Abstract: A translation service is used to modify service requests by translating client-provided external identifiers for objects into canonical identifiers for the objects (e.g., an identifier used by the service to uniquely identify the one or more objects). The translation service first receives specification data for a particular service. The specification data includes information for translating external identifiers for one or more objects to canonical identifiers for the one or more objects. The translation service instantiates a translation layer for the particular service, based on the received specification data. The translation layer receives a request directed to the particular service, translates the external object identifiers to canonical object identifiers, adds the canonical object identifiers to the request, and forwards the request to the particular service.

Abstract: A certificate re-provisioning (CREP) protocol allows a client device to communicate with a provisioning server and be automatically provisioned, or re-provisioned, with needed credentials without the client device being aware of which credentials it needs. The CREP protocol uses a slot configuration template that defines which credentials are installed on the client device and the provisioning server responds with actions to provision the client device according to a client target configuration stored at the server.

Abstract: The disclosure provides a method for transmitting a physical layer operation administration and maintenance (PLOAM) message over an Ethernet network. The method includes the steps of: transmitting, from a first terminal, the PLOAM message to a second terminal over a PLOAM channel connecting the first and second terminals; extracting, by the second terminal, the PLOAM message; sending, from the second terminal, the extracted PLOAM message to an external CPU over an Ethernet protocol; and processing, by the external CPU, the received PLOAM message to generate a processed PLOAM message.

Abstract: Implementations include receiving, by a redirection resolver, a URL identifying a location of a network resource, processing, by the redirection resolver, the URL to provide a set of results including a set of redirection URLs, the set of redirection URLs including one or more redirections between the URL and an end URL, processing the set of redirection URLs to provide input to a machine learning (ML) model that generates an output based on the set of redirection URLs, determining an error value associated with the URL, and providing an indicator assigned to the URL based on the error value, the indicator indicating whether the URL is determined to be potentially malicious.

Abstract: A device configured to receive a data set and instructions for processing the data set from a network device. The device is further configured to parse the data set into a plurality of data segments to be processed, and generate a plurality of instruction segments from the received instructions. The device is further configured to assign each instruction segment to a resource unit, and to generate control information with instructions for combining processed data segments from the resource units. The device is further configured to receive processed data segments from the resource units, to generate the processed data set, and to output the processed data set to the network device.

Abstract: A terminal apparatus 20 includes a sensor data collection unit 21 that collects sensor data from an odor sensor 40 that outputs the sensor data in reaction to a plurality of types of odors, an analyzer acquisition unit 22 that, in the case where an analyzer capable of analyzing a designated odor analysis target is transmitted thereto from a server apparatus 10 that holds a plurality of analyzers for analyzing odor analysis targets by analyzing the sensor data, acquires the analyzer transmitted thereto, an analysis execution unit 23 that executes analysis processing of the designated odor analysis target, by applying the acquired analyzer to the collected sensor data, and an analysis result holding unit 24 that holds information indicating a result of the analysis processing.

Abstract: The present disclosure relates generally to systems and methods for delivering personalized content to a customer. More specifically, the present disclosure relates to systems and methods for providing notifications related to the needs of a customer. A content management system may determine the needs of a customer as they relate to relevant products and/or services offered by one or more business entities, determine and prioritize actions that may fulfill these needs, and deliver personalized content to the customer based on the customer's information. Accordingly, the systems and techniques provided herein may improve the efficiency and reduce the time involved with delivering effective content to a customer.

Abstract: A system for rapid deployment of content on a common publication platform. The system includes a rapid content deployment application hosted on a stand-alone or networked computer that is interfaced with the common publication platform. The rapid content deployment application includes a receiver to receive a file for publication on the common publication platform, a file existence checker to verify existence of a collaboration file on the common publication platform compatible with the received file, and a file preparer to prepare the received file for uploading to the common publication platform in compliance with one or more of governance, security, and change management policies including access control and authorization policies. The rapid content deployment application further includes a file uploader to upload the prepared file to the common publication platform for publication.

Abstract: A set of computers can be grouped into a first group and second group of computers to receive a file object. The first group of computers are commanded to perform a peer-to-peer download of the file object from a source. The second group of computers are commanded to perform a peer-to-peer download of the file object from a computer in the first group of computers.

Abstract: A technique to stop lateral movement of ransomware between endpoints in a VLAN is disclosed. A security appliance is set as the default gateway for intra-LAN communication. Message traffic from compromised endpoints is detected. Attributes of ransomware may be detected in the message traffic, as well as attempts to circumvent the security appliance. Compromised devices may be quarantined.

Abstract: A method and a managing node for managing exchange of information relating to Packet Flow Descriptors, PFDs, between an application server and a network exposure node are disclosed. The managing node receives a message comprising a PFD with a PFD identifier, an external application identifier associated with the PFD, a server identifier of the application server, a transaction identifier, and a network exposure identifier identifying an operator network. The managing node stores received information. The managing node selects, based on the network exposure identifier, a network exposure node. When a PFD selection identifier is included in the message, the managing node selects, based on the PFD selection identifier, a further PFD amongst the set of stored PFDs. The managing node also determines an action for the further PFD. The managing node further transmits, towards the network exposure node, the PFD and an indication of the action.

Abstract: Embodiments of the present disclosure provide a method, a device and a computer program product for protecting service security. The method of protecting service security comprises receiving, from a client, a deployment request to deploy a service into a cloud environment, and in response to the deployment request, deploying a service instance corresponding to the service in the cloud environment. The method further comprises setting, based on information specific to the service instance, an initial credential for accessing the service instance, and providing information associated with the initial credential to the client so as to enable the client to derive the initial credential.

Abstract: The present disclosure is directed to a novel system for active and passive management of location-based copy data. The system may intake user data from various data sources into a rules engine, which contains the decision logic to format the incoming data according to location-dependent rules. The system may continuously index the incoming data as well as metadata (e.g., data source, data storage location, rules associated with the data, or the like). Based on the output of the rules engine and/or index engine, an action engine may execute various processing steps to condition the data for storage in a particular system. Furthermore, the system may use passive and continuous rule updates with the process as described herein to automatically update the stored user data to conform to the new rules.

Abstract: Examples described herein include systems and methods for dynamically determining a server for enrollment with a management system. An example method can include receiving user input at an application executing on a user device, such as a portal application that provides access to and authentication for other applications through a catalogue of application icons. If the user input includes a first URL but that URL produces an error when used in conjunction with extensions associated with a management server, the application can automatically use extensions associated with an application-support server. The application can then retrieve a second URL from the application-support server and use it for performing enrollment steps at the management server. The enrollment steps can include authenticating the user at an identity service and determining the user's group ID for enrollment, for example.

Abstract: Systems and methods described herein provide a network tool that discovers device configurations for selected enterprise sites and automatically organizes the data to assist users, so they can build intents for network function policies in enterprise networks. An intent builder performs device discovery of network function (NF) instances in a customer network; retrieves configuration elements from the NF instances; normalizes the configuration elements; and generates a graphical user interface with rule paths based on the configuration elements. The network device receives, via the graphical user interface, user input to map source Internet protocol (IP) addresses in the rule paths to a user label and to map destination IP address in the rule paths to an application label. Based on the user input, the network device presents, via the graphical user interface, consolidated intents and generates vendor-agnostic policy rules from the consolidated intents.

Abstract: There is provided a method in a serving node of an information centric network, the method comprising: receiving an interest message referring to a first content object from a requesting node; processing the name of the first content object and the payload of the received interest message to generate the name of a second content object; and replying to the interest message with a redirect message, wherein the redirect message comprises the name of the second content object.

Abstract: A web traffic logging system includes: a log setting unit which performs setting for collecting log from at least one of a web server and a web server operating system; a log gathering unit which creates log information including the log collected in accordance with the setting; and a log transmitting unit which transmits the log information to a cloud server.

Abstract: Techniques for managing access control policies are described herein. According to one embodiment, access control policies (ACPs) and access control rules (ACRs) are downloaded from a management server to a network access device (NAD) over the Internet, where the network access device is one of a plurality of network access devices managed by the management server over the Internet. In response to a request from a network client device for entering a network, a device type of the network client device is detected and an ACP identifier is determined based on the device type using the ACRs An ACP is selected from the ACPs based on the ACP identifier and enforced against the network client device. At least the selected ACP is reported to the management server to distribute the selected ACP to other network access devices.

Abstract: Described herein are systems, methods, and software to enhance the management of responses to incidents. In one example, a method of improving incident response comprises identifying an incident in an information technology (IT) environment associated with a first entity of a plurality of entities, and identifying action implementation information related to the incident. The method further anonymizes the action implementation information for the incident, and determines action suggestions based at least on the anonymized action implementation information.

Abstract: One or more implementations of the present specification relate to blockchain-based cross-chain data access methods and apparatuses, and electronic devices. An access request that is specific to target data and that is sent by a node device is obtained. The target data is stored in a target blockchain of a multi-chain system that comprises a plurality of blockchains. The access request comprises an access path of the target data. The target blockchain that the target data is located in is determined based on the access path of the target data. A corresponding data access driver configured for the target blockchain is determined based on the access path of the target data. The data access driver is invoked to parse the access request and to access the target data.