Abstract: A computer-implemented method for detecting anomalous communications in a service oriented communication system. The method includes providing at least one decoy service, hosted by a decoy server communicably coupled to the service oriented communication system, wherein the at least one decoy service is addressable using a corresponding decoy service identifier; detecting, at the decoy server, a request to consume at least one instance of the at least one decoy service, wherein the request originates from a client communicably coupled to the decoy server via the service oriented communication system; and performing, at the decoy server, a response to the request to consume the at least one instance of the at least one decoy service.

Abstract: Restricting and logging editing operations in a co-browse session, includes establishing a co-browse session between a first participant and a second participant in which a Document Object Model (DOM) of a first browser at the first participant is transmitted to the second participant, and used at the second participant to recreate a content of the first browser at a second browser. The DOM includes a plurality of DOM elements. A list of editable elements is implemented at the first browser, the list of editable elements specifying a first subset of the DOM elements, fewer than all of the DOM elements. When restricted editing is enabled on the co-browse session, the second participant is allowed to interact with any DOM element of the first subset of DOM elements but is not allowed to interact with any DOM elements not in the first subset of DOM elements.

Abstract: Systems, computer program products, and methods are described herein for network traffic routing and load balancing in an electronic network. The present disclosure is configured to identify, by an application layer, at least one website access request by a user account, wherein a website access request comprises a website identifier; transmit the website access request to a traffic routing layer; identify, by the traffic routing layer, a plurality of potential websites; determine, by the traffic routing layer, whether a routing identifier is present for the user account and in response to determining the routing identifier, pin the user account to a pinned website of the potential websites based on the routing identifier; and determine, by the traffic routing layer, whether the pinned website comprises an up attribute or down attribute, and to direct the website access request based on at least this up or down attribute.

Abstract: Techniques for determining the path of User Datagram Protocol (UDP) traceroute probes using Transmission Control Protocol (TCP) and Internet Control Message Protocol (ICMP). Various embodiments include sending a plurality of probes to one or more legs in a network path; obtaining measurements from each of the plurality of probes for each of the one or more legs in the network path; and performing one or more actions based on the measurements from each of the plurality of probes. The steps further include overlapping the measurements to determine latency to a destination and identifying throttling of UDP traffic based on the overlapping of measurements from the plurality of probes.

Abstract: Among other things, embodiments of the present disclosure improve the functionality of electronic messaging software and systems by allowing senders to transmit messages and content using a messaging system, and recipients to access such messages and content, even if the recipients do not have access to the messaging system.

Abstract: A method comprises: by a controller to communicate with devices of a network, storing classifiers assigned to groups of the devices to identify device commonality for each group; associating, to the classifiers, historical probabilities of success with which an automated response executed by one or more of the devices remediates a device alarm event; when a device of the devices reports the device alarm event, identifying each classifier to which the device belongs, each historical probability for each classifier, and a rule with classifier thresholds for the automated response; determining to execute the automated response on the device by evaluating the rule using each historical probability and the classifier thresholds; after the automated response is executed, performing a service test supported across the devices, and monitoring test results from the service test; and after the service test, updating each historical probability using the test results.

Abstract: Systems and methods are contemplated for reconfiguration of one or more MAC instances while the WTRU is operating using dual- or multi-MAC instance connectivity. For example, upon reception of RRC reconfiguration information that modifies one or more secondary MAC instances, the WTRU may transmit a reconfiguration complete message to a Macro eNB (MeNB) and may synchronize to small-cell or secondary eNB (SeNB), for example if triggered by one or more of an RRC flag, a physical downlink control channel (PDCCH) order (MeNB/SeNB), MAC activation information, etc. For example, the WTRU may synchronize to the SeNB for specific type(s) of RRC reconfigurations, but not other type(s) of RRC reconfigurations. Although examples may be described in terms of dual connectivity, the WTRU may establish connectivity and perform mobility procedures with more than two radio access network (RAN) nodes (e.g., eNBs), and the embodiments described may be equally applicable to those scenarios.

Abstract: The present invention provides a System and method for multi-tiered data synchronization. Data is synchronized between a master synchronization server, one or more proxy synchronization servers, and client devices. Client devices establish synchronization sessions with either a proxy synchronization server or a master synchronization server, depending on which server provides the “best” available connection to that client device. Each proxy synchronization server synchronizes data with client devices that have established a synchronization session with such proxy synchronization server. The master synchronization server synchronizes data with client devices that have established a synchronization session with the master synchronization server. Each proxy synchronization server synchronizes data with the master synchronization server. Metadata associated with synchronized files is synchronized throughout the system in real-time. Files may be synchronized in real-time or of a delayed time.

Abstract: A method is disclosed for managing notifications about a resource exposed by a computing device. The method, performed by a node, comprises sending a message to the computing device, the message registering the node for notifications about the state of the resource and specifying, in a message to the computing device, a limitation on a notification payload size, the limitation applicable to notifications about the state of the resource. Also disclosed are a method performed by a computing device, a node, a computing device and a computer program product.

Abstract: A method for integrating interface devices into a network, the network including at least one central software-based controller, which logically separates a data plane from a control plane using multiple interface devices. The method includes: a receiving of a first recognition message of the central controller at a terminal of an interface device; a checking of whether a previous recognition message has been received at another terminal of the interface device within a predefined time period prior to the receipt of the first recognition message; and a forwarding of the first recognition message to all network users connected to the interface device, if no previous recognition message has been received at another terminal within the predefined time period.

Abstract: A method for prohibiting email content propagation that receives, at a server, an email message. At the server, at least one email address associated with the email message which is designated not to receive a content of the email message is identified. At the server, the email message is modified by selectively removing a content of the email message to be conveyed to the at least one email address. The server conveys the modified email message to the at least one email address. The server conveys the email message to one or more recipient email addresses except the at least one email address. Consequently, the server has sent a submitted message to multiple email addresses, while modifying the content sent to a subset of the addresses that received the email message.

Abstract: This application provides a communication method, a gateway, and a management method and apparatus. A first data center is configured to provide non-public cloud services, and a second data center is configured to provide public cloud services. A gateway configured in the second data center is connected to a first subnet of the first data center, and is connected to a second subnet of the second data center. The first subnet and the second subnet have a same private network segment. The method includes: a layer 2 gateway receives a first address resolution protocol (ARP) request packet, which is used to request a MAC address of a second device in the second subnet, sent by a first device in the first subnet, and the gateway sends the first ARP reply packet, which carries a first MAC address of the gateway, to the first device.

Abstract: Disclosed are a host discovery and addition method and apparatus in a data center, and a device and a medium. The method includes: scanning to discover computing nodes to be added; sending, through IPv6 multicast, a discovery message to the scanned computing nodes, and receiving discovery response messages that are sent by said computing nodes through IPv6 unicast after the discovery message passes verification; when the discovery response messages pass verification and no IP address is configured for said computing nodes, sorting BMC IPs in the discovery response messages, and allocating IP addresses according to the order of the BMC IPs, such that the IP addresses that correspond to adjacent BMC IPs are consecutive; and after the IP addresses are configured, sending an addition message to said computing nodes, receiving addition response messages, and adding said computing nodes to a data center that is managed by a management node.

Abstract: The innovation disclosed and claimed herein, in one aspect thereof, comprises systems and methods of determining network segmentation. The innovation can search a network to determine a set of network entities, the network entities belonging to the network, and determine network factors of each network entity in the set of network entities. The innovation can evaluate each network factor and determine segmentation candidates based on the evaluation of each network factor. The innovation can determine a risk ranking for each network factor for each network entity and aggregate each risk ranking into a segmentation score for each network entity. The innovation can determine a segmentation candidate when a network entity segmentation score satisfies a threshold score. The innovation can generate a sub-network that is part of the network for the segmentation candidate, and transfer the segmentation candidate to the sub-network.

Abstract: A network data analytics method and apparatus are provided. The method includes receiving, by a network repository function network element, a first message from a first device, where the first message is used to discover a network data analytics function network element, and the first message carries a first analytics identifier and first analytics filtering information.

Abstract: A congestion control method and an apparatus are disclosed. The method includes: after a sending device generates an unscheduled data packet of a first flow, if it is determined, based on an unscheduled packet send window shared by all flows, that the unscheduled data packet meets a sending condition, determining whether to request to add a quota for at least one of the unscheduled packet send window and a scheduled packet send window corresponding to the first flow; and if it is determined that the quota is requested to be added for the at least one of the unscheduled packet send window and the scheduled packet send window corresponding to the first flow, setting indication information in the unscheduled data packet, and sending, to a receiving device, the unscheduled data packet in which the indication information is set.

Abstract: A system and method for multi-channel network congestion control. A method includes establishing multi-channel control over a plurality of communication channels by connecting each of the plurality of communication channels to a scheduling component and to a synchronizing component; determining a packet routing scheme for a plurality of packets of a data stream based on feedback from each of the plurality of communication channels, wherein the packet routing scheme includes a routing of each packet to a respective communication channel of the plurality of communication channels; and sending the plurality of packets via their respective communication channels, wherein each of the sent packets includes timing data, wherein the synchronizing component is configured to synchronize the plurality of packets based on the timing data of each packet and to reconstruct the data stream using the synchronized packets.

Abstract: Embodiments of this application provide a method for subscribing to event streams. The method includes: A first device generates a first message used to subscribe to event streams, where the first message includes a group identifier, and the group identifier corresponds to a plurality of event streams; and the first device sends the first message to a second device, to obtain data of the plurality of event streams corresponding to the group identifier.

Abstract: Techniques for using trace with tunnels and cloud-based systems for determining measures of network performance are presented. In an embodiment, a method includes determining a client application is being executed; determining an endpoint associated with the client application, based on any of monitoring application logs associated with the client application and network flows associated with the client application; and causing one or more probes to the determined endpoint and deriving metrics based on the one or more probes for determining performance of the client application.

Abstract: This application provides a packet verification method, and the method includes: A first network device receives a BIER packet, where packet header information of the BIER packet includes a first keyed-hash message authentication code HMAC, and the first HMAC is used to verify whether the BIER packet is a valid BIER packet; determines a second HMAC based on a first key and first information in the packet header information, where the first information is used to indicate forwarding information of the BIER packet; determines whether the first HMAC is the same as the second HMAC; and when determining that the first HMAC is different from the second HMAC, determines that the BIER packet is an invalid BIER packet.