Abstract: Embodiments described herein are generally directed to a containerized application software deployment architecture. According to an example, a system includes multiple hosts that are part of aa stretch cluster spanning multiple data centers. Each of the hosts include a processing resource, a memory, and a storage device. Each host of a first subset of the multiple hosts runs multiple containerized instances of a component of a Security Information and Event Management (SIEM) application within respective containers. At least one host of the multiple hosts is separate from the first subset and is dedicated to running at least one containerized ingress gateway application operable to load balance requests directed to the SIEM application among the multiple containerized instances running on the first subset of hosts.

Abstract: Data-driven intelligent networking systems and methods are provided. The system can accommodate dynamic traffic with fast, effective endpoint congestion detection and control. The system can maintain state information of individual packet flows, which can be set up or released dynamically based on injected data. Each flow can be provided with a flow-specific input queue upon arriving at a switch. Packets of a respective flow can be acknowledged after reaching the egress point of the network, and the acknowledgement packets can be sent back to the ingress point of the flow along the same data path. As a result, each switch can obtain state information of each flow and perform flow control on a per-flow basis.

Abstract: In certain embodiments, a method includes receiving, in association with a configuration of a proposed cloud solution, a selection of a first cloud solution aspect made by a user of a guidance tool, and generating, using a hybrid recommender system, a recommendation for a subsequent selection of a second cloud solution aspect of the configuration of the proposed cloud solution. The hybrid recommender system may include a collaborative filtering system and a content-based filtering system, and may generate the recommendation according to information that includes user information, prior configuration information, and the selection. The method further includes providing the recommendation to the user via a user interface of the guidance tool; receiving the subsequent selection; and generating, by the guidance tool, a proposed cloud solution output based at least in part on the selection and the subsequent selection.

Abstract: In some examples, a management controller is to dynamically vary a parameter that controls an operational characteristic of a bus when transferring different portions of information from a memory over the bus during a process of an electronic device in which a cryptographic operation is performed. The different portions of the information from the memory are to be transferred over the bus with different operational characteristics of the bus.

Abstract: Approaches for writing data objects to a distributed file system are described. In an example, a size of a data object to be created within a distributed file system may be determined based on a client request. Based on the size of the data object, data content of the data object is inserted into one of the object location table, object data table or a data container within the distributed file system. In an example, metadata corresponding to the data object may be written to an object location table.

Abstract: Systems and methods are provided to improve traditional chip processing. Using crossbar computations, the convolution layer can be flattened into vectors, and the vectors can be grouped into a matrix where each row or column is a flattened filter. Each submatrix of the input corresponding to a position of a convolution window is also flattened into a vector. The convolution is computed as the dot product of each input vector and the filter matrix. Using intra-crossbar computations, the unused space of the crossbars is used to store replicas of the filters matrices and the unused space in XIN is used to store more elements of the input. In inter-crossbar computations, the unused crossbars are used to store replicas of the filters matrices and the unused XINs are used to store more elements of the input. Then, the method performs multiple convolution iterations in a single step.

Abstract: Systems and methods are provided for improving geolocation services, like GPS, using network device measurements. For example, a plurality of access points (APs) or other network devices may be implemented in a network environment and constructed with a GPS chip. Range measurements can be collected from these network devices and incorporated with the GPS locations using various methods described herein to improve the overall location determination of these devices.

Abstract: Examples disclosed herein relate to using a compiler for implementing tensor operations in a neural network base computing system. A compiler defines the tensor operations to be implemented. The compiler identifies a binary tensor operation receiving input operands from a first output tensor of a first tensor operation and a second output tensor of a second tensor operation from two different paths of the convolution neural network. For the binary tensor operation, the compiler allocates a buffer space for a first input operand in the binary tensor operation based on a difference between a count of instances of the first output tensor and a count of instances of the second output tensor.

Abstract: A system determines an original instruction with a first logical register (LR) mapped to a first physical register (PR). The system determines a current instruction with a current LR. A prior instruction is associated with a second LR mapped to a second PR. The system allocates the current LR to a third PR. Responsive to determining that the current and prior instructions are executed in different iterations, the system marks the second PR as not eligible for early release. Responsive to determining that the current LR is previously mapped to the first PR, the allocation comprises a redefinition of the first LR. Responsive to determining that the first PR is eligible for early release and that the current and original instructions are executed in the same or consecutive iterations, the system releases the first PR based upon the redefinition and not the prior instruction completing or the current instruction committing.

Abstract: Embodiments of the disclosure provide a system, method, or computer readable medium for providing a differentiable content addressable memory (aCAM) that implements an analog input analog storage and analog output learning memory. The analog output of the differentiable CAM can provide input to a learning algorithm, which may compute the gradients in comparison to historic values and reduce data inaccuracies and power consumption.

Abstract: Examples described herein relate to a security management system to secure a container ecosystem. In some examples, the security management system may protect one or more entities such as container management applications, container images, containers, and/or executable applications within the containers. The security management system may make use of digital cryptography to generate digital signatures corresponding to one or more of these entities and verify them during the execution so that any compromised entities can be blocked from execution and the container ecosystem may be safeguarded from any malicious network attacks.

Abstract: In an example implementation consistent with the features disclosed herein, high availability of a stateful application is achieved by orchestrating multiple computing clusters. A stateful application is deployed at a first application operator and a second application operator of a first computing cluster and a second computing cluster, respectively. The first application operator includes a first control loop that changes the first computing cluster based on first resources of the first computing cluster. The second application operator includes a second control loop that changes the second computing cluster based on second resources of the second computing cluster. Synchronization of the first resources with the second resources is configured, such as via an object storage service. The first application operator and the second application operator are scaled to, respectively, nonzero and zero. A load balancer is configured to route requests to the first computing cluster.

Abstract: Examples described herein relate to providing pool-based automated lifecycle management of infrastructure via abstracted resources. According to an example, a consumption model is maintained in which heterogeneous infrastructure is represented in a generalized form as logical resource objects, including nodes and pools of the nodes. The nodes have respective node roles indicative of specific functionality the nodes are operable to provide to a workload based on the respective attributes/qualities of the nodes. A state model is maintained through which the logical resource objects are transitioned among states and responsive to which notifications are provided to an application orchestration tool associated with the workload. Interactions by the application orchestration tool with heterogeneous infrastructure utilized by the workload are abstracted by providing an API through which requests to manage a lifecycle of the heterogeneous infrastructure are expressed with reference to the logical resource objects.

Abstract: Systems and methods provide a system that gathers information about data as it progresses through data processing pipelines of data analysis projects. The data analytics system derives value indicators and implicit metadata from the data processing pipelines. For example, the data analytics system may derive value indicators and implicit metadata from data-related products themselves, semantic analysis of the code/processing steps used to process the data-related products, the structure of data processing pipelines, and human behavior related to production and usage of data-related products. Once a new data analysis project is initiated, the data analytics system gathers parameters and characteristics about the new data analysis project and references the value indicators and implicit metadata to recommend useful processing steps, datasets, and/or other data-related products for the new data analysis project.

Abstract: A data center for data backup and replication, including a pool of multiple storage units for storing a journal of I/O write commands issued at respective times, wherein the journal spans a history window of a pre-specified time length, and a journal manager for dynamically allocating more storage units for storing the journal as the journal size increases, and for dynamically releasing storage units as the journal size decreases.

Abstract: Systems and methods are provided for utilizing a bidirectional intermediate data transport layer to connect multiple customers to a shared, cloud-based AIOps service. As a feature of the intermediate data transport layer, each customer (and their data) may be isolated from other customers. In various examples, the cloud-based AIOps service may receive sensor data from customer systems via the intermediate data transport layer. The cloud-based AIOps service may analyze this sensor data (e.g. detect anomalies, perform root cause analyses, find optimal conditions, etc.), and modify the operation of one or more of the customer systems (e.g. modify the settings/configuration of a sensor on a piece of connected infrastructure) via the intermediate data transport layer. In certain examples, in addition to (or instead of) modifying the operation of one or more of the customer systems, the cloud-based AIOps service may provide an on-premises notification to a customer.

Abstract: A process includes communicating by a first device, with a second device. The communicating includes the first device receiving data from the second device that represents a certificate. The certificate binds a hierarchy of logical identifiers to a cryptographic key. The hierarchy of identifiers includes a first logical identifier that corresponds to a group membership. The process includes authenticating, by the first device, the second device based on the certificate. The process includes allowing, by the first device, a secure connection to be set up between the first device and the second device based on whether the first logical identifier represents that the second device is a member of a first group of devices of which the first device is a member.

Abstract: A crossbar array includes a number of memory elements. An analog-to-digital converter (ADC) is electronically coupled to the vector output register. A digital-to-analog converter (DAC) is electronically coupled to the vector input register. A processor is electronically coupled to the ADC and to the DAC. The processor may be configured to determine whether division of input vector data by output vector data from the crossbar array is within a threshold value, and if not within the threshold value, determine changed data values as between the output vector data and the input vector data, and write the changed data values to the memory elements of the crossbar array.

Abstract: Examples described herein relate to an optical device that entails phase shifting an optical signal. The optical device includes an optical waveguide having a first semiconductor material region and a second semiconductor material region formed adjacent to each other and defining a junction therebetween. Further, the optical device includes an insulating layer formed on top of the optical waveguide. Moreover, the optical device includes a III-V semiconductor layer formed on top of the insulating layer causing an optical mode of an optical signal passing through the optical waveguide to overlap with the first semiconductor material region, the second semiconductor material region, the insulating layer, and the III-V semiconductor layer thereby resulting in a phase shift in the optical signal passing through the optical waveguide.

Abstract: A process includes accessing a first message that is sent from an access point device. The first message includes data representing a second message that is sent by a client device. The second message is part of an exchange of messages between the client device and the access point device associated with authentication of the client device and a derivation of a first key used to encrypt and decrypt data communicated between the client device and the access point device. The second message includes a first message integrity check value. The process includes identifying, based on the second message, a pre-shared key corresponding to the client device.