Abstract: A method is provided for managing heterogeneous cellular networks. The method comprises obtaining measurement reports from wireless entities relating to the intensity at which signals are received by each wireless entity; based on these measurement reports, and/or on geographical information of HetNet elements, identifying a macro cell located at the vicinity of the small cells; selecting one of the small cells to be a gateway cell, and other small cells to be inner cells. The gateway cell is a small cell that receives, or mobile terminals connected thereto receive, signals transmitted by the macro cell at an intensity being at least similar to intensity at which these signals are received at the inner cells; identifying physical layer identifiers (PLIs) used at the macro cell; and determining PLIs for the gateway cell which are not currently used by the macro cell, and PLIs available for use by the inner cells.

Abstract: Apparatus and techniques for determining whether a domain name has been generated by a domain generation algorithm (DGA) are disclosed. A first domain name is classified as either a likely domain generation algorithm (DGA) domain name or a likely non-DGA domain name, based on one or more features of the first domain name. In addition, statistics are determined regarding requests for the first domain name. Additional domain names are identified that share an infrastructure with the first domain name. A determination is made regarding whether the first domain name and/or one or more of the additional domain names are likely to have been generated by a DGA, based on a result of one or more of the classifying, the statistics, or the identifying. A security vulnerability related to one or more of the likely DGA domain names is then mitigated.

Abstract: Techniques are presented herein for receipt/transmission of packets to/from a host via a connected input/output (IO) device. In general, a packet is associated with a payload, an inner packet header, and an outer overlay header. The IO device is configured to perform independent offload operations on the inner packet header and the outer overlay header.

Abstract: Consistent with embodiments of the present disclosure, systems and methods are disclosed for providing per-group ECMP for multidestination traffic in a DCE/TRILL network. Embodiments enable per-group load balancing of multidestination traffic in DCE/L2MP networks by creating a new IS-IS PDU to convey the affinity of the parent node for a given multicast group. For broadcast and unknown unicast flooded traffic, the load balancing may be done on a per-vlan basis.

Abstract: Embodiments described herein include a Power over Ethernet (PoE) enabled device that uses 2-event classification when allocating power to coupled powered devices (PDs). If the 2-event classification is successful, power sourcing equipment (PSE) on the PoE device allocates a maximum power allotment to the PD. Once powered on, the PD may determine it does not require the maximum power allotment and negotiate a reduction in the power allotted to the PD.

Abstract: In one embodiment, primary circuits may be established on a network link, where each primary circuit individually allocates primary bandwidth of the network link and is assigned to one of either a respective primary weighted queue of the network link corresponding to a size of the respective primary circuit or a shared primary weighted queue of the network link corresponding to a total size of the individually allocated primary bandwidth for the network link. In addition, protection circuits may also be established on the network link, where the protection circuits collectively allocate shared backup bandwidth of the network link and are assigned to a shared backup weighted queue of the network link corresponding to a size of the shared backup bandwidth for the network link. As such, primary and backup packets may be forwarded on the network link according to the primary and backup weighted queues (e.g., allowing 1:1 protection).

Abstract: One or more operational parameters associated with pluggable optical transceivers are estimated to mitigate impairments to an optical signal caused by imperfections in the optical transceivers. A monitoring algorithm within a receiver signal processor may further use the estimated operational parameters associated with the pluggable optical transceivers to determine whether the transceivers are performing correctly. If the monitoring algorithm determines that either the transmitting or receiving optical transceiver is not functioning correctly, it may generate an alarm signal to notify a system administrator about the damaged device.

Abstract: A Software-as-a-Service (SaaS) access control application on a client device is configured with a certificate that identifies a user, and with configuration information for one or more SaaS applications to access, and including an IDP identifier for the SaaS application. The SaaS access control application includes software to be inserted into a network software stack of the client device and software configured to serve as an identity provider for assertions. A request, made by an application on the client device to a SaaS service provider identified by a Universal Resource Locator (URL) provided during configuration of the SaaS access control application, is intercepted within the network software stack of the client device. The SaaS access control application generates an assertion based on the certificate and configuration information. The requesting application is caused to make a request to the SaaS service provider with the assertion embedded in the request.

Abstract: Access points and a wireless client device, such as a workgroup bridge, are configured to optimize a roaming algorithm of the client device for a high-speed vehicle scenario, such as a high-speed train. A static/dynamic neighbor list is generated and used to improve scanning efficiency. An improved parent access point selection procedure, metrics, and thresholds are provided to optimize client roaming along the vehicle's path, e.g., the train track.

Abstract: In one embodiment, a first device in a multicast label distribution (mLDP) network receives a first label mapping message that includes IPv4 and IPv6 addresses of a root node of a multicast tree. The first device also receives a second label mapping message from a second device that identifies the multicast tree and includes one of: the IPv4 address or the IPv6 address of the root node. The first device determines that the second label mapping message is associated with the multicast tree. In response to determining that the second label mapping message is associated with the multicast tree, the first device adds the second device to the multicast tree.

Abstract: Presented herein are techniques for adding a secure control layer to a distributed communication fabric that supports publish-subscribe (pub-sub) and direct query (synchronization) communication. The secure control layer is configured to perform policy-based authentication techniques to securely manage the exchange of data/information within the communication fabric and enable registration/discovery of new capabilities.

Abstract: In one embodiment, an apparatus comprises a first interface arrangement that obtains information from at least one data source. The information is associated with the presence of an entity at a location. The apparatus also comprises a processing arrangement that automatically updates a dynamic distribution list that is associated with the location based on the information.

Abstract: A method is provided in one example and includes receiving results of a search query initiated by a user and evaluating the received results in relation to a personal profile of the user. The personal profile includes a plurality of characteristics associated with the user and the evaluating includes comparing the plurality of characteristics to the results. The plurality of characteristics include at least one characteristic derived from observing the user's behavioral patterns over a period of time. The method further includes evaluating the results based on attributes of the user; ranking the results to generate a resultant that reflects a ranking of the results in order of likely meaningfulness to the user based on the evaluation; and communicating the resultant to the user.

Abstract: Techniques are provided for the creation of a peer zone definition for use in a Fibre Channel (FC) Fabric. The peer zone definition defines a peer zone in which two or more initiator host devices are each permitted to communicate with a target device, but the two or more initiator host devices are prevented from communicating with each other. In accordance with one example, a target device and of two or more initiator host devices connected to the FC Fabric are received. A peer zone definition is created, and the peer zone definition is transmitted to the switches composing the FC Fabric for enforcement.

Abstract: Masks that selectively attenuate radiation for inspections of printed circuit boards (PCB) are disclosed. A PCB may be inspected for defects by exposing the PCB with radiation and analyzing the radiation transmitted through the PCB. By employing a radiation mask having first and second segments between the PCB and a radiation source, the radiation may be selectively attenuated to attenuate a first portion of the radiation with a first attenuation level to prevent performance degradation to sensitive semiconductor devices as part of a first sectional area of the PCB, and yet provide substantially non-attenuation or attenuation at a second attenuation level for a second portion of the radiation incident upon a second sectional area of the PCB which is free from sensitive semiconductor devices. In this manner, the selective attenuation enables inspection of the first and second sectional areas of the PCB without damage to the sensitive semiconductor devices.

Abstract: An electronic device includes a plurality of logic units, which have respective inputs and outputs and are arranged in a ring topology, such that an input of each of the logic units is coupled to an output of another of the logic units. Each of the logic units includes respective processing logic, which is identical to and operates in synchrony with the processing logic of the other logic units to process respective data values using at least one secret value stored in the device. The logic units are coupled, at an initial cycle of the device, to receive respective input values that are mutually uncorrelated. At subsequent cycles of the device, each of the logic units receives and operates on intermediate values that are output by another of the logic units.

Abstract: A dynamic monitoring process begins with configuring a start and end method to be monitored. The dynamic monitoring process may intercept both the start and end methods as and when the loader is initiated or at runtime to dynamically attach and detach the instrumentation. A loader may then be modified to call a library method upon detection of the start method. The library method may serve as a notification to the start of the method and causes a reflector to retrieve information from the incoming request. The incoming information may include data from which a business transaction name may be determined. The business transaction name is then associated with the monitoring of the particular request. When an exit call is detected, a call may be made to the library for a method which invokes a decorator. The decorator may insert business transaction name and other data into the outgoing call.

Abstract: A system and method for achieving authorization in confidential group communications in terms of an ordered list of data blocks representing a tamper-resistant chronological account of group membership updates. This method permits ad-hoc and decentralized group definition, dynamic and decentralized membership updates, open sharing, tamper resistance, and tracking of membership history. There are many applications of these techniques. One such application is enabling end-to-end encryption of instant messaging, content sharing, and streamed media.

Abstract: A technique for key sharing among multiple key servers connected to one another over a communication network is provided herein. Each key sever of the multiple key servers stores respective cryptographic keys, and provides the keys to a local device group connected with the key server, to enable the device group to encrypt messages with the keys. Each key server acts as a proxy for the other key servers in order to receive other keys from the other key servers over the network, and provide the other keys to the device group for use to decrypt messages received from other local device groups respectively connected with the other key servers that were encrypted with the other keys and to check message integrity. The multiple key servers may share keys with each other directly, or alternatively, indirectly through a central key server, as needed to support secure communications between their respective device groups.