Abstract: A computer implemented method of scheduling a plurality of virtual machines for execution by a physical computing infrastructure is described. The plurality of virtual machines are deployable to a subset of the physical computing infrastructure to execute a computing task. The method includes determining a subset of the infrastructure and a time period for deployment of each virtual machine, so that the virtual machines are scheduled to execute to completion over an aggregate of all time periods. The determination is based on a mathematical optimization of a risk function for each of the plurality virtual machines that corresponds to a relative risk that at least one virtual machine will fail to fully execute its task to completion.

Abstract: This disclosure invention relates to a method of operating a network node in a cellular telecommunications network, wherein the cellular telecommunications network further includes a first base station and a first User Equipment (UE), and the first UE is connected to the first base station by a first and second connection having resources associated with a first and second subscription, respectively, the method including determining that the first connection and second connection relate to the first and second subscription respectively; determining that the first connection and second connection relate to the first UE; monitoring a first resource usage of one or both of the first and second connections with the first UE; and initiating a handover of one or both of the first and second connections based on the first resource usage.

Abstract: A method of anomaly detection for network traffic communicated by devices via a computer network, the method including receiving a set of training time series each including a plurality of time windows of data corresponding to network communication characteristics for a first device; training an autoencoder for a first cluster based on a time series in the first cluster, wherein a state of the autoencoder is periodically recorded after a predetermined fixed number of training examples to define a set of trained autoencoders for the first cluster; receiving a new time series including a plurality of time windows of data corresponding to network communication characteristics for the first device; for each time window of the new time series, generating a vector of reconstruction errors for the first device for each autoencoder based on testing the autoencoder with data from the time window; and evaluating a derivative of each vector; training a machine learning model based on the derivatives so as to define a fi

Abstract: A method and a base station for a mobile communications network. The base station includes a first transceiver configured to communicate over radio signals with a plurality of mobile terminals, in which the first transceiver configured to: transmit a first signal to serve a mobile terminal over multicast; receive from the mobile terminal information derived from the signal quality of a second signal received at the mobile terminal from a second transceiver; and receive from the mobile terminal further information on the quality of the first signal received at the mobile terminal from the first transceiver and on the quality of a third signal received at the mobile terminal from a third transceiver.

Abstract: In a method of operating a content delivery network having a plurality of content caches to deliver requested content to at least one user device, the user device has one or more access network interfaces for connection to content caches of the content delivery network via one or more respective access networks, and the method is performed by a content delivery route decision function running on the user device and interfacing with the content delivery network and the access networks.

Abstract: A communications router (6) is provided with an add-on device (7) for diverting data traffic over a replacement connection (70, 80) when a primary connection route (60) meets a failover criterion. Traffic addressed to an allocated network address associated with the primary connection (60) is diverted to a network termination of the replacement connection (70) by a routing function (31) if the replacement connection (70) has been authenticated by an authentication system (35). Authentication is provided by setting up an association between the internet IP address of the router (6) when addressed through the link (60), and a network identity of the add-in unit (7).

Abstract: Methods and apparatus are disclosed for selecting an encoding specification for encoding audio and/or video data to be streamed between a user-device (11) and a remote device (28), where the user-device is operable to communicate with the remote device via a digital subscriber line (DSL, 13) for a portion of a path (29) between the user-device and the remote device, the DSL portion (13) extending between a user-side DSL modem device (22) and a DSL aggregation transceiver device (24).

Abstract: A computer implemented method of converting a serialized virtual machine (VM) for a source virtualized computing environment, the serialized VM being stored in a data file having also metadata for instantiating the serialized VM in the source environment, the method including supplementing the data file with a software adapter including a plurality of executable disk image converters, each disk image converter being suitable for converting the serialized VM between disparate virtualized computing environments; a plurality of metadata mappings, each metadata mapping defining how the metadata is converted between disparate virtual computing environments; and executable code for effecting a conversion by executing an appropriate disk image converter and performing an appropriate metadata conversion to convert the data file for a target virtualized computing environment, such that the supplemented data file is operable to self-convert between the source virtualized computing environment and the target virtualized

Abstract: A method of managing data bearers between a cellular network subscriber device and a packet data gateway in a cellular network core, the cellular network subscriber device and the packet data gateway being connected by a default bearer, the method including receiving at least one dedicated bearer request for a communication session between the cellular network subscriber device and an external network resource; comparing at least one parameter of the received dedicated bearer against a set of predetermined rules; and if at least one parameter of the received dedicated bearer request matches at least one of the set of predetermined rules: storing the at least one parameter of the received dedicated bearer request; and sending a message to the subscriber device to cause the cellular network subscriber device and packet data gateway to use the default bearer for the communication session.

Abstract: A method of operating a mobile communications network including a plurality of base stations and a base station for a mobile communications network, wherein the base station includes a plurality of transmitters, a plurality of receivers and a processor, is disclosed. Each transmitter is configured to transmit radio signals to a plurality of mobile terminals. Each receiver is configured to receive radio signals from a plurality of mobile terminals. The processor is configured to serve a mobile terminal via the transmitter over multicast/broadcast across a radio link; receive information from the mobile terminal being served by the transmitter, in which the information derives from signal quality of a multicast/broadcast serving signal received at the mobile terminal from the transmitter; and provide to the mobile terminal first instructions based on a first comparison of the quality of the multicast/broadcast serving signal received at the mobile terminal.

Abstract: A method of computer security for a host computer system in communication with remote computer systems includes generating an attack map modelling individual events leading to an exploitation of the host computer system by collecting a log of each of a plurality of attack events occurring at the host, using stacked autoencoders to extract features from the log event in each attack, and generating a directed graph representation based on each of the extracted features. The method further includes determining a subset of nodes in the attack map corresponding to events in one or more attacks, determining a component of the host computer system involved in each attack event represented by each of the nodes in the subset, and deploying one or more security facilities at each of the determined components of the host computer system so as to mitigate attacks according to each of the attack patterns.

Abstract: A computer implemented method of a receiving secure computing component to provide access to a cryptographic key for a key requester, the key being associated with an owning secure computing component by a digitally signed record in a blockchain wherein the blockchain is accessible via a network and includes a plurality of records validated by miner computing components, wherein the key requester has associated a quantity of cryptocurrency by a digitally signed record in the blockchain, the method including: receiving a request from the key requester to access the key; generating a first new record for storage in the blockchain to transfer a predetermined quantity of cryptocurrency associated with the requester to be associated with the receiving component, the first new record being validated by the miner components; responsive to the validation of the first new record, communicating a request to the owning component to transfer the key to the receiving component; responsive to securely receiving the key at

Abstract: A computer implemented method of protecting a portion of a computer network from malware attack, the computer network including a network connected devices organized into hierarchical subnets modelled by a tree data structure in which each subnet is represented as a node in the tree, each node having a connection to parent node save for a root node, the method including performing protective actions on devices in subnets associated with a first subset of nodes to provide protection against the malware, prioritizing devices in the subnets associated with a second subset of nodes so as to provide a barrier of subnets protected against the malware to impede the propagation of the malware to devices in subnets associated with each of the first subset of nodes.

Abstract: This disclosure provides a method in a cellular telecommunications network having a first base station and a second base station, wherein the first base station is moving relative to a reference object and serves a User Equipment (UE) the method including identifying the UE's relative speed with respect to the reference object; preparing a message to transfer the UE to the second base station, the message including one or more information elements to indicate the UE's relative speed to the reference object, wherein a mobility state for the UE may be estimated from the one or more information elements indicating the UE's relative speed with respect to the reference object; and initiating a transfer of the UE from the first base station to the second base station by sending the message to the second base station, wherein the message includes the one or more information elements to indicate the UE's relative speed with respect to the reference object.

Abstract: A computer implemented method of a first network access point to provide network access for a mobile device, the mobile device associated with a second network access point by a digitally signed record in a blockchain wherein the blockchain is accessible via a network and includes a plurality of records validated by miner computing components, wherein the mobile device has associated a quantity of cryptocurrency by a digitally signed record in the blockchain, the method including receiving a request from the mobile device to access the network; generating a first new record for storage in the blockchain to transfer a predetermined quantity of cryptocurrency associated with the requester to be associated with the first access point, the first new record being validated by the miner components; responsive to the validation of the first new record, notifying the second access point of the request of the mobile device to access the network; responsive to a validation of a second new record in the blockchain, the

Abstract: This disclosure provides a base station, and a method of operating a base station, in a cellular telecommunications network, the method including the first base station operating in energy saving mode; the first base station receiving a first message, the first message instructing the first base station to exit energy saving mode and to compensate for a second base station; and the first base station exiting energy saving mode and compensating for the second base station.

Abstract: A computer implemented method of securing an application executing in a software container deployed in a computer system includes providing access to the application selectively in accordance with access control rules by sharing an encryption key with authorized accessors.

Abstract: Embodiments of the present disclosure provide a method and apparatus for configuring multi-level cells or cell clusters and a communications system. The method includes: exchanging by a base station with one or more other base stations or cell cluster heads in the same level to obtain first information; receiving, by the base station, second information reported by one or more base stations or cell cluster heads in the lower level; configuring one or more cells in the lower level into a cell cluster by the base station according to the first information and the second information, and determining a cluster head of the cell cluster; and performing information transmission with the cluster head of the cell cluster.

Abstract: A computer implemented method for decrypting an encrypted data store at a target computer system, the data store being encrypted by a ransomware algorithm using a searchable encryption algorithm, the method including determining an encryption algorithm used by the ransomware algorithm; determining seed parameters used by the encryption algorithm to generate an encryption key; generating the encryption key using the seed parameters; and decrypting the encrypted data store.

Abstract: A wireless network including a wireless access gateway (WAG) and methods are provided for routing traffic between non-cellular and cellular networks. The WAG interconnects at least one non-cellular network and at least one cellular network in an at least one-to-many relationship. The WAG receives a first IP address for the UE in the cellular domain and the WAG allocates a second IP address for the UE in the non-cellular domain. The WAG creates a routing rule including the first and second IP addresses for the UE and an additional data path identifier.