Abstract: Access control is provided for peer-to-peer communication between a source peripheral device and a destination peripheral device without going through a host device. The access control mechanism can allow or block a request for a transaction to go out via a port of the source peripheral device to the destination peripheral device by comparing an attribute associated with the transaction with a filter attribute stored in memory. Embodiments of the disclosed technologies can allow programming of different filter attributes for different tenants in a multi-tenant environment.

Abstract: A vehicle information transmission system that carries out communication with a management server that manages a vehicle includes an electronic control unit. The electronic control unit is configured to acquire vehicle information in accordance with a third sampling pattern that is a combination of a first sampling pattern and a second sampling pattern. The vehicle information is transferred within an in-vehicle network installed in the vehicle. The first sampling pattern is a sampling pattern in which the vehicle information is sampled at a change point at which a predetermined change has occurred. The second sampling pattern is a sampling pattern in which the vehicle information is sampled at intervals of a predetermined period. The electronic control unit is configured to transmit the acquired vehicle information to the management server.

Abstract: A controller is provided for a Cloud based service handling multiple types of traffic in a telecommunications network, the controller comprising: a first stage configured to automatically model use of Cloud resources allocated to the service for specific workloads of each of a plurality of traffic types, so as provide a variety of models for each traffic type; a second stage configured to automatically reduce the number of and generalise the models so as to provide generalised models for each traffic type applicable to other workloads than the specific loadings; a third stage configured to automatically evaluate accuracy of the generalised models for various combinations of given workloads, in each combination each of the given workloads being of a corresponding traffic type, and to select one of the generalised models dependent upon evaluated accuracy; and a fourth stage configured to control operation of the Cloud resources according to the selected model.

Abstract: Systems and approaches for interacting with industrial equipment are provided that include an interface having an input and an output, and a processor coupled to the interface. The processor is configured to link a uniform identification construct to a device and receive a request to access the uniform identification construct. The processor is further configured to translate the uniform identification construct into an internet protocol (IP) address and route the request to the device having the uniform identification construct according to the IP address via the output.

Abstract: The present disclosure is for systems and methods for asynchronous communication within a social networking system. Specifically, the present invention is for receiving capsuled data that is directed to a recipient. The capsuled data may be partially viewable by a recipient within the social networking system, but may not become fully viewable until a trigger condition is met. The systems and methods disclosed herein enable a determination of whether a trigger condition is met, and, if it is met, the capsuled data may be fully viewable by a recipient.

Abstract: Systems, methods, and devices for a cyberphysical (IoT) software application development platform based upon a model driven architecture and derivative IoT SaaS applications are disclosed herein. The system may include concentrators to receive and forward time-series data from sensors or smart devices. The system may include message decoders to receive messages comprising the time-series data and storing the messages on message queues. The system may include a persistence component to store the time-series data in a key-value store and store the relational data in a relational database. The system may include a data services component to implement a type layer over data stores. The system may also include a processing component to access and process data in the data stores via the type layer, the processing component comprising a batch processing component and an iterative processing component.

Abstract: Systems, methods, and devices for a cyberphysical (IoT) software application development platform based upon a model driven architecture and derivative IoT SaaS applications are disclosed herein. The system may include concentrators to receive and forward time-series data from sensors or smart devices. The system may include message decoders to receive messages comprising the time-series data and storing the messages on message queues. The system may include a persistence component to store the time-series data in a key-value store and store the relational data in a relational database. The system may include a data services component to implement a type layer over data stores. The system may also include a processing component to access and process data in the data stores via the type layer, the processing component comprising a batch processing component and an iterative processing component.

Abstract: A quick relay communication protocol is used by an initiating communication device (such as a wearable electronic device, e.g., a smart watch) and/or a recipient communication device (such as a companion electronic device to the wearable electronic device, e.g., a smart phone, a tablet computer or a laptop computer) to selectively communicate messages via different communication channels. Based on available connections and a communication constraint associated with a message, a processor executing a program module in an application layer in the initiating communication device provides transmission instructions to an interface circuit in the initiating communication device, which transmits a message to the recipient communication device based on the transmission instructions.

Abstract: Methods and systems for a networked storage environment are provided. One method includes mirroring a plurality of requests from a switch and transmitting the mirrored plurality of requests to a remote acquisition unit; extracting application layer protocol data units from assembled transport layer packets; parsing the application layer protocol data units to obtain file system requests; identifying storage volume identifiers from the parsed file system requests that are associated with a greatest number of operations; identifying network addresses for client systems initiating the greatest number of operations for the storage volumes and network addresses of target storage systems managing the storage volumes; and providing a total number of operations for the plurality of requests in a given time, the identified storage volume identifiers, the network addresses of the client systems and the network addresses of the target storage systems to a management console.

Abstract: A network element includes circuitry and multiple ports. The multiple ports are configured to connect to a communication network. The circuitry is configured to receive multiple packets from the communication network via one or more input ports, and store the received packets in a buffer of the network element, to schedule transmission of the packets stored in the buffer to the communication network via one or more output ports, and in response to a request to provide a snapshot of at least a portion of the buffer, to mirror for transmission, via one or more dedicated ports, only a part of the portion that was received in the network element prior to the request.

Abstract: The disclosed technology relates to a network agent for reporting to a network policy system. A network agent includes an agent enforcer and an agent controller. The agent enforcer is configured to implementing network policies on the system, access data associated with the implementation of the network policies on the system, and transmit, via an interprocess communication, the data to the agent controller. The agent controller is configured to generate a report including the data and transmit the report to a network policy system.

Abstract: A server automatically generates a response on behalf of a first user to a request received from a second user. The server receives configuration information for configuring automatic response generation for the first user, including information identifying the first user, information specifying a type of service provided by the first user including a plurality of parameters that define details for the service, and information providing an availability of the first user to provide the specified type of service. A request is received from the second user. The first user is selected from multiple users to respond to the request. A response is automatically generated using at least some of the received configuration information. The response is automatically transmitted to the second user on behalf of the first user.

Abstract: Techniques for intelligently managing a virtual private network (VPN) gateway in a cloud computing system are disclosed herein. In one embodiment, an instance of a VPN gateway can query whether a logic lock on a network address is maintained by another instance via periodic renewal. In response to receiving a query result indicating that a logic lock on the network address is lost by the another instance, the instance can migrate a VPN connection originally handled by the another instance from the another instance to the instance such that a private network is connected to the instance via the migrated VPN connection to reduce downtime for accessing computing resources in the cloud computing system.

Abstract: A computer-implemented method for preventing spam emails from a share site includes providing a network-based computer system to enable users to set up share sites and to send emails from the share sites, detecting potential spam emails based on one or more spam detection rules, identifying false positive emails in the potential spam emails based on one or more false alarm reduction rules, removing false positive emails from the potential spam emails to produce a list of verified spam emails, identifying a sender of the list of verified spam emails as a spammer, and prohibiting the spammer from sending emails from one or more share sites owned spammer.

Abstract: A network-accessible service provides an enterprise with a view of all identity and data activity in the enterprise's cloud accounts. The service enables distinct cloud provider management models to be normalized with centralized analytics and views across large numbers of cloud accounts. The service enables an enterprise to model all activity and relationships across cloud vendors, accounts and third party stores. Display views of this information preferably can pivot on cloud provider, country, cloud accounts, application or data store. Using a domain-specific query language, the system enables rapid interrogation of a complete and centralized data model of all data and identity relationships. User reports may be generated showing all privileges and data to which a particular identity has access. Similarly, data reports shown all entities having access to an asset can be generated.

Abstract: In one embodiment, a method, system and apparatus are described, the method including receiving an initial request from a client device, being a request to establish a connection, including an initial connection IP address of the client device, recording the initial connection IP address, receiving an additional request at the network interface, the additional request comprising a URL, an actual client IP address of the client device, and a request for streaming content, comparing the initial connection IP address with the actual client IP address, performing one of providing the streaming content in response to the additional request if the initial connection IP address and the actual client IP address are the same, or providing a response to the additional request comprising a redirect instruction if the initial connection IP address and the actual client IP address are different. Related methods, apparatus, and systems are also described.

Abstract: Consumption-based licensing of network features based on blockchained transactions includes receiving, at a server having connectivity to a network including a plurality of network devices, a request from a particular network device of the plurality of network devices for a feature that is licensed in the network on a per-use basis. Feature-specific key blockchain elements and a feature-specific template are generated for the feature and at least one message that includes the feature-specific key blockchain elements and the feature-specific template is sent to the particular network device. The message enables the plurality of network devices to generate one or more blockchain transactions related to consumption of the feature when a usage interval associated with the feature expires.

Abstract: Systems and methods for managing a network are disclosed. One method can comprise transmitting a first identifier associated with a first service. Access to the first service can be provided to a user device using the first identifier. A filter element associated with the user device can be received. Transmission of a second identifier associated with a second service can be filtered based on the filter element, wherein filtering transmission inhibits access of the user device to the second service.

Abstract: This disclosure relates to methods, systems, and storage media for generating a performance profile of a node profile. First electronic activities linked to a first node profile can be accessed. For each first electronic activity, a type of the first electronic activity can be determined. A feature extraction policy can be selected to generate a first feature array for the first electronic activity. The first feature array for the first electronic activity can be generated based on the type of the first electronic activity. A first performance profile of the first node profile can be generated for the time period by providing the generated first feature array for each first electronic activity to one or more models trained using second feature arrays corresponding to second electronic activities of second node profiles. An association between the first node profile and the first performance profile can be stored.

Abstract: Methods and apparatuses for identifying a domain of a command and control server of a botnet are described. Upon receipt of a request to register a domain for a service that includes a proxy server, where the proxy server is to receive and process traffic for that domain if registration is successful, a determination of whether the domain was generated by a domain generation algorithm (DGA) is performed. Responsive to determining that the domain was generated by the DGA, accepting registration of the domain for the service and causing the proxy server to monitor communications received to and from the domain.