Patents by Inventor Sunil Navinchandra Amin

Sunil Navinchandra Amin has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Enhanced flow-based computer network threat detection
    Patent number: 10855705
    Abstract: In one example embodiment, a threat detection server receives metadata of a network flow in a network; a zone definition that correlates the metadata of the network flow with a first zone of network devices in the network and a second zone of network devices in the network, where the network flow was transmitted from the first zone to the second zone; and a security policy for the network flow, where the security policy is enforced on the basis of the first zone and the second zone. Based on the zone definition, the threat detection server annotates a flow record that includes the metadata with an indication of the first zone and the second zone. Based on the annotated flow record and the security policy, the threat detection server determines whether to generate a notification associated with a detection of a security threat associated with the network flow.
    Type: Grant
    Filed: September 29, 2017
    Date of Patent: December 1, 2020
    Assignee: CISCO TECHNOLOGY, INC.
    Inventors: Matthew Scott Robertson, Darrin Joseph Miller, Sunil Navinchandra Amin, Paul Wayne Bigbee
  • ENHANCED FLOW-BASED COMPUTER NETWORK THREAT DETECTION
    Publication number: 20190104144
    Abstract: In one example embodiment, a threat detection server receives metadata of a network flow in a network; a zone definition that correlates the metadata of the network flow with a first zone of network devices in the network and a second zone of network devices in the network, where the network flow was transmitted from the first zone to the second zone; and a security policy for the network flow, where the security policy is enforced on the basis of the first zone and the second zone. Based on the zone definition, the threat detection server annotates a flow record that includes the metadata with an indication of the first zone and the second zone. Based on the annotated flow record and the security policy, the threat detection server determines whether to generate a notification associated with a detection of a security threat associated with the network flow.
    Type: Application
    Filed: September 29, 2017
    Publication date: April 4, 2019
    Inventors: Matthew Scott Robertson, Darrin Joseph Miller, Sunil Navinchandra Amin, Paul Wayne Bigbee