Abstract: Techniques are provided for an “on demand” or event-triggered end user monitoring/remote user monitoring (EUM/RUM) solution that is activated when the user has requested it, or an event (conditions of which are set by a user) occurs that triggers activation of the EUM/RUM solution. This EUM/RUM may be completely integrated into an enterprise IT Help Desk system, whereby support “tickets” are automatically generated when the monitoring solution is instantiated.

Abstract: Disclosed is a method for data transmission of audio and video in an end-to-end system. The end-to-end system includes a client terminal, a device terminal, and a service terminal. The service terminal includes a management server, a register server and a transmission server. The method includes steps of: S1: adding the transmission server to the management server; S2: adding the device terminal to the management server; S3: starting and initializing the device terminal; S4: starting the client terminal and connecting the client terminal to the device terminal; S5: performing an overload processing in the transmission server; S6: performing an overload recovering in transmission server.

Abstract: A virtual communication system including logic for supporting layered conversations, the system comprising: at least two computers communicating to one another over a communications medium, where each computer represents a User, each computer including a display, audio input, audio output, video input (such as a camera), memory, data storage, and a processor, a knowledge base stored in memory, the knowledgebase containing an identifier identifying each conversation associated with a given user, the knowledgebase storing information identifying each participant in each of the conversations, the knowledgebase storing information identifying the type of each conversation associated with the given one of the at least two computers, where each User may participate in multiple simultaneous conversations; and layered conversation logic executed by the processor, the layered conversation logic controlling a volume and a visual layout of each participant in each conversation in which the User participates in accordanc

Abstract: A user management method according to the present disclosure includes: storing (S101) appliance use information including: appliance identification information for identifying an appliance; user information for identifying a user of the appliance; and an operating state of the appliance when the appliance was used; analyzing (S102) the appliance use information stored in the storing (S101) to identify, from among a plurality of functions of the appliance, one or more first functions each having a use frequency less than or equal to a threshold value; and providing (S103) the user with a notice which prompts use of the one or more first functions identified in the analyzing (S102).

Abstract: A method for keeping a first user and a second user continuously informed of each other's emotional state, includes: pairing a first connected watch (2a) of the first user with a second connected watch (2b) of the second user; receiving by the second connected watch (2b) an emotional notification comprising a graphical representation relating to an emotional state of the first user; and displaying on a watch face of the second connected watch (2b), constituted of first and second regions, of the graphical representation on this first region, and indicating a current time in this second region. The first region occupies a display area of a display of the second connected watch (2b). Displaying includes dynamically positioning the graphical representation in the first region by avoiding an overlapping between this graphical representation and at least one graphical object in this first region.

Abstract: One example method includes performing a filtering process that identifies one or more candidate hosts for scheduling of a pod, wherein the candidacy of a host is determined based in part upon an association rule, generating an overall host score for each of the candidate hosts, and scheduling the pod to one of the candidate hosts based on the overall host score of that candidate host. A host risk score and/or pod risk score may be used in the generating of the overall host score.

Abstract: An enterprise-wise means for determining monitoring requirements for technology resources, such as, software, hardware, firmware, network or the like and implementing the monitoring. Artificial Intelligence (AI) is implemented to determine monitoring requirements based on characteristics of the technology resource that is to be monitored. In this regard, the characteristics of the technology resource serve to define the problem(s), such as cyber threats and/or performance issues that the technology resource currently faces or will face in the future. By determining the monitoring requirements based on the technology resource's characteristics, including the technological environment, the invention serves to describe what needs to be monitored in terms of the problems that the technology resource currently faces or will face.

Abstract: The two-tier cybersecurity method applies malware detection to a network. The malware detection is based on a generative adversarial network (GAN). Additionally, each user accesses the network through a privacy-preserving interface which applies a federated learning-based data-sharing model. Known malicious and known benign files are converted into corresponding images, and these corresponding images are used as input sample data for the generative adversarial network for generating a class vector for classifying and identifying malware. A malware detector uses the class vector output by the GAN for malware identification. Additionally, a privacy-preserving interface is established for each user of the network. The privacy-preserving interface is a federated learning-based data-sharing model.

Abstract: Systems and methods are disclosed to implement a bounded group by query system that computes approximate time-sliced statistics for groups of records in a dataset according to a group by query. In embodiments, a single pass scan of the dataset is performed to accumulate exact results for a maximum number of groups in a result grouping structure (RGS) and approximate results for additional groups in an approximate result grouping structure (ARGS). RGSs and ARGSs are accumulated by a set of accumulator nodes and provided to an aggregator node, which combines the received structures to generate exact or approximate statistical results for at least a subset of the groups in the dataset. Advantageously, the disclosed query system is able to produce approximate results for at least some of the groups in a single pass of the dataset using size-bounded data structures, without predetermining the actual number of groups in the dataset.

Abstract: Techniques of interaction data processing in a distributed computing system are disclosed herein. One example technique includes upon receiving a user interface output having a content item to be surfaced on a client device and a script configured to detect an interaction with the content item at the client device, surfacing the user interface output having the content item on a display of the client device and automatically executing the script embedded in the user interface output to detect an interaction with the surfaced content item at the client device. Upon detecting an interaction with the content item on the surfaced user interface output, the example technique also includes generating and transmitting interaction data representing the detected interaction to a remote server.

Abstract: A method and a device for detecting incidents in a local area network by way of an incident detection device, the incident detection device being connected to the local area network via a wide area network, a data collection agent collecting data describing the local area network. The device is able to detect various types of anomaly and receives messages from the collection agent, validates and aggregates data contained in each received message into groups of data, calculates a severity score for each group of data, for each type of anomaly and calculates a total severity score for each group of data, calculates a total criticality score from all of the total severity scores, and generates recommendation messages or corrective actions at least on the basis of the total criticality score.

Abstract: Systems and methods of monitoring radio channels and automatically providing selective notifications through a network that messages containing useful information, transmitted in the form of voice content, have been received. Keywords are compared with textual data transcribed from voice messages receive on a radio channel. The textual data and the keywords are compared, and upon identifying a correlation therebetween, a notification is automatically generated that indicates receipt of a given message, the existence of the correlation with the keywords, and an identity of the channel, so that client terminals can receive the message and also receive subsequent or related messages.

Abstract: Techniques for creating and establishing a configuration of connections between an initiator system and a target system can use whitelisted target ports, wherein the configuration only includes connections to selected whitelisted target ports. Automatic login of each initiator to all zoned and discovered target ports can be avoided where, alternatively, an on-demand or needs-based login can be performed by having each initiator only log into its whitelisted target ports. In this manner, better resource usage and scalability can be obtained using the techniques of the present disclosure. In one embodiment, the whitelisted target ports can be determined automatically using an intersection of target port lists obtained using a control path connection and using a fabric nameserver query. The configuration including the whitelisted targets can be persistently stored on the initiator system to enable restoration of the whitelisted targets across reboots and resets of the initiator system.

Abstract: A model construction apparatus according to an embodiment includes a first collection unit that collects pieces of first observed data related to a communication network system that is a target for estimation of a location or a cause of an abnormality; a second collection unit that collects pieces of second observed data related to a plurality of services provided by the communication network system; and a model construction unit that constructs a causal model for estimating the location or the cause of the abnormality and an abnormal service among the plurality of services, using the pieces of first observed data and the pieces of second observed data.

Abstract: A method for analyzing a pair of domain name system (DNS) packets, the method comprising: extracting a portion of a request DNS packet to obtain extracted request DNS information, wherein the extracted request DNS information comprises a first timestamp generated by the edge network device, obtaining a response DNS packet, extracting at least a portion of the response DNS packet to obtain extracted response DNS information, wherein the extracted response DNS information comprises a second timestamp generated by the edge network device, after the obtaining, processing the extracted request DNS information and extracted response DNS information to obtain processed information, wherein the processed information comprises a roundtrip time derived from the first timestamp and the second timestamp, and transmitting the processed information to a monitoring system, wherein the pair of DNS packets are not transmitted to the monitoring system.

Abstract: Within a domain such as a data center, host server activity monitors running on storage nodes observe meaningful commands sent by host servers to the storage nodes. Inactivity indicated by failure of any of the activity monitors to receive a meaningful command from a host server within a predetermined time limit prompts generation of a message that identifies that host server as possibly being unused. The host server activity monitors are also configured to identify as a possible unused host server any host server that is zoned for at least one of the storage nodes but not masked to any storage objects. If a quiescent host server becomes active, as indicated by resumption of sending meaningful commands to one of the storage nodes, then a message warning of a potential malicious attack is generated.

Abstract: Embodiments herein relate to a method performed by a network node (10) for handling monitoring of applications and/or services in a communication network. The network node (10) obtains an indication associated with a monitoring session to monitor a metric of a service and/or application; and also obtains a location of deployment of the service and/or application. The network node identifies one or more ongoing monitoring sessions for monitoring one or more metrics based on the metric associated with the indication and the location of deployment of the application or service. The network node (10) then selects a monitoring process based on the identification; and triggers the selected monitoring process.

Abstract: Techniques for deobfuscating and decloaking web-based malware with abstract execution is disclosed. In some embodiments, a system/process/computer program product for deobfuscating and decloaking web-based malware with abstract execution includes receiving a sample; performing an abstract execution of a script included in the sample; identifying the sample as malware based on the abstract execution of the script included in the sample; and generating a log of results from the abstract execution of the script included in the sample.

Abstract: Embodiments of systems and methods for sending messages between cores across multiple field programmable gate arrays (FPGAs) and other devices are disclosed. A uniform destination address directs a message to a core in any FPGA. Message routing within one FPGA may use a bufferless directional 2D torus Network on Chip (NOC). Message routing between FPGAs may use remote router cores coupled to the NOCs. A message from one core to another in another FPGA is routed over a NOC to a local remote router then to external remote router(s) across inter-FPGA links or networks to the remote router of the second FPGA and across a second NOC to the destination core. Messages may also be multicast to multiple cores across FPGAs. A segmented directional torus NOC is also disclosed. The insertion of shortcut routers into directional torus rings achieves shorter ring segments, reducing message delivery latency and increasing NOC bandwidth.

Abstract: Systems, methods, and storage media for management of identity systems in an identity infrastructure are disclosed. Exemplary implementations may: install a discovery agent in the identity infrastructure; assess the identity infrastructure by the discovery agent; install an identity fabric in the identity infrastructure based on the assessing; receive, at the identity infrastructure, one or more data flows pertaining to identity data or identity metadata for at least one identity domain/system; manage, by a controller element, control plane operations across one or more elements or agents; manage, by at least one of the agents, the one or more data flows; detect and monitor, by the one or more elements or agents, at least one event linked to the one or more data flows; and assess the identity data or metadata and an associated state across the identity domains in the identity infrastructure based on the detecting and monitoring.

Abstract: Technology is disclosed for controlling the processing of electronic communications on computing devices. An electronic communication is processed to determine mentions in the message body indicating recipients of the communication. A point-of-view (POV) is determined for each mention, with respect to recipient(s), as second-person or third-person POV. The communication is parsed into sections, and the mentions that are associated with each section are determined. Based on the POV for a mention associated with a section, it is determined that the section is directed to the recipient(s) indicated by the mention, if the POV of the mention is second-person POV, or the section is relevant to the recipient(s) indicated by the mention, if the POV of the mention is third-person POV. Additionally, an enhanced communication data is generated indicating the sections and corresponding POVs of mentions associated with the sections, and used to provide a personalized computing experience to users.

Abstract: Methods, systems, apparatuses, and computer program products are described herein that enable a vendor to publish a template to a network-accessible marketplace and that enable a customer to selectively utilize the templates to deploy an appliance to a customer account associated with the customer within a cloud services platform. In an embodiment, deploying the appliance to the customer account comprises deploying resources specified by the template as part of an appliance resource group within the customer account, the specified resources including an appliance management resource that is configured to expose control features of the appliance to the customer. In further accordance with the techniques described herein, access to the appliance resource group is provided to the vendor via a vendor account associated with the vendor within the cloud services platform.

Abstract: Environment type validation can provide a tamper-resistant validation of the computing environment within which the environment type validation is being performed. Such information can then be utilized to perform policy management, which can include omitting verifications in order to facilitate the sharing of policy, such as application licenses, from a host computing environment into a container virtual computing environment. The environment type validation can perform multiple checks, including verification of the encryption infrastructure of the computing environment, verification of code integrity mechanisms of that computing environment, checks for the presence of functionality evidencing a hypervisor, checks for the presence or absence of predetermined system drivers, or other like operating system components or functionality, checks for the activation or deactivation of resource management stacks, and checks for the presence or absence of predetermined values in firmware.

Abstract: A computer may receive a request to generate a snapshot view of the enterprise network infrastructure. The computer may implement a multithread process to contemporaneously query a plurality of blade servers and server enclosures within the entire network infrastructure. The computer may contemporaneously receive a plurality of information files from the queried network resources (e.g. the blade servers, server enclosures). An information file for a network resource may contain information of the network resource such as the operating status, currency (also referred to as assembly date), hardware serial number, firmware version, and/or other information of the network resources. Integrating the information in the received files, the computer may generate snapshot view file. The snapshot view file may be in hypertext markup language (HTML) format. The computer may transmit a selectable link to the snapshot view file to multiple user devices to be displayed in the respective web browsers.

Abstract: Systems and methods are provided for coupling data structures in different domains to provide cross-domain data access. One example computer-implemented method includes receiving, from a requestor, an access request including a case type and an indicator of a domain and determining a restriction associated with the domain. The method also includes compiling a first message key specific to the access request and transmitting the first message key to the requestor. The method further includes receiving an information request including a second message key and a query specific to a person, verifying the second message key based on the first message key, and coupling to a data structure in the domain. The method then includes, in response to verifying the second message key, submitting the query from the information request to the coupled data structure and providing a response to the query, from the data structure, to the requestor.

Abstract: A system and method for accessing elements of a table in a digital image of the table, including: obtaining the digital image of the table; finding table elements in the digital image based on digital table properties, wherein the table elements define table cells; calculating coordinates of the table cells in the digital image based on the table elements; and accessing content of a selected table cell in the digital image using the coordinates of the selected table element.

Abstract: Techniques are disclosed relating to monitoring network traffic of an embeddable browser displayed by an application executing on a mobile computing device. In some embodiments, a first layer of the application manipulates one or more user interface elements displayed in the embeddable browser. The first layer of the application then detects network requests made by one or more application programming interfaces (APIs) executed by the embeddable browser in response to the manipulating. In some embodiments, the first layer sends to a second layer of the application results of observing network requests. In some embodiments, the second layer of the application displays, in real-time, information corresponding to the results of observing network requests.

Abstract: An electronic communication network comprises a server platform and client data processing devices. Each client data processing device is configured to submit electronic messages to the server platform, provided with a timestamp. The server platform is configured to process incoming electronic messages strictly in a sequence corresponding to the timestamp. The electronic communication network comprising at least one switch, wherein the switch is arranged to receive electronic messages from a plurality of the client data processing devices. the switch comprises a buffer and is configured to store the electronic messages produced by the client data processing devices in the buffer, and to transfer the electronic messages in a manner sorted according to the timestamp provided to each electronic message by the time generator of the client data processing device submitting the electronic message, so that the electronic message with the oldest time is transferred first.

Abstract: A framework and a method are provided for monitoring and managing software bots that collectively automate business processes. The method includes interfacing with the bots executing on a bot infrastructure. The method also includes obtaining the bot-specific performance data and the infrastructure-level performance data recorded by the bots and the bot infrastructure. The method further includes generating or modifying a bot dependency chain based on the bot-specific performance data and the infrastructure-level performance data. The bot dependency chain represents at least one of dependencies amongst the bots and dependencies amongst the related business processes. The method also includes generating an outcome for the business processes according to the bot dependency chain and the bot-specific performance data and the infrastructure-level performance data recorded by the bots and the bot infrastructure.

Abstract: A device may receive a first telemetry data entry associated with an attribute and store a record associated with the first telemetry data entry, wherein the record identifies a first context value associated with the attribute. The device may log a first timestamp of the first telemetry data entry in a lookup table, wherein the lookup table includes a mapping of the attribute to the first context value and to the first timestamp. The device may receive a second telemetry data entry associated with the attribute and may determine, from the mapping, that the second telemetry data entry is associated with a second context value that is different from the first context value. The device may determine whether a second timestamp, of the second telemetry data entry, is before the first timestamp. The device may perform an action based on whether the second timestamp is before the first timestamp.

Abstract: Methods, non-transitory computer readable media, and peer devices are disclosed that facilitate network censorship circumvention. A censored peer sends to a rendezvous peer censored peer location information. A connection with a volunteer peer is then established using volunteer peer location information received from the rendezvous peer for a matched volunteer peer. First network traffic is then sent to the volunteer peer in accordance with a first network protocol using a second network protocol associated with the connection. The first network traffic is directed to a network host restricted with respect to the censored peer and the second network protocol is a peer-to-peer network protocol. Second network traffic responsive to the first network traffic is then extracted from network message(s) to thereby obtain access to the restricted network host via the volunteer peer. The first network messages are in accordance with the second network protocol and received via the connection.

Abstract: A method includes receiving a user indication to create an online collaborative team within an online chat environment. The method further includes receiving a user selection of members for the online collaborative team. The online collaborative team enables the selected members of the online collaborative team to communicate with one another. The online chat environment maintains communication of the members and activities of the members of the online collaborative team. The online chat environment makes the activities and the communication available to the members when the members are within the online chat environment. The method further includes accessing attributes associated with the members of the online collaborative team. The method, responsive to the accessing the attributes associated with the members, determines a privacy setting of the online collaborative team.

Abstract: Techniques are disclosed relating to a delayed presentation of authentication challenge for users, such as in the context of a chat session. In various embodiments, a server system receives an indication of a request for service initiated by a user in a chat session within an application executed by a client device. The request for service involves an authentication of the user that is dependent on the authentication being successfully completed within a particular time period after the authentication is initiated. The server system delays the initiation of authentication for the request for service until a readiness condition is satisfied. The readiness condition includes the server system being available to process the request for service, as well as subsequently detecting engagement with the user relating to the request for service. In response to the readiness condition being satisfied, the server system initiates the authentication of the user.

Abstract: A method and a system for managing power resources. One or more measurements received from one or more sensors communicatively coupled to at least one processor are processed. The sensors monitor and measure at least one of: one or more operational parameters associated with operation of at least one equipment, one or more external parameters associated with an environment of the equipment, and one or more power parameters associated with a power consumption by the equipment. Based on the processed one or more measurements, one or more future operational parameters associated with an operation of the are determined. The operation of the equipment is controlled using the determined future operational parameters.

Abstract: A network management system (NMS) is described that provides a granular troubleshooting workflow at an application session level using an application session-specific topology from a client device to a cloud-based application server. During an application session of a cloud-based application, a client device running the application exchanges data through one or more access point (AP) devices, one or more switches at a wired network edge, and one or more network nodes, e.g., switches, routers, and/or gateway devices, to reach a cloud-based application server. For a particular application session, the NMS generates a topology based on network data received from a subset of network devices, e.g., client devices, AP devices, switches, routers, and/or gateways, that were involved in the particular application session over a duration of the particular application session. In this way, the NMS enables backward-looking troubleshooting of the particular application session.

Abstract: A method includes determining, by an analysis system, a system aspect of a system for an issue response communications evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective and at least one evaluation viewpoint for use in performing the issue response communications evaluation on the system aspect. The method further includes obtaining, by the analysis system, issue response communications data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, an issue response communications rating as a measure of system issue response communications maturity for the system aspect based on the issue response communications data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: Embodiments allow a tenant to customize a configuration that is used in accessing an application over the cloud. At a provisioning time, a user accesses a tenant Application Program Interface (API) and creates a customized configuration including a payload that defines particular features to be available from the application. Such features can include but are not limited to available buttons, toolbar options, and pages. During a runtime subsequent to the provisioning, an input to the application (such as a URL) is received from the tenant. Logic is executed to determine whether to apply the custom configuration or another configuration (e.g., default or other predefined) from a list. Based upon the configuration, the application renders output to the user according to the particular features. Particular embodiments may recognize a Line of Business (LoB) parameter of a URL input to the application in order to provide a configurations customized by the tenant.

Abstract: A system and method for cybersecurity reconnaissance, analysis, and scoring that uses distributed, cloud-based computing services to provide sufficient scalability for analysis of enterprise IT networks using only publicly available characterizations. The system and method comprise an in-memory associative array which manages a queue of vulnerability search tasks through a public-facing proxy network. The public-facing proxy network has search nodes configurable to present the network to search tools in a desired manner to control certain aspects of the search to obtain the desired results. A distributed data processing engine and cloud-based storage are used to provide scalable computing power and storage. A data packet modifier is used to reveal the IP address of a threat actor behind a port scan and subsequently block the threat actor. Each of the cloud-based computing services is containerized and orchestrated for management and efficient scaling purposes.

Abstract: A server computer includes a network communications interface, a memory configured to store a web page having an IP address, and a processor. The processor is configured to receive, via the network communications interface, a request for the web page. The request includes the IP address. The processor is also configured to identify a set of domain names referenced by the web page; resolve the set of domain names into a set of IP addresses; and transmit, in response to the request for the web page and via the network communications interface, a content and format of the web page. The content of the web page includes the set of IP addresses.

Abstract: A base station may allocate wireless communication resources to configure a synthetic wireless communication signal for use as a radar signal. The synthetic wireless communication signal may be configured according to a wireless communication protocol of a wireless communication network that is associated with the base station. The base station may transmit, from an antenna and toward an area associated with the base station, the synthetic wireless communication signal. The base station may detect a reflected signal that is associated with the synthetic wireless communication signal. The base station may process the reflected signal to generate radar data; and perform an action associated with the radar data and the area.

Abstract: A video coding mechanism is disclosed. The mechanism includes receiving a bitstream including image data coded in a plurality of slices. A top left tile identifier (ID) and a bottom right tile ID of a first slice are determined. Boundaries of the first slice are determined based on the top left tile ID and the bottom right tile ID. The first slice is decoded to generate a reconstructed image based on the boundaries of the first slice.

Abstract: The present invention provides a joint optimization method and system for delay and spectrum occupation in a cloud-edge collaborative network. The method includes: initializing a cloud-edge collaborative network, and generating a set of user requests; establishing a target function of minimum average end-to-end delay and minimum spectrum slot occupation of a user request; during processing of each user request based on the target function, sequentially determining whether a node and path selection uniqueness constraint, a mobile edge computing (MEC) server load constraint, a spectrum resource occupation and uniqueness constraint, a spectrum continuity constraint, and a spectrum consistency constraint are satisfied, where if all constraints are satisfied, the user request is successfully processed, and the process turns to step S4; or if any constraint is not satisfied, the user request fails to be processed; and calculating average end-to-end delay and spectrum resource occupancy of the user request.

Abstract: Systems and techniques for a memory-side cache directory-based request queue are described herein. A memory request is received at an interface of a memory device. One or more fields of the memory request are written into an entry of a directory data structure. The identifier of the entry is pushed onto a queue. To perform the memory request, the identifier is popped off of the queue and a field of the memory request is retrieved from the entry of the directory data structure using the identifier. Then, a process on the memory request can be performed using the field retrieved from the entry of the directory data structure.

Abstract: Techniques for enabling fast user access to the desktop computing environment of a remote computer via a user device in response to notification of a change in the display screen of the remote computer. The techniques include specifying an area of the display screen, setting a policy for determining whether to notify a subscribed user of a change within the specified display screen area, generating a notification packet containing information for validating the subscribed user and establishing a connection to the remote computer, encrypting the notification packet, sending or pushing the notification packet to the user device of the subscribed user, decrypting the notification packet, extracting the information for validating the subscribed user and establishing the connection from the notification packet, and constructing and rendering an image of a shortcut icon on a display of the user device for providing fast user access to the remote computer desktop computing environment.

Abstract: A method and system for modeling a cloud environment as a security graph are provided. The method includes identifying security objects in the cloud environment; collecting object data of the identified security objects; constructing security graph based on collected object data of the identified security objects; determining relationships among the identified security objects, wherein the relationships are determined based on the collected object data of the identified security objects and using a static analysis process; updating the constructed security graph with the determined relationships among the identified security objects; and storing the constructed security graph in a graph database.

Abstract: A method for multi-instance learning (MIL)-based classification of a streaming input is described. The method includes running a first biased MIL model using extracted features from a subset of instances received in the streaming input to obtain a first classification result. The method also includes running a second biased MIL model using the extracted features to obtain a second classification result. The first biased MIL model is biased opposite the second biased MIL model. The method further includes classifying the streaming input based on the classification results of the first biased MIL model and the second biased MIL model.

Abstract: Example aspects include techniques for employing cross-service diagnostics for cloud service providers. These techniques may include dynamically generating a workflow of one or more diagnostic modules based on relationship information between an origin service experiencing an incident and one or more related services that the origin service depends on, and executing the workflow of one or more diagnostic modules to determine a root cause of the incident, each of the one or more diagnostic modules implemented by an individual service of the one or more related services in accordance with a schema. In addition, the techniques may include determining a diagnostic action based on the root cause, and transmitting, based on the diagnostic action, an engagement notification to a responsible entity.

Abstract: In one embodiment, an apparatus comprises circuitry, wherein the circuitry is configured to: receive, via a communications network, context information for a first set of one or more edge devices, wherein the context information identifies an operating environment of the first set of edge devices based on information from one or more sensors; receive, via the communications network, workload information for a second set of one or more edge devices; determine workload assignments for the first set of edge devices based on the context information for the first set of edge devices and based on the workload information for the second set of edge devices; and transmit, via the communications network, the workload assignments to the first set of edge devices.

Abstract: Data processing systems and methods, according to various embodiments, are adapted for determining a categorization for each tracking tool that executes on a particular webpage based on a variety of criteria, such as the purpose of the tracking tool and its source script. The system may compare the characteristics of tracking tools on a webpage to a database of known tracking tools to determine the appropriate categorization. When a user visits the webpage, the system analyzes these categories and determines whether the tracking tool should be permitted to run based on the categories and/or other criteria, such as whether the user has consented to the use of that type of tracking tool.

Abstract: Embodiments of the present invention provide a method and apparatus for remotely accessing a computer system or network to identify storage devices and to retrieve metadata from the storage devices that are respectively unique to files stored in the storage devices. The metadata provides information regarding each file stored on the storage devices and each metadata is associated with a respective file. A scanning tool compares the metadata retrieved from the computer system or network to a database or list of known metadata of known restricted content. Metadata retrieved from the computer system or network that matches metadata from the database or list of known restricted content is flagged and the file associated with the matching metadata is flagged and reported as potentially storing restricted content. During the scanning, restricted content itself is not scanned, not copied, not transferred and not stored.