Abstract: The present disclosure relates to systems and methods for a self-adjusting corporation-wide discovery and integration feature of a machine learning system that can review a client's data store, review the labels for the various data schema, and effectively map the client's data schema to classifications used by the machine learning model. The various techniques can automatically select the features that are predictive for each individual use case (i.e., one client), effectively making a machine learning solution client-agnostic for the application developer. A weighted list of common representations of each feature for a particular machine learning solution can be generated and stored. When new data is added to the data store, a matching service can automatically detect which features should be fed into the machine-learning solution based at least in part on the weighted list. The weighted list can be updated as new data is made available to the model.

Abstract: A query optimization system is described that, at runtime, optimizes the execution pipeline generated for a query. Based upon communications between nodes in the execution pipeline, the execution pipeline generated for a query is optimized by modifying the execution pipeline to create a modified execution pipeline. The modified execution pipeline is then executed to execute the query and results obtained for the query. The changes or modifications made to an execution pipeline may include changing the capabilities (e.g., changes to inputs and/or outputs of a node, changing the task(s) or function(s) performed by the node) of one or more nodes within the execution pipeline. The changes may include changing the position of one or more nodes within a directed acyclic graph representing the execution pipeline.

Abstract: A method for routing messages relating to existing NF subscriptions includes receiving, at a first NRF, a request from a consumer NF instance creating a first NF subscription, determining that the first NRF does not have the requested NF profile, and forwarding the request to a second NRF. The method further includes receiving a response from the second NRF indicating that the second NRF has created the first NF subscription, modifying the response so that subsequent messages associated with the first subscription will be sent to the first NRF, and forwarding the response to the consumer NF instance. The method further includes receiving, by the first NRF, a message from the consumer NF instance relating to the first subscription, determining, that the second NRF is unavailable, and forwarding the message relating to the first subscription to a third NRF that functions as a mate of the second NRF.

Abstract: Techniques for implementing rollback of infrastructure changes in an infrastructure orchestration service are described. In certain examples, an infrastructure orchestration service is disclosed that manages both provisioning and deploying of infrastructure assets within a cloud environment. The service receives a plan comprising a set of instructions associated with a set of infrastructure assets of an execution target and identifies a first state of the set of infrastructure assets. The service executes the set of instructions in the plan to achieve a second state for the set of infrastructure assets. Based in part on the executing, the service receives a trigger for rolling back the plan to restore the set of infrastructure assets in the plan to the first state and executes a rollback plan for the plan. The service then transmits a result associated with the execution of the rollback plan.

Abstract: Systems, computer-implemented methods, and computer-readable media for facilitating resource balancing based on resource capacities and resource assignments are disclosed. Electronic communications, received via interfaces, from monitoring devices to identify resource descriptions of resources may be monitored. A resource descriptions data store may be updated to associate each entity of the entities and resource capacities of each resource type of resource types. A first electronic communication, from resource-controlling systems, may be detected. Model data from a model data store may be accessed based on the identified resource descriptions. A first model may be identified based on the model data. A resources assessment corresponding may be generated based on whether a threshold is satisfied based on the first model, a first resource capacity of a first resource type, and the first electronic communication.

Abstract: Systems and methods are provided for predicting the effects of acceleration on a probability of a successful completion of a project. Specifically, one or more machine learning algorithms can be trained to predict the success of a project from a plurality of features, including at least one feature that is a function of an end date of the project. A set of projects can be selected from projects having expected end dates that do not fall within a desired window of time, each project having a first probability of success given the current end date. A second probability is calculated for each project at a machine learning platform that quantifies a chance that the project will be successful if completed within the window of time. A difference between the first probability and the second probability is determined for each project, and the projects are selected according to the difference.

Abstract: Techniques for migrating worker nodes within clusters to a new manager instance. One technique includes receiving a request to migrate or update a configuration of a cluster within a container system, where the migration or update includes switching from a first communication pathway to a second communication pathway between worker nodes and a manager instance; creating a component and associated IP address for the second communication pathway; communicating a pod specification that includes the IP address for the second communication pathway to the manager instance, where the pod specification will cause a container tool to update each of the worker nodes with the IP address for the second communication pathway; receiving a notification that all worker nodes have been updated with the IP address; and removing a component and associated IP address for the first communication pathway from the cluster.

Abstract: Embodiments of the invention provide systems and methods for managing and processing large amounts of complex and high-velocity data by capturing and extracting high-value data from low value data using big data and related technologies. Illustrative database systems described herein may collect and process data while extracting or generating high-value data. The high-value data may be handled by databases providing functions such as multi-temporality, provenance, flashback, and registered queries. In some examples, computing models and system may be implemented to combine knowledge and process management aspects with the near real-time data processing frameworks in a data-driven situation aware computing system.

Abstract: Techniques for detecting and mitigating Denial of Service (DoS) attacks in distributed networking environment are disclosed. In certain embodiments, a DoS detection and mitigation system is disclosed that automatically monitors and analyzes network traffic data in a distributed networking environment using a set of pre-defined threshold criteria. The system includes capabilities for automatically invoking various mitigation techniques that take actions on malicious traffic based on the analysis and the pre-defined threshold criteria. The system includes capabilities for automatically detecting and mitigating “outbound” DoS attacks by analyzing network traffic data originating from an entity within the network to a public network (e.g., the Internet) outside the network as well as detect and mitigate “east-west” DoS attacks by analyzing network traffic data originating from a first entity located in a first data center of the network to a second entity located in a second data center of the network.

Abstract: Some techniques described herein determine a correction model for a dialog system, such that the correction model corrects output from an automatic speech recognition (ASR) subsystem in the dialog system. A method described herein includes accessing training data. A first tuple of the training data includes an utterance, where the utterance is a textual representation of speech. The method further includes using an ASR subsystem of a dialog system to convert the utterance to an output utterance. The method further includes storing the output utterance in corrective training data that is based on the training data. The method further includes training a correction model based on the corrective training data, such that the correction model is configured to correct output from the ASR subsystem during operation of the dialog system.

Abstract: In accordance with an embodiment, described herein is a system and method for use with a cloud computing environment, for creating or updating tenant artifacts using microservices. A multi-tenant cloud service provides a loosely-coupled and distributed approach for consistently creating or updating tenant artifacts through the use of multiple independent microservice's lifecycle containers, each having their own requirements during the creation or update of a tenant instance. The development and packaging of lifecycle containers is simplified by managing the software code responsible for artifact creation or update within a microservice code repository. The system can use a deployment approach of loosely-coupled microservice lifecycle containers together with an infrastructure lifecycle service that coordinates tenant artifact creation/update across multiple microservices.

Abstract: Techniques are disclosed for automatically inferring software-defined network policies from the observed workload in a computing environment. The disclosed techniques include monitoring network traffic flow originating from network interfaces corresponding to containers that execute components of an application, recording details of a new network connection or a change in the existing network connection, obtaining information concerning the components of the application, identifying metadata for a component involved in the new network connection or the change in an existing network connection based on a comparison of the details of the new network connection or a change in the existing network connection and the information concerning the components of the application, generating a network policy for the component using at least the metadata for the component, and integrating the network policy for the component into a deployment package for the application.

Abstract: Described herein are systems and methods providing a multi-dimensional ring-lattice network topology. Systems and methods disclosed herein provide for constructing network topologies in a form of a partial mesh (a partially connected network), where a bridge is capable of forwarding packets through other bridges when a direct link to the destination compute device is not available. A temporary on-demand tunnel is created by virtual networking software on-demand, to facilitate a direct tunnel between two virtual network interfaces where such a direct connection is not available with a permanent tunnel, and where there is sufficient traffic demand between these two interfaces that justifies a direct tunnel. The described approach provides a framework for achieving a compromise between link count limitation, and packet-forwarding path length, that can be tailored to address particular network requirements, together with a way to reliably predict the performance of the resulting network.

Abstract: Dynamic client registration for an Identity Cloud Service (IDCS) is provided. A service instance client, associated with a service instance, is created in a first tenancy. A template client is created, based on a security blueprint, in a second tenancy. A registration client is created in the first tenancy. A request for a registration access token is received from an installed client application over a network; the request includes an ID of the template client. A user of the installed client application is authenticated using the template client. The registration access token is sent to the installed client application over the network. A request for a client assertion token is received from the installed client application over the network; the request includes the registration access token. The registration access token is authenticated using the template client. The client assertion token is sent to the installed client application over the network.

Abstract: Methods, systems, and computer readable media for routing of packets for lawful interception (LI). A system includes at least one session border controller (SBC) configured for forwarding media streams to a forwarding function. The system includes the forwarding function, implemented on a centralized node for a telecommunications network. The forwarding function is configured for receiving the media streams and forwarding each media stream to a respective lawful intercept mediation server for at least one country associated with the media stream. The forwarding function is configured for, in response to receiving a first packet of a first media stream from the SBC, performing a destination lookup for the first media stream and sending a mediation server identifier for the first media stream to the SBC. The SBC can be configured for sending a session release indicator and a direction flag to the forwarding function.

Abstract: Techniques discussed herein are directed to identifying health assessment data of a set of computing instances of a distributed computing system. The health assessment data may be collected from the computing instances and stored in a first distributed cache. When a request for health assessment data for one or more computing instances is received, the health assessment data may be retrieved from the first distributed cache, provided to the requesting entity, and stored in a second distributed cache. A subsequent request may cause new health assessment data to be retrieved from the first distributed cache and compared to the stored data of the second distributed cache. Changes in the health assessment data may be identified and data indicating those changes may be provided in response to the subsequent request. One or more remedial actions may be performed in response to the health assessment data obtained.

Abstract: A method of modeling a scenario for use with live data in a production database may include selecting the scenario. The live data can be stored in the production database on a first computing resource, and production scenarios can be stored and executed on the live data using the first computing resource. The method may also include identifying a subset of the live data that are affected by the scenario, copying the subset to a second computing resource to create modeling data, running the scenario on the modeling data using the second computing resource, causing a display device to provide an output comprising a result of the scenario on the modeling data, receiving an input indicating that the scenario is approved, and storing the scenario with the plurality of production scenarios for use on the first computing resource.

Abstract: System and method for correlating fabric-level group membership with subnet-level partition membership in a high performance computing environment. An exemplary embodiment can provide an admin partition in a subnet of a network environment, associated with a resource domain at the fabric level of the network environment. The admin partition can be defined by a P_Key that is stored in a fabric-level database. Each fabric resource is identified by an identifier that is stored in the fabric-level database. When fabric resources are added as members to the resource domain, a relationship is created between the P_Key and the identifier of the fabric resource, where the relationship defines the resource as a member of the admin partition. Access rights can be granted based on the relationship.

Abstract: In accordance with an embodiment, described herein is a system and method for supporting patching in a multi-tenant application server environment. The system can associate one or more partitions with a tenant, for use by that tenant, wherein a partition is a runtime and administrative subdivision or slice of a domain. A patching process can take advantage of high-availability features provided by an application server clustering environment, to apply patches in a controlled, rolling restart, which maintains a domain's ability to operate without interruption, or with zero downtime. The process can be used to automate complex or long running tasks, including preserving an unpatched or prior version of an application server, application, or other software component for possible rollback, or providing automatic reversion in the event of an unrecoverable error.

Abstract: Systems, devices, and methods provide improved autonomous agents that are configured to respond to a user's query based on an emotion with which the query was expressed and a personality trait of the user. The agent may identify candidate answers to the query that are each associated with an emotion and/or a personality trait. The autonomous agent may utilize a predefined protocol set that indicates transitions between emotional states. A transition may correspond to an action associated with an emotion and/or a personality trait that, if performed, is likely to maintain a user in or transition the user to a preferred emotional state. The responses may be scored based at least in part their corresponding emotions and/or personality traits and in light of the transitions identified in the protocol set. A particular scored response may be selected and provided to the user in response to their query.