Abstract: Aspects of the subject disclosure may include, for example, identifying a threshold value of a streaming-media key performance indicator (KPI) based on a predetermined target portion of end-user devices that provide an acceptable performance. Performance records are obtained for a content delivery network (CDN) adapted to cache and serve media content requested by the end-user devices. Predicted values of the streaming-media KPI are generated according to the performance records of the CDN and compared to the threshold value of the streaming-media KPI to obtain a comparison. An anomaly is detected according to the comparison, to indicate that a predetermined number of the predicted values of the streaming-media KPI fail to satisfy the threshold value. Other embodiments are disclosed.

Abstract: Devices, computer-readable media, and methods for predictively managing the customer experience in a content distribution network are disclosed. In one example, a method includes acquiring a system log from a component of a content distribution network, detecting an event in a report derived from the system log that has been correlated with a decline in a key performance indicator of the content distribution network, and initiating a corrective action in response to the detecting.

Abstract: A processing system may obtain a first sampled flow record for a first flow in a network, comprising information regarding selected packets of the first flow, derive, from the first sampled flow record, a data volume and a duration of the first flow, and determine a first flow metric for the first flow that is calculated from the data volume and the duration, where the first flow metric is one of a plurality of flow metrics for a plurality of flows, and where the plurality of flow metrics is determined from the plurality of sampled flow records associated with the plurality of flows. The processing system may then classify the first flow into one of at least two classes, based upon the first flow metric and at least a first flow metric threshold.

Abstract: Domains and IPs are scored using domain resolution data to identify malicious domains and IPs. A domain and IP resolution graph for a set of domains and IPs in a system. A seed set of known malicious domains and known malicious IPs is selected from a malicious domain and malicious IP database. A graphical probabilistic propagation inference from the domain and IP resolution graph and the seed set of known malicious domains and known malicious IPs is generated. A malicious score is calculated for each domain in the set of domains and each IP in the set of IPs, and the malicious domain and malicious IP database is updated.

Abstract: Systems and methods may use a math programming model for designing an edge cloud network. The edge cloud network design may depend on various factors, including the number of edge cloud nodes, edge cloud node location, or traffic coverage, among other things.

Abstract: Domains and IPs are scored using domain resolution data to identify malicious domains and IPs. A domain and IP resolution graph for a set of domains and IPs in a system. A seed set of known malicious domains and known malicious IPs is selected from a malicious domain and malicious IP database. A graphical probabilistic propagation inference from the domain and IP resolution graph and the seed set of known malicious domains and known malicious IPs is generated. A malicious score is calculated for each domain in the set of domains and each IP in the set of IPs, and the malicious domain and malicious IP database is updated.

Abstract: Systems and methods may use a math programming model for designing an edge cloud network. The edge cloud network design may depend on various factors, including the number of edge cloud nodes, edge cloud node location, or traffic coverage, among other things.

Abstract: A processing system may obtain a first sampled flow record for a first flow in a network, comprising information regarding selected packets of the first flow, derive, from the first sampled flow record, a data volume and a duration of the first flow, and determine a first flow metric for the first flow that is calculated from the data volume and the duration, where the first flow metric is one of a plurality of flow metrics for a plurality of flows, and where the plurality of flow metrics is determined from the plurality of sampled flow records associated with the plurality of flows. The processing system may then classify the first flow into one of at least two classes, based upon the first flow metric and at least a first flow metric threshold.

Abstract: Architectures and techniques are presented that improve or increase network security for networks that have network slicing capability. In addition to (or instead of) conventional network slices, various security-based network slices can be defined and/or implemented. Network traffic of a subscriber device can be assigned to one of these security based network slices. Assignment can be based on characteristics of the subscriber device and/or based on the current behavior or role of the subscriber device. Further, in response to determining that a behavior of the subscriber device satisfies a criterion (e.g., a criterion relating to malfeasance or misbehavior, a criterion relating to switching to a maintenance cycle, and so on), reassigning network traffic of the subscriber device from the currently assigned network slice to a different network slice.

Abstract: Domains and IPs are scored using domain resolution data to identify malicious domains and IPs. A domain and IP resolution graph for a set of domains and IPs in a system. A seed set of known malicious domains and known malicious IPs is selected from a malicious domain and malicious IP database. A graphical probabilistic propagation inference from the domain and IP resolution graph and the seed set of known malicious domains and known malicious IPs is generated. A malicious score is calculated for each domain in the set of domains and each IP in the set of IPs, and the malicious domain and malicious IP database is updated.

Abstract: Systems and methods may use a math programming model for designing an edge cloud network. The edge cloud network design may depend on various factors, including the number of edge cloud nodes, edge cloud node location, or traffic coverage, among other things.

Abstract: Systems and methods may use a math programming model for designing an edge cloud network. The edge cloud network design may depend on various factors, including the number of edge cloud nodes, edge cloud node location, or traffic coverage, among other things.

Abstract: The transport latency, processing time, and computing time in virtual functions (VFs) and physical functions (PFs) that are allocated to delay sensitive services may be assessed and stored. The assessment may be used to create latency zones for network planning or design, as well as determining in near real time the available resources to meet the service needs.

Abstract: Systems and methods may use a math programming model for designing an edge cloud network. The edge cloud network design may depend on various factors, including the number of edge cloud nodes, edge cloud node location, or traffic coverage, among other things.

Abstract: A method and apparatus for enabling prioritization of signaling messages in a communication network are disclosed. For example, the method receives at least one signaling message, and classifies each of the at least one signaling message. The method schedules each of the at least one signaling message for processing, and discards selectively one or more signaling messages that have been scheduled under an overload condition.

Abstract: A computer readable storage medium includes a set of instructions executable by a processor. The instructions are operable to assign a unique identifier to each of a plurality of node subsets of a network, the node subsets being created by damage to the network; assign one or more of the identifiers to each of a plurality of components of the damaged network based on a connectivity to the one or more of the node subsets and corresponding identifiers of the node subsets; assign one or more of the identifiers to each of one or more node types of the plurality of components by assigning each of the node types all of the identifiers of any of the components of the node type; and evaluate a first connectivity between a first one of the components and a second one of the components by determining whether they share at least one of the identifiers.

Abstract: A method and apparatus for enabling prioritization of signaling messages in a communication network are disclosed. For example, the method receives at least one signaling message, and classifies each of the at least one signaling message. The method schedules each of the at least one signaling message for processing, and discards selectively one or more signaling messages that have been scheduled under an overload condition.

Abstract: A method and apparatus for enabling prioritization of signaling messages in a communication network are disclosed. For example, the method receives at least one signaling message, and classifies each of the at least one signaling message. The method schedules each of the at least one signaling message for processing, and discards selectively one or more signaling messages that have been scheduled under an overload condition.

Abstract: Preemptive based radio access control is facilitated. Queue data is received, wherein the queue data corresponds to a set of requests for highly prioritized communications included on a prioritized queue. The queue data is used to determine whether a set of conditions for involuntarily terminating a radio communication session has been met. Session data corresponding to characteristics for each of a plurality of radio communication sessions are also received and utilized to determine which of the plurality of radio communication sessions to terminate if the set of conditions for involuntarily terminating a radio communication session have been met.

Abstract: Preemptive based radio access control is facilitated. Queue data is received, wherein the queue data corresponds to a set of requests for highly prioritized communications included on a prioritized queue. The queue data is used to determine whether a set of conditions for involuntarily terminating a radio communication session has been met. Session data corresponding to characteristics for each of a plurality of radio communication sessions are also received and utilized to determine which of the plurality of radio communication sessions to terminate if the set of conditions for involuntarily terminating a radio communication session have been met.