Abstract: Systems, methods, and storage media for controlling identity information across multiple identity domains in a distributed identity infrastructure are disclosed. Exemplary implementations may: transmit first identity information from a first identity domain to an identity information control system; use the identity information control system to translate the first identity information from the first format to a second format and from the second format to a third format; send the first identity information in the third format from the identity information control system to a second identity domain; and replace second identity information in the second identity domain with the first identity information.

Abstract: A distributed cloud computing system is disclosed that includes a controller configured to deploy a first gateway in a first cloud computing network and a second gateway in a second cloud computing network, and logic. The logic, upon execution by one or more processors, causes performance of operations including receiving, from the controller, metadata pertaining to a plurality of constructs corresponding to a plurality of time instances, receiving, from each of the first and second gateways, network data corresponding to the plurality of time instances, wherein the metadata and the network data identify each of the plurality of constructs, communication paths between each construct, and in which cloud computing network each construct is deployed, generating a visualization illustrating differences between the plurality of constructs and communication paths at the first time instance and at the second time instance, and causing rendering of the visualization on a display screen.

Abstract: Replication handling among distinct network transfer layers, including: establishing, over a first type of network messaging layer, a communication link for replication between a first storage system and a second storage system; initiating, over a second type of network messaging layer, a configuration change to one or more aspects of the first storage system; and replicating, without disrupting the configuration change to the one or more aspects of the first storage system, data from the first storage system to the second storage system.

Abstract: Some embodiments provide a method for a network management and control system that manages a virtual infrastructure deployed across a set of datacenters. Based on input from a top-level user of the virtual infrastructure, the method deploys a first logical network within the virtual infrastructure and defines one or more second-level users of the virtual infrastructure. The method receives input from a second-level user of the virtual infrastructure to define a second logical network and connect the second logical network to the first logical network. The first and second logical networks use a same data model and the second-level users are restricted from viewing configuration of the first logical network.

Abstract: An example apparatus includes a deployment monitor to initiate a modification of a number of virtual machines deployed in the computing environment. The virtual machines including a first virtual machine to execute a first component of an application deployed in the computing environment. A dependents identifier is to identify an information dependency of a second virtual machine on information from the first virtual machine. The second virtual machine is to execute a second component of the application. An updater is to update the information dependency based on a scaling status of the first virtual machine. The information dependency in the configuration information including a reference to the first virtual machine.

Abstract: Examples described herein relate to systems and methods for tiered updating of configuration data. Updated configuration data is transmitted to different tiers of nodes. The nodes of a first tier are commanded to use the updated configuration data. After waiting to see if any nodes of the first tier communicate a fault after using the updated configuration data, for each of the additional tiers in the CDN it is sequentially repeated to: transmit a command to the nodes of that additional tier to use the updated configuration data; and after waiting to see if any nodes of any tier communicate a fault after using the updated configuration data, transmitting a command to the nodes of another additional tier to use the updated configuration data.

Abstract: A method for configuring a firewall equipment in a first communication network managed by an access equipment for accessing a second communication network. Such a method implements: obtaining characteristic information of a user equipment in the first network by analyzing its active interfaces in the network; generating configuration rules for configuring the firewall equipment on the basis of the obtained features and of a predetermined configuration model; and transmitting, to the firewall equipment, an update command message to update a configuration, including the determined configuration rules.

Abstract: A method for energy saving in a communication network is provided. The method is implemented by a first network device in a communication network. The first network device may be communicatively connected to a second network device by a FlexE group. The method may comprise measuring a traffic rate of one or more FlexE clients carried over the FlexE group, and determining whether one or more PHYs of the FlexE group is to be shut down or activated based on the measured traffic rate and a first shutdown threshold or a first activation threshold.

Abstract: A correlation-based network security for network devices is disclosed. Correlations between a plurality of network devices are mapped based on telemetry from the network devices to determine correlated devices. The behaviors of the correlated devices are monitored based on telemetry received from the correlated devices to determine a deviant device of the plurality of devices. A prioritized alert for the plurality of network devices is generated from a security alert received for the deviant device.

Abstract: A method is provided for dynamically throttling processing and memory consumption of sensors based on context. Methods may include: receiving first sensor data from a first sensor, where the first sensor data includes data associated with an environment of the sensor; applying an auto-encoder framework to the first sensor data to establish a data difference score between frames of the first sensor data, where a relatively high data difference score corresponds to substantial differences between frames of the first sensor data, and wherein a relatively low data difference score corresponds to insubstantial differences between frames of the first sensor data; reducing a frame rate of data capture of the first sensor in response to the data difference score between frames of the first sensor data being relatively low; capturing first sensor data from the first sensor at the reduced frame rate; and providing for storage of the first sensor data.

Abstract: A policy-driven method and an apparatus are disclosed. The method includes: obtaining at least one policy from a modeling function network element; receiving a first policy identifier triggered by a first model from a prediction function network element, where the first policy identifier is used to identify a first policy; determining the first policy in the at least one policy based on the first policy identifier, where the first policy includes action information corresponding to the first action; executing the first action in the first policy; and sending an execution result of the first action to a data service function network element or the prediction function network element, where the execution result of the first action is used as input data of a second model.

Abstract: Aspects of the present disclosure involve a system comprising a computer-readable storage medium storing at least one program and a method for performing operations comprising: identifying a current social event; obtaining a list of creative tools associated with the current social event; accessing a plurality of content items generated by a client device; determining that one or more of the creative tools have been applied to a first content item in the plurality of content items; generating a subset of content items corresponding to the current social event that includes the first content item; automatically populating a social event template graphic based on the subset of content items corresponding to the current social event to generate a social event graphic card; and receiving a request from the client device to transmit the social event graphic card to one or more other client devices.

Abstract: Methods and systems for establishing communications between an initiating device and another device selected from multiple potential devices are described herein. In some embodiments, a communications between the initiating device and a recipient device may be initiated after a device is selected as the recipient device. The second device may be one of a series of devices associated with a user account that is selected based on any one of a combination of various factors, such as presence information, wakeword count, user preferences, etc.

Abstract: Techniques to display a graphic representation of a computer network topology are described. In one example, a network device is configured to generate an output comprising a graphic representation of a topology of a computer network, the computer network comprising compute nodes interconnected by a packet-based communications network provided by a set of network devices, wherein the policy controller is further configured to: identify, amongst the compute nodes or the network devices, a network element having state information indicating an operational state of interest; modify state information for one or more resources that are coupled to the identified network element; and based upon whether the network topology information indicates a visible graphic symbol for the identified network element, output a visual indicator corresponding to the visible graphic symbol or corresponding to a visible resource that is communicably coupled to the identified network element.

Abstract: This application discloses a method for obtaining a network slice. The method includes: receiving, by a control device, a slice request sent by a user, where the slice request includes an identifier, and the identifier is used to identify an isolation level of a slice requested by the user; obtaining, by the control device, an isolation type of the slice based on the identifier; and creating, by the control device, a network slice based on the isolation type of the slice and a resource topology, where the resource topology is used to describe a network topology and isolation capabilities of N elements in the network topology, the N elements include at least one of a node and a link, N is an integer greater than or equal to 1, and the network slice includes a node and a link that are required for implementing the slice.

Abstract: Systems, methods and devices for distributed memory management comprising a network component configured for network communication with one or more memory resources that store data and one or more consumer devices that use data, the network component comprising a switching device in operative communication with a mapping resource, wherein the mapping resource is configured to associate mappings between data addresses associated with memory requests from a consumer device relating to a data object and information relating to a storage location in the one or more memory resources associated with the data from the data object, wherein each data address has contained therein identification information for identifying the data from the data object associated with that data address; and the switching device is configured to route memory requests based on the mappings.

Abstract: A system and a method are disclosed for describing a mechanism for tracking malicious activity detected on a network. For example, based on network data collected from a server, the disclosed system may detect malicious activity originating from a client device directed to the server. To detect the malicious activity, network data may be captured by the server and analyzed. When malicious activity is detected, the system may track the malicious activity, using the network data, to an earliest connection date of a client device from where the malicious activity potentially originated. The earliest connection date may indicate a potential start date of the malicious activity.

Abstract: Systems and methods for facilitating secure and reliable communications among nodes of different tiers of a multi-tenant SOAR deployment are provided. According to one embodiment, data flow propagation within a hierarchy of nodes of the SOAR deployment is controlled. Responsive to creation of a record by a node: (i) when there exists a parent node in the hierarchy, setting a PID of the record to a TID of the parent node; otherwise, to a TID of the node; (ii) when there exists a child node in the hierarchy, setting a CID of the record to the TID of the child node; otherwise, to the TID of the node; and (iii) maintaining a set of propagation rules for the node relating to permissibility of propagation of the record within the hierarchy. During propagation of the record by the node, the PID and the CID of the record are updated.

Abstract: A method of displaying network topology and a network management device are disclosed. The method includes: determining a sub-network that can be abstracted from the original network topology, wherein the sub-network includes at least two network devices as well as a network link and a network interface between the at least two network devices; abstracting the at least two network devices, as well as the network link and the network interface between the at least two network devices included in the sub-network and obtaining a virtual network device; and displaying a current network topology, the current network topology including the virtual network device which is generated after abstracting the sub-network.

Abstract: An exchange capable of, when a failure occurs, preventing a service from deteriorating without requiring an operation performed by a user is provided. An exchange (1) includes a notification control unit (2) configured to, when the exchange enters an operating state, request a server apparatus to transmit a notification for making a predetermined application installed in a communication terminal registered in the server apparatus register the application in the exchange, and a terminal control unit (3) configured to register the predetermined application in the exchange.