Abstract: Presented are methods for converting a multicast media stream to unicast segments, for delivery over generic IP networks such the Internet. The unicast segments can be converted back again to a multicast stream that is identical to the original multicast stream closer to the consuming client device. Information required to regenerate a multicast stream from the generated unicast segments that is identical to the original multicast stream is also encoded into the file name of the generated unicast segments. Additionally, RTP header information from the multicast stream that is not required when the unicast segments are generated are stored in files linked to the generated unicast segments, enabling the multicast stream that is regenerated to be identical to the original multicast stream even at the RTP level.

Abstract: A method of computer security for a host computer system in communication with remote computer systems, including generating an attack map as a directed graph data structure modelling individual events leading to an exploitation of the host computer system and collecting a log of each of a plurality of attack events occurring at the host including network packets involved in each attack event, the attack map being generated in a training phase of the host computer system in which the host is subjected to attacks by one or more attacking remote computer systems; using stacked autoencoders to extract features from the log event in each attack; generating a directed graph representation based on each of the extracted features; and responsive to an occurrence of a new attack in the host computer system, triggering the regeneration of the attack map including additional events generated in respect of the new attack.

Abstract: A method of performing channel estimation in a multiple-input-multiple-output (MIMO) communication system comprising a downlink device and an uplink device arranged to communicate over a communication channel, the method including at the uplink device: analyzing a first channel vector representing channel gains between the downlink device and a first antenna of the uplink device in the angular domain to identify a set of angular domain support points; generating from the set of angular domain support points a value vector; and feeding back from the uplink device to the downlink device an indication of the value vector; and at the downlink device: analyzing a second channel vector representing channel gains between the downlink device and a second antenna of the uplink device; generating a transmit steering matrix; and generating an estimate of the first channel vector.

Abstract: In examples of the present invention, during delivery of content, the round trip times for each delivered data packet are measured and the congestion window used for delivery is adjusted accordingly. The congestion window is set to a relatively high value when the round trip times are relatively low, and set to a relatively low value when the round trip times are relatively high.

Abstract: Embodiments of the present disclosure provide a resource allocation method and apparatus for a small cell cluster and a communications system. The resource allocation method includes: exchanging by the base station of the upper level with another base station of the upper level, to obtain information on resources and/or interference of the other base station of the upper level; receiving information by the base station of the upper level at least from the cluster head of the SCC, to obtain information on resources and/or interference of the base station of the upper level; and allocating resources for the small cell cluster by the base station of the upper level based on the obtained information on resources and/or interference of the other base station of the upper level and the information on resources and/or interference of the base station of the upper level.

Abstract: A system for managing compositions of software components or applications is disclosed. In particular, systems in which the software components or applications communicate with one another using message-oriented middleware are considered. The system is fed by one or more data feeds, and produces a plurality of processed feeds for respective applications. The data items in the input data feeds are processed by the software components or applications which form a data feed processing graph, with each application having a processing path (or egress-rooted tree) which results in the processed feed for that application. Managing such systems is complex. This complexity is tackled by having each component processing a data feed item add an annotation to the data feed item, so that the cumulative annotation which is seen in the processed feed for an application provides a history of the processing carried out on the input data feed(s).

Abstract: A computer implemented method to mitigate a security attack against a target virtual machine (VM) in a virtualized computing environment, the target VM having a target VM configuration including configuration parameters, and the security attack exhibiting a particular attack characteristic, is disclosed.

Abstract: A method of provisioning mesh communication networks is disclosed. The method involves simulating the performance of a proposed network design to ensure the proposed network design meets service level criteria before provisioning a network in accordance with the proposed network design. Such simulations are required to be comprehensive because highly improbable events can be sufficient to result in a mesh network not meeting the stringent performance criteria which such networks are required to meet. Known methods of provisioning rely on exhaustively listing the mesh network states which would adversely impact the service offered by a proposed network design as part of simulating the performance of the proposed network design—this is an error prone exercise since relevant network states can be missed. A simulation technique is proposed in which the network state after each event is represented by a weighted graph indicating a measure of path cost for each of the links in the mesh network.

Abstract: A method for the automatic pairing of a device wirelessly with a first secure WLAN provided by a pairing access point using first set of security credentials, involving: establishing automatically a connection between the device and a second WLAN provided by an available access point, and authenticating the device with the second WLAN using a second set of security credentials stored on the device; identifying the pairing access point using the second set of security credentials; creating a tunnel between the device and the pairing access point over the second WLAN; making a request from the device, via the tunnel, to a provisioning server on the pairing access point for transfer of the second set of security credentials, being the security credentials needed to pair with the first secure WLAN, from the pairing access point to the device; and using the second set of security credentials to configure the security settings for the first secure WLAN in the device.

Abstract: A computer implemented method of storing a data object in a computer memory, wherein the data object is stored at a location in an object store as a portion of the memory, the location being determined by a hashing process based on a generated hash key, the memory further storing: a set of binary words in which each bit of each word identifies an occupancy state of a location in the object store such that an occupancy state of all locations is stored in the set of binary words; and a truncated hash key set storing, for each occupied location in the object store, a truncated hash key for a data object stored at the location, wherein the hashing process uses linear probing in which an occupancy of the location in the object store for storage of the data object is determined, wherein the occupancy is determined by reference to the set of binary words, and the linear probing further determines identity of the data object and an object stored in an occupied location, the identity being determined based on a compar

Abstract: Computer-implemented methods of placing and processing calls in a communications network are provided. The computer-implemented method of processing calls in a telephone network comprises: identifying a plurality of calls that have been made by a particular telephone number to telephone numbers in the telephone network; determining whether a sequence in which the calls were placed corresponds to a correct order for calling those telephone numbers, the correct order being determined based on a predetermined order for calling telephone numbers in the telephone network; and determining that one or more of the calls were made by spoofing the particular telephone number if the sequence in which the calls were placed does not correspond to a correct order.

Abstract: The present disclosure provides a method of measuring the effectiveness of an intervention in a hybrid fiber-metal access network. The effectiveness measure is determined in accordance with the improvement in the attenuation and the maximum achievable data rate. The effectiveness measure is used to determine whether a further network intervention is required.

Abstract: A computer implemented method of generating cryptographic keys for a hardware security module (HSM), the method including generating a plurality of cryptographic keys and storing the cryptographic keys for use by the HSM in providing cryptography functions, wherein the cryptographic keys are generated based on numerical data generated by a hardware random number generator, such that a rate of generation of the cryptographic keys unconstrained by the resources of the HSM, wherein the hardware random number generator operates based on a plurality of statistically random entropy data sources originating from natural phenomena so as to increase a degree of randomness of the numerical data.

Abstract: A method of managing traffic flow through a multi-node network, the multi-node network interlinking a first mobile network and a second mobile network, the method including, when a subscriber user equipment entity that has as a home network the first mobile network and that is operating in the second mobile network attempts to establish a connection to a correspondent user equipment entity: communicating a connection request message from the second network to the first network over a first route via a set of nodes of the multi-node network; at least one of the nodes of the set: identifying a candidate alternative route between nodes of the multi-node network for at least part of a connection between the subscriber user equipment entity and the correspondent user equipment entity; and transmitting an indication of the candidate alternative route to a controller; and the controller selecting, in accordance with predetermined criteria, one of the first route and the at least one candidate alternative route and c

Abstract: A computer implemented method of adapting a software defined network (SDN), the SDN operating with a set of network appliances in communication via network connections and the SDN comprising a control component operable in communication with at least a subset of the network appliances to control communication via the SDN, the method including receiving a representation of the logical arrangement of the SDN including a definition of appliances configured to provide communication for the SDN and network connections therebetween; receiving a measure of a performance metric for the SDN; receiving a forecast demand for the SDN; using a heuristic search to search a library of possible adaptations to the logical arrangement to identify a sequence of adaptations of the SDN that, when implemented, satisfy the forecast demand for the SDN and provide an improved measure of the performance metric of the SDN; applying the identified sequence of adaptations to the SDN by modifying the logical arrangement for use by the con

Abstract: Methods and apparatus are disclosed for managing streamed audio communication sessions between user devices (50) configured to send streamed data indicative of received audio contributions from respective participants in a multiple-participant audio communication session via a communications network to one or more other user devices (50) for conversion to audio representations of said received audio contributions for other participants.

Abstract: A computer implemented method for providing secure communication channels between a host computer system and a plurality of communicating endpoint computer systems, the host executing a plurality of application instances, the method including initiating a secure communications tunnel between the host computer system and each communicating endpoint on an application basis such that each application instance has a separate communications tunnel, wherein each communications tunnel has associated security parameters including at least one cryptographic key for securely encrypting communications via the tunnel; and responsive to a detection of a security event in respect of an application instance at the host computer system, generating new security parameters for the tunnel of the application instance to provide a continuity of secure communication.

Abstract: A computer implemented method of access control for a restricted resource of a resource provider in a network connected computer system, wherein a blockchain data structure accessible via the network stores digitally signed records validated by network connected miner software components, the method including: identifying an access control role definition for access to the resource, the role including a specification of access permissions; defining a cryptocurrency for indicating authorization to access the resource, the cryptocurrency being formed of tradeable units of value associated with records in the blockchain and wherein transfer of the cryptocurrency between records in the blockchain is validated by the miners; receiving a request from an authenticated resource consumer for authorization to access the resource; and submitting a blockchain transaction to the miner components to transfer a quantity of cryptocurrency to a consumer record in the blockchain, the transaction including an identification of

Abstract: A method of operating a first base station unit to process In-Phase and Quadrature (IQ) data for transmission to a second base station unit, the first and second base station units both being part of a disaggregated base station in a cellular telecommunications network and a method of operating a second base station unit to process a first and second data package processed by a first base station, the method including combining the first and second data packages.

Abstract: A computer implemented method to detect a computer system in execution operating in a manner that is not compliant with a definition of a set of compliant operations, the method including receiving a first set of records for the computer system, each record detailing an occurrence in the computer system during a first predetermined time period; generating a sparse distributed representation of the set of records to form a training set for a hierarchical temporal memory (HTM); training the HTM based on the training set in order that the trained HTM provides a model of the operation of the computer system during the predetermined time period; selecting at least a subset of operations in the set of compliant operations and causing the invocation of each operation of the subset in the computer system over a second predetermined time period to generate a second set of records of occurrences in the computer system; generating a sparse distributed representation of the set of records to form an input set for the tra