Abstract: A method for ranking detected anomalies is disclosed. The method includes generating a graph based on a plurality of rules, wherein the graph comprises nodes representing metrics identified in the rules, edges connecting nodes where metrics associated with connected nodes are identified in a given rule, and edge weights of the edges each representing a severity level assigned to the given rule. The method further includes ranking nodes of the graph based on the edge weights. The method further includes ranking detected anomalies based on the ranking of the nodes corresponding to the metrics associated with the detected anomalies.

Abstract: Systems, methods, and computer-readable media for creating service chains for inter-cloud traffic. In some examples, a system receives domain name system (DNS) queries associated with cloud domains and collects DNS information associated the cloud domains. The system spoofs DNS entries defining a subset of IPs for each cloud domain. Based on the spoofed DNS entries, the system creates IP-to-domain mappings associating each cloud domain with a respective IP from the subset of IPs. Based on the IP-to-domain mappings, the system programs different service chains for traffic between a private network and respective cloud domains. The system routes, through the respective service chain, traffic having a source associated with the private network and a destination matching the IP in the respective IP-to-domain mapping.

Abstract: Techniques for triggering multiple basic service sets (BSSs) to share resources for a coordinated transmission are described. One technique includes determining a first amount of data available to send in a first BSS and determining a second amount of data available to send in a second BSS. The first BSS and the second BSS form an overlapping BSS. An amount of resources in the first BSS that is available to share with the second BSS for a coordinated transmission from the first BSS and the second BSS is determined based on the first amount of data and the second amount of data. A frame that includes an indication of the amount of resources is generated and transmitted to at least one of the first BSS and the second BSS.

Abstract: Systems and methods are provided for receiving, at an enterprise network, first authentication data of a citizens broadband radio service (CBRS)-enabled device, receiving, at the enterprise network, second authentication data of the CBRS-enabled device, the first authentication data of the CBRS-enabled device being a different type of authentication data than the second authentication data of the CBRS-enabled device, determining a class of the CBRS-enabled device based on the first authentication data and the second authentication data of the CBRS-enabled device, determining a network segment for the CBRS-enabled device based on the class of the CBRS-enabled device, and providing access to the CBRS-enabled device based on the determining of the network segment for the CBRS-enabled device.

Abstract: In one embodiment, a device in a network sends Bidirectional Forwarding Detection (BFD) probes along a network tunnel associated with the device, to collect telemetry regarding the network tunnel. The device monitors an overhead associated with sending the BFD probes along the network tunnel. The device makes a determination that the overhead associated with sending the BFD probes along the network tunnel is unacceptable. The device switches, based on the determination, from sending BFD probes along the network tunnel to modifying data traffic sent via the network tunnel, to collect telemetry regarding the network tunnel.

Abstract: The present technology discloses methods, systems, and non-transitory computer-readable media for receiving, by a relying node in an optical transport network environment, attestation information in a trail trace identifier of an optical unit from an attester node in the optical transport network environment; verifying a trustworthiness of the attester node by identifying a level of trust of the attester node from the attestation information; and controlling network service access of the attester node through the relying node in the network environment based on the level of trust of the attester node identified from the attestation information.

Abstract: In one embodiment, a cable includes a data transmission path disposed about an axial center of the cable and a power transmission path sheathing the data transmission path. The power transmission path includes a power layer and a ground layer, where the power transmission path is characterized by a distributed impedance having at least one frequency dependent impedance characteristic. In some implementations, ground layer shields the data transmission path from electromagnetic interference. In some implementations, the frequency dependent impedance characteristic of the power transmission path is characterized by a capacitance value that satisfies a capacitance criterion at frequencies above a first frequency level. In some implementations, the frequency dependent impedance characteristic of the power transmission path is characterized by an inductance value that satisfies a first inductance criterion at frequencies above a first frequency level.

Abstract: Wireless access point locations can be determined by processing a combination of wired and wireless telemetry. Wireless telemetry can be combined with backend network management information to isolate a set of access points within a radio frequency neighborhood cluster. Wired telemetry, including time domain reflectometer operations performed by a local switch, can be used to refine location estimates of the isolated set of access points. Trilateration can be used to pinpoint the access point locations and the pinpointed locations can be overlaid on a floor plan map.

Abstract: The present disclosure is directed to systems and methods that enable automatic provisioning of access points within an enterprise network by a controller of the enterprise network. In one aspect, a method includes detecting, at a network controller, attachment of a first access point to a network; identifying, by the network controller, a profile of a second access point, the second access point having being replaced with the first access point, the profile including at least one of identification parameters and configuration parameters of the second access point; and provisioning, by the network controller, the first access point with the profile of the second access point.

Abstract: This disclosure describes techniques for monitoring communications in an application cloud infrastructure. The techniques may include determining whether a performance issue associated with the communications is related to an application server for a hosted application, or to a computing network that transmits the communications across the application cloud infrastructure. The techniques may also further include testing to define a performance issue, and/or taking action in response to a performance issue, including potentially mitigating the performance issue. As such, monitoring communications may help improve network performance by efficiently identifying and isolating instances of potential performance degradation.

Abstract: The disclosed technology relates to a process of dynamically assigning operational parameters for access points within a CBRS (Citizen Broadband Radio Service) network. In particular, the disclosed technology monitors for and detects interference between nearby access points and user equipment devices that may belong to the same enterprise or to different enterprises. Machine learning processes are used to revise the operational parameters that were initially assigned by the Spectrum Access System (SAS). These processes are also used to suggest an updated set of operational parameters to the SAS for the access points. The dynamic assignment reduces interference experienced by the access point with respect to nearby other access points and/or nearby other user equipment. The dynamic assignment aims to improve a quality of communication between the access point and its associated user equipment.

Abstract: Systems, methods, and devices are disclosed for authenticating a product. An internal component of a product is identified by identifying an intrinsic attribute of the internal component, where the intrinsic attribute is received at a time subsequent to independently storing the intrinsic attribute in a database. A match is determined between the intrinsic attribute and the stored intrinsic attribute. The product is confirmed to be authentic when the match is verified.

Abstract: Replacement of collaboration endpoints may be provided. First, a management server may cause a deprecated device to display an upgrade function notification. An indication from the deprecated device that the upgrade function notification has been selected may be received. In response to receiving the indication from the deprecated device that the upgrade function notification has been selected, the deprecated device may be caused to display a password and instructions to replace the deprecated device with a new device. Next, the password and an address associated with the new device may be received from the new device. In response to receiving the password, the new device may then be provisioned using the address.

Abstract: One embodiment of the present invention sets forth a technique for processing recordings of events. The technique includes applying a machine learning model to a plurality of samples from one or more recordings of the events to generate a plurality of embeddings representing the plurality of samples. The technique also includes generating a plurality of labels that identify speakers associated with the plurality of samples based on metadata comprising timestamps of voice activity during the events and participants associated with the voice activity. The technique further includes storing mappings of the plurality of embeddings to the plurality of labels.

Abstract: Techniques and mechanisms for automatically identifying counters/features of a network component that are related to a state change (or event) for the network component or for the network itself. For example, using data obtained from the network component around a time of the state change, delta averages for the features around the time of the state change may be determined. The delta averages may be utilized to determine which counters/features are most descriptive for a particular state change. The counter/features that are the most descriptive for a particular state change is as important as the change detection itself. This is especially true since in a case of an event/state change occurring, a large amount of counters/features may react to the state change or event. Thus, the techniques described herein provide for an approach to distill which counters/features contribute the most to a particular state change from a data driven perspective.

Abstract: The present technology provides a system, method and computer-readable medium for configuration pattern recognition and inference, directed to a device with an existing configuration, through an extensible policy framework. The policy framework uses a mixture of python template logic and CLI micro-templates as a mask to infer the intent behind an existing device configuration in a bottom-up learning inference process. Unique values for device/network identifiers and addresses as well as other resources are extracted and accounted for. The consistency of devices within the fabric is checked based on the specific policies built into the extensible framework definition. Any inconsistencies found are flagged for user correction or automatically remedied by a network controller. This dynamic configuration pattern recognition ability allows a fabric to grow without being destroyed and re-created, thus new devices with existing configurations may be added and automatically configured to grow a Brownfield fabric.

Abstract: This disclosure describes a method usable in a network that has a combination of mLDP-capable and BIER-capable devices. The disclosed method includes advertising, by an mLDP-capable multicast source, an indication of a BIER edge router that it has determined is usable as a path between the BIER devices and the mLDP-capable multicast source. A provider edge router can include in a multicast join message both an indication of the mLDP-capable multicast source as well as the indication of the BIER router advertised as being usable as the path to the mLDP-capable multicast source. The BIER devices can communicate with each other to pass a multicast join message to the BIER edge router that is indicated as being usable as the path to the mLDP-capable multicast source.

Abstract: Systems, methods, and computer-readable media are provided for load balancing requests and controlling object replication based on object popularity. A request for an object can be received at a dispatcher of a storage system from a client. Candidate storage nodes of the storage system for serving the object can be identified by the dispatcher by generating an ordered list of the candidate storage nodes using a two-dimensional consistent hashing function. Distribution of the request for the object through one or more candidate storage nodes for filling the request for the object can be facilitated according to the ordered list of candidate storage nodes. Specifically, the one or more candidate storage nodes can be configured to facilitate distribution of the request by selectively filling the request to the client using cache admission policies formed based on popularity characteristics of requested objects at the one or more candidate storage nodes.

Abstract: Systems, methods, and computer-readable media for detecting and reporting anomalies in a network environment for providing network assurance. In some embodiments, a system can determine confidence scores for at least one value of parameters of a network environment defining network events occurring in the network environment. The confidences scores can indicate a frequency that the defined network events have a specific event state. The confidence scores can be monitored to detect an anomaly in the network environment. In response to detecting the anomaly in the network environment, the system can determine a relevant network state of the network environment. The relevant network state of the network environment and the anomaly in the network environment can be presented to a user.

Abstract: A system and a method are disclosed for enabling interoperability between data plane learning endpoints and control plane learning endpoints in an overlay network environment. An exemplary method for managing network traffic in the overlay network environment includes receiving network packets in an overlay network from data plane learning endpoints and control plane learning endpoints, wherein the overlay network extends Layer 2 network traffic over a Layer 3 network; operating in a data plane learning mode when a network packet is received from a data plane learning endpoint; and operating in a control plane learning mode when the network packet is received from a control plane learning endpoint. Where the overlay network includes more than one overlay segment, the method further includes operating as an anchor node for routing inter-overlay segment traffic to and from hosts that operate behind the data plane learning endpoints.