Abstract: Technologies for multi-cloud routing and policy interconnectivity are provided. An example method can include assigning different sets of data plane routers to data plane traffic associated with different address spaces in a cloud site of a multi-cloud fabric to yield a distributed mapping of data plane traffic and data plane routers. The method can further include providing, to an on-premises site in the multi-cloud fabric, routing entries from a control plane router on the cloud site, the routing entries reflecting the distributed mapping and identifying, for each address space, which data plane router handles data plane traffic for that address space; and when a data plane router is deployed at the cloud site, providing, to the on-premises site, updated routing information from the control plane router, the updated routing information identifying the data plane router as a next hop for data plane traffic associated with a respective address space.

Abstract: A communication/collaboration system enables a first user at a first entity to define a collaboration object, and to invite a second entity to collaborate on the collaboration object in accordance with a hierarchy with corresponding permissions. A second user at a second entity is enabled to collaborate on the collaboration object. A communications log regarding the collaboration between the first user and the second user is maintained. A communications log between the first user and other users at the first entity is maintained. A communication interface is displayed on the first user computer system that displays the log of communications between the first user and the second user on the collaboration object, together with the log of communications regarding the collaboration object between the first user and other users at the first entity, and excluding communications regarding the collaboration object between the second user and other users at the second entity.

Abstract: An inspection device includes a memory and a processor. The processor is coupled to the memory and configured to transmit, to a network, an inspection packet that includes a first address for which a plurality of transfer devices in a network does not learn correspondences between the first address and transfer destination devices. The first address is a transmission destination address. The inspection device receives a first packet from the network and determines whether the first packet matches the inspection packet. The inspection devices transmits, to the network, a setting packet of which a transmission source address is set to the first address.

Abstract: Described are platforms, systems, and methods to discover relationships among equipment in automated industrial or commercial environments by cycling each individual piece of equipment while observing sensors in all other equipment in order to measure how each part reacts to each other part. The platforms, systems, and methods identify a plurality of data sources associated with an automation environment; issue one or more commands to cycle a current data source in the a plurality of data sources; monitor the automation environment for events or state changes in the data sources; detect one or more events or one or more state changes in one or more other data sources in the a plurality of data sources; and determine one or more relationships between the current data source and the one or more other data sources.

Abstract: Software implementing a distributed ledger that adjusts in response disconnected peers is provided. The software implements an overlay routing protocol to monitor one or more overlay links between a first peer and one or more second peers that are maintaining a distributed ledger. The software adjusts how blocks for the distributed ledger are formed in response to detecting the one or more second peers becoming disconnected from the peer.

Abstract: Systems and methods which facilitate access to computing resources by cloud-based applications are described. Embodiments enable cloud-based applications to provide output to and/or obtain input from computing resources, such as printers, scales, scanners, and storage devices, for performing various functions. In operation according to embodiments, a user agent client application is executed by computing equipment in communication with a computing resource to which access is to be provided to one or more cloud-based applications. Although embodiments implement a user interface client application which is separate from a user agent client application, tight integration between a user interface client application and user agent client application may be provided. Embodiments not only facilitate operation whereby a cloud-based application is enabled to provide output to and/or obtain input from computing resources, but also facilitate remote and/or shared client interaction with such computing resources.

Abstract: Described are platforms, systems, and methods to discover subtended devices through introspection of executive or supervisory controllers. The platforms, systems, and methods maintain a plurality of introspection directives, each introspection directive comprising a sequence of instructions specific to a communications protocol, the sequence of instructions comprising instructions to send at least one command to at least one controller associated with an automation environment in accordance with the communications protocol, instructions to receive a response to the at least one command, and instructions to parse the response; identify an appropriate introspection directive for the at least one controller; and execute the sequence of instructions with respect to the at least one controller to perform operations comprising: sending at least one command to at least one controller; receiving a response; and parsing the response.

Abstract: A system for determining ownership information for users of electronic resources includes at least one computing device configured to receive a trigger request and obtain first resource usage data and first resource identity data from a first resource provider using a first resource collection engine. The system also is configured to obtain second resource usage data and second resource identity data from a second resource provider using a second resource collection engine. The system is also configured to select one or more users of interest based on the first resource usage data, the first resource identity data, the second resource usage data and the second resource identity data and to determine ownership of the selected one or more users of interest.

Abstract: A computer system automatically learns which application behavior constitutes “multi-use” behavior by observing the behavior of applications on a network. The system uses this learned knowledge to automatically identify multi-use behavior in new applications that appear on the network. When the system enforces security policies against applications on the network, it identifies whether particular behavior of such applications violates any of the security policies. In this way, the system adapts automatically to new behavior of applications on the network over time in order to increase network security.

Abstract: A method includes a second system that determines a type of a first management Internet Protocol (IP) address, and sends, to a first system, first information used to indicate the type of the first management IP address; the first system determines the first management IP address based on the type of the first management IP address indicated by the first information, and releases a first correspondence between system identification information and the first management IP address to an advertisement system; the advertisement system sends the first correspondence to a network management system; and the network management system manages the first system based on the first correspondence.

Abstract: An electronic device and method are provided for registering a device in a server through an application installed in an external device different from the device. The method includes providing a first user interface for inputting a user ID; causing, through the application, the external device to connect to the server using the user ID; providing a second user interface for receiving a user input to select a function to identify the device; causing the external device to connect to the device, in response to a message received from the device; obtaining, from the device, identification information of the device; controlling to transmit a registration request message, to the server, for requesting registration of the device in the server, the registration request message including the identification information of the device; and in response to registration of the device in the server, providing a third user interface including a visual indication of the device being registered in the server.

Abstract: Methods, apparatuses, systems, and software are described for providing content to a device comprising streaming content and sending content in a non-streaming manner (e.g., by downloading a file containing the content). In some aspects, switching between streaming and downloading may be performed in a dynamic manner during presentation of the content, and may be seamless to the user's viewing experience.

Abstract: A controller device includes a memory and one or more processors coupled to the memory. The memory stores instructions that, when executed, cause the one or more processors to receive a query indicating a first time and a network service, determine a first set of configuration elements using telemetry data associated with the first time and the network service, and determine a second set of configuration elements using an intent model. The instructions further cause the one or more processors to determine one or more first metrics that occur at the first time using the first set of configuration elements and the second set of configuration elements, determine one or more second metrics at a second time using telemetry data received from the plurality of network devices, and generate data representing a user interface presenting the one or more first metrics and the one or more second metrics.

Abstract: A system for redirecting traffic is provided. The system can allow a first switch to participate in a virtual switch in conjunction with a second switch of an overlay tunnel fabric. A path between a respective switch pair of an underlying network of the fabric can be determined based on a routing process. The first and second switches may individually participate in the routing process. Hence, the packets to a tunnel to the virtual switch can be distributed among paths to the first and second switches. The system can determine a trigger condition indicating that packets subsequently received via the tunnel is to be directed to a path to the second switch. The first and second switches can remain in an operational state. The system can then advertise a high cost for a link to the first switch for the routing process in the underlying network.

Abstract: A communication method in which access network devices belonging to a same network instance have different network addresses, where the method includes uniquely identifying an access network device based on a network address of the access network device and a first network instance identifier to which the access network device belongs, and determining a packet forwarding rule for sending a packet to the access network device. In this way, the packet can be accurately routed.

Abstract: Network device identification is disclosed. A set of data attributes relating to at least two different data types is extracted from network traffic data associated with each user device of a set of user devices. A cluster data set of one or more known device clusters is expanded with the set of data attributes for generating an expanded cluster data set. One or more new device clusters is identified from the expanded cluster data set of the one or more known device clusters by using similarity-based metrics and a weighting factor selected based on the data types of the set of data attributes, and one or more device identification rules is generated based on the one or more new device clusters.

Abstract: Methods and apparatuses are disclosed for internet protocol (IP) and non-IP data communication. According to an embodiment, a network exposure node performs a configuration procedure such that both IP data delivery (IPDD) and non-IP data delivery (NIDD) can be supported through a unified interface between the network exposure node and a server. The network exposure node performs IPDD or NIDD through the unified interface.

Abstract: A method includes determining, by a controller device that manages a plurality of network devices, device characteristic information for a network device of the plurality of network devices and selecting, by the controller device, one or more sensors from a plurality of sensors based on the device characteristic information for the network device. The method further includes outputting, by the controller device, an instruction to cause the network device to generate the one or more selected sensors at the network device and receiving, by the controller device, sensor information from the one or more selected sensors generated at the network device.

Abstract: A communication control apparatus, a communication system, a communication control method, and a non-transitory recording medium. The communication control apparatus stores in one or more memories, identification information for identifying a registered device, sends a packet to a network to search for a device connected to the network, acquires address information assigned to the device connected to the network and identification information of the device connected to the network from the device that responded to the packet, and controls communication of the registered device using connection information that associates the identification information stored in the one or more memories with the address information of the device having the acquired identification information that matches the identification information stored in the one or more memories.

Abstract: Techniques of network configuration verification are disclosed herein. One example process includes, upon receiving a query to determine whether a packet from a first endpoint is reachable to a second endpoint in a virtual network, identifying a network path between the first endpoint to the second endpoint in a network graph. The network graph has nodes representing corresponding enforcement points of network policies in the virtual network and edges connecting pairs of the nodes. The example process can also include generating compound function representing conjoined individual constraints of the network policies at each of the nodes in the network graph along the identified network path, compiling the generated compound function into a Boolean formula, and solving the compiled Boolean formula to determine whether an assignment of values to packet fields of the packet exists such that all the conjoined individual constraints of the compound function can be satisfied.