Abstract: A field programmable gate array (FPGA) including a configurable interconnect fabric connecting a plurality of logic blocks, the configurable interconnect fabric and the logic blocks being configured to implement a data masking circuit configured to: receive input data including data values at a plurality of indices of the input data; select between a data value of the data values and an alternative value using a masking multiplexer to generate masked data, the masking multiplexer being controlled by a mask value of a plurality of mask values at indices corresponding to the indices of the input data; and output the masked data. In some examples, the configurable interconnect fabric and the logic blocks are further configured to implement a mask generation circuit configured to generate the mask values. In some examples, the mask values are received from external memory.

Abstract: A method of fabricating a multi-core polymer optical fibre comprises arranging optical fibre preforms in a stack, the optical fibre preforms each comprising a polymer core and polymer cladding surrounding the polymer core; and drawing and bonding the stack to form the multi-core polymer optical fibre. Any contaminants or impurities which collect on outer surfaces of the preforms may be confined to boundaries between the preforms, which may avoid attenuation of signals passed through the cores while at the same time reducing crosstalk between cores of the final manufactured fibre. Also provided is a multi-core polymer optical fibre obtainable by the method.

Abstract: In accordance with implementations of the subject matter described herein, there provides a solution for multi-path RDMA transmission. In the solution, at least one packet is generated based on an RDMA message to be transmitted from a first device to a second device. The first device has an RDMA connection with the second device via a plurality of paths. A first packet in the at least one packet includes a plurality of fields, which include information for transmitting the first packet over a first path of the plurality of paths. The at least one packet is transmitted to the second device over the plurality of paths via an RDMA protocol. The first packet is transmitted over the first path. The multi-path RDMA transmission solution according to the subject matter described herein can efficiently utilize rich network paths while maintaining a low memory footprint in a network interface card.

Abstract: Embodiments detect identity attacks by comparing usage of compromised passphrases or other weak credentials in failed sign-in attempts to access restriction conditions. A restriction threshold amount of weak credential failed sign-ins (WCFSI) or a WCFSI increase indicates an identity attack, such as a password spray attack. Going beyond the mere number of failed sign-ins by also considering credential strength allows embodiments to detect attacks sooner than other approaches. An embodiment may also initiate or impose defenses by locking accounts, blocking IP addresses, or requiring additional authentication before access to an account is allowed. Weak credentials may include short passwords, simple passwords, compromised passwords, or wrong usernames, for instance. Password strength testing may be used for attack detection in addition to preventive use on passwords proposed by authorized users. Familiar and unfamiliar traffic source locations may be tracked, as sets or individually.

Abstract: A method and apparatus for configuring a mouse device (102) through pressure detection, and further proposes a corresponding mouse device (102). Pressure detected between the mouse device (102) and an operation surface (104) may be obtained. An operating state corresponding to the pressure may be determined. The mouse device (102) may be configured to the operating state.

Abstract: A motherboard assembly comprises a motherboard, a first computing component attached to the motherboard, and a coolant container attached to the motherboard. An air-cooled heat sink is attached to the coolant container. The coolant container, the heat sink, and the motherboard form a hermetically sealed enclosure that encompasses the first computing component and that is configured to retain dielectric working fluid covering the first computing component. The heat sink is positioned to condense vapors formed from boiling of the dielectric working fluid and to cause condensed dielectric working fluid to return to a pool of the dielectric working fluid that comprises the first computing component. The motherboard assembly additionally comprises a second computing component attached to the motherboard and positioned outside of the hermetically sealed enclosure.

Abstract: The disclosure is directed towards the detection of supply chain-related security threats to software applications. One method includes identifying differences between updated source code and previous source. The updated source code corresponds to an updated version of an application. The previous source code corresponds to a previous version of the application. A risk score is determined for the updated version. The risk score is based on a machine learning (ML) risk model. The ML risk model analyzes the differences between the updated source code and the previous source code. A value of the risk score corresponds to potential security threats that are associated with the updated version. The potential security threats are not associated with the previous version of the application. The risk score is provided to interested parties.

Abstract: Distributed computing systems, devices, and associated methods of virtual RDMA switching are disclosed herein. In one embodiment, a method includes intercepting a command from an application in a container to establish an RDMA connection with a remote container on a virtual network. In response to the intercepted command, an RDMA endpoint at a physical NIC of a server is created. The method can also include intercepting another command to pair with a remote RDMA endpoint corresponding to the remote container. The intercepted another command contains data representing a routable network address of the remote RDMA endpoint in the RDMA computer network. Then, the RDMA endpoint created at the physical NIC of the server can be paired with the remote RDMA endpoint using the routable network address of the remote RDMA endpoint.

Abstract: Unauthorized use of user credentials in a network is detected. Data indicative of text strings being used to access resources in the network is accessed. Regex models are determined for the text strings. Troupings of the regex models are determined based on an optimization of a cumulative weighted function. A regex model having a cumulative weighted function that exceeds a predetermined threshold is identified. An alert is generated when the cumulative weighted function for the identified regex model exceeds the predetermined threshold.

Abstract: Methods, systems, and computer programs are presented for analyzing a program to be executed on a computer to detect vulnerability for malicious attacks using the program. One method includes an operation for performing dynamic vulnerability detection of a driver when the driver is loaded in a computing system. The dynamic vulnerability detection comprises detecting at least one offset made available by the driver for access to the driver, and detecting application programming interface (API) calls made by the driver. Further, the method includes performing static vulnerability detection of the driver by analyzing binary code of the driver. The static vulnerability detection comprises determining the at least one offset available for access to the driver, and identifying vulnerable code paths to functions accessing kernel functionality.

Abstract: Computer servers configured to perform digital image processing are discloses herein. In one embodiment, upon receiving a transcription command, a computer server performs text recognition based on patterns in a digital image to generate digital text data corresponding to the digital image. The computer server can then determine a content format of the digital text data based on the imported digital image and automatically apply the determined content format to the generated digital text data. The digital data can then be inserted into an electronic document.

Abstract: A method, computer program product, and computing system for enabling a user to select a plurality of functional modules from a library of functional modules; and enabling the user to visually arrange the plurality of functional modules to form a conversational application; wherein the conversational application includes a contingency platform configured to enable an administrator of the conversational application to activate a contingency plan at some point-in-time after the deployment of the conversational application.

Abstract: Methods for centralized access control for cloud relational database management system resources are performed by systems and devices. The methods utilize a central policy storage, managed externally to database servers, which stores external policies for access to internal database resources at up to fine granularity. Database servers in the processing system each receive external access policies that correspond to users of the system by push or pull operations from the central policy storage, and store the external access policies in a cache of the database servers for databases. For resource access, access conditions are determined via policy engines of database servers based on an external access policy in the cache that corresponds to a user, responsive to a resource access request from a device of the user specifying the internal resource. Data associated with the resource is provided to the user based on the access condition being met.

Abstract: Systems and methods are described for facilitating operation of a plurality of computing devices. Data indicative of enumerated resources of a computing device is collected. The data is collected without dependency on write permissions to a file system of the one computing device. A condition of the computing device is determined based on historical data associated with enumerated resources of other computing devices. The identified condition can be updated as updated historical data becomes available. A communication to the computing device may be sent based on the identified condition.

Abstract: Embodiments use a multi-modal approach to generate software programs that match a solution program description. The solution program description may include natural language, input-output examples, partial source code, desired operators, or other hints. Some embodiments use optimized prompts to a pre-trained language model to obtain initial candidate programs. Maximal program components are extracted and then recombined variously using component-based synthesis. Beam search reduces a solution program search space by discarding some candidates from a given synthesis iteration. Relevance metrics, string similarity metrics, operator frequency distributions, token rareness scores, and other optimizations may be employed. By virtue of optimizations and the multi-modal approach, a solution program may be obtained after fewer iterations than by use of a language model alone.

Abstract: This disclosure describes how to identify objects in an augmented reality environment. More specifically, the various systems and methods described herein describe how an augmented reality device can recognize objects within a real world environment, determine where the object is located, and also identify the various surfaces of the object in real time or substantially real time.

Abstract: Techniques are described herein that are capable of translating an edit from a child computer language to a parent computer language while maintaining a semantic meaning of the edit. Parent code that is based on the parent computer language is compiled, which automatically triggers generation of child code that is mapped to the parent code and that is based on the child computer language. A determination is made that the edit, which is not mapped to the parent code, is implemented in the child code to provide edited child code. The parent code is updated to include a change that is based on the semantic meaning of the edit. The updated parent code is configured such that compilation of the updated parent code automatically triggers generation of an updated version of the child code that includes the semantic meaning of the edit.

Abstract: System and methods for performing analytical operations are described. A hardware-based regular expression (RegEx) engine performs a regular expression operation on a stream of data units based on a finite automata (FA) graph. Performing includes configuring a regular expression engine of a hardware-based regular expression accelerator to, beginning at a root node in the plurality of nodes of the FA graph, step the regular expression engine through one or more nodes of the FA graph until the regular expression engine arrives at a skip node and to consume, at the skip node, two or more data units from the stream of data units before traversing one of the directional arcs to another node.

Abstract: A method and system for transforming an input image via a plurality of image transformation stylizers includes receiving the input image; providing the input image, information about the plurality of image transformation stylizers and at least one of user data, history data, and contextual data to a trained machine-learning (ML) model for selecting a subset of the plurality of image transformation stylizers; receiving as an output from the ML model the subset of image transformation stylizers; executing the subset of the image transformation stylizers on the input image to generate a plurality of transformed output images; ranking the plurality of transformed output images based on at least one of the input image, the user data, the history data, and the contextual data; and providing the ranked plurality of transformed output images for display.

Abstract: Methods and devices for an automated Internet of Things (IoT) certification service to verify plug and play capabilities of one or more IoT devices for use with a cloud service provider may include receiving a device identification of an IoT device to certify with the cloud service provider. The methods and devices may include receiving a selection of one or more certification tests to perform to plug and play capabilities of the IoT device. The methods and devices may include performing the one or more certification tests. The methods and devices may include generating a device certification for the plug and play capabilities of the IoT device in response to the one or more certification tests passing.

Abstract: The present disclosure relates to systems, methods, and computer-readable media for optimizing selection of a cached execution plan to use in processing a parametric query. For example, systems described herein involve training a plan selection model that makes use of machine learning to identify an execution plan from a set of pre-selected execution plans based on predicted cost of executing a query instance in accordance with the selected execution plan (e.g., relative to predicted costs of executing the query instance using other pre-selected execution plans). This application describes features related to lowering costs associated with selecting the execution plan in a way that will continue to be more accurate overtime based on training and refining the plan selection model.

Abstract: A hypothesis stitcher for speech recognition of long-form audio provides superior performance, such as higher accuracy and reduced computational cost. An example disclosed operation includes: segmenting the audio stream into a plurality of audio segments; identifying a plurality of speakers within each of the plurality of audio segments; performing automatic speech recognition (ASR) on each of the plurality of audio segments to generate a plurality of short-segment hypotheses; merging at least a portion of the short-segment hypotheses into a first merged hypothesis set; inserting stitching symbols into the first merged hypothesis set, the stitching symbols including a window change (WC) symbol; and consolidating, with a network-based hypothesis stitcher, the first merged hypothesis set into a first consolidated hypothesis.

Abstract: Embodiments described herein are directed to detecting data inconsistencies within a distributed database and identifying the cause thereof. For example, lineage events are emitted from different components of the distributed system that operate on various data files. A consistency checking engine analyzes these events and detects inconsistencies with respect to the data files. The embodiments described herein checks the integrity of the database and assists in understanding the root cause in case of a corruption. Moreover, it provides the timeline for the corruption and whether it is repairable or not. These properties enable determining the right time to restore the customer's database or the right set of actions to repair the corruption. In case of repairable corruption, the correct compensating repair actions may be applied.

Abstract: Systems and methods directed to formulating and suggesting a subject line based on content of an email message are provided. More specifically, content corresponding to one or more portions of an email may be received, where the content may be utilized to determine one or more email topics and at least one intent of the email. An intent of the email may correspond to whether an action is to be performed, whether a question is presented, whether a request for time is present, and/or any other request on the part of the recipient or the sender. Based on the intent of the email and the one or more topics, a subject line suggestion may be formulated and presented to a user.

Abstract: A serverless query processing system receives a query and determines whether the query is a recurring query or a non-recurring query. The system may predict, in response to determining that the query is the recurring query, a peak resource requirement during an execution of the query. The system may compute, in response to determining that the query is the non-recurring query, a tight resource requirement corresponding to an amount of resources that satisfy a performance requirement over the execution of the query, where the tight resource requirement is less than the peak resource requirement. The system allocates resources to the query based on an applicable one of the peak resource requirement or the tight resource requirement. The system then starts the execution of the query using the resources.

Abstract: Techniques for establishing a network connection with a client device and responding to composite requests from the client device. For a composite request identifying a first action associated with a first data plugin component and a second action associated with a different second data plugin component, the first action is performed by executing a first portion of the data plugin component and transmitting corresponding response data in a first transmission to the client device via the network connection, and the second action is performed by executing a second portion of the data plugin component and transmitting corresponding response data in a second transmission separate from the first transmission to the client device via the network connection.

Abstract: According to examples, an apparatus may include a processor that may identify activities of an entity on resources over a predetermined period of time, in which the entity is to use permissions assigned to the entity over the resources to perform the identified activities. The processor may also identify which of a plurality of groups of permissions includes the permissions the entity used to perform the identified activities and may determine permutations of the identified plurality of groups of permissions. The processor may further calculate respective scores for each of the determined permutations to identify permutations of the groups of permissions having the lowest scores and may output information pertaining to the determined permutations having the lowest scores.

Abstract: A method and system for displaying an image in a communication thread accessible to a first and second user are disclosed, including receiving an indication of a selection of a first image by the first user for display in the communication thread, analyzing user attribute settings of the first user or the second user to determine if at least one of the first user or the second user has a user attribute setting corresponding to a customizable aspect of the selected first image, and causing, based on the analyzing, in different first and second modes, one of the selected first image or a modified image based on the selected first image to be displayed in the communication thread.

Abstract: Described are examples for providing a system for managing configuration and policies for a virtualized wide area network (vWAN) support on a wide area network (WAN). The vWAN includes a plurality of virtual network entities associated with geographic locations including the physical computing resources of the WAN and virtual connections between the virtual network entities. The system includes a network safety component for managing configurations and policies of the vWAN on the WAN. The network safety component receives a change to a policy or configuration of the vWAN from an operator of a network connected to the vWAN. The network safety component evaluates a set of safety rules for the operator based on the change and a network state of a physical WAN underlying the vWAN. The network safety component generates an error message in response to at least one of the set of safety rules failing the evaluation.

Abstract: In an example embodiment, a deep learning algorithm is introduced that operates directly on a raw sequence of user activity in an online network. This allows the system to scalably leverage more of the available signal hidden in the data and stop adversarial attacks more efficiently than other machine-learned models. More particularly, each specific request path is translated into a standardized token that indicates the type of the request (e.g., profile view, search, login, etc.). This eliminates the need for human curation of features. Then, the standardized request paths are standardized to integers based on the frequency of that request path across all users. This allows information about how common a given type of request is to be provided to the machine-learned model. The integer array is the activity sequence that is fed into the deep learning algorithm.

Abstract: A method and system for receiving data relating to one or more activities performed by a user on a document within a specific time period, the one or more activities being performed by using an application, analyzing the data to identify a category of user activity based at least on the type of activity performed on the document, and transmitting a signal to a device for storage in association with the document, the signal including the identified category.

Abstract: The present disclosure relates to methods and systems for configuring service mesh networking resources for dynamically discovered external entities. The methods and systems create custom resource objects for services provided by the external entities and dynamically create service mesh network resources for the custom resource objects. The methods and systems enable communications with the external entities using the service mesh network resources.

Abstract: A first data link and a second data link are established between two endpoints. For each of the first and second data links, a first metric is determined based on a first scaling factor for characterizing how quickly link health degrades over time, and a time at which a most recent packet was received on the respective data link. A second metric indicative is determined based on a second scaling factor for controlling how often to probe the first and second data links in addition to regular traffic. Based on the first and second metrics, one of the first or second data links is selected for sending a data packet.

Abstract: A head-wearable display device includes a display panel to emit display light. An optical array panel is positioned along an optical path of the display light emitted by the display panel, and configured to redirect the display light toward an eyebox. An eye tracking system estimates a current pupil position of a user eye relative to the head-wearable display device. An actuator translates a position of the optical array panel relative to the display panel to move a position of the eyebox toward the current pupil position of the user eye.

Abstract: A scale and pose estimation method for a camera system is disclosed. Camera data for a scene acquired by the camera system is received. A scale prior parameter characterizing scale of the camera system is received. A cost of a cost function is calculated for a similarity transformation. The cost of the cost function is influenced at least by the scale prior parameter. Based at least on the cost function being less than a threshold cost, an estimated scale and pose of the camera system is output based on the similarity transformation.

Abstract: A computing system including a plurality of processing devices configured to execute a Mixture-of-Experts (MoE) layer. The processing devices are configured to execute the MoE layer at least in part by receiving an input tensor including input tokens. Executing the MoE layer further includes computing a gating function output vector based on the input tensor and computing a sparse encoding of the input tensor and the gating function output vector. The sparse encoding indicates one or more destination expert sub-models. Executing the MoE layer further includes dispatching the input tensor for processing at the one or more destination expert sub-models, and further includes computing an expert output tensor. Executing the MoE layer further includes computing an MoE layer output at least in part by computing a sparse decoding of the expert output tensor. Executing the MoE layer further includes conveying the MoE layer output to an additional computing process.

Abstract: This document relates to employing tongue gestures to control a computing device, and training machine learning models to detect tongue gestures. One example relates to a method or technique that can include receiving one or more motion signals from an inertial sensor. The method or technique can also include detecting a tongue gesture based at least on the one or more motion signals, and outputting the tongue gesture.

Abstract: Examples of the present disclosure describe systems and methods for non-disruptively hibernating and resuming a guest environment using a network virtual service client. In examples, when a guest environment is hibernated, a network virtual service client provides an instruction to a virtual network interface card to set the device power state of the virtual network interface card to a low power state. The network virtual service client disables the communication channels used by the network virtual service client and saves the operating state of the virtual network interface card. When the guest environment is resumed, the network virtual service client provides an instruction to set the device power state of the virtual network interface card to a full power state. The network virtual service client reenables the communication channels used by the network virtual service client and restores the operating state of the virtual network interface card.

Abstract: A system and method for rendering a plurality of user interface (UI) components of a UI screen based on a priority order is conducted by receiving a request to load the UI screen, each component of the UI screen being associated with a priority order, creating a data structure for rendering the UI components in accordance with the priority order, the data structure including a list of the UI components in an order in which they should be rendered, generating an event for rendering a first UI component in the data structure, receiving an indication that the first UI component has been rendered, responsive to receiving the indication that the first UI component has been rendered, moving to a next UI component in the list to render and continuing with the rendering of the UI components in accordance with the list until all UI components in the list have been rendered.

Abstract: The present disclosure describes near-eye display systems including an array of projectors and a one-dimensional exit pupil expander. The array of projectors can be arranged along a first dimension and can output image light towards an input coupler within a waveguide that provides one-dimensional exit pupil expansion. In some implementations, arrays of monochromatic projectors are implemented and arranged in offset columns. The input coupler in-couples the image light from the array of projectors into a TIR path within the waveguide. Different optical elements, including diffractive and reflective optics, may be implemented as the input coupler. The image light travels within the waveguide until it interacts with an output coupler. Upon interaction with the output coupler, the image light is expanded in a second dimension transverse to the first dimension and is coupled out of the waveguide.

Abstract: Aspects of the present disclosure include systems and methods for profile switching by the computing device. In an example, a computing device may include a memory storing instructions and a processor communicatively coupled with the memory and configured to execute the instructions. The processor may receive a request to initiate a new instance of a website. The processor may also determine a domain name of the website in response to the request. The processor may also determine a first user profile from a plurality of user profiles that corresponds to the domain name based on profile information corresponding to one or more of profile history data, profile favorites data, or administrative settings data. The processor may also launch the new instance of the website in a browser according to the first user profile.

Abstract: A connector for an electronic device is disclosed. The connector includes a housing. The housing includes a leading surface. The leading surface forms a plug opening and a fulcrum spaced away from the plug opening. The connector includes an electronic plug extending through the plug opening away from the leading surface of the housing. The connector includes a pivot providing the electronic plug a range of angular adjustment relative to the leading surface of the housing. The connector includes a bias mechanism biasing the electronic plug to a default position within the range of angular adjustment.

Abstract: Examples that relate to calling on a computing device are disclosed. One example provides a computing device, comprising, a first display a second display, a sensor system a logic subsystem and a storage subsystem comprising instructions executable by the logic subsystem to output, via one or both of the first display and the second display, a notification of an incoming phone call at the computing device, and based on output from the sensor system indicating a relative angle between the first display and the second display being changed to an angle greater than a predetermined angle, answer the incoming phone call.

Abstract: Some storage systems are configured with VDL (valid data length) type controls that are implemented on a per cluster basis and, in some instances, on a sub-cluster basis, rather than simply a per file basis. In some instances, per-cluster VDL metadata for the storage clusters is stored and referenced at the edge data volume nodes of a distributed network for the storage system rather than, and/or without, storing or synchronizing the per-cluster VDL metadata at a master node that manages the corresponding storage clusters for the different data volume nodes. Sequence controls are also provided and managed by the master node and synchronized with the edge data volume nodes to further control access to data contained in the storage clusters.

Abstract: The present concepts include a neuroergonomic service that processes multimodal physiological, digital, and/or environmental inputs from a user and predicts cognitive states of the user. Thus, the neuroergonomic service provides personalized feedback to the user about her current mental and physiological wellbeing to enable modulation of mood, stress, attention, and other cognitive measures for improved productivity and satisfaction. The neuroergonomic service utilizes machine learning models that are trained offline using sensor inputs taken from participants in a controlled environment that purposefully induce an array of cognitive states upon the participants.

Abstract: The present disclosure relates to a method of manufacturing a nanowire structure. According to an exemplary process, a substrate is firstly provided. An intact buffer region is formed over the substrate, and a sacrificial top portion of the intact buffer region is eliminated to provide a buffer layer with a planarized top surface. Herein, the planarized top surface has a vertical roughness below 10 ?. Next, a patterned mask with an opening is formed over the buffer layer, such that a portion of the planarized top surface of the buffer layer is exposed. A nanowire is formed over the exposed portion of the planarized top surface of the buffer layer through the opening of the patterned mask. The buffer layer is configured to have a lattice constant that provides a transition between the lattice constant of the substrate and the lattice constant of the nanowire.

Abstract: Techniques are described herein that are capable of performing automatic graph-based detection of potential security threats. A Bayesian network is initialized using an association graph to establish connections among network nodes in the Bayesian network. The network nodes are grouped among clusters that correspond to respective intents. Patterns in the Bayesian network are identified. At least one redundant connection, which is redundant with regard to one or more other connections, is removed from the patterns. Scores are assigned to the respective patterns in the Bayesian network, based on knowledge of historical patterns and historical security threats, such that each score indicates a likelihood of the respective pattern to indicate a security threat. An output graph is automatically generated. The output graph includes each pattern that has a score that is greater than or equal to a score threshold. Each pattern in the output graph represents a potential security threat.

Abstract: An initial mesh is received comprising a hand of a subject. The initial mesh includes a plurality of vertices. A smoothed mesh is generated, and a discrete curvature of the smoothed mesh is determined for each vertex. One or more candidate finger vertices are identified based upon a determination that the discrete curvature for each of the one or more candidate vertices is greater than or equal to a threshold curvature. One or more seed vertices are identified from among the one or more candidate finger vertices based upon a determination that the discrete curvature for one or more other vertices within a neighborhood of each seed vertex is greater than or equal to the threshold curvature. Dilation is performed on the one or more seed vertices to grow one or more patches from the one or more seed vertices. The one or more patches are deprioritized for mesh simplification.

Abstract: Disclosed speech recognition techniques improve user-perceived latency while maintaining accuracy by: receiving an audio stream, in parallel, by a primary (e.g., accurate) speech recognition engine (SRE) and a secondary (e.g., fast) SRE; generating, with the primary SRE, a primary result; generating, with the secondary SRE, a secondary result; appending the secondary result to a word list; and merging the primary result into the secondary result in the word list. Combining output from the primary and secondary SREs into a single decoder as described herein improves user-perceived latency while maintaining or improving accuracy, among other advantages.

Abstract: Non-transform blocks of video content may be coded by selectively changing a scanning order. in some implementations, an encoder or decoder may perform a scanning process on a block according to a scanning order. When the block has not been transformed, the encoder or decoder may selectively change the scanning order to a different order. For example, if the block is associated with a particular type of prediction, the scanning order may be changed to a different order. In another example, if the non-transform block has a size that is smaller than a predetermined size, the scanning order may be changed to a different order.