Abstract: Systems and methods to rotate security assets used to for secure communications are disclosed. The system includes receiving a first certificate that includes a first subject name for the remote servers. The first certificate further includes a first public key. Next, the system receives a second certificate that includes the first subject name for the remote servers. The second certificate further includes a second public key that is different from the first public key. Next, the system stores the first and second certificates in a trust module. Next, the system receive a third certificate from a first server included in the plurality of remote servers. Next, the system identifies the first server is trusted. The identifying is based on the third certificate matching any one of the first certificate and the second certificate. Finally, the system establishes a secure communication session with the first server based on the identifying the first server is trusted.

Abstract: Described herein are improvements for generating courses of action for an information technology (IT) environment. In one example, a method includes identifying a first course of action for responding to an incident type in an information technology environment and generating a simulated incident associated with the incident type. The method further includes initiating performance of the first course of action based on the generation of the simulated incident. The method also includes, upon reaching a particular step of the first course of action that prevents the performance of the first course of action from proceeding, providing a first simulated result that allows the performance of the first course of action to proceed.

Abstract: One or more lower-level attributes of a first network policy are translated to one or more higher-level attributes of the first network policy, and one or more lower-level attributes of a second network policy are translated to one or more higher-level attributes of the second network policy. The first network policy controls how first network traffic is handled, and the second network policy controls how second network traffic is handled. The one or more higher-level attributes of the first network policy are compared with the one or more higher-level attributes of the second network policy. Based on the comparing, it is determined whether the first network traffic and the second network traffic are handled in a functionally equivalent manner. If not, the first network policy is dynamically updated to generate an updated first network policy that causes the first network traffic to be handled in the functionally equivalent manner.

Abstract: Technologies for determining a set of edge resources to offload a workload from a client compute device based on a brokering logic provided by a service provider include a device that includes circuitry that is in communication with edge resources. The circuitry is to receive a brokering logic from a service provider receive a request from a client compute device, wherein the request includes a function to be used to execute the request and one or more parameters associated with the client compute device, determine the one or more parameters, select, as a function of the one or more parameters and the brokering logic, a physical implementation to perform the function, wherein the physical implementation indicates a set of edge resources and a performance level for each edge resource of the set of edge resources, and perform, in response to a selection of the physical implementation, the request using the set of edge resources associated with the physical implementation.

Abstract: A device can include a processor; memory accessible to the processor; a microphone operatively coupled to the processor; a network interface operatively coupled to the processor; circuitry that parses audio signals received via the microphone for a name and a type of device; circuitry that analyzes network information associated with remote devices accessible via the network interface based at least in part on at least one of the name and the type of device to associate the name and the type of device with one of the remote devices; and circuitry that stores the name and the type of device to the memory in association with the one of the remote devices.

Abstract: The disclosed invention provides methods supporting systems that processes video communication(s) provided by an organization subject to internal or external regulations such as a specific financial services firm or a specific consumer product goods company. In various embodiments, video content is analyzed through a pipeline process of multiple extraction scripts, programs, and/or services and processes the content for participant likeness through facial recognition, voice recognition, and voice-to-text and stores the output in a normalized, searchable data store. A policy analysis is performed based on the stored data and external regulatory compliance, internal rules such as acceptable use policies, community-based regulations, or any combination thereof, to determine a risk score.

Abstract: The disclosure provides an approach for service provisioning. Embodiments include receiving first configuration data related to a first network endpoint and second configuration data related to a second network endpoint. Embodiments include generating a service map based on the first configuration data and the second configuration data. Embodiments include receiving a request to provision a service between the first network endpoint and the second network endpoint. Embodiments include determining in response to the request and based on the service map, first service configuration data for the first network endpoint and second service configuration data for the second network endpoint. Embodiments include provisioning the service between the first network endpoint and the second network endpoint by pushing the first service configuration data to the first network endpoint and pushing the second service configuration data to the second network endpoint.

Abstract: A method, computer program product, and computing system device for receiving a data stream encoded with metadata. Client data may also be received. At least a portion of the data stream may be filtered based upon, at least in part, a comparison of the metadata encoded into the video stream and the client data.

Abstract: Systems, methods, and machine-readable storage media for processing data streams in accordance with protocols to selectively transmit content to endpoint devices to facilitate conferencing are disclosed. Electronic communications may be received, via one or more networks, from endpoint devices, segregated, and routed to facilitate conferencing environments. Listening for data changes in data streams may be performed, each data stream corresponding to a particular source. Data changes that are generated based on events may be detected and mapped to a particular load identifier and a particular conferencing environment. A conferencing protocol may be identified and mapped to the particular conferencing environment. Consequent to determining that the data changes correspond to the one or more, the particular conferencing environment may be updated.

Abstract: Handling of multiple connections during NAT traversal for a node behind a symmetric NAT is disclosed. The likelihood of connection failure during symmetric NAT traversal may be reduced by serializing critical time windows after port prediction. Once a connection request has been sent for a first connection, port prediction for a subsequent connection may be delayed until a connectivity check has begun for the first connection. This process may be repeated to handle NAT traversal for multiple simultaneous connections to different nodes.

Abstract: One embodiment provides a method, including: receiving, at an information handling device, an incoming communication; accessing, using a processor, context data associated with a user, wherein the context data corresponds to at least one active application; determining, using the context data, a work status of the user; and providing, responsive to the incoming communication, a status message associated with the determined work status. Other aspects are described and claimed.

Abstract: The present application provides a system and method for accelerated network service and/or network slice provisioning in response to customer requests or requirements. The provided system and method incorporate a network service/network slice instance that is responsible for constructing and maintaining status and models associated with the dynamics of network services. A modelling function can be operated based on collected network service information to maintain a model relating to network service dynamics, and transmit indications, such as predictions of future requirements, to a corresponding network management service. The indications can be used for creation, modification, and termination of the network service, or for advanced preparation of such actions.

Abstract: A CDN that employs a load balancer that uses probabilistic filters to estimate sizes of requested data objects and that balances incoming request loads according to the estimated sizes is provided herein. For example, the load balancer stores probabilistic filters. Each probabilistic filter is associated with a size range. When the CDN receives a data object request, the load balancer generates a cache key and tests whether the cache key is a member of any probabilistic filter. If the cache key is a member of a probabilistic filter, then the load balancer estimates a size of the requested data object based on the probabilistic filter of which the cache key is a member. The load balancer then uses the estimated size to estimate the added load on one or more cache servers. Based on the estimated added load, the load balancer selects a cache server to handle the request.

Abstract: Methods, devices and program products are provided initiate a local browser session, at a local browser, with a resource manager. The method, devices and program products measure a responsiveness of the local browser session and determines if the responsiveness of the local browser session falls below a threshold. Based on the determining, the local browser session may be transferred from the local browser to a virtual browser on a remote device to form a virtual browser session. The remote device is located remote from the client device. At the client device, a rendered output is displayed from the virtual browser session implemented by the virtual browser.

Abstract: Dynamic adaptive reconfiguration of a computing system includes receiving a request to remove a first node in a plurality of physical nodes. An operating system is executing collectively across the plurality of physical nodes, and an application is running on the operating system. It further includes in response to the request, and while the application is running, evacuating virtualized resources associated with the first node to one or more other nodes in the plurality of physical nodes. It further includes subsequent to the evacuation of the virtualized resources, removing the first node from the plurality of physical nodes.

Abstract: A technique for maintaining user sessions across multiple web applications includes receiving, by a first web application running on a first server, a cross-application request from a client application. The cross-application request indicates a user action to access a second web application, which runs on a second server. In response to receiving the cross-application request, the first web application sends a single-use password to the client application, which may send the single-use password to the second web application. The first web application receives a session request, which includes the single-use password, from the second web application. In response to receiving the session request, the first web application sends session data to the second web application, enabling the second web application to participate in a session with the client application.

Abstract: A method for enhancing a service delivery system with a multi-staged broker may be provided. The multi-staged broker may be suited for a placement of a service. The delivery system accesses at least two infrastructure systems offering services for deploying service resources. The at least two infrastructure systems are operated by different service providers. The method comprises collecting static and dynamic capabilities of the two infrastructure computing systems, combining the static capabilities and the dynamic capabilities for determining a first most suitable infrastructure system for deploying a service requiring a computing environment satisfying attribute values of a service capability profile, deploying the service on the first most suitable infrastructure system.

Abstract: A content delivery network has at least a first tier of servers. A content delivery method includes at a first server in the first tier of servers, obtaining a request from a client for a resource. If the resource is available at the first server or at a peer of the first server, then the resource is served to the client from the first server. Otherwise, it is determined whether the resource is popular, and if the resource is determined to be popular, then the first server obtains the resource and the first server serves the resource to the client. If the resource is determined not to be popular, the server contacts a second server to obtain the resource, not in the first tier of servers, and the second server provides the resource to the first server. The first server is instructed not to cache the unpopular content.

Abstract: A first computing device is part of a distributed electronic storage system (DESS) that also comprises one or more second computing devices. The first computing device comprises client process circuitry and DESS interface circuitry. The DESS interface circuitry is operable to: receive, from client process circuitry of the first computing device, a first client file system request that requires accessing a storage resource on one or more of the second computing devices; determine resources required for servicing of the first client file system request; generate a plurality of DESS file system requests for the first file system request; and transmit the plurality of DESS file system requests onto the one or more network links. How many such DESS file system requests are generated is determined based on the resources required for servicing the first client file system request.

Abstract: A method, system and computer product for a migration of a shared hosting environment with an IP change is provided. Migration is performed with the help of a special tool—the migrator. For each migrated domain on the source server, the TTL (time to live) values are decreased on the source DNS server. If possible, for a database server, a replication between the source and the target servers is set up for migrated databases. The migrator creates configuration of web sites and mail service on the target server and copies files and mail messages from the source to the target server; the migrator creates databases (if replication is not available) on the target server; and the migrator creates DNS zones with DNS records pointing to the target server. Once administrator checks that site works well on the target server, the migrator performs content sync and sets DNS zone on the source server as slave to DNS zone on the target server.