Abstract: Methods, systems, and media for protecting applications from malicious communications are provided. In some embodiments, the method comprises: receiving a rule that indicates that communications from a source application to a destination application are to be blocked, wherein the rule is generated by: calculating risk values associated with communications transmitted by the source application; calculating a risk score for the source application; identifying a group of applications that have communicated with the source application; calculating a risk profile score for the source application; and in response to determining that the risk profile score exceeds a threshold, generating the rule; intercepting a communication to the destination application; determining whether to transmit the communication to the destination application; and in response to determining that the communication is not to be transmitted to the destination application, blocking the communication.

Abstract: Controlling a topology of a network includes determining a desired topology of a network, comparing the desired topology to a current topology of the network, and controlling the current topology with role assignments and parameter assignments to network components in the current topology to implement the desired topology with the current network components.

Abstract: Sending traffic policies includes identifying a location of an issue source with a first router in a network layer of an interconnected network and sending to a second router located along a route towards the issue source a traffic policy that addresses an issue caused with the issue source.

Abstract: Sending traffic policies includes identifying a location of an issue source with a first router in a network layer of an interconnected network and sending to a second router located along a route towards the issue source a traffic policy that addresses an issue caused with the issue source.

Abstract: Controlling a topology of a network includes determining a desired topology of a network, comparing the desired topology to a current topology of the network, and controlling the current topology with role assignments and parameter assignments to network components in the current topology to implement the desired topology with the current network components.

Abstract: According to an implementation, an interface between an application and a network is managed, for instance, by an interface manager. The interface manager is to receive a request from the application for access to the network, determine privileges assigned to the application, and provide the application with a level of access to the network that corresponds to the determined privileges assigned to the application.

Abstract: A solution for convergence for connectivity fault management includes, at a device having a network interface, maintaining a continuity state. The continuity state is associated with a Connectivity Fault Management (CFM) Maintenance Association (MA) comprising multiple Maintenance End Points (MEPs) including a first MEP associated with the device. The maintaining includes setting the state to a value indicating continuity of the MA if a converged notification is received from the first MEP. The maintaining also includes setting the state value to a value indicating loss of continuity of the MA if a predetermined number of echo packets sent by the device towards the MEPs other than the first MEP are not received by the device within a predetermined time period.

Abstract: A solution for optimized power usage for a data network includes, at a network device coupled to a network, examining traffic usage information of the network and power usage information of a plurality of routers in the network, and calculating a path from a first router of the network to a second router of the network based at least in part on the traffic usage information and the power usage information. The calculated path has relatively low aggregate power usage for routers comprising the path. The solution also includes storing an indication of whether one or more of the plurality of network routers may be placed in a power conservation mode based at least in part on the calculating.

Abstract: A solution for optimized power usage for a data network includes, at a network device coupled to a network, examining traffic usage information of the network and power usage information of a plurality of routers in the network, and calculating a path from a first router of the network to a second router of the network based at least in part on the traffic usage information and the power usage information. The calculated path has relatively low aggregate power usage for routers comprising the path. The solution also includes storing an indication of whether one or more of the plurality of network routers may be placed in a power conservation mode based at least in part on the calculating.

Abstract: A novel flow-through architecture for fragmentation and reassembly of tunnel packets in network devices is presented. The fragmentation and reassembly of tunneled packets are handled in the hardware pipeline to achieve line-rate processing of the traffic flow without the need for additional store and forward operations typically provided by a host processor or a co-processor. In addition, the hardware pipeline may perform fragmentation and reassembly of packets using encrypted tunnels by performing segment-by-segment crypto. A network device implementing fragment reassembly can include an ingress hardware pipeline that reassembles fragmented packets between a media access control (MAC) of the device and an output packet memory of the device, where the incoming fragmented packets can be encrypted and/or tunneled.