Abstract: Approaches, techniques, and mechanisms are disclosed for accessing AI services from one region to another region. An artificial intelligence (AI) service director is configured with mappings from domain names of AI cloud engines to IP addresses of edge nodes of an AI delivery edge network. The AI cloud engines are located in an AI source region. The AI delivery edge network is deployed in a non-AI-source region. An AI application, which accesses AI services using a domain name of an AI cloud engine in the AI cloud engines located in the AI source region, is redirected to an edge node in the edge nodes of the AI delivery edge network located in the non-AI-source region. The AI application is hosted in the non-AI-source region. The AI services is then provided, by way of the edge node located in the non-AI-source region, to the AI application.

Abstract: Provided is a connected gateway server system for real-time vehicle control service that includes a vehicle terminal mounted on at least one vehicle; a gateway server relaying communication with the vehicle terminal; a connected gateway server for controlling a vehicle and acquiring a vehicle information in the form of REST API for each user through communication with the vehicle terminal, delivering a control command, a response information, and the vehicle information to the user's platform that has been validated as an API form, storing a terminal connection state information, an API authentication information, the vehicle information, and a user information, and performing a confirmation of update state and an update request of vehicle terminal; and an user platform for verifying validity in an API token manner through communication with the connected gateway server, fetching a necessary vehicle information in the API form or issuing the control command of vehicle.

Abstract: Systems, devices, media, and methods are presented for splitting decision trees between server and client. The client of the systems and methods sends a configuration query. The server of the system and method receives the configuration query. The server retrieves Config rule(s) according to the configuration query. Each of the Config rule(s) can be represented by decision tree(s). The server evaluates the decision tree(s). If a definitive True or False cannot be derived from the evaluation using server knowledge, the server prunes the decision tree(s) and returns them to client side for further evaluation.

Abstract: The present approach relates to querying a configuration item (CI). The CI may be associated with a monitoring agent. In accordance with this approach, a check request is sent to a management, instrumentation, and discovery (MID) server. The check request may be sent to the monitoring agent. Additionally, a check result may be received from the monitoring agent. The check result may have data associated with the CI and the check request.

Abstract: In one embodiment, an edge compute node comprises processing circuitry to: receive an incoming video stream captured by a camera, wherein the incoming video stream comprises a plurality of video segments; store the plurality of video segments in a receive buffer in a memory; perform a visual computing task on a first video segment in the receive buffer; detect a resource overload on the edge compute node; receive load information corresponding to a plurality of peer compute nodes; select a peer compute node to perform the visual computing task on a second video segment in the receive buffer; replicate the second video segment from the edge compute node to the peer compute node; and receive a compute result from the peer compute node, wherein the compute result is based on the peer compute node performing the visual computing task on the second video segment.

Abstract: The present disclosure is directed to systems and methods for detecting side-channel exploit attacks such as Spectre and Meltdown. Performance monitoring circuitry includes first counter circuitry to monitor CPU cache misses and second counter circuitry to monitor DTLB load misses. Upon detecting an excessive number of cache misses and/or load misses, the performance monitoring circuitry transfers the first and second counter circuitry data to control circuitry. The control circuitry determines a CPU cache miss to DTLB load miss ratio for each of a plurality of temporal intervals. The control circuitry the identifies, determines, and/or detects a pattern or trend in the CPU cache miss to DTLB load miss ratio. Upon detecting a deviation from the identified CPU cache miss to DTLB load miss ratio pattern or trend indicative of a potential side-channel exploit attack, the control circuitry generates an output to alert a system user or system administrator.

Abstract: A technique to stop lateral movement of ransomware between endpoints in a VLAN is disclosed. A security appliance is set as the default gateway for intra-LAN communication by overwriting the DHCP responses. Message traffic from compromised endpoints is detected. Attributes of ransomware may be detected in the message traffic, as well as attempts to circumvent the security appliance. Compromised devices may be quarantined. The security appliance may act in response to an initial detection of ransomware such that it does not ordinarily interfere with operation of a primary DHCP server.

Abstract: Systems, methods, and apparatuses enable a machine learning model to determine a risk probability of a URL. A query configurator receives a URL in a query and normalizes the URL. The normalized URL is segmented into a plurality of segments. The plurality of segments is serially provided to the machine learning model trained to provide an indication of risk associated with the URL. The indication of risk associated with the URL can be a probability value based on one or more risk probabilities determined for segment-segment transitions of the URL. A security service compares the probability value of the URL to a threshold value and performs a security action based on a result of comparing the probability value to the threshold value.

Abstract: An external processing system includes a port to exchange signals with a router. The external processing system also includes a processor to receive, from the router via the port, information representing an operating system and a hypervisor in response to the external processing system being connected to the router via the port. The processor instantiates the operating system and the hypervisor based on the received information. The router includes a port allocated to an external processing system and configured to exchange signals with the external processing system. The router also includes a controller to provide, to the external processing system via the port, information representing the operating system and the hypervisor in response to the external processing system being connected to the external processing system via the port.

Abstract: A mechanism is described for facilitating localized load-balancing for processors in computing devices. A method of embodiments, as described herein, includes facilitating hosting, at a processor of a computing device, a local load-balancing mechanism. The method may further include monitoring balancing of loads at the processor and serving as a local scheduler to maintain de-centralized load-balancing at the processor and between the processor and other one or more processors.

Abstract: Systems, devices and methods are provided for blockchain driven embedded video and digital signatures on signed documents. The present disclosure includes providing a video conference initiated with the process of signing a document. The video conference and the signing process and the video are recorded. The recorded video captures all conversations, understanding and the final signing by participants. Both the signature and the recorded signing event in video conference are stored with a hash value as a blockchain.

Abstract: There are provided systems and methods for a database synchronization system in high security zones using blockchain. A service provider, such as an electronic payment provider, may maintain data stores across different zones that may need to synchronize data across these zones. As such, the subject technology provides for data storage using interplanetary file system (IPFS) technology in compliment with blockchain technology to create a secure, scalable and reliable data synchronization system. The IPFS may be implemented as a data storage layer and the blockchain may be implemented as a transaction management system, where the IPFS address of data files and synchronization points are stored in a distributed ledger. In various aspects, the integration of the IPFS network with the fabric network can enhance IPFS with the fabric network to create a more secure file sharing platform to improve the transfer of data and database synchronization between different zones.

Abstract: [Issue] In the cloud server, data is distributed to multiple devices such as data storage devices, data processing devices, and communication devices. Therefore, in order to protect data from unauthorized access, security measures are applied to all of them, which need to be constantly updated. Moreover, this security management depends on the operators of the respective devices, and even if each operator completely performs, it is not possible to predict when a new attack method will be devised, leaving users with a constant data-leakage-related anxiety. [Methods to solve the Issue] The present invention moves confidential data stored in a cloud server on the Internet to a data storage device of an intranet connected via a firewall, and links the ID of the confidential data and the confidential data. It is thus characterized by not placing confidential data on the internet.

Abstract: Methods and systems for transmitting data are disclosed. In one embodiment a portable electronic device comprises a processor-implemented user interface module to cause the presentation of a first information field to a user as part of a graphical user interface in the portable electronic device, and to receive information entered or data identification in the first information field. A data transmitting module commences transmitting the information entered or the data identified over a network in response to the user interface module detecting that the user has navigated away from the first information field.

Abstract: Methods, systems, and apparatuses, including computer programs encoded on computer-readable media, for receiving a first communication as part of a conversation, from an unauthenticated user of a web browser. A conversation identifier is determined based on the first communication. A first responder, a communication protocol, and a communication address of the first responder is determined. The first communication is sent to the first responder and a first reply is received. The conversation identifier is determined based on the first reply and the first reply is mapped to the web browser. The first reply is sent to the web browser.

Abstract: Systems and methods may be provided to monitor media content on a monitored media device, including multimedia content, to determine whether the content is appropriate for the monitored device or devices, and to take action to remove, filter or otherwise block inappropriate content. The content monitored may include, for example, content such as audio content, video content, images, and text.

Abstract: A Network Function Virtualization (NFV) Software Defined Network (SDN) controls NFV resources consumed by Virtual Network Functions (VNFs). An NFV Infrastructure (NFVI) executes SDN application VNFs, SDN controller VNFs, and SDN data-machine VNFs. The NFVI responsively transfers SDN Key Performance Indicators (KPIs). A VNF control system processes the KPIs to generate and transfer NFV control data to lighten one of the SDN VNFs. The NFVI lightens the one SDN VNF responsive to the NFV control data by increasing access to NFVI hardware for the one SDN VNF.

Abstract: Methods, systems, and apparatuses, including computer programs encoded on computer-readable media, for receiving a first communication as part of a conversation, from an unauthenticated user of a web browser. A conversation identifier is determined based on the first communication. A first responder, a communication protocol, and a communication address of the first responder is determined. The first communication is sent to the first responder and a first reply is received. The conversation identifier is determined based on the first reply and the first reply is mapped to the web browser. The first reply is sent to the web browser.

Abstract: Embodiments of the present disclosure provide methods and systems that configured to, generally, and in no particular order, perform one or more of the following functions: distinguish and identify secured assets that are permitted to an end-point to employ within a shared computing environment; monitor the end-point for certain triggering events, such as data creation, reception, manipulation, storage, or extraction associated with a secured asset; upon detection of a triggering event, monitor at least one unsecured container in order to determine if at least a portion of the secured asset has been otherwise transferred to an unsecured container; and encrypt the unsecured container in order to secure the otherwise unsecured asset.

Abstract: According to one embodiment of the present invention, a method for receiving content at an electronic device may include: receiving content including at least one object from a web server; in response to the object being selected, acquiring, from the object, device information indicating at least one first device related the object and device control information including a first command for operating the at least one first device; and transmitting the first command to the at least one first device. In addition, other examples are also possible.