Abstract: Systems and methods are provided for implementing an adaptive machine learning platform for security penetration and risk assessment. For example, the system can receive publicly-available information associated with a client computer system, process the information to identify an input feature, and implement a machine learning model to identify the corresponding risk associated with the input feature. The system can recommend a penetration test for discovered weaknesses associated with the input feature and help make changes to the client computer system to improve security and reduce risk overall.

Abstract: A base station transmits, to a wireless device, configuration parameters of a configured grant of an unlicensed cell. Based on the configured grant, the base station receives from the wireless device: one or more code block groups of a transport block, and a code block group transmission information indicating a presence of the one or more code block groups for the transport block. A downlink control information is transmitted that includes: a first field indicating that the base station received the code block group transmission information, and a second field indicating hybrid automatic repeat request feedback for each code block group of the one or more code block groups.

Abstract: A method and system for hardware-based predictive fault detection and analysis are described herein. Logic components of a computing cluster can baseline a plurality of telemetries associated with at least one processing node of the computing cluster. The logic components can monitor the plurality of telemetries while the at least one processing node is in operation. The logic components of the computing cluster can compare the monitored plurality of telemetries with the baselined plurality of telemetries. The logic components can predict one or more impending faults associated with the at least one processing node based on the comparisons.

Abstract: Examples described herein relate to a selection of a network device in a network installation for a forwarder operation. Selection may include computing a performance score based on a set of performance parameters. Broadcasting the computed performance score to other network devices. Receiving performance scores from the other network devices. Comparing the received performance scores with the computed performance score. Continuing in the forwarder mode based on a determination that the received performance scores are less than its computed performance score. Receiving multicast Domain Name Service (mDNS) packets from one or more client devices. Sending the received mDNS packets to a central service.

Abstract: Systems and methods are provided for providing a clustering solution and a Virtual Router Redundancy Protocol (VRRP) platform for a branch deployment of at least a first gateway and a second gateway. The VRRP platform can be associated with a VRRP Internet Protocol (IP) address and the first gateway configured as a VRRP master. A change in an operational status of the first gateway can be determined with the clustering solution. The second gateway can be caused to be configured, with the clustering solution, as a new VRRP master. Network traffic associated with the VRRP Internet Protocol (IP) address can be received. The second gateway can be caused to forward the network traffic.

Abstract: Systems and methods are provided for managing a data communication within a multi-level network having a plurality of switches organized as groups, with each group coupled to all other groups via global links, including: at each switch within the network, maintaining a global fault table identifying the links which lead only to faulty global paths, and when the data communication is received at a port of a switch, determine a destination for the data communication and, route the communication across the network using the global fault table to avoid selecting a port within the switch that would result in the communication arriving at a point in the network where its only path forward is across a global link that is faulty; wherein the global fault table is used for both a global minimal routing methodology and a global non-minimal routing methodology.

Abstract: Examples of aborting installation of a firmware bundle are described. In an example, an abort installation command is received. The firmware bundle includes items, each item corresponding to one of a firmware for a hardware component and a system software component. A first set of items is identified from the items, where the first set of items includes one of an item installed successfully, an item for which installation is under progress, and a combination thereof. A second set of items is identified from the items, where the second set of items is pending installation. A first subset of items is identified from the second set, based on predefined dependency information, where operability of an item from the first set is dependent on an item from the first subset. The first subset of items is installed prior to aborting installation of the firmware bundle.

Abstract: Systems and methods are provided for reducing WAN bandwidth consumption used by multicast for large scale software-defined branch deployments. In particular, a cloud-based multicast orchestrator may be implemented as part of an SD-WAN service. This cloud-based multicast orchestrator may orchestrate routes for multicast traffic between a multicast source and the various branches of the large scale software-defined branch deployment. This cloud-based multicast orchestrator may orchestrate routes for multicast traffic which reduce/optimize WAN bandwidth consumption. In combination with the cloud-based multicast orchestrator, examples may utilize a branch gateway hierarchy which designates one branch gateway a “leader” for a given multicast stream to further reduce WAN bandwidth consumption used by multicast.

Abstract: Systems and methods are configured to provide a first problem to be solved to a network of memristors. A second problem to be solved can be gradually provided to the network of memristors. Controlled noise can be applied to the network of memristors for at least a portion of time during which the second problem is “gradually” provided to the network of memristors. A solution to the second problem can be determined.

Abstract: Example implementations relate to a security system having an electronic lock including latch and security modules, to control access to electronic devices. The latch module includes a receiver, a handle, and a torque member rotatably coupled to the receiver and handle. The receiver includes a first recess, a second recess, and a lobe to releasably engage the electronic device within the first recess. The security module includes a tension spring, an actuator, and a lock member having a first pin and a second pin. The tension spring is coupled to the lock member to engage the first pin to second recess when the latch module is in a latched configuration, and hold the security module in a lock-in position. The actuator is releasably engaged to the second pin for rotating the lock member to disengage the first pin from second recess, and release the security module from the lock-in position.

Abstract: Some examples relate to identifying a security vulnerability in a computer system. In an example, via a NAND flash memory, a computer system may be scanned to obtain information related to a software program, based on a rule set defined in a management controller (e.g., baseboard management controller (BMC)) on the computer system. The NAND flash memory may obtain metrics related to the software program via the BMC. The NAND flash memory may analyze the information related to the software program along with the metrics related to the software program to identify a security vulnerability in the computer system. The NAND flash memory may provide the information related to the security vulnerability in the computer system to the BMC.

Abstract: Examples described herein relate to a method and a system, for example, a workload controller, for accessing purged workloads. An alert indicative of an attempt to access a purged workload of workloads deployed in a workload environment may be received by the workload controller. The purged workload may include one or both of a deactivated workload or an archived workload. The workload controller may detect the attempt to access the purged workload based on port mirrored data traffic. Further, in some examples, the workload controller may activate the purged workload based on the alert.

Abstract: Example implementations relate to consensus protocols in a stretched network. According to an example, a distributed system includes continuously monitoring network performance and/or network latency among a cluster of a plurality of nodes in a distributed computer system. Leadership priority for each node is set based at least in part on the monitored network performance or network latency. Each node has a vote weight based at least in part on the leadership priority of the node. Each node's vote is biased by the node's vote weight. The node having a number of biased votes higher than a maximum possible number of votes biased by respective vote weights received by any other node in the cluster is selected as a leader node.

Abstract: In some examples, a system causes execution, in each respective storage node of a cluster of storage nodes, of a respective frontend service that provides a frontend to a client over a network for access by the client of a storage volume accessible by the cluster of storage nodes. The system obtains node-specific configuration data portions from a configuration data repository, the node-specific configuration data portions being for respective storage nodes of the cluster of storage nodes, and sends the node-specific configuration data portions to the respective frontend services for configuring the frontend services.

Abstract: Examples of the presently disclosed technology provide new circuits for detecting errors in aCAMs with improved efficiency. Specifically designed around the structure and operation of aCAM arrays, these circuits include counter sub-circuits electrically connected to match lines of aCAM rows such that the counter sub-circuits receive match-related signals output from aCAM rows. The value stored by a counter sub-circuit may change in response to receiving a match signal, and may remain the same in response to receiving a mismatch signal. As will be described in greater detail below, the stored value of the counter sub-circuit may be used to detect/identify an error in its associated aCAM row after a set of (specially-computed) error-detection input vectors are sequentially applied to the circuit.

Abstract: A technique for managing undervoltage in a compute system is disclosed. The technique includes a method that further includes: detecting an AC undervoltage condition in the compute system; and upon detecting the AC undervoltage condition: dynamically determining a holdup time as a function of the present load; determining a monitoring period as a function of the dynamically determined holdup time; waiting for the determined monitoring period to expire; and upon expiration of the determined monitoring period, perform a shutdown process if the AC undervoltage condition persists.

Abstract: Systems are methods are described which allow for “zero-touch” provisioning (ZTP) to be used to seamlessly bring up devices such as Gateways/Access Points/Switches or any other networking devices connected over different uplink types such as aggregated links (Static LAG, LACP), trunk ports, and the like. Provisioning is adapted specifically for trunk and/or LACP ports in order to maintain the automation and optimization benefits typically provided by ZTP. A method can include transmitting a discover message, and receiving a response message based on the discover message. Then, determining whether a pre-defined extension is included in the response message that indicates a port type and a virtual local area network (VLAN) configuration. Automatic configuration of one or more ports and a VLAN can be performed as indicated by the pre-defined extension. Thus, ZTP can be restarted in accordance with the configuration of the network device.

Abstract: One aspect of the present technology can provide a system for facilitating in-service software upgrade (ISSU) for a switch in a virtual switching stack. During operation, the system can initiate ISSU that facilitate uninterrupted traffic flow. The system can upgrade a first set of daemons of the switch that manage operations of the switch. The system can also upgrade a database stored on the switch. The database can store operational information of the switch. The system can further upgrade a second set of daemons of the switch that configure forwarding information on the forwarding hardware of the switch and facilitate data-plane operations for the switch. The forwarding information configured on the forwarding hardware can remain unchanged during the upgrade. The system can configure the upgraded second set of daemons to obtain control-plane information from a standby switch of a conductor switch of the virtual switching stack.

Abstract: Implementations of the present disclosure relate to selecting a transmitting virtual access point (VAP) for a MBSSID set. A method comprises selecting a VAP from a set of VAPs as a transmitting VAP based on context information about the set of VAPs, at least one of the set of VAPs other than the transmitting VAP being determined as at least one non-transmitting VAP The method also comprises generating a beacon frame for the set of VAPs by including an identifier of the transmitting VAP in a header part of the beacon frame and including at least one identifier of the at least one non-transmitting VAP in a payload part of the beacon frame. A generated beacon frame is broadcasted. In this way, a transmitting VAP of a set of VAPs is no longer determined by default, but can be selected for different cases.

Abstract: Systems and methods are provided for automatic notifications of expired subscriptions. In various embodiments, a network function can request a subscription from a Unified Data Repository (UDR). The request for the subscription can include a request for a notification when the subscription expires or at a time prior to the expiration of the subscription. When the subscription expires or at the time prior to the expiration of the subscription, the UDR can provide a notification that the subscription has expired or is about to expire. Based on the notification, the network function can request to re-subscribe or request a new subscription from the UDR.