Abstract: A computer implemented method of computer security for a host computer system in communication with remote computer systems, the method including generating an attack map as a directed graph data structure modelling individual events leading to an exploitation of the host computer system, the attack map being generated in a training phase of the host computer system in which the host is subjected to attacks by one or more attacking remote computer systems, and generating the attack map includes collecting a log of each of a plurality of attack events occurring at the host including network packets involved in each attack event; using stacked autoencoders to extract features from the log event in each attack; generating a directed graph representation based on each of the extracted features based on a temporal relationship between events for each extracted feature and a predefined definition of each of a plurality of attack patterns defining events and temporal relationships between events, determining a subse

Abstract: If a cellular base station detects that it is about to shut down, either because no mobile terminals are within range, or because of a loss of power, for example because a user has deliberately switched it off, it first broadcasts a report that is about to shut down. This broadcast signal is picked up by the neighboring cells and used to update their neighbor lists, thus avoiding a false alarm which would otherwise be generated by the neighbors and transmitted to a centralized Operation Administration and Maintenance system when the shut-down cell fails to be detected on the next sampling cycle. The neighbors can then retain the shut-down base station in the neighbor list.

Abstract: An optical data transmission system and method for, at an optical transmitter, converting to a second wavelength, an optical data signal at a first wavelength; transmitting at the second wavelength, the optical data signal to an optical receiver over an optical path; and transmitting at the first wavelength, to the receiver over the path a single-photon signal comprising a stream of single photons. The optical path is configured to carry optical signals at different wavelengths and the optical path attenuates signals at the first wavelength less than the optical path attenuates signals at the second wavelength. The optical data transmission system and method for, at the receiver, receiving the single-photon signal at the first wavelength and receiving the optical data signal at the second wavelength; and converting the optical data signal to the first wavelength for detection.

Abstract: This invention relates to a method in a cellular communications network having a plurality of base stations, and to a base station for said cellular communications network, wherein each base station is configured to use a frequency band of one of a hierarchy of spectrum levels, the method comprising: a first base station using a frequency band of a first spectrum level of the hierarchy of spectrum levels; determining an interference level in the network; determining whether the interference level indicates that the first base station's performance is sub-optimal; and, if so, the first base station reconfiguring to use a frequency band of a second spectrum level of the hierarchy of spectrum levels, the second spectrum level having a different number of frequency bands than the first spectrum level.

Abstract: Examples of the present invention provide a method of delivering media, such as a video sequence, to a client device from a server, taking into account the relative importance of different portions of the video sequence. The sequence is divided into temporal segments, with each segment encoded at a plurality of bitrates (and hence qualities). A viewer importance parameter is assigned to each segment, indicating the relative importance of that segment, with the information stored in a manifest file or similar. The client receives this segment and viewer importance data in a manifest file. As soon as the client is aware of a future segment marked as having higher viewer importance than the next segment for download, the client initiates the download of this further segment by making a request (e.g. HTTP request), while making a concurrent request for the delivery of the next segment.

Abstract: The present invention provides a communications network which is divided into a plurality of segments, with, each segment comprising one or more routers and one or more communications links that connect the routers. Each of the segments also comprises a segment management module. Each of the segment management modules reports to a supervisory management module and the communications network may comprise one or more supervisory management modules. If a segment management module predicts that a QoS threshold will be breached then it may re-route a data flow within that segment. If such a re-route is not possible then it will send a request to its supervisory management module to initiate a re-routing to a further segment.

Abstract: Embodiments of the present disclosure provide a resource management method and apparatus for a cell cluster and a communications system. The method includes: transmitting resource allocation information by a base station taken as a cluster head of the cell cluster to other base stations in the cell cluster. By transmitting the resource allocation information by the base station taken as the cluster head of the cell cluster to the other base stations in the cell cluster, resource allocation for the cells may be performed efficiently, capabilities of coordinating inter-cell interference may be improved, and as the cell cluster may be expanded to cell clusters of a lower level or more levels, scalability of the network may be improved.

Abstract: Methods, apparatus and devices are disclosed for identifying and of controlling communications on interfering links in a local area network (20) having user-devices (22, 23, 24, 25) located therein operable to communicate via a local area network (LAN) gateway device (30, 50) with remote devices in a communications network (10,15) outside the LAN (20), communications being carried via one or more LAN links (28) for at least a portion of a path between user-devices (22, 23, 24, 25) and the gateway device (30, 50), and being carried via a digital subscriber (xDSL) line (19) for at least a portion of a path between the gateway device (30, 50) and the remote devices.

Abstract: Diagnostic test results are obtained in respect of local area networks (LANs), the LANs having user-devices located therein having interfaces and being operable to communicate via those interfaces and via a LAN gateway device with remote devices in a communications network outside their respective LANs. A method comprises comparing performance measures obtained in respect of communication flows with a performance threshold whereby to identify communication flows whose performance measures are indicative of performance below a predetermined level, and for any such communication flows, obtaining a diagnosis in respect of the LAN in question in dependence on a comparison of the performance measure obtained in respect of the identified communication flow and performance measures obtained in respect of other communication flows, the diagnosis being obtained in dependence on respective portability levels and network interface types determined in respect of the user-devices involved in said communication flows.

Abstract: A computer implemented method of computer security for a host computer system in communication with remote computer systems, the method including generating an attack map as a directed graph data structure modelling individual events leading to an exploitation of the host computer system, the attack map being generated in a training phase of the host computer system in which the host is subjected to attacks by one or more attacking remote computer systems, and generating the attack map includes collecting a log of each of a plurality of attack events occurring at the host including network packets involved in each attack event; using stacked autoencoders to extract features from the log event in each attack; generating a directed graph representation based on each of the extracted features based on a temporal relationship between events for each extracted feature and a predefined definition of each of a plurality of attack patterns defining events and temporal relationships between events, responsive to an oc

Abstract: A computer implemented method of computer security for a host computer system in communication with remote computer systems, the method including generating an attack map as a directed graph data structure modelling individual events leading to an exploitation of the host computer system, the attack map being generated in a training phase of the host computer system in which the host is subjected to attacks by one or more attacking remote computer systems, and generating the attack map includes collecting a log of each of a plurality of attack events occurring at the host including network packets involved in each attack event; using stacked autoencoders to extract features from the log event in each attack; generating a directed graph representation based on each of the extracted features based on a temporal relationship between events for each extracted feature and a predefined definition of each of a plurality of attack patterns defining events and temporal relationships between events, using the attack ma

Abstract: Methods and apparatus are disclosed for obtaining diagnostic test results in respect of network elements in a network, the test results being obtained from a population of probes associated with network elements. The method comprises receiving a first-stage set of probe reports comprising, in respect of probes in an initial subset, a test result and metadata, each test result indicating a state of the network element associated with the probe; identifying a specific subset of probes in the initial subset wherein the test results from the probes in the specific subset satisfy a predefined condition; determining a subsequent subset based on the metadata of the probes in the specific subset; and triggering the probes in the subsequent subset to provide a second-stage set of probe reports comprising test results indicating states of network elements associated with probes in the subsequent subset.

Abstract: Actuators and sensors in an intelligent system are controlled by setting encryption types and key lengths to individual applications based on the type of device and application being run. A server system (1) running in a communications gateway, selects an encryption policy for one or more devices under its control. This selection is controlled by an analysis function (11) using data relating to the type of device (13), and the applications to be run on the device (14), to generate an appropriate encryption policy (12) which can be deployed to the device (37). Controlling the analysis and deployment in a gateway device allows co-ordination between devices, and reduces processor time in the devices. An agent is sent to the device alongside the encryption policy data, to control the device according to the encryption policy.

Abstract: An optical fiber including a plurality of embedded optical reflectors distributed periodically along the length of the fiber and a method of quantifying loss associated with an optical connector that is connected to optical fiber comprising a plurality of embedded optical reflectors distributed periodically along the length of the fiber. The method includes inserting an optical signal into the fiber through the optical connector; measuring a component of the optical signal reflected by at least one of the plurality of embedded optical reflectors, in which the component is received through the optical connector; calculating the difference in power level between the inserted and reflected signals; and quantifying, based on the calculated power level difference and the reflectivity of the embedded optical reflector, the loss associated with the optical connector.

Abstract: A computer implemented method of identifying an encryption algorithm used by a ransomware algorithm, the ransomware algorithm encrypting a data store of a target computer system using a searchable encryption algorithm, the method including intercepting an ordered plurality of messages communicated from the target computer system to a ransomware server computer system, each message including a payload storing an encrypted unit of data from the target computer system; inspecting a final byte in the encrypted unit of data in each message to identify a byte value used by an encryption algorithm of the ransomware as a padding byte to pad messages to the size of an integral multiple of units of encryption for the encryption algorithm; training an autoencoder based on a position of a message in the ordered plurality of messages and the padding byte to provide a trained autoencoder adapted to differentiate the encryption algorithm used by the ransomware from other different encryption algorithms.

Abstract: A method of operating a cellular telecommunications network, the cellular telecommunications network including a first base station, a User Equipment (UE) and a remote transceiver, wherein the first base station is adapted to send a signal to the UE, the method including receiving data from an external sensor indicating a first change in a propagation environment between the first base station and the UE; and, in response, the remote transceiver repeating a signal between the first base station and the UE.

Abstract: A passive radio repeater is built into a cover for a pit, in order to relay radio signals between a base station and a wireless communications device such as a water meter at the bottom of the pit. Within the external surface of the lid are provided upper and lower patch antennas. The lower antenna has a radiation pattern that extends downwards at right-angles to the plane of the lid, so that it communicates with the device at the bottom of the pit. The top antenna has a directional beam pattern in the elevation plane, achieved by exciting the top antenna in a mode that is higher than fundamental. The two antennas are coupled by a stripline printed circuit board provided with feeds to generate the required beam patterns.

Abstract: A power distributor for a communications system for controlling delivery of electrical power drawn over a plurality of electrical communications connections allocated to respective customer premises equipment, to provide electrical power to network components within a network is arranged to control collection of electrical power to be drawn from each connection in accordance with power requirements of services operated by or for its respective customer premises equipment, independent of the identities of the electrical connections used to deliver those services. In particular when electrical connections are not being used by their respective customers they may instead be used by a beam-forming system to support improved service to a customer associated with a different connection, and the additional electrical power to power the beam-former is drawn from the connection associated with the customer receiving the enhanced service.

Abstract: In a system formed of user devices, a home access point routing device connected to an Internet Service Provider, performance issues such as contention and interference on the home network can be determined. The home access point is arranged to monitor IP Flow information for data sessions between user devices and remote servers over a wireless or powerline Ethernet home network and performance issues are determined by the home access point or by a management server.

Abstract: The disclosure provides an improved method of operating a mobile terminal or user equipment in a cellular telecommunications network to efficiently discover preferred cells, in particular a HeNB, prior to connecting. Whilst constant searching for a preferred cell can ensure it is found as soon as it is within range, this has a significant impact on resources at the UE, such as battery power, and can disrupt any existing services that might be running. The proposed method determines the probability of the UE being within range of a preferred cell based on measurements already available to the UE or by the network. Additional measurements can then be made as required, and made with increasing frequency as the probability of being within range of the preferred cell increases.