Sunil K Gupta

US Patent:

20230014842, Jan 19, 2023

Filed:

Sep 27, 2022

Appl. No.:

17/935771

Inventors:

- Cupertino CA, US
Navindra Yadav - Cupertino CA, US
Anubhav Gupta - Fremont CA, US
Shashidhar Gandham - Fremont CA, US
Supreeth Hosur Nagesh Rao - Cupertino CA, US
Sunil Kumar Gupta - Milpitas CA, US

International Classification:

H04L 43/045
H04L 9/40
G06F 9/455
G06N 20/00
G06F 21/55
G06F 21/56
G06F 16/28
G06F 16/2457
G06F 16/248
G06F 16/29
G06F 16/16
G06F 16/17
G06F 16/11
G06F 16/13
G06F 16/174
G06F 16/23
G06F 16/9535
G06N 99/00
H04L 9/32
H04L 41/0668
H04L 43/0805
H04L 43/0811
H04L 43/0852
H04L 43/106
H04L 45/00
H04L 45/50
H04L 67/12
H04L 43/026
H04L 61/5007
H04L 67/01
H04L 67/51
H04L 67/75
H04L 67/1001
H04L 43/062
H04L 43/10
H04L 47/2441
H04L 41/0893
H04L 43/08
H04L 43/04
H04W 84/18
H04L 67/10
H04L 41/046
H04L 43/0876
H04L 41/12
H04L 41/16
H04L 41/0816
G06F 21/53
H04L 41/22
G06F 3/04842
G06F 3/04847
H04L 41/0803
H04L 43/0829
H04L 43/16
H04L 1/24
H04W 72/08
H04L 9/08
H04J 3/06
H04J 3/14
H04L 47/20
H04L 47/32
H04L 43/0864
H04L 47/11
H04L 69/22
H04L 45/74
H04L 47/2483
H04L 43/0882
H04L 41/0806
H04L 43/0888
H04L 43/12
H04L 47/31
G06F 3/0482
G06T 11/20
H04L 43/02
H04L 47/28
H04L 69/16
H04L 45/302

Abstract:

An approach for establishing a priority ranking for endpoints in a network. This can be useful when triaging endpoints after an endpoint becomes compromised. Ensuring that the most critical and vulnerable endpoints are triaged first can help maintain network stability and mitigate damage to endpoints in the network after an endpoint is compromised. The present technology involves determining a criticality ranking and a secondary value for a first endpoint in a datacenter. The criticality ranking and secondary value can be combined to form priority ranking for the first endpoint which can then be compared to a priority ranking for a second endpoint to determine if the first endpoint or the second endpoint should be triaged first.

US Patent:

20210389877, Dec 16, 2021

Filed:

Jun 11, 2020

Appl. No.:

16/899290

Inventors:

- San Jose CA, US
Sunil Gupta - Milpitas CA, US
Thanh Trung Ngo - Menlo Park CA, US
Xuan Loc Bui - Sunnyvale CA, US
Hoang Viet Nguyen - Pleasanton CA, US
Shashi Gandham - Fremont CA, US
Navindra Yadav - Cupertino CA, US

International Classification:

G06F 3/06
G06F 9/455
G06F 11/14

Abstract:

Systems, methods, and computer-readable for defining host functionalities in a computing environment include obtaining two or more snapshots comprising information pertaining to two or more processes executing in two or more hosts, the two or more snapshots being obtained at two or more points in time from the two or more hosts. One or more long-running processes amongst the two or more processes are identified based on one or more criteria associated with long-running processes. One or more priorities associated with the one or more long-running processes and used for defining functionalities for at least a subset of the two or more hosts, where high priorities are assigned to long-running processes, such as web server or database server processes, which are unique to at least the subset of the two or more hosts. Resources may be provisioned based on these host functionalities.

US Patent:

20200304523, Sep 24, 2020

Filed:

Jun 11, 2020

Appl. No.:

16/899190

Inventors:

- San Jose CA, US
Abhishek Ranjan Singh - Pleasanton CA, US
Shashidhar Gandham - Fremont CA, US
Ellen Christine Scheib - Mountain View CA, US
Omid Madani - San Carlos CA, US
Ali Parandehgheibi - Sunnyvale CA, US
Jackson Ngoc Ki Pang - Sunnyvale CA, US
Vimalkumar Jeyakumar - Los Altos CA, US
Michael Standish Watts - Los Altos CA, US
Hoang Viet Nguyen - Pleasanton CA, US
Khawar Deen - Sunnyvale CA, US
Rohit Chandra Prasad - Sunnyvale CA, US
Sunil Kumar Gupta - Milpitas CA, US
Supreeth Hosur Nagesh Rao - Cupertino CA, US
Anubhav Gupta - Fremont CA, US
Ashutosh Kulshreshtha - Cupertino CA, US
Roberto Fernando Spadaro - Milpitas CA, US
Hai Trong Vu - San Jose CA, US
Varun Sagar Malhotra - Sunnyvale CA, US
Shih-Chun Chang - San Jose CA, US
Bharathwaj Sankara Viswanathan - Mountain View CA, US
Duane Thomas Barlow - Fremont CA, US

International Classification:

H04L 29/06
H04L 12/26

Abstract:

An example method includes detecting, using sensors, packets throughout a datacenter. The sensors can then send packet logs to various collectors which can then identify and summarize data flows in the datacenter. The collectors can then send flow logs to an analytics module which can identify the status of the datacenter and detect an attack.

US Patent:

20200267066, Aug 20, 2020

Filed:

May 6, 2020

Appl. No.:

16/867791

Inventors:

- San Jose CA, US
Navindra Yadav - Cupertino CA, US
Anubhav Gupta - Fremont CA, US
Shashidhar Gandham - Fremont CA, US
Supreeth Hosur Nagesh Rao - Cupertino CA, US
Sunil Kumar Gupta - Milpitas CA, US

International Classification:

H04L 12/26
G06F 16/174
G06F 16/23
G06N 99/00
G06F 16/17
G06F 16/13
G06F 16/11
G06F 16/16
H04L 12/715
H04L 12/725
H04L 29/08
H04L 29/06
H04L 12/841
G06T 11/20
G06F 3/0482
H04L 12/721
H04L 12/833
H04L 12/24
H04L 12/851
H04L 12/741
H04L 12/801
H04L 12/823
H04L 12/813
H04L 29/12
H04J 3/14
H04J 3/06
H04L 9/32
H04L 9/08
H04W 72/08
H04L 1/24
G06F 3/0484
H04L 12/723
G06F 21/53
H04W 84/18
G06F 21/56
G06F 21/55
G06F 16/2457
G06F 16/9535
G06F 16/28
G06F 16/248
G06F 16/29
G06N 20/00
G06F 9/455

Abstract:

An approach for establishing a priority ranking for endpoints in a network. This can be useful when triaging endpoints after an endpoint becomes compromised. Ensuring that the most critical and vulnerable endpoints are triaged first can help maintain network stability and mitigate damage to endpoints in the network after an endpoint is compromised. The present technology involves determining a criticality ranking and a secondary value for a first endpoint in a datacenter. The criticality ranking and secondary value can be combined to form priority ranking for the first endpoint which can then be compared to a priority ranking for a second endpoint to determine if the first endpoint or the second endpoint should be triaged first.

US Patent:

20200220780, Jul 9, 2020

Filed:

Mar 16, 2020

Appl. No.:

16/820404

Inventors:

- San Jose CA, US
Shashi Gandham - Fremont CA, US
Hoang Nguyen - Pleasanton CA, US
Abhishek Singh - Pleasanton CA, US
Shih-Chun Chang - San Jose CA, US
Navindra Yadav - Cupertino CA, US
Ali Parandehgheibi - Sunnyvale CA, US
Paul Mach - Oakland CA, US
Ravi Prasad - Fremont CA, US
Varun Malhotra - Sunnyvale CA, US
Michael Watts - Mill Valley CA, US
Sunil Gupta - Milpitas CA, US

International Classification:

H04L 12/24

Abstract:

The disclosed technology relates to intent driven network management. A system is configured to maintain an inventory store comprising records for a set of network entities in a network, wherein each network entity in the set of network entities is associated with a record in the inventory store. The system receives a user intent statement comprising an action and a flow filter representing network data flows on which the action is to be applied and queries, based on the flow filter, the inventory store to identify a plurality of network entities in the set of network entities to which the user intent statement applies. The system generates a plurality of network policies that implement the user intent statement based on the plurality of network entities and the action and enforces the plurality network policies.

US Patent:

20200145291, May 7, 2020

Filed:

Dec 30, 2019

Appl. No.:

16/730226

Inventors:

- San Jose CA, US
Hai Vu - San Jose CA, US
Shih-Chun Chang - San Jose CA, US
Hoang Nguyen - San Jose CA, US
Shashi Gandham - Fremont CA, US
Navindra Yadav - Cupertino CA, US
Praneeth Vallem - San Jose CA, US
Sunil Gupta - Milpitas CA, US
Ravi Prasad - Fremont CA, US
Varun Malhotra - Sunnyvale CA, US

International Classification:

H04L 12/24
H04L 29/06
G06F 21/60
G06F 21/57

Abstract:

The disclosed technology relates to a network agent for generating platform specific network policies. A network agent is configured to receive a platform independent network policy from a network policy system, determine implementation characteristics of the network entity, generate platform specific policies from the platform independent network policy based on the implementation characteristics of the network entity, and implement the platform specific policies on the network entity.

US Patent:

20190230011, Jul 25, 2019

Filed:

May 17, 2018

Appl. No.:

15/982806

Inventors:

- San Jose CA, US
Navindra Yadav - Cupertino CA, US
Janardhanan Radhakrishnan - Dublin CA, US
Hoang-Nam Nguyen - San Jose CA, US
Umesh Paul Mahindra - Cupertino CA, US
Sunil Gupta - Milpitas CA, US
Praneeth Vallem - San Jose CA, US
Supreeth Rao - Cupertino CA, US
Darshan Shrinath Purandare - Fremont CA, US
Xuan Zou - Sunnyvale CA, US
Akshay Srirangam - Mountain View CA, US
Jothi Prakash Prabakaran - Fremont CA, US

International Classification:

H04L 12/26
H04L 29/06

Abstract:

Aspects of the subject technology relate to a system configured to receive, from a stream processing service, a first network snapshot segment. The first network snapshot segment is associated with metadata that is used to determine that at least one additional network snapshot segment associated with the output stream has not been previously received. The system is configured to request, from the stream processing service, the at least one additional network snapshot segment and generate a first network snapshot by compiling the first network snapshot segment and the at least one additional network snapshot segment.

US Patent:

20190230112, Jul 25, 2019

Filed:

May 29, 2018

Appl. No.:

15/992071

Inventors:

- San Jose CA, US
Navindra Yadav - Cupertino CA, US
Janardhanan Radhakrishnan - Dublin CA, US
Hoang-Nam Nguyen - San Jose CA, US
Umesh Paul Mahindra - Cupertino CA, US
Sunil Gupta - Milpitas CA, US
Praneeth Vallem - San Jose CA, US
Supreeth Rao - Cupertino CA, US
Darshan Shrinath Purandare - Fremont CA, US
Xuan Zou - Sunnyvale CA, US
Joseph Daniel Beshay - Sunnyvale CA, US
Jothi Prakash Prabakaran - Fremont CA, US

International Classification:

H04L 29/06
G06F 21/53
H04L 12/24
G06F 9/455

Abstract:

Aspects of the subject technology relate to a system configured to receive a set of network snapshot segments from an output stream of a stream processing service, compile the set of network snapshot segments from the set of messages into a first network snapshot and a second network snapshot, and compare the first network snapshot and the second network snapshot to identify a difference between the first network snapshot and the second network snapshot.