Abstract: Described herein are supervised machine learning techniques for generating a first machine learned model, which receives, as input, values for a set of utilization metrics for a server computer and generates, as output, a service-specific health score for the server computer, and for generating a second machine learned model, which receives, as input, values for the volume of application traffic directed to a group of server computers hosting the service for each of several prior time periods and generates, as output, an application traffic forecast for the group of server computers, for a future time period.

Abstract: Various embodiments of the present technology include an improved system for measuring the impacts of feature rollouts on machine utilization and service performance. More specifically, embodiments of the present technology include an exposure control system based on randomized machine assignments and a corresponding score card for comparing machine utilization metrics. In an embodiment, a computing apparatus identifies a new feature in a codebase, wherein the codebase has been updated with the new feature across multiple resources, enables the new feature for a target group of the multiple resources while keeping the new feature dormant for a control group of the multiple resources, collects performance information for the target group and the control group for a time period, and generates a visualization of one or more differences between the performance information for the target group and the performance information for the control group for the time period.

Abstract: An asset monitoring system receives a first multi-dimensional representation of an asset associated with an industrial process. The asset monitoring system generates a second multi-dimensional representation of the asset from the first multi-dimensional representation. The second multi-dimensional representation may be a two-dimensional vector graphic representation of the asset and may be configurable via a graphical user interface. In generating the second multi-dimensional representation, the asset monitoring system maps at least one operational parameter associated with the asset to the second multi-dimensional representation. The asset may include one or more devices of the asset monitoring system. The asset monitoring system may display, via a dashboard at the graphical user interface, the second multi-dimensional representation and status information associated with the asset.

Abstract: Systems, methods, and computer-readable media for gathering network intrusion counter-intelligence. A system can maintain a decoy network environment at one or more machines. The system can identify a malicious user accessing network services through the network environment. Further, the system can receive network service access requests from the user at one or more machines in the network environment and subsequently direct the network service access requests from the malicious user to the decoy network environment based on an identification of the malicious user. The network services access requests can be satisfied with network service access responses generated in the decoy network environment. Subsequently, the system can maintain malicious user analytics based on the network service access requests of the malicious user that are directed to the decoy network environment.

Abstract: The present disclosure relates to methods, systems, and non-transitory computer readable media for discovering policy scopes within an enterprise network and managing network policies for discovered policy scopes. In one aspect, a method includes identifying one or more communities of devices in an enterprise network; defining, from the one or more communities of devices, policy scopes in the enterprise network; generating a hierarchical representation of the policy scopes; identifying, based on the hierarchical representation of the policy scopes, one or more policies governing traffic flow between devices associated with each of the policy scopes; and managing application of the one or more policies at the devices.

Abstract: A method—for measuring an amount of a gaseous species present in a gas—comprises placing the gas between a light source and a measurement photodetector. The light source is able to emit an incident light wave that propagates through the gas to the measurement photodetector. The gas is illuminated with the light source. A measurement intensity, of the light wave transmitted by the gas, is measured with the measurement photodetector. An intensity of a reference light wave, emitted by the light source in a reference spectral band, is measured with a reference photodetector. The illumination and measuring are performed at multiple measurement times, at each of which the gas's absorption of the incident light wave is estimated and an amount of the gaseous species is estimated on the basis of the estimated absorption. Estimating the absorption comprises applying a correction function, that varies over time, to the reference intensity.

Abstract: Systems, methods, and computer-readable for defining host functionalities in a computing environment include obtaining two or more snapshots comprising information pertaining to two or more processes executing in two or more hosts, the two or more snapshots being obtained at two or more points in time from the two or more hosts. One or more long-running processes amongst the two or more processes are identified based on one or more criteria associated with long-running processes. One or more priorities associated with the one or more long-running processes and used for defining functionalities for at least a subset of the two or more hosts, where high priorities are assigned to long-running processes, such as web server or database server processes, which are unique to at least the subset of the two or more hosts. Resources may be provisioned based on these host functionalities.

Abstract: Systems, methods, and computer-readable media for gathering network intrusion counter-intelligence. A system can maintain a decoy network environment at one or more machines. The system can identify a malicious user accessing network services through the network environment. Further, the system can receive network service access requests from the user at one or more machines in the network environment and subsequently direct the network service access requests from the malicious user to the decoy network environment based on an identification of the malicious user. The network services access requests can be satisfied with network service access responses generated in the decoy network environment. Subsequently, the system can maintain malicious user analytics based on the network service access requests of the malicious user that are directed to the decoy network environment.

Abstract: The present disclosure relates to methods, systems, and non-transitory computer readable media for discovering policy scopes within an enterprise network and managing network policies for discovered policy scopes. In one aspect, a method includes identifying one or more communities of devices in an enterprise network; defining, from the one or more communities of devices, policy scopes in the enterprise network; generating a hierarchical representation of the policy scopes; identifying, based on the hierarchical representation of the policy scopes, one or more policies governing traffic flow between devices associated with each of the policy scopes; and managing application of the one or more policies at the devices.

Abstract: Systems, methods, and computer-readable media for gathering network intrusion counter-intelligence. A system can maintain a decoy network environment at one or more machines. The system can identify a malicious user accessing network services through the network environment. Further, the system can receive network service access requests from the user at one or more machines in the network environment and subsequently direct the network service access requests from the malicious user to the decoy network environment based on an identification of the malicious user. The network services access requests can be satisfied with network service access responses generated in the decoy network environment. Subsequently, the system can maintain malicious user analytics based on the network service access requests of the malicious user that are directed to the decoy network environment.

Abstract: Systems, methods, and computer-readable for defining host functionalities in a computing environment include obtaining two or more snapshots comprising information pertaining to two or more processes executing in two or more hosts, the two or more snapshots being obtained at two or more points in time from the two or more hosts. One or more long-running processes amongst the two or more processes are identified based on one or more criteria associated with long-running processes. One or more priorities associated with the one or more long-running processes and used for defining functionalities for at least a subset of the two or more hosts, where high priorities are assigned to long-running processes, such as web server or database server processes, which are unique to at least the subset of the two or more hosts. Resources may be provisioned based on these host functionalities.

Abstract: A device for measuring and tracking over time the quantity or concentration of a component in a fluid comprises: a sensor capable of measuring a quantity or concentration of the component in the fluid and providing a quantitative signal for tracking this quantity or concentration over time; a signal-processing module comprising a low-pass filter of the quantitative tracking signal; and an output interface for providing the filtered quantitative tracking signal. The signal-processing module comprises an estimator of a value of instantaneous trend of variation of the quantitative tracking signal in a predetermined sliding time window. Also provided is means for adjusting over time a high cutoff frequency of the low-pass filter according to the estimated value of instantaneous trend of variation.

Abstract: A method—for measuring an amount of a gaseous species present in a gas—comprises placing the gas between a light source and a measurement photodetector. The light source is able to emit an incident light wave that propagates through the gas to the measurement photodetector. The gas is illuminated with the light source. A measurement intensity, of the light wave transmitted by the gas, is measured with the measurement photodetector. An intensity of a reference light wave, emitted by the light source in a reference spectral band, is measured with a reference photodetector. The illumination and measuring are performed at multiple measurement times, at each of which the gas's absorption of the incident light wave is estimated and an amount of the gaseous species is estimated on the basis of the estimated absorption. Estimating the absorption comprises applying a correction function, that varies over time, to the reference intensity.

Abstract: A method for analyzing a gaseous sample, by comparing an incident light wave and a transmitted light wave, the method comprising: i) illuminating the sample with a light source emitting the incident light wave propagating up to the sample; ii) detecting a light wave transmitted by the sample; iii) detecting a reference light wave emitted by the light source and representing a light wave reaching a reference photodetector without interacting with the sample; iv) repeating i) to iii) at different measurement instants; v) estimating, at each measurement instant, an intensity of the reference light wave; vi) taking into account the estimated intensity of the reference light wave and the detected intensity of the transmitted light wave to perform a comparison, at each measurement instant; and vii) analyzing the gaseous sample as a function of the comparison.

Abstract: A device for measuring and tracking over time the quantity or concentration of a component in a fluid comprises: a sensor capable of measuring a quantity or concentration of the component in the fluid and providing a quantitative signal for tracking this quantity or concentration over time; a signal-processing module comprising a low-pass filter of the quantitative tracking signal; and an output interface for providing the filtered quantitative tracking signal. The signal-processing module comprises an estimator of a value of instantaneous trend of variation of the quantitative tracking signal in a predetermined sliding time window. Also provided is means for adjusting over time a high cutoff frequency of the low-pass filter according to the estimated value of instantaneous trend of variation.

Abstract: A method for analyzing a gaseous sample, by comparing an incident light wave and a transmitted light wave, the method comprising: i) illuminating the sample with a light source emitting the incident light wave propagating up to the sample; ii) detecting a light wave transmitted by the sample; iii) detecting a reference light wave emitted by the light source and representing a light wave reaching a reference photodetector without interacting with the sample; iv) repeating i) to iii) at different measurement instants; v) estimating, at each measurement instant, an intensity of the reference light wave; vi) taking into account the estimated intensity of the reference light wave and the detected intensity of the transmitted light wave to perform a comparison, at each measurement instant; and vii) analyzing the gaseous sample as a function of the comparison.

Abstract: Systems, methods, and computer-readable media for gathering network intrusion counter-intelligence. A system can maintain a decoy network environment at one or more machines. The system can identify a malicious user accessing network services through the network environment. Further, the system can receive network service access requests from the user at one or more machines in the network environment and subsequently direct the network service access requests from the malicious user to the decoy network environment based on an identification of the malicious user. The network services access requests can be satisfied with network service access responses generated in the decoy network environment. Subsequently, the system can maintain malicious user analytics based on the network service access requests of the malicious user that are directed to the decoy network environment.

Abstract: A graphoepitaxy template to align a self-assembled block polymer adapted to self-assemble into a 2-D array having parallel rows of discontinuous first domains extending parallel to a first axis, mutually spaced along an orthogonal second axis, and separated by a continuous second domain. The graphoepitaxy template has first and second substantially parallel side walls extending parallel to and defining the first axis and mutually spaced along the second axis to provide a compartment to hold at least one row of discontinuous first domains of the self-assembled block copolymer on the substrate between and parallel to the side walls, and separated therefrom by a continuous second domain. The compartment has a graphoepitaxial nucleation feature arranged to locate at least one of the discontinuous first domains at a specific position within the compartment. Methods for forming the graphoepitaxy template and its use for device lithography are also disclosed.

Abstract: The invention provides a wearable air purification device which actively generates a propelled stream of purified air for direct delivery to a region proximal to a user's mouth or nose for their immediate inhalation. An air chamber comprises a flexible diaphragm adapted to fluctuate between two extreme positions, thereby altering the volume within the chamber and alternately sucking and blowing air into and out of the chamber. Filtration elements are arranged in said air chamber. The filtration elements are arranged so as to make fluid communication with air displaced into the air chamber and, to make fluid communication with air displaced out of said chamber so that air is cleaned as it passes both into, and out of, the air chamber. The filtration elements actively remove particulate or gaseous pollutants. Embodiments of the invention may comprise a plurality of such air chamber assemblies, arranged so as to collectively deliver a continuous flow of air to a breathing zone of the user.

Abstract: A BCP having first block of first monomer and second block of second monomer, adapted to undergo a transition from disordered state to ordered state at a temperature less than TOD, further including a bridging moiety having a functional group to provide hydrogen bonding between bridging moieties of adjacent first and second BCP molecules when in the ordered state and at a temperature in excess of a glass transition temperature Tg for the BCP. Composition including BCP comprising first block of first monomer and second block of second monomer, and a crosslinking compound having first and second terminal groups joined by a central moiety and arranged to crosslink second blocks of adjacent first and second BCP molecules by providing non-covalent bonding between the terminal groups and a functional group of the second monomer of the second blocks when the BCP is in the ordered state.