Abstract: In one embodiment, an operating system on a computer device interfaces with a graph database that has data nodes interconnected by relationship edges. The operating system generates database instructions that specify a database operation for a target node in the graph database and a node traversal list through the graph database to reach the target node. By then transmitting the database instruction to the graph database, the graph database (e.g., a database management operating system) traverses the specified node traversal list through the graph database to the target node, and performs the database operation on the target node.

Abstract: Identifying malicious communications by generating data representative of network traffic based on adaptive sampling includes, at a computing device having connectivity to a network, obtaining a set of data flows representing network traffic between one or more nodes in the network and one or more domains outside of the network, wherein each data flow in the set of data flows includes a plurality of data packets. One or more features are extracted from the set of data flows based on statistical measurements of the set of data flows. The set of data flows are adaptively sampled based on at least the one or more features. Then, data representative of the network traffic is generated based on the adaptively sampling to identify malicious communication channels in the network traffic.

Abstract: Echo cancellation may be provided. First, a feedback signal corresponding to a plurality of downstream paths may be received. Next, during an upstream silence period, a sample of a combination upstream signal may be received comprising a combination of upstream signals from a plurality of upstream paths. An echo correcting signal may then be created using the received feedback signal and the received sample of the combination upstream signal. Downstream echoes may be cancel from the combination upstream signal based on the created echo correcting signal.

Abstract: Message summarization and flood suppression may be provided. A proxy (e.g., an IGMP Proxy) process may be used to reduce the flooding of messages (e.g., IGMP messages) over a network (e.g., an EVPN network). A triggering process may also be provided for provider edge (PE) devices to setup their underlay multicast tunnels. The proxy may comprise two components: i) a proxy for reports (e.g., IGMP reports); and ii) a proxy for queries (e.g., IGMP Queries).

Abstract: First, a packet may be received by a first provider edge device from a first customer edge device locally connected to the first provider edge device. Then the first provider edge device may replicate the packet to a second customer edge device locally connected to the first provider edge device and encapsulate the packet with an address of the first provider edge device. Next, the first provider edge device may transmit the encapsulated packet to a second provider edge device. Then, the second provider edge device may determine from the determined address of the first provider edge device, that the first provider edge device is not locally connected to a third customer edge device. The second provider edge device may then replicate the packet to the third customer edge device in response to determining that the first provider edge device is not locally connected to the third customer edge device.

Abstract: Biometric masking includes testing video data and/or audio data from the video conference for biometric markers indicative of emotion or stress levels. If at least one of the biometric markers is detected with the testing, the video data and/or the audio data is edited to obfuscate the at least one of the biometric markers so that the video data and the audio data is transmitted to participants of the video conference with the at least one of the biometric markers obfuscated.

Abstract: Client address based forwarding of dynamic host configuration protocol response packets may be provided. First, a first relay agent on a first network device may receive a first discovery message associated with a first client device. The first discovery message may include a first discovery message identifier field comprising a first identifier corresponding to the first client device. The first client device may be associated with a subnet. Then the first relay agent may register, with a map server, the first identifier with an address of the first network device and add a gateway address corresponding to the first relay agent to the first discovery message. Next, the first relay agent may encapsulate the first discovery message and forward the encapsulated first discovery message over a network to a border device.

Abstract: Embodiments include technologies for creating a manifest for a conferencing event in a network, adding a name tag identifying the conferencing event to the manifest, receiving an interest packet including one or more parameters indicating a named flow being produced at a source node, adding content metadata of the named flow to the manifest, and sending the manifest to the source node. Further embodiments include adding, to the manifest, session-level metadata associated with a user of the source node. Embodiments include receiving a second interest packet with one or more second parameters identifying a user of a client node, where the second interest packet indicates a request to authorize the user of the client node to subscribe to the conferencing event. In further embodiments, session-level metadata associated with the user is added to the manifest if the user is authorized to subscribe to the conferencing event.

Abstract: In one embodiment, a device in a network detects an anomaly in the network using an anomaly detector. The anomaly corresponds to an anomalous behavior exhibited by one or more nodes in the network. The device computes an anomaly score for the anomaly that represents a measure of the anomalous behavior. The device adjusts the anomaly score using a boost score. The boost score is generated by a boosting function that accounts for domain-specific biases of the anomaly detector. The device reports the anomaly to a supervisory device based on whether the adjusted anomaly score exceeds a reporting threshold.

Abstract: Methods, devices, and computer-readable medium for preventing broadcast looping during a site merge are described herein. An example method can include detecting a site merge between a plurality of layer 2 (L2) networks using a spanning tree protocol (STP), blocking a data traffic port connecting the L2 networks in response to detecting the site merge, and performing an STP-Ethernet virtual private network (EVPN) handshake. The STP-EVPN handshake can include changing a root bridge in one of the L2 networks. Thereafter, the method can include unblocking the data traffic port connecting the L2 networks. In other words, the data traffic port connecting the L2 networks can be unblocked after changing the root bridge in the one of the L2 networks.

Abstract: A system monitors applications that provide a single content page by monitoring network traffic associated with single page transitions. The network traffic may be monitored by mechanisms provided by a network browser that updates the page. Updates to the page, called transitions, may be detected when they first begin. The network traffic associated with a single page transition from a first content page to a second version of that content page may be tracked through the network traffic viewing mechanism. When the network traffic is determined to have concluded, the end of the single content page transition is determined to have occurred. Metrics may then be generated from data collected during the transition, and the data and metrics may be reported to a controller.

Abstract: Presented herein are techniques that enable Ethernet Virtual Private Networks (EVPNs) to support use cases where either the Layer 2 or Layer 3 route associated with a virtual endpoint is different after the virtual endpoint migrates/moves to a different location. In particular, a networking device running an overlay network detects that a virtual endpoint has migrated on the overlay network from a first computing device to a second computing device. The networking device determines a modified Layer 2/Layer 3 route for the virtual endpoint at the second computing device, as well as a sequence number for association with the modified Layer 2/Layer 3 route. The sequence number is determined based on a sequence number associated with a parent Layer 2 route for the modified Layer 2/Layer 3 route.

Abstract: A flexible radio assignment algorithm that reduces co-channel interference in Wi-Fi networks is disclosed. The flexible radio assignment algorithm calculates a density value for each of the APs controlled by a network controller. The flexible radio assignment algorithm selects an AP with the highest density value and determines that a radio in the selected AP is redundant. The flexible radio assignment algorithm manages the redundant radio in the selected AP to mitigate co-channel interference in a frequency band.

Abstract: Techniques relating to a geographic lighting controller. A controller determines a target lighting pattern based on an instruction for a smart lighting effect. The controller retrieves from a database, based on the target geographic location, information identifying a first plurality of smart lights to activate as part of the smart lighting effect. The controller determines a plurality of network addresses for the first plurality of smart lights, based on the retrieved information, generates a lighting effect command relating to the first plurality of smart lights, and transmits the lighting effect command to create the smart lighting effect.

Abstract: In one embodiment, a supervisory device in a network forms a first virtual access point (VAP) for a first node in the network. A plurality of access points (APs) in the network are mapped to the first VAP as part of a VAP mapping and the first node treats the APs in the VAP mapping as a single AP for purposes of communicating with the network. The supervisory device determines a communication schedule for the first node based on a radio chain of at least one of the APs in the VAP mapping for the first VAP being shared by the first VAP and a second VAP for a second node in the network. The supervisory device, according to the communication schedule for the first node, causes one or more of the APs in the VAP mapping for the first VAP to instruct the first node to stop transmitting for a period of time.

Abstract: Techniques are provided herein to allow a wireless network access point (AP) to more fully use its bandwidth in order to leverage the different bandwidth capabilities of different types of wireless client devices that the AP serves. The AP generates control parameters for usage of a plurality of channels in a bandwidth during a downlink transmission interval. The control parameters comprise information indicating channel assignments that result in multiple downlink transmissions that at least partially overlap in time to different wireless client devices according to their respective bandwidth capabilities. The AP transmits the control parameters in a control frame in advance of the downlink transmission interval on each of the plurality of channels in the bandwidth.

Abstract: One embodiment of the present invention provides a system that facilitates delivery of advertisements over a network. The system includes an affiliate node. During operation, the affiliate node receives a content piece from a content provider. The content piece includes a placeholder link associated with a predetermined advertising slot. The affiliate node modifies the content piece by replacing the placeholder link with an advertisement or a link thereto. Subsequently, the affiliate node receives a request for the content piece from a client, and delivers the modified content piece to the client.

Abstract: Real-time metadata about a plurality of video streams, and information associated with a directed stream, is received. The information includes a plurality of time segments, where time segments correspond to a respective video stream selected by a director for display in the directed stream during the time segment. Additionally, it is determined, based on the information, that the directed stream will display a first video stream during a first time segment. Further, a subsidiary stream is generated for a first group of users. This involves determining to substitute a second video stream for the first video stream during the first time segment, based on real-time metadata and further based on a first set of rules associated with the first group of users. When the first time segment begins, the second video stream is outputted for display in the subsidiary stream.

Abstract: Methods and network devices are disclosed for internet protocol (IP) based encapsulation in bit indexed explicit replication (BIER) forwarding. In one embodiment, a method includes receiving a multicast message comprising an inner IP header, an intervening header, and an outer IP header. The embodiment further includes accessing a message bit array stored in the intervening header, retrieving an IP address from an entry in a bit indexed forwarding table, replacing an IP destination address in the outer IP header of a copy of the multicast message with the retrieved IP address, and sending the copy of the multicast message toward a second node in the network, where the retrieved IP address is assigned to the second node. An embodiment of a network device includes a processor operably coupled to a plurality of storage locations and to one or more network interfaces and adapted to perform steps of the method.

Abstract: Embodiments include technologies for identifying an equivalence class identifier in a packet received by a node configured to perform information centric networking (ICN) in an ICN network, where the packet includes a name identifying content associated with a producer node in the ICN network. Embodiments also include determining an equivalence class for the packet by determining a name prefix of the name based, at least in part, on the equivalence class identifier. Embodiments further include taking an action affecting a particular packet, the action based, at least in part, on the equivalence class. In specific embodiments, the name includes a plurality of name components, and the equivalence class identifier is a count indicating a number of name components in the name to be grouped together to determine the name prefix. In further embodiments, the number is greater than a particular number of name components in a routable name prefix.