Amit Chopra

US Patent:

20200272504, Aug 27, 2020

Filed:

May 11, 2020

Appl. No.:

16/871737

Inventors:

- Palo Alto CA, US
Amit CHOPRA - Sunnyvale CA, US
Dexiang WANG - Sunnyvale CA, US
Chen LI - Sunnyvale CA, US
Feng PAN - Beijing, CN
Jianjun SHEN - Palo Alto CA, US
Aayush SAXENA - San Jose CA, US
Yang PING - San Jose CA, US

International Classification:

G06F 9/455
H04L 29/06

Abstract:

Certain embodiments described herein are generally directed to handling a hypervisor restart event in a distributed network system. Embodiments include receiving, by a central controller, a session identifier from a first hypervisor. Embodiments further include comparing, by the central controller, the session identifier to a stored session identifier associated with the first hypervisor. Embodiments further include determining, by the central controller based on the session identifier not matching the stored session identifier associated with the first hypervisor, that the first hypervisor has restarted. Embodiments further include updating, by the central controller, the stored session identifier associated with the first hypervisor to match the session identifier. Embodiments further include identifying, by the central controller, a second hypervisor that is associated with the first hypervisor. Embodiments further include sending, by the central controller, a notification to the second hypervisor that the first hypervisor has restarted.

US Patent:

20200186409, Jun 11, 2020

Filed:

Dec 6, 2018

Appl. No.:

16/212170

Inventors:

- Palo Alto CA, US
Dexiang WANG - Sunnyvale CA, US
Bin ZAN - Santa Clara CA, US
Vijay GANTI - Fremont CA, US
Amit CHOPRA - Sunnyvale CA, US
Ruimin SUN - Gainesville FL, US

International Classification:

H04L 12/24
G06F 9/455

Abstract:

A method for managing alarms in a virtual machine environment includes receiving alarm data related to a process and storing the alarm data in a database, where the alarm data comprises one or more features. The method further includes retrieving intended state information for the process and comparing the one more features of the alarm data to the intended state information to determine whether the alarm is an outlier. The method also includes computing a normal score for the alarm if the alarm is not an outlier, and computing an abnormal score for the alarm if the alarm is an outlier. The method also includes sending a notification for the alarm and the computed score.

US Patent:

20200177555, Jun 4, 2020

Filed:

Feb 9, 2020

Appl. No.:

16/785639

Inventors:

- Palo Alto CA, US
Amit Chopra - Palo Alto CA, US
Vinayak Shashikant Naik - Pune, IN
Jayant Jain - Cupertino CA, US
Anirban Sengupta - Saratoga CA, US
Uday Masurekar - Sunnyvale CA, US

International Classification:

H04L 29/06
H04L 12/46
H04L 9/08
G06F 9/455

Abstract:

A novel method of providing virtual private access to a software defined data center (SDDC) is provided. The SDDC uses distributed VPN tunneling to allow external access to application services hosted in the SDDC. The SDDC includes host machines for providing computing and networking resources and a VPN gateway for providing external access to those resources. The host machines that host the VMs running the applications that VPN clients are interested in connecting performs the VPN encryption and decryption. The VPN gateway does not perform any encryption and decryption operations. The packet structure is such that the VPN gateway can read the IP address of the VM without decrypting the packet.

US Patent:

20200019698, Jan 16, 2020

Filed:

Jul 11, 2018

Appl. No.:

16/032349

Inventors:

- Palo Alto CA, US
Dexiang WANG - Sunnyvale CA, US
Bin ZAN - Santa Clara CA, US
Vijay GANTI - Cupertino CA, US
Amit CHOPRA - Sunnyvale CA, US

International Classification:

G06F 21/55
G06F 21/57
G06F 9/455

Abstract:

A virtual computing instance (VCI) is protected against security threats by a security manager, monitoring a behavior of a VCI over an observation period. The method further includes, storing by the security manager a digital profile in a first database, wherein the digital profile comprises information indicative of the behavior. The method further includes, accessing by a detection system, the digital profile from the first database, and accessing by the detection system, an intended state associated with VCI, wherein the intended state comprises information indicative of a behavior from a second VCI. The method further includes, comparing at least part of the digital profile to the at least part of the intended state. The method further includes, determining by the detection system, that the VCI contains a security threat when information indicative of a behavior in the digital profile is an outlier.

US Patent:

20190303186, Oct 3, 2019

Filed:

Mar 28, 2018

Appl. No.:

15/938763

Inventors:

- Palo Alto CA, US
Amit CHOPRA - Sunnyvale CA, US
Dexiang WANG - Sunnyvale CA, US
Chen LI - Sunnyvale CA, US
Feng PAN - Beijing, CN
Jianjun SHEN - Palo Alto CA, US
Aayush SAXENA - San Jose CA, US
Yang PING - San Jose CA, US

International Classification:

G06F 9/455
H04L 29/06

Abstract:

Certain embodiments described herein are generally directed to handling a hypervisor restart event in a distributed network system. Embodiments include receiving, by a central controller, a session identifier from a first hypervisor. Embodiments further include comparing, by the central controller, the session identifier to a stored session identifier associated with the first hypervisor. Embodiments further include determining, by the central controller based on the session identifier not matching the stored session identifier associated with the first hypervisor, that the first hypervisor has restarted. Embodiments further include updating, by the central controller, the stored session identifier associated with the first hypervisor to match the session identifier. Embodiments further include identifying, by the central controller, a second hypervisor that is associated with the first hypervisor. Embodiments further include sending, by the central controller, a notification to the second hypervisor that the first hypervisor has restarted.

US Patent:

20190068622, Feb 28, 2019

Filed:

Aug 25, 2018

Appl. No.:

16/112648

Inventors:

- Palo Alto CA, US
Amit CHOPRA - Sunnyvale CA, US
Daniel G. WING - Los Altos CA, US
Vijay GANTI - Cupertino CA, US
Christopher CORDE - Burlingame CA, US
Amit PATIL - Pune, IN

International Classification:

H04L 29/06
G06F 9/455

Abstract:

A security system for a customer computer site includes a cloud-based manager (CBM) and on-site components. The on-site components include a manager appliance, guest agents of the CBM installed within respective virtual machines, and host agents of the CBM installed on hypervisors on which the virtual machines. The guest agents have a many-to-one relationship with the host agents, which have a many-to-one relationship with the appliance. In a scenario, many guest agents may generate alarms and send them to the host agents. Each host agent consolidates alarms across the different virtual machines it hosts and pushes the consolidated alarms to the manager appliance. The appliance batch processes the consolidated alarms across host agents, and pushes the batched alarms to the CBM, which deduplicates the alarms and notifies an administrator.

US Patent:

20180176102, Jun 21, 2018

Filed:

Sep 25, 2017

Appl. No.:

15/713702

Inventors:

- Palo Alto CA, US
Uday Masurekar - Sunnyvale CA, US
Srinivas Nimmagadda - San Jose CA, US
Jingmin Zhou - San Jose CA, US
Abhishek Goliya - Pune, IN
Amit Chopra - Palo Alto CA, US
Kausum Kumar - Los Gatos CA, US

International Classification:

H04L 12/26
H04L 29/08

Abstract:

A method for visualizing network flows of a network is provided. The method monitors network flows between a group of machines in a network. The method associates identifiers with the monitored network flows. The method aggregates the monitored network flows into a set of groups based on the associated identifiers. The method displays a set of flow records for the each group of the set of groups.

US Patent:

20170034129, Feb 2, 2017

Filed:

Apr 27, 2016

Appl. No.:

15/140027

Inventors:

- Palo alto CA, US
Amit Chopra - Palo Alto CA, US
Vinayak Shashikant Naik - Mumbai, IN
Jayant Jain - Cupertino CA, US
Anirban Sengupta - Saratoga CA, US
Uday Masurekar - Sunnyvale CA, US

International Classification:

H04L 29/06
H04L 9/08
H04L 12/741
H04L 12/46
H04L 29/08

Abstract:

A novel method of providing virtual private access to a software defined data center (SDDC) is provided. The SDDC uses distributed VPN tunneling to allow external access to application services hosted in the SDDC. The SDDC includes host machines for providing computing and networking resources and a VPN gateway for providing external access to those resources. The host machines that host the VMs running the applications that VPN clients are interested in connecting performs the VPN encryption and decryption. The VPN gateway does not perform any encryption and decryption operations. The packet structure is such that the VPN gateway can read the IP address of the VM without decrypting the packet.