Abstract: A building system includes heating ventilation or air conditioning (HVAC) devices configured for communication on a building automation network and a communication engine. The communication engine is configured to provide a diagnostic attribute. The diagnostic attribute indicates communications with the HVAC devices as being according to a first communication protocol or at least one different communication protocol. Systems and methods may detect insecure communications and/or upgrade in secure communication protocols in wireless or wired networks, such as, BACnet systems and/or subsystems.

Abstract: A distributed system may implement evaluating placement configurations for distributed resource placement. Placement requests for a partition of a distributed resource may be received. An evaluation of prospective placement configurations of the distributed resource is performed that locates the partition at different resource hosts. In some embodiments, placement configurations may be analyzed with respect to infrastructure zone locality. Multiple infrastructure zone localities may be analyzed and combined to evaluate prospective placement configurations. Prospective placement configurations may be analyzed with respect to other criteria, such as resource host utilization data. Based, at least in part, on the evaluation of the prospective placement, a resource host is identified for placing the partition.

Abstract: Embodiments improve error detection and recovery in media access control security sessions. A MACsec session is torn down after three liveness time intervals elapse without receiving a MACsec key exchange protocol data unit (MKPDU) from a remote peer. This delay between a cessation of effective network communication over the MACsec session and the expiration of the three “liveness” intervals results in increased packet loss and an increased network convergence time as a network continues to route/forward data over the MACsec session for a period of time after the MACsec session has entered secure block mode. To solve this problem, embodiments define a new alarm, called a MACsec link alert, which is raised earlier than a MACsec session timeout generated by traditional embodiments. The MACsec link alert is raised, by at least some embodiments, after a failure to successfully receive an MKPDU from the remote peer after a single MACsec “liveness” timeout interval elapses.

Abstract: The present disclosure is directed to allocating communication resources via information technology infrastructure. A system can provide a communication tag and an analytics tag for integration in a web site. The system can receive a request to allocate a phone number generated based on an interaction between the communication tag and the analytics tag. The request can include a first field comprising the communication endpoint identifier, a second field comprising the site identifier for the web site, and a third field comprising a session identifier for the computing device. The system can determine a virtual phone number to assign to a combination of the values of the fields provided in the request, and create a link between the assigned virtual number and the combination. The system can provide the assigned virtual phone number to the computing device that initiated the request.

Abstract: Disclosed are techniques regarding aspects of implementing client configurable logic within a computer system. The computer system can be a cloud infrastructure. The techniques can include associating signature information with the client configurable logic for various purposes.

Abstract: Generating shared workspaces for enabling communications between users of different organizations and facilitating discovery of users associated with different organizations is described. A first user can generate a shared workspace and associate one or more other organizations therewith. The first user can designate first criteria associated with joining the shared workspace. The communication platform can receive a request from a second user to join the shared workspace. Based on a determination that the second user satisfies the first criteria, the communication platform can enable the second user access to the shared workspace. In some examples, an administrator associated with an organization of the second user can establish second criteria for users of the organization to join the shared workspace. In such examples, the communication platform can enable the second user access to the shared workspace based on a determination that the second user also satisfies the second criteria.

Abstract: A remote access and control system for test and measurement setups is provided. The remote access and control system comprises at least one virtual network, wherein the at least one virtual network is persistently defined as a set of test and measurement instruments and accompanying hardware.

Abstract: Embodiments provide efficient delivery of multiple media channels to in-transport terminals, for example, to reduce channel zapping delay in a bandwidth efficient manner. For example, an in-transport media (ITM) server can distribute multiple channel offerings to ITM clients in a transport craft. Meanwhile, the ITM server can monitor which channel offerings are presently being consumed via the ITM clients, and can transmit feedback to a remote media server, accordingly. Based on the feedback, the ITM server can receive the channel offerings from the remote media server, in such a way that one or more of the channel offerings is received as a low-fidelity instance when not presently being consumed via any of the ITM clients, and one or more of the channel offerings is received as a high-fidelity instance when presently being consumed via at least one of the ITM clients.

Abstract: A method for providing a notification system in a virtual private network (VPN), the method comprising configuring a VPN server to receive, from a user device, an indication that data of interest is to be requested, the indication including domain information associated with a host device capable of providing the data of interest; and configuring the VPN server to transmit, based at least in part on the domain information, a notification indicating to the user device that the data of interest to be received from the host device potentially includes harmful content. Various other aspects are contemplated.

Abstract: The embodiments herein disclose methods and systems for reducing network protocol latency for at least one application on an electronic device, a method includes pre-resolving a plurality of Domain Name System (DNS) queries for the at least one application. The plurality of DNS queries is pre-resolved before triggering at least one DNS resolution query from the at least one application. The method includes pre-connecting a plurality of TCP connections of the at least one application with at least one Transmission Control Protocol (TCP) server. The plurality of TCP connections are pre-connected before triggering at least one TCP connection request from the at least one application. The method includes exchanging a plurality of secure certificates with the at least one TCP server to secure the plurality of pre-connected TCP connections. The secure certificates are exchanged before receiving at least one request from the at least one application for secure certificate negotiation.

Abstract: A method for utilizing a security service engine (SSE) to assess security vulnerabilities on a security gateway element (SGE) includes establishing a security configuration for a SGE corresponding to a provisioned security service policy definition and configuring a plurality of SGE security service managers hosted by a SSE on the SGE based on policies included in the security service policy definition. The method further includes executing, by the SSE, each of the plurality of SGE security service managers as a software based service in real time to enforce the policies of the security service policy definition on the SGE and remediating the security configuration of the SGE if one or more of the plurality of SGE security service managers detects a security vulnerability corresponding to the operation of the SGE.

Abstract: A call processing method and a gateway are disclosed, where the gateway is configured to process a call between a multipoint control unit (MCU) and a terminal device. The method includes receiving, by the gateway, a call initiated by the terminal device; negotiating, by the gateway, with the terminal device, to establish a first call between the gateway and the terminal device and determine a media type of the first call; and adding the negotiated media type of the first call to a call established between the gateway and the MCU, where the media type of the first call is different from that of the established call. In this way, the negotiated media type of the call is added to the call established between the gateway and the MCU.

Abstract: Examples described herein provide a computer-implemented method that includes converting, by a first processing system, a binary data stream into a string using encoding. The method further includes advertising, by the first processing system, standard characteristics to a second processing system. The method further includes receiving, by the first processing system, a request from the second processing system for a payload size and payload characteristics for the data to be transmitted from the first processing system to the second processing system. The method further includes transmitting, by the first processing system, the payload size and the payload characteristics to the second processing system.

Abstract: Disclosed are systems and methods for securing a network using one or more controllers and one or more network nodes. A method may utilize a packet processing engine configured to process incoming network packets, a processing analysis engine configured to perform relatively more complex processing and analysis, and one or more controllers configured to coordinate one or more packet processing engines and one or more processing analysis engines across a network to perform endpoint threat detection and mitigation.

Abstract: Systems, methods, and computer-readable media for assessing reliability and trustworthiness of devices operating within a network. An ARP responder can receive an ARP request from an ARP requestor for performing address resolution between the ARP requestor and the ARP responder in a network environment. The ARP responder can build an ARP response including attestation information of the ARP responder. Further, the ARP responder can provide, to the ARP requestor, the attestation information for verifying the ARP responder using the ARP response and the attestation information of the ARP responder.

Abstract: A method of managing an online support group to increase the odds that users will attain their wellness goals is disclosed. A request from a user to join a support group is received. A preference of the user with respect to a type of the support group is received. The support group is selected from a plurality of support groups based on the preference of the user and a preference of a member of the support group. Based on an acceptance by the user of an option to join the support group, the plurality of support groups is reorganized.

Abstract: A network adapter includes a host interface configured to communicate with a host, a network interface configured to communicate with a communication network, and packet processing circuitry. The packet processing circuitry is configured to receive a packet from the host via the host interface, or from the communication network via the network interface, to receive an indication of a network time used for synchronizing network elements in the communication network, to match the packet to a rule, the rule including a condition and an action, and to perform the action in response to the packet meeting the condition, wherein one or more of (i) the condition in the rule and (ii) the action in the rule, depend on the network time.

Abstract: Technology is described for mapping virtualized infrastructure resources and associated flows in a virtualized infrastructure of a service provider environment. An application dataflow involving a virtualized infrastructure resource may be described using a swim lane model. Controls within the virtualized infrastructure to enforce segmentation and security of the application dataflow may be deduced from how the application dataflow is secured into a corresponding swim lane. An infrastructure mapping service may use information that identifies virtualized infrastructure resources and describes application dataflows in the virtualized infrastructure to generate a map of the virtualized infrastructure in the form of a graph. The graph may provide a visual representation that is easy for an auditor or engineer to understand.

Abstract: Systems and methods are disclosed for bidirectional multifunction communication between a computing device and applications located at an external server. The bidirectional communications allows an operation to be performed on a file using a computing device and an external server. In one implementation, an application resides on a desktop computer that is connected to the Internet. The application sends a request to an external server accessible through the Internet using a bidirectional communication system. The server accepts and processes the request and provides data back to the computer via the same bidirectional communication system. A user may then access the data, manipulate it and provide an additional request to the server via the bidirectional communication system.

Abstract: A method for Internet of Things (IoT) network security includes collecting information for each network device (device), determining a minimum viable resource allocation for each device based on the information, which defines the minimum resources needed by each device to engage the IoT network and handle data, and for each device, distributing minimum viable resource allocations and rules, determining monitoring sets, monitoring using the monitoring set, collecting updated information based partially on the monitoring set, analyzing the updated information to determine trends and insights relative to the devices and the IoT network, updating the monitoring set, minimum viable resource allocation, and rules based on the analyzed updated information, checking compliance with a current minimum viable resource allocation and rules, identifying devices having violations, and performing same on a continuous as it and automatic basis.