Abstract: A framework for security information and event management (SIEM), the framework includes a first data store; a data router; one or more parsing mechanisms; one or more correlation machines; and one or more workflow engines, wherein said framework performs SIEM on behalf of multiple subscribers to said framework.

Abstract: Novel tools and techniques are provided for implementing data storage and/or retrieval, and, more particularly, for implementing data associations. In various embodiments, an associations rules engine might query data aggregation data services to determine whether a first data object (which along with a first relationship rule that indicates a one-to-one relationship between the first data object and a corresponding second data object) is associated with one or more third data objects; might abstract the first data object, the first relationship rule, and the one or more third data objects; might update, in a metadata catalog, a catalog entry corresponding to the first data object with one or more associations among various data objects; and might provide a requesting computing system with access to the catalog entry corresponding to the first data object, the computing system performing one or more computational tasks using the associations stored in the catalog entry.

Abstract: This disclosure describes systems, methods, and devices related to staging a universal customer edge gateway device. A universal customer edge gateway device may generate, prior to deployment of the universal customer edge gateway device at a customer location, copies of virtual network function (VNF) operating system (OS) images on the universal customer edge gateway device, the copies including a first copy of a first VNF OS image and a second copy of a second VNF OS image; identify, during a deployment of the universal customer edge gateway device at the customer location, a selection of the first copy from a list of the copies; copy, during the deployment and based on the selection, the first VNF OS image to the universal customer edge gateway device; and instantiate, at the universal customer edge gateway device, the copied first VNF OS image.

Abstract: Handheld tools are provided for removing a wire from within an optical cable. For example, the handheld tool may be used to remove a copper wire from a fiber optic drop cable in an efficient manner without damaging other components of the fiber optic drop cable. Advantageously, the optical cable may be used immediately after the wire is removed without further steps by the technician, such as re-applying an outer protective sleeve, as is commonly required with known tools.

Abstract: Novel tools and techniques for network data plane management are provided. A system includes a host machine that includes a database, processor, and non-transitory computer readable media comprising instructions executable by the processor to obtain, via the database, a network configuration, spawn a container according to the network configuration, wherein the container is configured, based on the network configuration, to be coupled to a network overlay via a network interface, receive, via the network interface, incoming data associated with the container, the incoming data having attached one or more attached network data attributes, and identify, via the database, the attached one or more network data attributes attached to the incoming data as one or more network data attributes of the network data model.

Abstract: Novel tools and techniques are provided for implementing service diagnostics and provisioning via a service action guidance engine (“SAGE”). In various embodiments, SAGE may autonomously analyze data to identify any issues with provisioning one or more first services, among a plurality of services, to a first customer of a service provider. SAGE may autonomously identify one or more first automation actions from a plurality of automation actions to address at least one first issue identified based on the analysis, and may autonomously send one or more first instructions to one or more first automation bots, among a plurality of automation bots, to perform the identified one or more first automation actions. SAGE may also generate and present one or more guidance messages to call center users to guide interaction between customers and the call center users, based on analysis data associated with provisioning of services to the customers.

Abstract: Novel tools and techniques are provided for implementing call center-based automated interface with voice switches for voice service diagnostics and provisioning. In various embodiments, in response to receiving a request by a call center user to access a voice service customer account, a computing system may access information regarding the voice service customer account that is stored in a database, may identify a switch that is configured to control voice service to a customer premises associated with the customer, based at least in part on the accessed information, and may autonomously access, from other databases, information associated with the voice service customer account. The computing system may integrate the accessed information, may generate and present a user interface (“UI”) displaying the accessed information, and may generate and present one or more options within the UI for the call center user to select to change features of the voice service.

Abstract: Examples of the present disclosure relate to a distributed CDN comprised of CDN nodes that each have a compute engine and a data store. Compute engines may be used to execute software associated with computing functionality of the distributed CDN and may be reconfigured according to changing conditions to adapt computing functionality to current or expected demand. Nodes may communicate with one another via an overlay network. A node may determine whether it should process a request or generate a route via the overlay network to the remote node, thereby enabling the remote node to process the request. In another example, a node may receive a request for a compute resource that is not currently provided by the node. The compute engine of the node may be reconfigured to provide the compute resource, thereby enabling the node to service the request rather than redirect the request to a different node.

Abstract: The present application describes a network interface device that acts as an interface between a network service provided by a network service provider and one or more network access devices associated with a particular location and/or entity.

Abstract: Systems and methods for dynamic storage and forwarding of data are described. When remote storage is unreachable by a device via a wide area network (WAN), the device may negotiate for temporary storage on another device connected to the same local area network (LAN). The temporary storage may have a specified storage amount and a specified storage time. The specified storage amount and/or specified storage time may be renegotiated if more space or time is desired. Temporary storage on multiple devices connected to the LAN may be available. The data in temporary storage may be transferred between different LAN devices.

Abstract: Novel tools and techniques might provide for implementing secure communications for IoT devices. In various embodiments, a gateway or computing device might provide connectivity between or amongst two or more Internet of Things (“IoT”) capable devices, by establishing an IoT protocol-based, autonomous machine-to-machine communication channel amongst the two or more IoT capable devices. For sensitive and/or private communications, the gateway or computing device might establish a secure off-the-record (“OTR”) communication session within the IoT protocol-based, autonomous machine-to-machine channel, thereby providing encrypted machine-to-machine communications amongst the two or more IoT capable devices, without any content of communications that are exchanged amongst the IoT capable devices over the secure OTR communication session being recorded or logged.

Abstract: Directed to implementing Internet of Things (“IoT”) functionality, and, in particular embodiments, implementing added services for OBD2 connection for IoT-capable vehicles. In various embodiments, a portable device (when connected to an OBD2 DLC port of a vehicle) might monitor wireless communications between a vehicle computing system(s) and an external device(s), might monitor vehicle sensor data from vehicular sensors tracking operational conditions of the vehicle, and might monitor operator input sensor data from operator input sensors tracking input by a vehicle operator. The portable device (or a server) might analyze either the monitored wireless communications or a combination of the monitored vehicle sensor data and the monitored operator input sensor data, to determine whether vehicle operation has been compromised. If so, the portable device (or the server) might alert the operator of the vehicle via a user interface and might initiate one or more remediation operations.

Abstract: Novel tools and techniques for are provided for implementing a hybrid spectrum access system and access probe framework. A system includes a base station coupled to a network, a spectrum access system, and user equipment coupled to the base station and the spectrum access system. The user equipment is configured to transmit, to the base station, a first network access request following a first access sequence while transmitting signals under a first power limit. If no response is obtained from the base station, the user equipment is configured to transmit a second network access request above the first power limit, but under a second power limit. The user equipment is configured to obtain spectrum access from the spectrum access system and transmit a second network access request to the base station.

Abstract: Novel tools and techniques are provided for implementing call center-based automated interface with network switches for Internet service diagnostics and provisioning. In various embodiments, in response to receiving a request by a call center user to access an Internet service customer account, a computing system may access information regarding the Internet service customer account that is stored in a database, may identify a network switch that is configured to provide Internet service to customer premises equipment (“CPE”) disposed at a customer premises associated with the customer, based at least in part on the accessed information, and may autonomously access, from other databases, information associated with the Internet service customer account and with a network profile. The computing system may integrate the accessed information, may generate and present a user interface (“UI”) displaying the accessed information, and may autonomously initiate one or more diagnosis and repair procedures.

Abstract: In examples, a first Anycast advertisement is received from a first server identifying the first server as a primary address for a service. In addition, a second Anycast advertisement is received from the first server identifying the first server as a secondary address for the service. Further, a third Anycast advertisement is received from a second server identifying the second server as the secondary address for the service. A first community advertisement is also from the first server identifying the first server as a member of a first community. Thereafter, a first request is received from a client including the primary address, and the request is routed to the first server. When a second request from the client is received including the secondary address, based at least on the community advertisement, the first server is ignored, and the second request is routed to the second server.

Abstract: Examples of the present disclosure describe a testing framework for adaptive virtual services. In an example, a function vendor provides a network function having stated specifications to a service provider. A derived signature is generated for the network function (e.g., based on associated metadata, an image associated with the network function, and/or a network signature for the network function), which is used to classify the network function. The testing framework is used to test the network function according to its classification, thereby determining a set of capabilities. In examples, a network function having the same or similar signature as a previously tested network function may be categorized according to the previously tested network function. The network function is categorized according to its determined capabilities and added to an inventory of network functions for the service provider. Network functions in the inventory can then be selected to form a computer network.

Abstract: In examples, systems and methods are described for edge computing recommendations and implementation. A service request is received from a client computing device that includes information about a location of a customer site and latency requirements of the customer, among other information. The system provides recommendations for particular provider computing site(s) based on, e.g., rough and/or fine latency estimates, and implements the requested computing services at selected provider computing site(s).

Abstract: Systems and methods are provided to utilize information from a directory service to determine, at a layer-one network policy server, the appropriate layer-two network policy server to which an authentication request should be routed. For example, a first directory service group may be created that includes all users using a first authentication type, a second directory service group may be created that includes all users using a second authentication type, etc. The layer-one network policy server may periodically synchronize with the directory service to download information about users in the different directory service groups, update a markup language document with that information, and use the markup language document to help route incoming authentication requests to the correct layer-two network policy server for a particular authentication type. In addition, a priority may be set (and changed) by an administrator favoring one or more authentication types in a network.

Abstract: Novel tools and techniques are provided for implementing object-oriented infrastructure-as-code platform (“OOIACP”) and its functionalities. In various embodiments, an OOIACP may receive a request to perform a function from a requesting device. The OOIACP includes a declarative configuration language (“DCL”)-based infrastructure-as-code (“IAC”) software tool that provides structure and data functionalities and a wrapper tool that provides algorithm and sequence functionalities to the IAC software tool to convert the IAC software tool into an object-oriented programming (“OOP”)-based IAC system. The OOIACP uses a run command to perform the requested function, by identifying classes within a class hierarchy associated with the requested function, and initiating a set of procedures in each identified class. Each class and subclass within the class hierarchy has one or more predefined class behaviors, and each subclass inherits class behaviors of classes to which it belongs and of any intermediate subclasses.

Abstract: Novel tools and techniques are provided for implementing secure network configuration and/or secure network access using a user device. In various embodiments, after establishing a secure wireless connection with a local network device, in some cases, by scanning and decoding a barcode (including connectivity data for connecting with the local network device) that is affixed to, or displayed on a display device on, a surface of the local network device, the user device may configure the local network device with settings and configurations. The user device may also provide a new wireless device with connectivity data for connecting with the local network device, in some cases, by scanning and decoding another barcode on the new wireless device to establish a secure connection to send the connectivity data. The user device and/or the new wireless device may then access a network established by the (configured) local network device.