Abstract: Examples described herein include virtualized environments including a virtualized file server. Examples of secure domain join processes are described which may facilitate joining a virtualized file server or portions thereof to a domain. In some examples, the secure domain join process itself, and/or an associated file server virtual machine, may have insufficient credentials to write objects into an active directory. The active directory credentials need not be shared with the file server virtual machine. Rather, in some examples, the secure domain join process may provide a user system with a list of actions to be performed using active directory credentials.

Abstract: Various examples are directed to systems and methods for executing transactions in a hybrid computing environment. A volume transaction engine may receive first transaction request data from a first transaction platform application and select transaction description data describing a plurality of process operations for executing the first transaction. The volume transaction engine may execute the first process operation at least in part by accessing a first backend system executing at the cloud platform deployment and execute a second process operation at least in part by accessing a second backend system executed by an on-premise computing system.

Abstract: Systems and methods are provided for selectively replacing commercials that are in a video data stream with alternative commercials. Automatic content recognition (ACR) is performed on the video data stream to detect the identity of each of the commercials played in a commercial block during a commercial break. Commercials in the video data stream which are detected as being displayed on a video display device are stored in a first database, and commercials in the video data stream which are detected as not being displayed on the video display device are stored in a second database. A rules engine defines how commercials in the video data stream should be replaced with other commercials. Commercials in the video data stream that were previously detected as being displayed on the video display device are selectively replaced with commercials that were previously detected as not being displayed on the video display device.

Abstract: An optical system for performing an absorption measurement of a medium sample includes a laser source configured to output a laser beam having a wavelength corresponding to an absorption region of interest; a ringdown cavity comprising a chamber configured to receive the medium sample, an input mirror at an input end, an output mirror at an output end, and an optical axis that extends through the centers of the input mirror and the output mirror; a coupling device configured to couple the laser beam through the input mirror into the chamber; and a detector optically coupled with the cavity, and configured to detect an intensity of light of the wavelength corresponding to the absorption region of interest that extends through the output mirror, wherein a cavity geometry of the cavity increases the re-entrant condition of the cavity relative to a conventional cavity comprised of two spherical mirrors.

Abstract: This document describes systems, devices, and methods for testing the integration of a content provider's origin infrastructure with a content delivery network (CDN). In embodiments, the teachings hereof enable a content provider's developer to rapidly and flexibly create test environments that send test traffic through the same CDN hardware and software that handle (or at least have the ability to handle) production traffic, but in isolation from that production traffic and from each other. Furthermore, in embodiments, the teachings hereof enable the content provider to specify an arbitrary test origin behind its corporate firewall with which the CDN should communicate.

Abstract: A system and method for securing an application through an application-aware runtime agent can include: acquiring a code profile, instrumenting the application with a runtime agent according to the code profile, enforcing the runtime agent on the execution of the application, and responding to the runtime agent. Enforcing the runtime agent on the execution of the application can include monitoring the execution flow, which comprises of monitoring the utilization of the controls through the execution of the application; detecting a threat, which comprises identifying a section of the execution flow as a potential security threat; and regulating the execution flow to prevent or ameliorate the security threat. Responding to the runtime agent can include responding to the security threat and providing a user interface that may output runtime agent diagnostics and trigger alerts.

Abstract: A method of providing a plurality of controller certificates for a plurality of controllers within a Building Management System (BMS) includes downloading project information defining the BMS and using the downloaded project information to solicit a Certificate Signing Request (CSR) from each of the plurality of controllers of the BMS. The received CSRs are uploaded to a remote server so that the remote server can generate a corresponding controller certificate for each of the plurality of controllers of the BMS. The generated controller certificates are then downloaded to the corresponding one of the plurality of controllers of the BMS.

Abstract: Methods and apparatuses are described for automated predictive virtual assistant intervention. A server computing device captures clickstream data corresponding to web browsing sessions of a user at a client computing device, and generates predicted needs of the user based upon the clickstream data. The server computing device identifies virtual assistant messages for the user based upon the predicted needs of the user, and displays the identified virtual assistant messages in a virtual assistant application on the client computing device.

Abstract: Techniques for EVPN Host Routed Bridging (HRB) and EVPN cloud-native data center with Host Routed Bridging (HRB) are described. A host computing device of a data center includes one or more containerized user-level applications. A cloud native virtual router is configured for dynamic deployment by the data center application orchestration engine and operable in a user space of the host computing device. Processing circuitry is configured for execution of the containerized user-level applications and the cloud native virtual router. The cloud native virtual router comprises a containerized routing protocol process configured to operate as a control plane, and a data plane for the containerized router. The data plane is configured to operate an ethernet virtual private network (EVPN) encapsulation / decapsulation data path of an overlay network for communicating layer two (L2) network traffic of the containerized user applications over a switch fabric of the data center.

Abstract: Various aspects of a system and method for driving assistance along a path are disclosed herein. In accordance with an embodiment, a unique identifier is received from a communication device at an electronic control unit (ECU) of a first vehicle. The unique identifier is received when the first vehicle has reached a first location along a first portion of the path. A communication channel is established between the first vehicle and the communication device based on the received unique identifier. Data associated with a second portion of the path is received by the ECU from the communication device based on the established communication channel. Alert information associated with the second portion of the path is generated by the ECU based on the received data.

Abstract: The present invention relates to a method for reducing or preventing progression of a tumor or treating cancer. The method comprises administering to a subject, a binding agent comprising a first binding region binding to human CD137 and a second binding region binding to human PD-L1. The amount of binding agent administered in each treatment cycle is preferably about 0.3-5 mg/kg body weight or about 25-400 mg in total.

Abstract: An optical system for performing an absorption measurement of a medium sample includes a laser source configured to output a laser beam having a wavelength corresponding to an absorption region of interest; a ringdown cavity comprising a chamber configured to receive the medium sample, an input mirror at an input end, an output mirror at an output end, and an optical axis that extends through the centers of the input mirror and the output mirror; a coupling device configured to couple the laser beam through the input mirror into the chamber; and a detector optically coupled with the cavity, and configured to detect an intensity of light of the wavelength corresponding to the absorption region of interest that extends through the output mirror, wherein a cavity geometry of the cavity increases the re-entrant condition of the cavity relative to a conventional cavity comprised of two spherical mirrors.

Abstract: In an approach, a processor receives a request to deploy a workload in a container environment, where: the container environment comprises a plurality of external providers running container environment clusters; and the request (i) includes one or more requirements of the workload and (ii) does not specify a particular external provider of the plurality of external providers. A processor determines a cluster, from the plurality of external providers running the container environment clusters, that meets the one or more requirements of the workload. A processor deploys the workload on the determined cluster.

Abstract: Disclosed embodiments provide techniques for multi-destination probabilistic data replication. Data transfer occurs over multiple time intervals. A data image to be transferred is divided into chunks. A manifest is created that lists each chunk and specifies an order, such that the data image can be reconstructed at its destination. The manifest is sent to the destination. The chunks may be sent to the destination, or to an aggregator site that then forwards the chunks to the destination. The chunks are reassembled at the destination based on information in the manifest. A probabilistic function is used to select an aggregator site based on an efficacy. The efficacy is based on a reward function that is computed for destinations for each time interval. A data transfer policy is periodically updated with a new efficacy value which is used for adjustment of the probabilistic function.

Abstract: Examples of systems described herein include a file server virtual machine of a virtualized file server configured to manage storage of a plurality of storage items. The file server virtual machine including a file system configured to receive an access request directed to a storage item of the plurality of storage items and associated with a user. The file system is further configured to retrieve an access control list having permissions information associated with the storage item, and to cache a permissions profile for the user including all permissions pertaining to the user for the storage item. The file system is further configured to determine whether the access request is permissible based on the cached permissions profile.

Abstract: Examples of systems described herein include a virtualized file server including a first file server virtual machine and a second file server virtual machine configured to manage a distributed file share of storage items. The second file server virtual machine is configured to manage a particular storage item of the distributed file share of storage items. The first file server virtual machine is configured to, in response to receipt of a referral request for a file share path for the particular storage item from a client, look up a file share path for the particular storage item in a map of at least a portion of the distributed file share of storage items, and provide a referral with the file share path that identifies the second file server virtual machine.

Abstract: A heating, ventilation, and air-conditioning, HVAC, system and a method of controlling a HVAC system, The method includes: successively for at least two HVAC devices of a plurality of HVAC devices: controlling the HVAC device in accordance with a set target temperature value which is different from an environmental temperature value, wherein the other HVAC devices of the plurality of HVAC devices are deactivated or running with unvarying running parameters, and for at least two environmental sensors of a plurality of environmental sensors, determining whether environmental parameters detected by the environmental sensor change; correlating at least one environmental sensor to the HVAC devices for which a change of the environmental parameters is determined; and controlling the HVAC system to change at least one environmental parameter associated with the at least one environmental sensor using the HVAC devices correlated with the at least one environmental sensor.

Abstract: A method of training a comfort model used for controlling a heating, ventilation, and air-conditioning, HVAC, system. The method includes: a user device providing a plurality of user feedbacks, each of the plurality of user feedbacks is provided at a respective point in time and describes a thermal comfort of a user using the user device; at each point in time associated with the plurality of user feedbacks, each of a plurality of HVAC devices detecting running parameters; and for each of the plurality of user feedbacks: inputting the running parameters of each of the plurality of HVAC devices detected at the respective point in time into the comfort model to generate a predicted thermal comfort, determining a loss value by comparing the predicted thermal comfort with the thermal comfort described by the respective user feedback, and training the comfort model to reduce the loss value.

Abstract: Disclosed embodiments provide techniques for multi-destination probabilistic data replication. Data transfer occurs over multiple time intervals. A data image to be transferred is divided into chunks. A manifest is created that lists each chunk and specifies an order, such that the data image can be reconstructed at its destination. The manifest is sent to the destination. The chunks may be sent to the destination, or to an aggregator site that then forwards the chunks to the destination. The chunks are reassembled at the destination based on information in the manifest. A probabilistic function is used to select an aggregator site based on an efficacy. The efficacy is based on a reward function that is computed for destinations for each time interval. A data transfer policy is periodically updated with a new efficacy value which is used for adjustment of the probabilistic function.

Abstract: A system and method for application security profiling that includes extracting a code property graph from at least a subset of a code base; generating a code profile from the code property graph, wherein generating the code profile occurs prior to a compilation of the code base; and applying the code profile, comprising of identifying sections of interest within the code base.