Patent ID: 11909741
Assignee: CISCO TECHNOLOGY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 6:
7. A method, comprising:
receiving, at a supervisory device in a network, data indicative of a class asserted by a node in the network, where in the data comprises a Manufacturer Usage Description (MUD) Universal Resource Identifier (URI) asserted by the node;
identifying, by the supervisory device, an access policy associated with the class asserted by the node;
identifying, by the supervisory device, a machine learning-based class behavioral model associated with the class asserted by the node, wherein the class behavioral model is generated based on traffic data observed from one or more devices of the class asserted by the node and on synthetic traffic data formed from the access policy associated with the class asserted by the node; and
causing, by the supervisory device, installation of the access policy and class behavioral model to one or more networking devices in the network, wherein the one or more networking devices apply the access policy and class behavioral model to traffic associated with the node, and wherein the one or more networking devices cause a mitigation action to be performed when a behavior of the node deviates from the class behavioral model.