abstract: The present invention concerns a hood for handling and confinement of at least two objects of slender shape, including an external enclosure and internal enclosures inside the external enclosure and at least one motor fixed above an internal enclosure and inside a barrel, the motor(s) being adapted to rotate the screw of the screw-nut mechanism of each internal enclosure and therefore the nut over a stroke A, and first and second mechanical control means, arranged in part above the cover of the external enclosure, respectively for manually guiding the internal enclosures in translation over a stroke A0 and manually pivoting the barrel in order to bring a holding member of one of the internal enclosures opposite the opening in the bottom of the external enclosure. Application to the handling and confinement of nuclear material sample holders.Type: ApplicationFiled: April 9, 2014Publication date: October 9, 2014Applicant: COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVESInventors: Sebastien Gay, Xavier Mognot
-
Publication number: 20140153686Abstract: A system for gripping an inner tube and locking/unlocking it into and from an outer tube concentric with the inner tube. The system according to the invention is provided with one or more catching devices which allow both sealed locking/unlocking of the inner tube to the gripper member and of the inner tube in the outer tube, achieving this with only a translational movement of the gripper member over a travel A or a travel B. The system according to the invention advantageously constitutes a system for inserting and extracting a specimen holder tube intended to house a specimen of nuclear materials, such as nuclear fuels, into and from a measurement instrumentation holder tube intended to house measurement sensors and a cooling system.Type: ApplicationFiled: December 4, 2013Publication date: June 5, 2014Applicant: COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVESInventors: Sebastien Gay, Niels Peyre