Joy E Scott

US Patent:

20210226865, Jul 22, 2021

Filed:

Jan 21, 2020

Appl. No.:

16/748735

Inventors:

- Sunnyvale CA, US
Joy Anne Scott - Los Altos CA, US
Juraj George Fandli - Campbell CA, US
Joel E. Vanderkwaak - Mountain View CA, US
Ramnath Duggirala - Sunnyvale CA, US

International Classification:

H04L 12/26

Abstract:

In a segmented network environment, a traffic flow graph provides visibility into the connections between workloads or groups of workloads under management of a segmentation policy. Squelching rules may be applied to hide traffic in the traffic flow graph that meets specified criteria. The squelching rules may be label-based rules that enable configuration of squelching rules that apply to group of workloads and enable configurations to be rapidly updated as workloads or added or dropped from the network or as their configurations change. Additionally, squelching rules may be applied based on characteristics of the traffic data or based on an identity of an administrator viewing the traffic flow graph.

US Patent:

20190258525, Aug 22, 2019

Filed:

Feb 22, 2018

Appl. No.:

15/902954

Inventors:

- Sunnyvale CA, US
Paul James Kirner - Palo Alto CA, US
Seth Bruce Ford - San Francisco CA, US
Mukesh Gupta - Fremont CA, US
Joy Anne Scott - Los Altos CA, US
Nathaniel Jurist Gleicher - Palo Alto CA, US

International Classification:

G06F 9/50
G06F 21/57
H04L 29/06

Abstract:

A segmentation server generates vulnerability exposure scores associated with workloads operating in a segmented computing environment. The segmentation server may automatically aggregate the vulnerability exposure scores in various ways to generate vulnerability exposure information representative of workloads in an administrative domain controlled by the segmentation server. The aggregated vulnerability exposure information may be presented in a manner that enables an administrator to easily evaluate different segmentation strategies and assess the risks associated with each of them. Moreover, the segmentation server can automatically generate a segmentation policy that modifies a configured segmentation strategy based on the vulnerability exposure scores to reduce exposure to certain vulnerabilities without impeding operation of the workloads.

US Patent:

20190258804, Aug 22, 2019

Filed:

Feb 22, 2018

Appl. No.:

15/902952

Inventors:

- Sunnyvale CA, US
Paul James Kirner - Palo Alto CA, US
Seth Bruce Ford - San Francisco CA, US
Mukesh Gupta - Fremont CA, US
Joy Anne Scott - Los Altos CA, US
Nathaniel Jurist Gleicher - Palo Alto CA, US

International Classification:

G06F 21/57
G06F 9/50
H04L 29/06

Abstract:

A segmentation server generates vulnerability exposure scores associated with workloads operating in a segmented computing environment. The segmentation server may automatically aggregate the vulnerability exposure scores in various ways to generate vulnerability exposure information representative of workloads in an administrative domain controlled by the segmentation server. The aggregated vulnerability exposure information may be presented in a manner that enables an administrator to easily evaluate different segmentation strategies and assess the risks associated with each of them. Moreover, the segmentation server can automatically generate a segmentation policy that modifies a configured segmentation strategy based on the vulnerability exposure scores to reduce exposure to certain vulnerabilities without impeding operation of the workloads.