Abstract: In one embodiment, a method may comprise: instrumenting, by a process, runtime of a software application; detecting, by the process, a reflection call made within the runtime of the software application; determining, by the process and from the reflection call, a reflection target and a reflection caller; comparing, by the process, the reflection target, the reflection caller, and the reflection call against a security policy; and performing, by the process, one or more mitigation actions on the reflection call in response to a violation of the security policy. In another embodiment, a secure audit process first generates the security policy based on approving reflection calls, reflection targets, and reflection callers seen during a runtime of the software application in a secure environment, and then shares the security policy with local instrumentors of the software application to cause enforcement of the security policy against a local runtime of the software application.

Abstract: In one embodiment, a gateway to a Layer-3 network forms a first Layer-2 tunnel between the gateway and a first wireless access point (AP) that communicates wirelessly with a first mobile node of a mobile system (MS) via a first wireless connection. The gateway generates a mapping that associates an onboard device of the MS with the first AP and an identifier for the MS, based on traffic conveyed via the first Layer-2 tunnel and associated with the onboard device, the traffic comprising a header that indicates the identifier for the MS. The gateway receives, from a second AP, an indication that the MS is roaming from the first wireless connection to a second wireless connection, the indication including the identifier for the MS. The gateway updates the mapping to associate the onboard device of the MS with a second AP, based on the indication that the MS is roaming.

Abstract: An interface circuit that interfaces a digital-to-analog converter (DAC) to a vertical-cavity surface emitting laser. The apparatus includes a first cascode amplifier that receives as input positive and negative differential outputs of the DAC and provides a positive amplified output and a negative amplified output, and a second cascode amplifier having a positive input and a negative input. The positive input of the second cascode amplifier being coupled to the positive amplified output of the first cascode amplifier. The second cascode amplifier is configured to generate a positive amplified current and a negative amplified current at a negative amplified output. The positive amplified current and the negative amplified current are combined and a resulting output current is provided as input to an anode of the laser. A transformer is coupled between the negative amplified output of the first cascode amplifier and the negative input of the second cascode amplifier.

Abstract: In one embodiment, a device of a data mesh divides a data query into a first subquery and a second subquery for different data sources in the data mesh, based on query routing data associated with the device. The device performs the first subquery in the data mesh, to obtain a first subquery response. The device also performs the second subquery in the data mesh, to obtain a second subquery response. The device provides a query response that aggregates the first subquery response and the second subquery response.

Abstract: Techniques for binding communication flows to unique addresses and/or ports, and configuring networking devices internal to a network to apply policy without the need to further introspect a given stream. Further, by creating mappings of unique addresses and/or ports to flows, the network devices are able to enforce policy without needing to coordinate with an edge node of the network at which the communication session terminates. Further, the techniques may include providing an SDN controller with a mapping between a unique address/port and a network flow, determining flow-specific policy to enforce on the flow, and programming one or more network devices to enforce the flow-specific policy in the network using the unique address/port.

Abstract: The present disclosure is directed to 3-D visualization of wireless signal propagation representing wireless signal strength and interference in 3-D space. The present technology can identify a plurality of access points (APs) in the 3-D space, determine a wireless signal strength for each of the plurality of APs, and determine an interference with the wireless signal strength of each of the plurality of APs, wherein the interference is caused by a neighboring AP of the plurality of APs in the 3-D space. The present technology can further present a 3-D visualization of a wireless signal propagation pattern representing the wireless signal strength from each of the plurality of APs in the 3-D space and the interference from the neighboring AP.

Abstract: A sample and hold circuit providing rail-to rail equivalent output is described. The circuit includes a sample and hold amplifier containing two separate sets of sampling capacitors, one set is coupled to a PMOS transistor differential stage and the other set is coupled to an NMOS transistor differential stage. The differential stages drive a current mirror based push-pull output differential stage to provide an output signal with ranges equivalent to a rail-to rail output signal swing.

Abstract: A system is provided for reducing infrared (IR) light emitting diode (LED) power in a night mode for LED operations. The system may include an input power source, one or more LEDs coupled to the input power source, an auto-exposure controller (AEC) coupled to one or more LEDs, and one or more transistor switches coupled between the one or more LEDs and the AEC. The AEC may be coupled to an image sensor of an imaging system and may configure attributes of exposure frames for the image sensor. The AEC may generate a plurality of pulses that control one or more transistor switches. The AEC may execute an algorithm that synchronizes the activation of one or more LEDs to occur during the exposure frame.

Abstract: Techniques are described herein for service chaining in fabric networks such that hardware resources can be preserved without service nodes needing additional capabilities. The techniques may include storing a first configuration associated with a first VRF instance of a service forwarding node that is connected to a first service of a service chain sequence. The first configuration may indicate an identifier and a type associated with a second service of the service chain sequence where traffic is to be sent after the first service. Additionally, the techniques may also include storing a second configuration associated with a second VRF instance of the service forwarding node that is connected to the second service. The second configuration may indicate that the second service is a last service of the service chain sequence. When traffic is received at the service forwarding node, the service forwarding node can determine whether the traffic is pre-service traffic or post-service traffic.

Abstract: In one embodiment, a device may transmit, via a network to an application, a series of sensor measurements captured by the device, each sensor measurement having an associated timestamp based on a clock of the device. The device may receive, from the application, an indication that at least a portion of the series of sensor measurement were not received by the application. The device may determine, for those sensor measurements not received by the application, timestamp differences between their timestamps and a current time of the clock of the apparatus, after receiving the indication. The device may resend the portion of the series of sensor measurements to the application and their timestamp differences.

Abstract: An approach is presented herein to use an in-situ algorithmic decision methodology during each stage of testing before 2C/4C to decide how long to test, how much margin should be used for each device under the test (DUT) to shorten or eliminate 2C/4C testing. Each DUT will be tested differently based on the risk level or the likelihood of failure at 2C/4C. To be able to achieve this, low-level hardware (HW) based sensors (on the printed circuit board assembly (PCBA), in power module, in silicon components, in silicon component complex, etc.) are used to collect telemetry data with a high frequency data acquisition rate during the testing. As testing is ongoing for each DUT, a margin distribution and algorithm modeling is performed in-situ.

Abstract: In part, in one aspect, the disclosure relates to a method for passivating a waveguide of an optical circuit. The method includes etching a suspended waveguide in the optical circuit; the suspended waveguide having a top surface, a bottom surface, and side surfaces; and covering the top surface and side surfaces of the suspended waveguide with a passivation coating having a thickness that ranges from between about 10 nm to about 20 nm. In one embodiment, the method further includes removing one or more coatings from a portion of the optical circuit. The disclosure also relates to various passivated optical silicon circuit embodiments.

Abstract: Systems and methods provide for synergistic domain name system DNS security updates for an enterprise network operating under a Software Defined Wide Area Network (SD-WAN). A system may be configured to collect positive and/or negative unified threat defense (UTD) results, deploy a rules-based model that, when a threat or clearance is detected across several SD-WAN edge network devices, triggers an update to a local security blacklist/whitelist, wherein the update comprises a signature, and push the update to other devices that have not yet seen the threat or clearance.

Abstract: In one embodiment, an illustrative method herein may comprise: obtaining, by a device, one or more independent telemetry streams, wherein each of the one or more independent telemetry streams is uniquely identifiable by a span identifier; translating, by the device, each of the one or more independent telemetry streams into a corresponding QUIC protocol stream; mapping, by the device, the span identifier of each of the one or more independent telemetry streams to a respective stream identifier that uniquely identifies a QUIC channel of a multiplexed QUIC protocol stream; and communicating, by the device, the multiplexed QUIC protocol stream containing each of the one or more independent telemetry streams on its corresponding QUIC channel to cause a retrieving device to determine the span identifier of each of the one or more independent telemetry streams based on their respective stream identifier.

Abstract: In one embodiment, a method includes establishing, by an identity agent installed on a device, a connection to a browser installed on the device and generating, by the identity agent, first device information, a public key, and a private key. The method also includes communicating, by the identity agent, the first device information and the public key to an authentication service and receiving, by the identity agent, a unique identifier from the authentication service. The method further includes generating, by the identity agent, a first signature of the first device information and communicating, by the identity agent, the first signature, the first device information, and the unique identifier to the browser.

Abstract: Disclosed are systems, apparatuses, methods, and computer-readable media to address bearer loss during inter-radio access technology (RAT) handovers. A method includes sending a create bearer request for establishing a service for the mobile device using a first connection; receiving a create bearer response message to setup a second connection for the mobile device to continue the service; and, in response to the create bearer response message, sending an update bearer request message to provide the mobile device with the QoS information associated with the second connection, the QoS information allowing the mobile device to verify an existing QoS flow to continue the service after the handover. In some cases, a user equipment (UE) may delete a mapping between a QoS information when a previous message does not include an evolved packet core (EPC) bearer indicator (EBI) that identifies QoS policies.

Abstract: The present technology is directed to providing enhanced capacity for tenants in a neutral host network (NHN) via multi-connectivity such as dual connectivity or carrier aggregation. The present technology can identify, at a small cell gateway, signaling traffic passing from an access network to a respective core network of an NHN operating at mid-band frequencies and add an interface between the small cell gateway of the NHN and a base station of a tenant network operating at low-band frequencies to establish dual connectivity. Furthermore, the present technology can establish a radio resource control (RRC) connection in a primary cell residing in a macro network operating at low-band frequencies and add, at a fronthaul gateway, one or more secondary cells in a small cell network operating at mid-band frequencies to enable carrier aggregation of the one or more secondary cells with the primary cell the small cell network.

Abstract: Systems, methods, and computer-readable media are disclosed for dynamically adjusting a configuration of a pre-processor and/or a post-processor of a machine learning system. In one aspect, a machine learning system can receive raw data at a pre-processor where the pre-processor being configured to generate pre-processed data, train a machine learning model based on the pre-processed data to generate output data, process the output data at a post-processor to generate inference data, and adjust, by a controller, configuration of one or a combination of the pre-processor and the post-processor based on the inference data.

Abstract: A fan silencer module includes a housing having a first end of the housing, a second end of the housing, and an interior surface between the first end of the housing and the second end of the housing. Acoustic absorbing material is disposed on the interior surface. A honeycomb air flow director is disposed at the second end of the housing. And an electromagnetic interference gasket surrounds an outer edge of the honeycomb air flow director. In an embodiment, a depth of the electromagnetic interference gasket is at least as deep as a depth of the honeycomb air flow director. Also provided is a handle, and a latch actuator, to enable removal and replacement of the fan silencer module and an associated fan module from a chassis.

Abstract: A method of configuring a user plane function node in, e.g., a fifth generation mobile core architecture to process user plane traffic without reliance on control messages over the Sx/N4 or Gx/N7 interfaces. The method includes detecting a type of user traffic at a user plane function node in, e.g., a fifth generation mobile core architecture, selecting, on the user plane function node and based on the type of user traffic, a rule to be applied to the user traffic, and activating the rule to be applied to the user traffic. The approach reduces or eliminates north-south control traffic in CUPS architecture or 5G mobile core architecture.