Abstract: This disclosure provides a method of operating a cellular telecommunications network, wherein the cellular telecommunications network includes a first transceiver providing a first access connection, a second transceiver providing a second access connection, and a third transceiver providing a third access connection, wherein the first and second transceivers are co-located, the method including determining that the third transceiver should enter energy saving mode; in response to the determination: causing reconfiguration of the first transceiver to reduce its transmission power, causing reconfiguration of the second transceiver so as to increase its transmit power of the second access connection and to compensate for the third transceiver.

Abstract: A method for identifying malicious encrypted network traffic associated with a malware software component communicating via a network, the method including, for the malware, a portion of network traffic including a plurality of contiguous bytes occurring at a predefined offset in a network communication of the malware; extracting the defined portion of network traffic for each of a plurality of disparate encrypted network connections for the malware; training an autoencoder based on each extracted portion of network traffic, wherein the autoencoder includes: a set of input units each for representing information from a byte of an extracted portion; output units each for storing an output of the autoencoder; and a set of hidden units smaller in number than the set of input units and each interconnecting all input and all output units with weighted interconnections, such that the autoencoder is trainable to provide an approximated reconstruction of values of the input units at the output units; selecting a set

Abstract: A wireless sniffer for analyzing the channel quality of a Wireless Local Area Network (WLAN) identifies which of the wireless transmissions it detects over a wireless interface are carried on the WLAN it is analyzing by having a dedicated link from a network management system controlling the WLAN under investigation, over which signature data such as a MAC ID associated with the WLAN is received and stored for comparison with signature data associated with the wireless transmissions it detects on the wireless interface it can identify which of the received wireless transmissions are carried on the WLAN it is to analyze.

Abstract: An electric filtering device (200) for filtering Repetitive Electrical Impulse Noise (REIN) in a fixed-access telecommunications network (100), the electric filtering device comprising: a REIN filter (210), said REIN filter comprising a first electrical contact (220-1) and a second electrical contact (220-2) for connecting to a telecommunications cable (140) of the fixed-access telecommunications network; an enclosure (230) for enclosing the REIN filter; an input (250-1) and an output (250-2), formed as part of the enclosure, each for receiving a telecommunications cable (140) so as to be connected to the first and the second electrical contacts, thereby to connect the REIN filter to the fixed-access telecommunications network; a coupling formation (260) for coupling the electric filtering device to an external distribution point (130) for a telecommunications cable of the fixed-access telecommunications network.

Abstract: A computer implemented method of protecting data in a message for communication from a sender to a receiver, the sender and receiver sharing a secret, the method including splitting the message into a plurality of ordered message blocks, the order being a proper order such that an aggregation of the blocks in the proper order constitutes the message; generating a hash value for each message block, each hash value being generated on the basis of at least a content of the block and the secret; generating, for each block, an encoded indication of a position of the block in the proper order of blocks, the encoding being reversible and based on at least the hash value for the block and a position of the block in the proper order; communicating the blocks to the receiver in an order different to the proper order so as to obfuscate the message; and communicating the encoded indications to the receiver such that the blocks can be reassembled by the receiver in the proper order on the basis of the shared secret.

Abstract: The method of managing processing resources in a telecommunications network, the telecommunications network having a plurality of network slices and a User Equipment (UE), wherein the UE is allocated to a first network slice to process a network communication from the UE, the method comprising the steps of: monitoring a suitability of the first network slice to process the network communication; identifying a second network slice that is suitable for processing the network communication; and in response to identifying a lack of suitability of the first network slice to process the network communication, reallocating processing resources from the second network slice to the first network slice whilst the UE remains allocated to the first network slice.

Abstract: A containerisation orchestrator (26) is controlled by an analysis system (20, 21, 22) which assesses an application and a device for compatibility to have a candidate application installed on the device using the orchestrator. The analysis includes an assessment of the vulnerability of the installed application to failure or malicious attack, and a risk assessment of the consequences of such an event. The candidate containerised configuration (20) for the application is also assessed for compatibilities and vulnerabilities.

Abstract: Improvements to publish-subscribe protocols are provided, including a method for communicating data in a network comprising publisher devices, a broker and subscriber devices, comprising one of the publisher devices: i-a. receiving a public key from the broker; i-b. determining, based on one or more attributes of data to be published to the broker, whether a sensitivity level of the data is low; and ii. following completion of both of steps i-a and i-b, publishing the data to the broker, wherein: when step i-b results in a determination that the sensitivity level of the data is low, step ii comprises transmitting the data to the broker unencrypted; and when step i-b results in a determination that the sensitivity level of the data is not low, step ii comprises encrypting the data then transmitting resulting encrypted data to the broker, wherein the step of encrypting the data uses the public key.

Abstract: A computer implemented method to detect a data breach in a network-connected computing system, the method including storing, at a trusted secure computing device, at least a portion of network traffic communicated with the computer system; the computing device generating a copy of data distributed across a network; the computing device identifying information about the network attack stored in the copy of the data; the computing device generating a signature for the network attack based on the information about the network attack, the signature including rules for identifying the network attack in network traffic; and identifying an occurrence of the network attack in the stored network traffic based on the signature.

Abstract: A method is presented of determining whether a digital subscriber line is susceptible to radio frequency interference. The method measures the signal to noise ratio (SNR) margin on the digital subscriber line over a number of 24 hour periods. The measured SNR margin over a given 24 hour period is then compared to a reference function of SNR margin over time (24 hours), where the SNR margin of the reference function is higher during the day and lower during the night, and also repeats daily. A measure of the interference susceptibility is generated based on the degree of similarity between the measured SNR margin and the reference function.

Abstract: A computer implemented method of sharing a data message containing multiple data fields between a provider computer system and a consumer computer system, wherein the provider and consumer computer systems have mutual mistrust, is disclosed.

Abstract: Described is a method of managing a network for delivering content in a hybrid unicast/multicast network, where content is requested by clients over unicast, but all or some of the content is delivered in part over multicast. A client requests content (in the form of segments) and receive the responses (segments) over unicast via a first proxy. The first proxy measures the time between requests and associated requested segment sizes. These measurements are used to effectively determine a unicast request rate given by the segment size divided by the time between requests. Subsequent requested segments can then be delivered over multicast over a portion of the route to the client using a multicast rate that is set as a function of (for example, 110% of) the unicast request rate. In general, the multicast path will be from a second proxy to the first proxy.

Abstract: A data management process determines, from user-implemented provisional reservations (400) for data processing resources, a projected total capacity requirement for each said data processing resource, by maintaining a record (9, 90, 91) recording previous such reservations made by each user and comparing each reservations with records (87, 88, 89) of the actual resources used, to provide an estimate of resources required to meet the projected capacity requirement, and to provide data for a demand management processor (2), which control associated configurable data processing equipment (1) to provide the resources required to meet the estimated capacity required. The process takes account of over- and under-ordering of capacity by comparing each reservation (400) with the use actually made (600), and includes a record (10) of ad-hoc (unreserved) usage.

Abstract: Containerised computing processes are generated by an orchestration processor interpreting user commands and user profile data to build a deployment specification specifying functions to be run by a containerised process, using a shell script run on a host virtualisation container. External events such as security threats and computing resource overloads can be used to generate the virtualised process, allowing vulnerability detection, and apply countermeasures such as deployment or migration of containers during attacks to lesser prone infrastructure, and allows the orchestration of non-container tools to provide security and resilience.

Abstract: This disclosure provides a method of operating a base station in a cellular telecommunications network, and a base station unit for implementing the method, the base station having a central base station unit and a distributed base station unit, wherein the central base station unit and distributed base station unit communicate over a fronthaul link having a first and second capacity configuration, and the cellular telecommunications network further includes a User Equipment (UE) consuming a service via the base station.

Abstract: A method for detecting malware software in a computer system includes accessing a plurality of hostnames for a malware server from a computer system infected with malware and attempting to communicate with the malware server, each hostname including a plurality of symbols in each of a plurality of symbol positions; training an autoencoder based on each of the plurality of hostnames, wherein the autoencoder includes: a set of input units for each possible symbol and symbol position in a hostname; output units each for storing an output of the autoencoder; and a set of hidden units smaller in number than the set of input units and each interconnecting all input and all output units with weighted interconnections, such that the autoencoder is trainable to provide an approximated reconstruction of values of the input units at the output units; selecting a set of one or more symbol and symbol position tuples based on weights of interconnections in the trained autoencoder; and identifying infected computer systems

Abstract: Modifying quality of service treatment for data flows A method of transmitting a data flow via a network is disclosed where the network supports transmission of data in accordance with a plurality of Quality of Service, QoS, models. Prior to transmission of the data flow, a client system configures a first class of service for the data flow based on a first QoS model, and a first portion of the data flow is transmitted through the network in accordance with the first class of service. In response to detecting a renegotiation condition, the network communicates with the client system to configure a second class of service for the data flow based on a second QoS model, and a subsequent portion of the data flow is transmitted through the network using the second class of service.

Abstract: A computer implemented method to generate a signature of a network attack for a network-connected computing system, the signature including rules for identifying the network attack, the method including generating, at a trusted secure computing device, a copy of data distributed across a network; the computing device identifying information about the network attack stored in the copy of the data; and the computing device generating the signature for the network attack based on the information about the network attack so as to subsequently identify the network attack occurring on a computer network.

Abstract: A web server operating in a container has resource and network limits applied to add an extra layer of security to the web server. If a monitor detects that the container's resource usage is approaching one or more of these limits, which may be indicative of a DDoS attack, (step 210) or identifies traffic sources exhibiting suspicious behaviour, such as frequently repeated requests from the same address, or from a related set of addresses, a restrictor function caps the resources allowed by the original Webserver container to allow it to recover from buffer overflow and protect servers running in other containers from overwhelming any shared resources. A duplicator function starts up replica containers with the same resource limits to take overflow traffic, and a load balancing function then directs incoming traffic to these overflow containers etc.

Abstract: A base station for communication with a plurality of mobile terminals in a mobile communications network is disclosed. The base station includes a plurality of transmitters, in which each transmitter is configured to provide a transmit radio signal to a distinct space when compared to the other transmitters. A first transmitter is configured to provide to a first space, a transmit radio signal carrying a multicast service. A second transmitter is configured to provide to a second space, distinct from the first space, a transmit radio signal carrying a unicast service, and the second space shares a first boundary with the first space.