Abstract: Some embodiments provide an optimized multi-hit caching technique that minimizes the performance impact associated with caching of long-tail content while retaining much of the efficiency and minimal overhead associated with first hit caching in determining when to cache content. The optimized multi-hit caching utilizes a modified bloom filter implementation that performs flushing and state rolling to delete indices representing stale content from a bit array used to track hit counts without affecting identification of other content that may be represented with indices overlapping with those representing the stale content. Specifically, a copy of the bit array is stored prior to flushing the bit array so as to avoid losing track of previously requested and cached content when flushing the bit arrays and the flushing is performed to remove the bit indices representing stale content from the bit array and to minimize the possibility of a false positive.

Abstract: A server-based files and tasks brokerage system and method are disclosed. In response to receiving a request from a requesting computing device, the server posts the request to a request queue. The request is for a requested mobile telephonic device to perform a task. The server posts a first notification to a first notification queue, in response to receiving the request. The server pushes the first notification to the requested device upon confirming a connection. Upon detecting a first condition of the task being for the requested device to receive a file, the server transfers the file from a file repository. Upon detecting a second condition of the task being for the requested device to send a file, the server transfers the file to the file repository. In response to confirming task completion, the server posts a second notification to a second notification queue associated with the requesting device.

Abstract: Systems and methods to manage workloads and hardware resources in a data center or cloud. In one embodiment, a method includes a data center having a plurality of servers in a network. The data center provides a virtual machine for each of a plurality of users, each virtual machine to use a portion of hardware resources of the data center. The hardware resources include storage and processing resources distributed onto each of the plurality of servers. The method further includes sending messages amongst the servers, some of the messages being sent from a server including status information regarding a hardware resource utilization status of that server. The method further includes detecting a request from the virtual machine to handle a workload requiring increased use of the hardware resources, and provisioning the servers to temporarily allocate additional resources to the virtual machine, wherein the provisioning is based on status information provided by one or more of the messages.

Abstract: Systems and methods for distributed management of keep-alive message signaling for mobile network resource conservation and optimization are disclosed. In one aspect, embodiments of the present disclosure include a method, which may be implemented on a system, of monitoring rates of data communications with a mobile device, sending a periodic message to indicate operational state to the mobile device in response to a decrease in the rates of data communications with the mobile device, sending subsequent periodic messages to indicate operational state to the mobile device at increasing intervals between the subsequent periodic messages to decrease a number of periodic messages sent over the wireless network, and acknowledging to the mobile device that the subsequent periodic messages will be sent at increased intervals, or in a manner that conserves use of the mobile network.

Abstract: Connections for sources to connect to a network are managed by storing connection profiles identifying network attributes for the connections. Each connection profile includes a status of available or subscribed. Requests for connections are received. If a stored connection profile is available that matches the request, the connection for the matching connection profile is assigned to the source.

Abstract: A system for communicating between a field device, a device controller for the field device, and an enterprise application distinct from the device controller includes a single communication device configured to communicate with each of the field device, the device controller, and the enterprise application. The single communication device is configured to facilitate communication between the field device and the device controller, and the field device and the enterprise application. The single communication device is configured to replicate data received from the field device and, after replication of the data, separately filter the data for the device controller and the enterprise application.

Abstract: A remote maintenance board (RMB) that interfaces a monitored system with a communications network is either functionally connected to the monitored system or to the communications network, but never to both at the same time, thereby isolating the monitored system from unauthorized access via the communications network.

Abstract: Systems and methods are disclosed to process streaming data units (tuples) for an application using a plurality of processing units, the application have a predetermined processing time requirement, by changing an operator-set applied to the tuple by a processing unit, on a tuple-by-tuple basis; estimating code requirement for potential operators based on processing unit capability; and assigning the potential operators to the processing units.

Abstract: Systems and methods are provided for social networks that can verify that enrolled users are not misrepresenting facts about themselves such as age and gender. Verification can be performed, for example, by reference to biometric templates stored during the user enrollment process. The biometric templates can also be used to authenticate users logging into the social network to prevent user impersonation. The ability of some users to communicate to other users of the social network can be limited to only certified users, and even to those certified users that match a criterion, such as gender or age.

Abstract: A system and a method (100, 500) for integrating an uncertified client (104) with a certified host device (102) are provided. The integration system (100) is configured to integrate the uncertified client (104), which has a plurality of client applications (106), with the certified host device (102), and has a client virtual machine (108), host applications (142), and an abstraction layer (138, 156). The client virtual machine (108) is coupled to the uncertified client (104) and is configured to execute the plurality of client applications (106). The host applications (142) are coupled to the certified host device (102) and are configured to control host dependent features on the certified host device (102). The abstraction layer (138, 156) are coupled to the host applications (142) and to the client virtual machine (108), and are configured to translate feature calls from the plurality of client applications (106) to function calls for the host applications (142).

Abstract: An antivirus agent located on a user computer, local area network or standalone hardware device includes a statistical module, a control unit, a timeslot generator and a dispatcher. The statistical module calculates statistics for incoming request packets including the burstiness degree H. A number of normal distributions are predefined. A number of probability sequences are predefined. An input statistic is used to select one of the probability sequences. This probability sequence is used to select a timer value from the distributions. Packets are loaded into a variable-length buffer in the dispatcher to form the timer expires or when the buffer is full. The rate of the output traffic from the dispatcher depends upon a selected distribution value by the timeslot generator and not by any manufactured timing by an attacker. Output traffic frequency is shaped by the dispatcher; packets may go out faster or slower, thus thwarting an attacker who relies upon their own inserted packet timing.

Abstract: An apparatus is disclosed that can be remote controlled by a controlling apparatus via a network. The apparatus includes a communication request transmission unit configured to transmit a communication request including an operation request to the controlling apparatus. The apparatus further includes a mail transmission unit configured to transmit, if a normal operation response to the operation request has not been received, an e-mail message including the operation request to the controlling apparatus. This e-mail message ensures the controlling apparatus to receive the operation request that has not successfully received yet.

Abstract: Connections for sources to connect to a network are managed by storing connection profiles identifying network attributes for the connections. Each connection profile includes a status of available or subscribed. Requests for connections are received. If a stored connection profile is available that matches the request, the connection for the matching connection profile is assigned to the source.

Abstract: A network device comprises a controller that manages data flow through a network interconnecting a plurality of processors. The processors of the processor plurality comprise a local memory divided into a private local memory and a public local memory, a local cache, and working registers. The network device further comprises a plurality of cache mirror registers coupled to the controller that receive data to be forwarded to the processor plurality. The controller is responsive to a request to receive data by transferring requested data directly to public memory without interrupting the processor, and by transferring requested data via at least one cache mirror register for a transfer to processor local cache, and to processor working registers.

Abstract: Methods, systems, and machine-readable media are disclosed for orchestrating behavior of network resources while reducing latency. According to one embodiment, a system can comprise a first network resource communicatively coupled with a communications network. The first network resource can have predictable latencies and can be adapted to handle network signaling and transport processes. A first enabler introducing greater latencies than the first network resource can be communicatively coupled with the first network resource and can be adapted to control the first network resource. The system may also include an adapter introducing greater latencies than the first network resource and lower latencies than the first enabler and adapted to react to network events and signaling of the communications network not handled by the network resource. An orchestrator can be communicatively coupled with the first enabler and adapted to orchestrate behavior of the first network resource via the first enabler.

Abstract: Methods and systems for allocating resources in a virtual desktop resource environment are provided. A method includes making a prediction on the future demand for processes running on a distributed environment with several hosts. The prediction is based on the process demand history and includes the removal of historic process demand glitches. Further, the prediction is used to perform a cost and benefit analysis for moving a candidate process from one host to another, and the candidate process is moved to a different host when the cost and benefit analysis recommends such move. In another embodiment, the predictions on future process demand are used for distributed power management by putting hosts in stand-by mode when the overall demand decreases or by adding hosts to the distributed environment when the load increases.

Abstract: A system, device, method and software for providing a visitor access to a public network are disclosed. In one form, a virtual visitor enabled local area network includes a visitor access point operable to provide a visitor access to a public network while connected to a local area network (LAN). The visitor access point is operable to protect the LAN using a virtual visitor network established between the visitor access point and a virtual visitor network gateway.