Abstract: The present disclosure provides systems, methods, and computer-readable media for implementing security polices at software call stack level. In one example, a method includes generating a call stack classification scheme for an application, detecting a call stack during deployment of the application; using the call stack classification scheme during runtime of the application, classifying the detected call stack as one of an authorized call stack or an unauthorized call stack to yield a classification; and applying a security policy based on the classification.

Abstract: A housing for an electronic device includes a panel, where the panel includes a window. A cage includes a plurality of panels and a first end and a second end that opposes the first end. The cage further includes an opening at its first end and an enclosure disposed between the panels of the cage. Connecting structure is disposed at the first end of the cage, where the connecting structure secures the first end of the cage to the panel. The cage is suitably dimensioned to receive and retain a portion of a pluggable module within the enclosure when the pluggable module is inserted within the opening at the first end of the cage.

Abstract: This disclosure describes dynamically monitoring the flow of traffic along a path that can include points across different cloud service provider networks/regions and/or different private networks. Flow monitoring may be started in response to different triggering events. For instance, flow monitoring of network traffic along one or more network paths may be started in response to performance metrics associate with an application within the multi-cloud environment, current/projected network conditions associated with one or more networks within the multi-cloud environment, and the like. In other examples, a user may specify when to perform flow monitoring for one or more network paths.

Abstract: Managing noise during an online conference session includes obtaining audio data from an endpoint participating in an online conference session. The audio data is derived from audio captured at the endpoint that includes musical sounds. The audio data is processed to identify a portion of the audio data in which a decibel level of the musical sounds is stable for a period of time. Non-musical noise present, if any, in the audio data with the musical sounds is identified and the non-musical noise is attenuated from the audio data to generate noise-reduced musical audio data. The noise-reduced musical audio data is transmitted for play out at one or more other endpoints participating in the online conference session.

Abstract: A first endpoint in a Quantum Key Distribution (QKD) system determines an operating mode for a hybrid transceiver for communicating in an optical communication session with a second endpoint. The operating mode is selected from a group containing a classical reception mode, a classical transmission mode, a quantum transmission mode, and a quantum reception mode. The first endpoint configures an input to a homodyne detector of the hybrid transceiver based on the operating mode and operates the hybrid transceiver in the operating mode for at least a portion of the optical communication session.

Abstract: The present technology provides a framework for user-guided end-to-end automation of network deployment and management, that enables a user to guide the automation process for any kind of network deployment from the ground up, as well as offering network management, visibility, and compliance verification. The disclosed technology accomplishes this by creating a stateful and interactive virtual representation of a fabric using a customizable underlay fabric template instantiated with user-provided parameter values and network topology data computed from one or more connected network devices. A set of expected configurations corresponding to the user-specified underlay and overly fabric policies is then generated for deployment onto the connected network devices.

Abstract: The disclosed technology separates session management function signaling from the AMF. In particular, an SMF key is created for each SMF following the AMF generating an SM context request that contains gNB information and UE subscription information. Each PDU session creates a direct connection between the SMF and a local gNB. The gNB communicates with each SMF directly over a new interface (N3-C) for session management that is independent of the N2 interface used by the gNB to communicate with the AMF for mobility management. In this way, each SMF independently handles NAS signaling with the UE, using the SMF key and gNB related session-management signaling over an independent interface with the gNB. This removes the burden of relaying these communications through the AMF, which is then freed up to solely to handle mobility management signaling, resulting in an improved architecture.

Abstract: In one embodiment, a method includes generating, by a first controller of a network, an overlay domain digest using a first domain digest associated with the first controller of the network and a second domain digest associated with a second controller of the network. The method also includes communicating, by the first controller, the overlay domain digest to an edge device of the network, updating, by the first controller, the overlay domain digest to generate an updated overlay domain digest, and communicating, by the first controller, the updated overlay domain digest to the edge device of the network. The method further includes detecting, by the edge device, a difference between the overlay domain digest and the updated overlay domain digest and re-establishing, by the edge device, a connection with an orchestrator of the network to determine a control plane domain change within the network.

Abstract: A method includes associating anomalous first text, from a first unstructured data set, with a first classification; processing the first unstructured data set using at least one of ML or AI to identify a second text that is in close context to the first text, and adding the second text to a text list associated with the first classification; enriching the text list by processing the second text to generate a third text, and adding the third text to the text list to produce an enriched text list and such that the third text is also associated with the first classification; matching the text in the enriched text list to text in a second unstructured data set; and classifying the text in the second unstructured data set as having the first classification when the text in the second unstructured data set matches text in the enriched text list.

Abstract: Techniques for sending Compute Express Link (CXL) packets over Ethernet (CXL-E) in a composable data center that may include disaggregated, composable servers. The techniques may include receiving, from a first server device, a request to bind the first server device with a multiple logical device (MLD) appliance. Based at least in part on the request, a first CXL-E connection may be established for the first server device to export a computing resource to the MLD appliance. The techniques may also include receiving, from the MLD appliance, an indication that the computing resource is available, and receiving, from a second server device, a second request for the computing resource. Based at least in part on the second request, a second CXL-E connection may be established for the second server device to consume or otherwise utilize the computing resource of the first server device via the MLD appliance.

Abstract: Techniques for wireless network management are provided. A set of characteristics data for a plurality of different wireless networks in a common physical space is collected, and it is determined, based on the set of characteristics data, that the plurality of wireless networks are experiencing spectrum contention. A set of radio frequency (RF) parameter modifications is generated based on the set of characteristics data, and one or more of the plurality of wireless networks are instructed to implement the set of RF parameter modifications. A second set of characteristics data is collected for the plurality of wireless networks.

Abstract: A method, computer system, and computer program product are provided for stress-testing electronics using telemetry modeling. Telemetry data is received from one or more devices under test during a hardware testing phase, the telemetry data including one or more telemetry parameters. The telemetry data is processed using a predictive model to determine future values for the one or more telemetry parameters. Additional hardware testing is performed, wherein the additional hardware testing includes adjusting one or more testing components based on the determined future values.

Abstract: A method for routing is disclosed. The method comprises provisioning an endpoint in a network with a reactive path selection policy; monitoring, by the endpoint, current conditions relating to various paths available to said end point for the transmission of traffic; and selectively applying, by the endpoint, at least a portion of the reactive path selection policy based on the current conditions of the available paths.

Abstract: In some aspects, the techniques described herein relate to a method including: encoding a current data portion to generate an encoded current data portion for inclusion in a data packet; encoding, based upon content of the current data portion, a forward error correction data portion for a previous data portion to generate an encoded forward error correction data portion; generating the data packet including the encoded current data portion and the encoded forward error correction data portion; and providing the data packet to a receiver.

Abstract: In one embodiment, an authorizing device (e.g., a gateway) receives a native protocol request packet from a requesting device destined to a serving device, and translates the native protocol request packet into an authorization protocol mapping. The authorizing device may then apply authorization protocol based authorization (e.g., OT protocol independent) to the native protocol request packet based on the authorization protocol mapping, and transmits the native protocol request packet toward the serving device in response to the authorization protocol mapping being authorized. In one embodiment, the techniques herein may also perform an audit in this manner.

Abstract: The present technology is directed to visualizing a Wi-Fi signal propagation in 3-D at various heights and locations. The present technology can calculate a radio frequency (RF) propagation pattern for a Wi-Fi access point (AP) based on a RF propagation model for the Wi-Fi AP and overlay the RF propagation pattern for the Wi-Fi AP over a visualization of the building plan to present a 3-D visualization of the RF propagation pattern of the 3-D space. In particular, the present technology can project a plurality of ray-paths in various directions in a 3-D space originated from the Wi-Fi AP and determine whether the ray-paths interface with objects defined in the building plan. The present technology can segment the respective ray-path into contiguous segments of substantially uniform mediums for each ray-path that interface with the objects and determine a RF signal strength at points along the contiguous segments of the ray-paths.

Abstract: A network controller provides proactive notification of a wireless client device's address rotation to layer 2 (L2) and/or layer 3 (L3) devices. Traditional methods of device address discovery rely on broadcasting of address queries across a plurality of links until a path to a device having the queried address responds. As device address changes become more frequent in an effort to improve user privacy, traditional methods of address discovery impose a large burden on networks, reducing their performance and efficiency. By proactively propagating address changes to upstream devices, the need for broadcast oriented address discovery techniques is reduced, resulting in improved network performance.

Abstract: Dynamic Open Radio Access Network Radio Unit (O-RU) sharing between multiple tenant Open RAN Distributed Units (O-DU) may be provided. A Near Real Time RAN Intelligent Controller (nRT-RIC) may receive tenant policies for a first tenant and a second tenant. The nRT-RIC may then determine initial sharing templates for the first tenant and the second tenant based on the tenant policies. The nRT-RIC may send the initial sharing templates to a first tenant Distributed Unit (DU) and a second tenant DU. The nRT-RIC may receive operating metrics from the first tenant DU and the second tenant DU. The nRT-RIC may then determine operational factors based on the operating metrics. The nRT-RIC may alter an allocation of resources between the first tenant and the second tenant based on the operational factors. Finally, the nRT-RIC may send the altered allocation of resources to the first tenant DU and the second tenant DU.

Abstract: Techniques for leveraging a software defined tracking architecture to track endpoint connected to a network fabric are described. An orchestrator of a network fabric receives port information indicating a port of a fabric edge device to which an endpoint is connected. The orchestrator transmits the port information to a network node in the network fabric enabling data-plane traffic inspection. Using the port information, the network node detects traffic having a destination address corresponding to the endpoint. The network node transmits an indication that traffic was received by the network node having the destination address corresponding to the endpoint. Finally, onboarding of the endpoint into the network fabric is triggered at the fabric edge device.