Abstract: Methods, apparatuses, and computer program products for edge device assisted mitigation of publish-subscribe denial of service (DoS) attacks are disclosed. An edge device hosts a virtualized copy of an Internet-of-Things (IoT) device subscribed to one or more publish-subscribe topics. When the edge device receives an indication to activate the virtualized copy of the IoT device, for example, during a DoS attack on the IoT device, the edge device activates the virtualized copy of the IoT device, which receives traffic from the publish-subscribe topic. The virtualized copy of the IoT device applies security policies to incoming traffic received from the subscription topics and transmits to the IoT device sanitized traffic obtained from the received incoming subscription content traffic.

Abstract: Capturing data packets for analysis using a virtual machine including receiving, at an analyzer virtual machine, an encapsulated packet for analysis, wherein the encapsulated packet comprises a monitoring metadata header and a data packet with a data packet header; stripping the monitoring metadata header from the encapsulated packet to obtain a de-encapsulated packet comprising the data packet with the data packet header; and directing, based on the data packet header, the de-encapsulated packet to a virtual network interface associated with a packet capture application within the analyzer virtual machine.

Abstract: Systems, methods, apparatuses for fan type identification are disclosed. A predetermined pulse width modulation duty cycle is used to obtain a sequence of fan speeds from a fan over a time period. A fan type of the fan is determined based on the sequence of fan speeds.

Abstract: A method for link layer authentication includes receiving, at an edge network access node, a link layer authentication packet from a client, seeking network access, using a remote NAS agent running on the edge network access node. The method transmits, using a tunneling connection, the link layer authentication packet to a remote NAS in a link layer authentication process. The link layer authentication process exchanges the link layer authentication packet with an authentication server to authenticate the client. The method includes receiving a link layer authentication packet from the remote NAS over the tunneling connection. The received link layer authentication packet includes a response from the authentication server regarding the transmitted link layer authentication packet.

Abstract: Systems and methods for managing requests to implement account related actions based on biometric data are disclosed herein. According to an aspect, a system includes a first computing device comprising a user account manager configured to manage an account of a user. The user account manager is also configured to receive a request to implement an action associated with the account. Further, the user account manager is configured to receive, from a second computing device of the user, biometric data associated with the user. The user account manager is also configured to manage the request to implement the action based on the received biometric data.

Abstract: Display and audio systems and methods for controlling positioning of displays and speakers based on viewer and listener attention are disclosed. According to an aspect, a display system includes a selectively adjust a viewing angle of a display for one or more viewers. The display system also includes a motorized mechanism that controllably positions the display in one of the positions. An attention detection system is configured to acquire movement and position data of the viewer(s). The attention detection system is also configured to determine whether attention of the viewer(s) is directed to the display based on the acquired data. Further, the attention detection system is configured to control the support assembly to adjust the viewing angle of the display for viewing by the viewer(s) in response to determining that the attention of the viewer(s) is directed to the display.

Abstract: Data center management over a power plane, including: coupling, via a plurality of power planes, a management hub to one or more servers; and transferring, via the plurality of power planes, data between the management hub and the one or more servers.

Abstract: Computing device expansion modules and control of their operation based on temperature are disclosed. According to an aspect, an expansion module includes an interface configured to operably connect to a computing device including a service manager. Further, the expansion module includes a controller configured to determine whether communication with the service manager of the computing device is enabled or not enabled. The controller is also configured to set a first temperature level at which operation of the expansion module is reduced in response to determining that communication with the service manager is enabled. Further, the controller is configured to set a second temperature level at which operation of the expansion module is reduced in response to determining that communication with the service manager is not enabled. The second temperature level is lower than the first temperature level.

Abstract: An apparatus for a license orchestrator to most efficiently distribute fee-based licenses includes a processor and a memory that stores code executable by the processor to determine that a workload is scheduled to be executed by a computing device. The computing device includes a licensable resource available for execution of the workload. The code is executable to compare a per-use licensing cost associated with using the licensable resource for execution of the workload with a cost of using existing capabilities of the computing device for execution of the workload and license and use the licensable resource for execution of the workload in response to determining that the per-use licensing cost of the licensable resource is less than using the existing capabilities of the computing device.

Abstract: Systems and methods for determining sound-producing characteristics of electroacoustic transducers are disclosed. According to an aspect, a system includes electroacoustic transducers configured to generate sound. The system also includes an acoustoelectric transducer configured to convert sound produced by the electroacoustic transducers into one or more electrical signals. Further, the system includes a computing device configured to apply one or more patterns of electrical signals to the electroacoustic transducers to test for one or more sound-producing characteristics. The computing device is also configured to receive, from the acoustoelectric transducer, electrical signals that resulted from application of the patterns of electrical signals to the electroacoustic transducers.

Abstract: An apparatus includes a packet encryption circuit that uses an encryption keys to encrypt each of two or more portions of a data packet. Each portion is encrypted with a different encryption key and includes one or more layers of the data packet. A first portion includes a layer of the data packet with MAC information. The apparatus includes a packet transmitter that transmits, from a source router, an encrypted data packet to an intermediate router between the source router and a destination router. The encrypted data packet includes an encrypted version of the data packet encrypted using the encryption keys. The intermediate router has encryption keys sufficient for a service level agreement of the intermediate router and lacks a portion of the encryption keys. The source and destination routers use a MAC security standard for encryption and decryption of the data packet using the encryption keys.

Abstract: Systems and methods for cooling an electronic device via interface of a heat-transfer conduit of the electronic device to a cold plate assembly are disclosed. According to an aspect, a system includes an electronic device including one or more electronic components. Further, the electronic device includes a heat-transfer conduit including a first end and a second end. The first end of the heat-transfer conduit is positioned to receive heat from the electronic component(s). The heat-transfer conduit is configured to conduct heat from the first end to the second end. Further, the system includes a cold plate assembly including a cold plate and a mechanism configured to permit movement of the cold plate. At the first position, the cold plate may contact the second end for receipt of heat from the heat-transfer conduit at the second end. At the second position, the cold plate is apart from the second end.

Abstract: Methods, apparatuses, and computer program products for telemetry-based network switch configuration validation are disclosed. An analytics engine captures a first network snapshot including telemetry data received from one or more network switches in a first state. Upon receiving a notice indicating that a network configuration change has been applied, the analytics engine initiates a timer in response to receiving the notice. The analytics engine captures, in response to expiration of the timer, a second network snapshot including telemetry data received from the one or more network switches in a second state and compares the first network snapshot and the second network snapshot. In dependence upon the comparison of the first network snapshot to the second network snapshot, the analytics engine validates the network configuration change.

Abstract: Methods, systems, and apparatuses for unlocking a persistent region in memory are disclosed. An information handling apparatus includes a controller, a memory coupled to the controller, the memory having a persistent region that can either be locked or unlocked, and a firmware configured to determine whether the persistent region of the memory is locked, obtain a stored passphrase from a storage device if the persistent region is locked, and use the passphrase to unlock the persistent region of the memory.

Abstract: A method of identifying an unsupported storage device on a server is disclosed as including providing the server with a baseboard management controller (BMC), the BMC obtaining vital product data (VPD) from a storage device on the server, the BMC comparing the VPD from the storage device with one or more approved VPDs, and the BMC issuing an output in response to said comparison.

Abstract: Methods, apparatuses, and computer programs products for connection parameter awareness in an authenticated link-layer network session are disclosed. A client sends, to a network access server (NAS), an initiation packet announcing the initiation of an authentication session. The client establishes an authenticated link-layer session with the NAS. The client receives, from the NAS, a network policy packet including a network policy defined by one or more connection parameters for the link-layer session. The client then enforces the network policy.

Abstract: A method of data transfer over a communication network from a first information handling apparatus to a plurality of second information handling apparatuses includes generating, by the first information handling apparatus, an initial block and initializing, based on the initial block, a ledger. The method includes broadcasting the ledger to the plurality of second information handling apparatuses, and attempting to compute a new block, by each one of the plurality of second information handling apparatuses. Upon one of the plurality of second information handling apparatuses successfully computing said new block, the method then transmits data to the one of the plurality of second information handling apparatuses and updates the ledger based on the new block.

Abstract: A method for preparing fast boot of an information handling apparatus. The information handling apparatus contains a first CPU configured to connect to a storage device storing firmware and a second CPU connected to the first CPU. The method contains the steps of: allocating a firmware region in memories associated with each one of the first and second CPUs respectively; and copying a firmware from a storage device to the firmware region of each one of the memories. By utilizing a system memory such as NVDIMM which provides higher access speed than NAND flash and also persistent data storage, one or more CPUs can be booted from firmware images in the NVDIMM much faster, thus saving the total booting time.

Abstract: A blade server with an apparatus for configuring the blade server is disclosed. the blade server includes at least one data processor and the data processor is configured to determine presence of a response file at a remote management module, upon deployment of the blade server, in response to the response file being present, receive the response file from the remote management module, and retrieve an ISO of a desired operating system for the blade server in accordance with data stored in the response file, in order to install the desired operating system for the blade server.

Abstract: Data exchange using fan unit signal lines is disclosed, including receiving a pulse width modulated (PWM) signal on a PWM signal line of a fan unit; detecting that a frequency of the PWM signal is outside a frequency range used to control a fan speed of a fan in the fan unit; selecting a data output based on the frequency of the PWM signal; and sending the data output on a tachometric signal line of the fan unit.