Abstract: A computer implemented method to mitigate a security attack against a target virtual machine (VM) in a virtualized computing environment, the target VM having a target VM configuration including configuration parameters, and the security attack exhibiting a particular attack characteristic, is disclosed.

Abstract: A method of provisioning mesh communication networks is disclosed. The method involves simulating the performance of a proposed network design to ensure the proposed network design meets service level criteria before provisioning a network in accordance with the proposed network design. Such simulations are required to be comprehensive because highly improbable events can be sufficient to result in a mesh network not meeting the stringent performance criteria which such networks are required to meet. Known methods of provisioning rely on exhaustively listing the mesh network states which would adversely impact the service offered by a proposed network design as part of simulating the performance of the proposed network design—this is an error prone exercise since relevant network states can be missed. A simulation technique is proposed in which the network state after each event is represented by a weighted graph indicating a measure of path cost for each of the links in the mesh network.

Abstract: A computer implemented method of storing a data object in a computer memory, wherein the data object is stored at a location in an object store as a portion of the memory, the location being determined by a hashing process based on a generated hash key, the memory further storing: a set of binary words in which each bit of each word identifies an occupancy state of a location in the object store such that an occupancy state of all locations is stored in the set of binary words; and a truncated hash key set storing, for each occupied location in the object store, a truncated hash key for a data object stored at the location, wherein the hashing process uses linear probing in which an occupancy of the location in the object store for storage of the data object is determined, wherein the occupancy is determined by reference to the set of binary words, and the linear probing further determines identity of the data object and an object stored in an occupied location, the identity being determined based on a compar

Abstract: A method for the automatic pairing of a device wirelessly with a first secure WLAN provided by a pairing access point using first set of security credentials, involving: establishing automatically a connection between the device and a second WLAN provided by an available access point, and authenticating the device with the second WLAN using a second set of security credentials stored on the device; identifying the pairing access point using the second set of security credentials; creating a tunnel between the device and the pairing access point over the second WLAN; making a request from the device, via the tunnel, to a provisioning server on the pairing access point for transfer of the second set of security credentials, being the security credentials needed to pair with the first secure WLAN, from the pairing access point to the device; and using the second set of security credentials to configure the security settings for the first secure WLAN in the device.

Abstract: The present disclosure provides a method of measuring the effectiveness of an intervention in a hybrid fiber-metal access network. The effectiveness measure is determined in accordance with the improvement in the attenuation and the maximum achievable data rate. The effectiveness measure is used to determine whether a further network intervention is required.

Abstract: A computer implemented method of generating cryptographic keys for a hardware security module (HSM), the method including generating a plurality of cryptographic keys and storing the cryptographic keys for use by the HSM in providing cryptography functions, wherein the cryptographic keys are generated based on numerical data generated by a hardware random number generator, such that a rate of generation of the cryptographic keys unconstrained by the resources of the HSM, wherein the hardware random number generator operates based on a plurality of statistically random entropy data sources originating from natural phenomena so as to increase a degree of randomness of the numerical data.

Abstract: Computer-implemented methods of placing and processing calls in a communications network are provided. The computer-implemented method of processing calls in a telephone network comprises: identifying a plurality of calls that have been made by a particular telephone number to telephone numbers in the telephone network; determining whether a sequence in which the calls were placed corresponds to a correct order for calling those telephone numbers, the correct order being determined based on a predetermined order for calling telephone numbers in the telephone network; and determining that one or more of the calls were made by spoofing the particular telephone number if the sequence in which the calls were placed does not correspond to a correct order.

Abstract: A method of managing traffic flow through a multi-node network, the multi-node network interlinking a first mobile network and a second mobile network, the method including, when a subscriber user equipment entity that has as a home network the first mobile network and that is operating in the second mobile network attempts to establish a connection to a correspondent user equipment entity: communicating a connection request message from the second network to the first network over a first route via a set of nodes of the multi-node network; at least one of the nodes of the set: identifying a candidate alternative route between nodes of the multi-node network for at least part of a connection between the subscriber user equipment entity and the correspondent user equipment entity; and transmitting an indication of the candidate alternative route to a controller; and the controller selecting, in accordance with predetermined criteria, one of the first route and the at least one candidate alternative route and c

Abstract: A computer implemented method of adapting a software defined network (SDN), the SDN operating with a set of network appliances in communication via network connections and the SDN comprising a control component operable in communication with at least a subset of the network appliances to control communication via the SDN, the method including receiving a representation of the logical arrangement of the SDN including a definition of appliances configured to provide communication for the SDN and network connections therebetween; receiving a measure of a performance metric for the SDN; receiving a forecast demand for the SDN; using a heuristic search to search a library of possible adaptations to the logical arrangement to identify a sequence of adaptations of the SDN that, when implemented, satisfy the forecast demand for the SDN and provide an improved measure of the performance metric of the SDN; applying the identified sequence of adaptations to the SDN by modifying the logical arrangement for use by the con

Abstract: Methods and apparatus are disclosed for managing streamed audio communication sessions between user devices (50) configured to send streamed data indicative of received audio contributions from respective participants in a multiple-participant audio communication session via a communications network to one or more other user devices (50) for conversion to audio representations of said received audio contributions for other participants.

Abstract: A computer implemented method for providing secure communication channels between a host computer system and a plurality of communicating endpoint computer systems, the host executing a plurality of application instances, the method including initiating a secure communications tunnel between the host computer system and each communicating endpoint on an application basis such that each application instance has a separate communications tunnel, wherein each communications tunnel has associated security parameters including at least one cryptographic key for securely encrypting communications via the tunnel; and responsive to a detection of a security event in respect of an application instance at the host computer system, generating new security parameters for the tunnel of the application instance to provide a continuity of secure communication.

Abstract: A computer implemented method of access control for a restricted resource of a resource provider in a network connected computer system, wherein a blockchain data structure accessible via the network stores digitally signed records validated by network connected miner software components, the method including: identifying an access control role definition for access to the resource, the role including a specification of access permissions; defining a cryptocurrency for indicating authorization to access the resource, the cryptocurrency being formed of tradeable units of value associated with records in the blockchain and wherein transfer of the cryptocurrency between records in the blockchain is validated by the miners; receiving a request from an authenticated resource consumer for authorization to access the resource; and submitting a blockchain transaction to the miner components to transfer a quantity of cryptocurrency to a consumer record in the blockchain, the transaction including an identification of

Abstract: A method of operating a first base station unit to process In-Phase and Quadrature (IQ) data for transmission to a second base station unit, the first and second base station units both being part of a disaggregated base station in a cellular telecommunications network and a method of operating a second base station unit to process a first and second data package processed by a first base station, the method including combining the first and second data packages.

Abstract: A computer implemented method to detect a computer system in execution operating in a manner that is not compliant with a definition of a set of compliant operations, the method including receiving a first set of records for the computer system, each record detailing an occurrence in the computer system during a first predetermined time period; generating a sparse distributed representation of the set of records to form a training set for a hierarchical temporal memory (HTM); training the HTM based on the training set in order that the trained HTM provides a model of the operation of the computer system during the predetermined time period; selecting at least a subset of operations in the set of compliant operations and causing the invocation of each operation of the subset in the computer system over a second predetermined time period to generate a second set of records of occurrences in the computer system; generating a sparse distributed representation of the set of records to form an input set for the tra

Abstract: A method of operating a device, the device being configured to communicate with a wireless telecommunications network and the device being in the form of an Autonomous Vehicle (AV), the method comprising the steps of: detecting a fault associated with the AV; and in response to detecting said fault, causing the AV to transmit a mayday wireless network communication for alerting the wireless telecommunications network of the fault; in response to the mayday wireless network communication, identifying a recovery AV that is capable of retrieving at least part of the AV and delivering said at least part to an intended destination; and instructing the recovery AV to perform the retrieving and delivering by communicating an instructing message, wherein the instructing message is in the form of a system information message.

Abstract: A method of operating a communications network is disclosed. In order to manage a network, it is first necessary to establish the state the network is in. This is difficult in practice because the network operational data stored and transmitted in the network takes a myriad of forms owing to the variety of suppliers and types of network equipment. There is a need to distil that network operational data down to aggregate network operational data which can be taken to provide an indication of the state of the network which is of a manageable size, and to which network management apparatus can react by sending control commands to the network. The problem of generating aggregate network operational data is tackled by identifying the type of each attribute found in each network operational data item, and classifying the network operational data items in a manner which takes account of the identified types and thus provides network aggregate data which more accurately reflects the operational state of the network.

Abstract: A method of establishing bearers for a device in a wireless communication network, including collecting for the device data over a period of time from communication sessions the device participates in, at least some of the communication sessions being supported by a default bearer and a dedicated bearer; calculating from the collected data a likelihood a dedicated bearer will be established for the device at one or more different times values, and predicting the dedicated bearer will be established for the device at a time value if the likelihood of establishment at that time value exceeds a specified threshold; and initiating establishment of the dedicated bearer to establish the dedicated bearer for the predicted time value.

Abstract: There is disclosed a method of selecting a channel for wireless communication in a network, including communicating data over a first communication channel between an access point and a client device for a first time period, during the first time period, obtaining a first performance measurement indicative of the performance of the first channel, communicating data over a second communication channel between the access point and the client device for a second time period, during the second time period, obtaining a second performance measurement indicative of the performance of the second channel, ranking the first and second channels in order of performance taking the first and second performance measurements into account when doing so, selecting an operating channel using the outcome of the ranking.

Abstract: There is disclosed a method of processing a data packet received by a packet sniffer, the packet containing an associated identifier, the method including transmitting the packet to a recipient, determining if the identifier corresponds to a particular network, wherein if the identifier is determined to correspond to the particular network, the identifier is provided to the recipient; and if the identifier is determined to not correspond to the particular network, the identifier is withheld from the recipient.

Abstract: A computer implemented method of computer security for a host computer system in communication with remote computer systems, the method including generating an attack map as a directed graph data structure modelling individual events leading to an exploitation of the host computer system, the attack map being generated in a training phase of the host computer system in which the host is subjected to attacks by one or more attacking remote computer systems, and generating the attack map includes collecting a log of each of a plurality of attack events occurring at the host including network packets involved in each attack event; using stacked autoencoders to extract features from the log event in each attack; generating a directed graph representation based on each of the extracted features based on a temporal relationship between events for each extracted feature and a predefined definition of each of a plurality of attack patterns defining events and temporal relationships between events, determining a subse