Abstract: A method provided in a network including edge devices to collect data from data producers connected to the edge devices and to communicate with cloud-based prosumers connected with the edge devices. Data analytics tasks are identified. The data analytics tasks are used to process data collected from a data producer among the data producers to produce a result for consumption by one or more of the cloud-based prosumers. For each data analytics task it is determined whether a computational complexity of the data analytics task is less than or equal to a predetermined computational complexity. Each data analytics task determined to have a computational complexity less than or equal to the predetermined computational complexity is assigned to an edge device among the edge devices. Each data analytics task determined to have a computational complexity that exceeds the predetermined computational complexity is assigned to a prosumer among the prosumers.

Abstract: In one embodiment, path routing in a node fabric of an information-centric network (ICN) includes transmitting a request from a source application to an upstream node via node faces of nodes in the node fabric along a path encoded in a Path Steering Value (PSV); and receiving at the source application from the upstream node a reply that travels along a return path encoded in the PSV. The PSV is generated by pairwise encoding pairs of node faces successively traversed by the reply and is represented by a deterministically decodable pairing function. Node face identifiers can be deterministically, i.e., uniquely, decoded from the PSV. The deterministically decodable pairing function is selected from a Cantor function, a Hopcroft and Ullman variant of the Cantor function, Hilbert curve algorithm, Morton code, and a bitwise pairing function.

Abstract: An audio mixer for mixing audio signals from a plurality of participants, including audio signals of different sample rates; the audio mixer comprising: a plurality of mixing arrangements, each mixing arrangement for a given one of said sample rates; each mixing arrangement comprising: a pre-mixer configured to mix audio signals having the given sample rate; one or more resamplers, each resampler configured to convert pre-mixed audio signals from other mixing arrangements into a signal of the given sample rate; and a post-mixer configured to mix the output of the pre-mixer with the output of each resampler to produce an output at the given sample rate; the audio mixer further comprising a subtractor configured to subtract the participant's input audio signal from the post-mixed output.

Abstract: Particular embodiments described herein provide for a communication system that can be configured to identify a system that includes network traffic, where at least a portion of the network traffic includes packets, at least a portion of the packets include a stack, and at least a portion of each stack includes one or more previously allocated labels. The communication system can further be configured to determine a synonymous label that triggers an action and to replace a label from the one of the one or more previously allocated labels in a specific stack of a specific packet with the synonymous label. In an example, the synonymous label can be used to identify a subset of packets in the network traffic or a source of the specific packet.

Abstract: This disclosure relates to a system and method for routing data packets adaptively in a communication system. As the proliferation of data rich content and increasingly more capable mobile devices has continued, the amount of data communicated over mobile operator's networks can continue to exponentially increase. One way to accommodate increased data traffic and provide high quality data communication services to end users is by utilizing network resources efficiently. This disclosure provides systems and methods for efficiently utilizing network resources by providing adaptive intelligence to data packet routing systems.

Abstract: In one embodiment, a method includes creating an active container and a standby container for a single supervisor of an operating system at a network device, instantiating instances for active Kernel Loadable Modules (KLMs) for servicing the active container, instantiating instances for standby KLMs for servicing the standby container, wherein one or more of the standby KLMs comprise upgraded versions of the active KLMs, and switching over from the active container to the standby container to perform an in-service upgrade of the KLMs for the operating system. An apparatus and logic are also disclosed herein.

Abstract: In one embodiment, a logging process initiates a trace of an execution flow across a plurality of processes, and creates a log context for the trace, the log context having a universally unique identifier (UUID) and an indication that the trace is to be performed as the plurality of processes are executed during the execution flow. The logging process manages passage of the log context across the plurality of processes during the execution flow, and gathers log entries from the plurality of processes based on the UUID for the trace, where the log entries were created based on the indication being within the log context. As such, the logging process may stitch the log entries into a flow execution log for the trace of the execution flow.

Abstract: In one embodiment, a device in a network sends a first set of one or more packets at a first rate to a destination in the network. The device determines a queuing delay reporting time. The queuing delay reporting time represents an amount of time before an indication of a queuing delay associated with the sent first set of one or more packets is reported back to the device. The device determines a second rate based on the determined queuing delay reporting time and on a maximum allowable delay. The device sends a second set of packets at the second rate to the destination.

Abstract: Techniques are provided for a network mapping server device in a network to receive a connection upgrade message comprising information to establish a first data flow from a first endpoint that does not support multiple subflows for the first data flow according to a multipath protocol, where multiple subflows subdivide the first data flow across two or more network paths. The information in the connection upgrade message is analyzed in order to resolve network connectivity to determine potential network connections for at least two subflows of the first data flow to a second endpoint. A response message is sent comprising information configured to establish at least two subflows for the first data flow between the first endpoint and the second endpoint.

Abstract: In one embodiment, a method includes obtaining text from a user, applying the text to a deep learning neural network to generate a plurality of bias coordinates defining a point in an embedded space, and, in response to determining that at least one of the plurality of bias coordinates exceeds a threshold, providing an indication of bias to the user.

Abstract: In accordance with one example embodiment, a system configured for providing multifunctional switching is disclosed. The system is configured for filtering at least some incoming traffic to select network packets originating from one or more predefined sources and destined to a predefined destination, load balancing at least some of the selected network packets among a plurality of server nodes to assign each network packet to one server node of the plurality of server nodes, for each network packet assigned to one server node of the plurality of server nodes replacing a destination address of the predefined destination with a destination address of the assigned server node, and forwarding the each network packet assigned to one server node in accordance with the replaced destination address in the network packet.

Abstract: In one embodiment, a service maintains a mobility path graph that represents roaming transitions between wireless access points in a network by one or more client devices in the network. The service identifies, using the mobility path graph, one of the wireless access points in the network to which a particular client device is predicted to roam. The service performs, in advance of the particular client device initiating roaming to the one or more wireless access points, one or more roaming handshakes on behalf of the particular client device and with respect to the wireless access point to which the particular client device is predicted to roam. The service sends handshake data from the performed one or more roaming handshakes to the identified access point to which the particular client device is predicted to roam.

Abstract: A method is provided in one example embodiment and may include maintaining, by a Diameter Routing Agent (DRA), an availability status for a plurality of network elements; receiving a request associated with a user equipment (UE) session, wherein a first network element of the plurality of network elements is serving the UE session; determining that the first network element serving the UE session is unavailable; and re-establishing the UE session at a second network element of the plurality of network elements that is available, wherein the re-establishing is performed without terminating the UE session.

Abstract: Presented herein are techniques for mitigating a domain name system (DNS) amplification attack. A methodology is provided including receiving, at a (DNS) server, a DNS request, determining whether the DNS request has a source IP address that matches a predetermined source IP address and a port number that falls within a predetermined port range. When the DNS request has a source IP address that matches the predetermined source IP address and a port number that falls within the predetermined port range, determining whether the DNS request includes validation information. Based on the presence or content of the validation information, determining whether the DNS request is a valid DNS request, and dropping the DNS request when it is determined that the DNS request is not a valid DNS request.

Abstract: Techniques are disclosed to synchronize wireless signal transmission by endpoints controlled by a central controller. For example, an example method of wireless communication includes receiving, at a first device, over a wired medium between the first device and a second device, a plurality of packets from the second device. Each of the plurality of packets comprises data representative of a portion of a signal corresponding to a wireless medium. The method further includes receiving, at the first device, from the second device over the wired medium a synchronization signal based on a common master clock at the second device. The method further includes synchronizing, at the first device, a local clock of the first device to the common master clock based on the synchronization signal. The method further includes reconstructing the signal corresponding to the wireless medium based on the plurality of packets and the synchronized local clock.

Abstract: Systems, methods, and computer-readable media are provided for modifying a network service of a requesting network member. A request, received from the requesting member, can include an identification of a sponsoring network member for a requested network service modification. A group can be generated and associated with the requesting member and with the sponsoring member. The group may also include a group policy referencing the requested network service modification. The sponsoring member can be provided with an activation key for activating the network service modification and a first network policy can be applied to the requesting member and a second network policy can be applied to the sponsoring member.

Abstract: Multi-blend fingerprinting may be detected. First, a video sample may be received. Next, frames of the received video sample may be step iteratively through until a probability value corresponding to a current frame indicates a match. Deciding that the probability value indicates the match may comprise creating an augmented frame, determining the probability value corresponding to the created augmented frame, and determining that the probability value indicates the match. Then a fingerprint from the created augmented frame may be extracted.

Abstract: In one embodiment, a method includes identifying insertion of a plug at a port of power sourcing equipment for delivery of Power over Ethernet, the plug connected to one end of a cable with another plug connected to an opposite end of the cable, checking for resistors at each of the plugs, determining a power rating of the cable based on the resistors located at the plugs, and powering the port to a power level based on the power rating. An apparatus is also disclosed herein.

Abstract: In one embodiment, a method for assessing security posture for entities in a computing network is implemented on a computing device and includes: receiving behavior data from one or more of the entities, where the behavior data is associated with at least activity on the computing network by the one or more entities, calculating a risk score for at least one of the entities by comparing the behavior data with a classification model, where the classification model represents at least a baseline for normative network behavior by the entities in a computing network, assessing a security posture for the at least one the entities based on the risk score, and allocating network security resources to the at least one of the entities at least in accordance with the security posture.

Abstract: A method is provided in one example embodiment and includes receiving at a network element an encapsulated packet including an encapsulation header, in which the encapsulation header includes an Analytics Proxy Function (“APF”) flag; determining whether the APF flag is set to a first value; if the APF flag is set to the first value, forwarding the encapsulated packet to a local APF instance associated with the network element, in which the encapsulated packet is processed by the local APF instance to replicate at least a portion of the encapsulated packet, construct a record of the encapsulated packet, or both; and if the APF flag is not set to the first value, omitting forwarding the encapsulated packet to the local APF instance associated with the network element. The local APF instance is implemented as a service function anchored at the forwarding element.