Abstract: A system for processing data, comprising a compute node having a first processor that is configured to receive a digital data message containing a request for computing services and to allocate processing resources on a private network as a function of the request. A smart network interface controller (NIC) management system operating on a second processor and configured to cause the second processor to select a smart NIC associated with the private network to allocate the smart NIC to the computing services. The smart NIC includes a processor that is configured to interface with a public network and to send and receive data over the public network associated with the computing services.

Abstract: Techniques are provided for microservices management and orchestration. A chart package is selectively retrieved from a chart repository based upon the chart package corresponding to a set of services to host within a cluster and dependencies amongst the set of services. A set of container images may be retrieved from a container repository based upon the set of container images corresponding to the set of services. A cluster may be created within a computing environment. The set of services may be deployed as resources of the computing environment within the cluster and the dependencies may be configured using the chart package and the set of container images.

Abstract: The current document is directed to improved distributed service-oriented applications developed according to a new and improved architecture for developing distributed service-oriented applications. The new and improved architecture includes a stateless-communications-protocol interface to external users and clients, services implemented by actors that communicate using message passing, and a distributed data grid for persistent storage of data. Distributed service-oriented applications developed according to the new and improved architecture are referred to as “RAD-squared applications” (“RAD{circumflex over (?)}2 applications”). The acronym “RAD{circumflex over (?)}2” stands for “Rapid Application Development with REST-actor-data-grid” and the acronym “REST” stands for the Representational State Transfer (“REST”) protocol. Alternative stateless communications protocols can be used as alternatives to REST in RAD{circumflex over (?)}2 applications.

Abstract: A first forwarding VM may execute in a first availability zone and have a first IP address. Similarly, a second forwarding VM may execute in a second availability zone and have a second IP address. The first and second IP addresses may be recorded with a cloud DNS web service of a cloud provider such that both receive requests from applications directed to a particular DNS name acting as a single endpoint. A service cluster may include a master VM node and a standby VM node. An IPtable in each forwarding VM may forward a request having a port value to a cluster port value associated with the master VM node. Upon a failure of the master VM node, the current standby VM node may be promoted to execute in master mode and the IPtables may be updated to now forward requests having the port value to a cluster port value associated with the newly promoted master VM node (which was previously the standby VM node).

Abstract: A system, method and computer program product for protecting a deep neural network image classifier against receiving perturbed images. A plurality of watermark bits are embedded into an original digital image intended for the deep neural network image classifier. The watermarked image is transmitted through a potentially adversarial environment. A potentially perturbed image intended for the deep neural network image classifier is received from the potentially adversarial environment. The potentially perturbed image is determined to be an adversely modified or benign image by determining whether the potentially perturbed image includes a plurality of embedded bits matching the plurality of watermark bits embedded into the original digital image. The potentially perturbed image is prevented from being provided to the deep neural network image classifier in response to determining that the potentially perturbed image is the adversely modified image.

Abstract: Secure sharing of a document on a co-browse session is implemented by causing a JavaScript implemented document viewer to create HTML5 description of a rendered view of a document's content, and transmitting the HTML5 description of the rendered view of the document content as a DOM elements on the co-browse session. The rendered view of the document is overlayed on the web page being co-browsed, which enables the participants to the co-browse session to collaboratively view the rendered view of the document. However, since the document itself only resides in the visitor's browser, the document itself is not transmitted on the co-browse session. Media URLs can also be shared, and the participants' views of the audio/video media is synchronized by causing the video to play locally at each participant but synchronized with the visitor. Live video of the participants to the co-browse session is also implemented.

Abstract: A method of operating the physically unclonable function (PUF)-based key management system includes upon receiving a key generation request including a parameter, a load balancer dispatching a key generation request including a parameter from an external device according to workloads of a plurality of key management components (KMCs). A KMC having minimum workload among the plurality of KMCs is designated as the key-generation KMC and the key generation request is dispatched thereto, and remaining KMCs of the plurality of KMCs are designated as backup KMCs. The method further includes the key-generation KMC generating a key according to the parameter and a first PUF sequence, transmitting the key and an identifier associated therewith to the backup KMC via a backup channel, and the backup KMC generating a wrapped key according to the key and a second PUF sequence.

Abstract: In one embodiment, a computing system executes an application defining a bound variable that references a bound value. The bound value references computation instructions to derive a corresponding current value of the bound variable and the application lacks access permission to the current value of the bound variable. An operating system of the computing system receives a request to perform an operation that references the bound variable. The operating system identifies, based on computation instructions, one or more services separate from a process running the application to process the computation instructions referenced by the bound value. At least one of the one or more services has access permission to the current value of the bound variable. The operating system computes, using the one or more identified services, the current value of the bound variable according to the computation instructions of the bound value.

Abstract: The systems and methods described herein relate to providing review content which is verifiable in a public blockchain network. The system receives an identity verification for a user of a review engine, then assigns a unique pseudonymous identity to the user based on the identity verification. Next, the system receives an identity verification for a provider on the review engine, and generates an authentication token unique to the provider to be displayed on a user client device associated with the user of the review engine. In response to the user capturing the authentication token via the client device, the system generates a review-in-progress to be displayed on the client device. Upon receiving a completed review from the user, the system records hashed data associated with the review into a transaction record on a public blockchain network, such that the transaction record can be publicly audited on the public blockchain network.

Abstract: A distributed cloud computing system is statistics logic a controller configured to deploy a first gateway in a spoke virtual private cloud network (VPC) and a second gateway in a transit VPC, wherein the second gateway is configured to connect to a first firewall instance deployed within the transit VPC. The spoke VPC and the transit VPC are both located within a cloud computing network. The logic, upon execution by one or more processors, causes performance of operations including receiving network traffic by the second gateway from the first gateway, providing the network traffic to the first firewall instance for inspection, and routing the network traffic to a destination VPC deployed within the cloud computing network. In some embodiments, the first gateway is attached to a first interface of the second gateway and the first firewall instance is connected to a second interface.

Abstract: Machine learning automatic pipeline management for automated software deployment is described. An adjustment to computing capacity for a region of a multi-region computing network is identified. A service to be deployed in the region of the multi-region computing network is further identified. Configuration settings for deployment of the service in the region is generated using past deployment data for the service in other regions of the multi-region computing network. A continuous code delivery service is directed to add a stage to a software deployment pipeline for the region. The stage may be configured using the at least one configuration setting.

Abstract: A cloud-based method and system for autonomously providing collaborative communication events to one or more users of client devices. The method and system are configured to analyze an active user communication for the purposes of determining, predicting, presenting, and/or triggering collaboration opportunities (e.g., later communication sessions or events) automatically or for manual selection by the active user. The analysis is performed in the context of a specific user communication and is completed with support from cloud-based communication services, data, and workflows.

Abstract: Examples described herein generally relate to hosting kernel isolated containers within a virtual machine. A server includes a physical processor and a physical computer memory storing executable code, the executable code providing a host virtual machine including a kernel and at least one kernel isolated container within the host virtual machine. The server includes a physical network interface controller, NIC, including a first physical NIC switch and a second physical NIC switch. The first physical NIC switch is configured to distribute incoming data packets to a first plurality of functions including a physical function and virtual functions. At least one of the virtual functions is assigned to the host virtual machine. The second physical NIC switch is configured to distribute the incoming data packets for the host virtual machine to a second plurality of virtual functions including a respective virtual function assigned to an individual kernel isolated container.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer-storage media, for connecting processors using twisted torus configurations. In some implementations, a cluster of processing nodes is coupled using a reconfigurable interconnect fabric. The system determines a number of processing nodes to allocate as a network within the cluster and a topology for the network. The system selects an interconnection scheme for the network, where the interconnection scheme is selected from a group that includes at least a torus interconnection scheme and a twisted torus interconnection scheme. The system allocates the determined number of processing nodes of the cluster in the determined topology, sets the reconfigurable interconnect fabric to provide the selected interconnection scheme for the processing nodes in the network, and provides access to the network for performing a computing task.

Abstract: A system and method for enabling software engine virtualization and dynamic resource and task distribution across edge and cloud, comprising at least one cloud server comprising memory and at least one processor, the at least one cloud server hosting at least one cloud engine configured to store and process application data from one or more applications; one or more client devices connected to the cloud server via a network, the one or more client devices hosting at least one local engine configured to store and process application data from the one or more applications and to provide output to users; and a virtual engine hosted across edge and cloud configured to virtualize, via a virtualization logic component, one or more system network components, applications, and engine components, creating a virtual layer connected to the one or more client devices and cloud server via the network.

Abstract: Systems and methods to remotely store and provide telecast programs are provided. The method includes storing an exclusive first transcoded copy of a program in a first configuration for a first user along with multiple shared transcoded copies in respective multiple configurations. The method includes receiving a request from the first user to view the program, streaming the first transcoded copy, determining based on one or more criteria whether the first transcoded copy is supported, and continuing to stream the first transcoded copy or switching to a second transcoded copy from the multiple transcoded copies based on the criteria.

Abstract: A computer-implemented method for accessing user resources in a virtual private cloud (VPC) using a serverless function within a network architecture includes instantiating a first warm application container for hosting the serverless function. The first warm application container includes a runtime language library without function code of the serverless function. A virtual machine for hosting a Port Address Translation (PAT) gateway is instantiated. The PAT gateway includes a first interface to the VPC and a second interface to the first warm application container. In response to detecting a trigger event for triggering the serverless function, the function code of the serverless function is mounted within the first warm application container. During execution of the function code from the first warm application container, VPC-addressed network packets associated with the serverless function are routed to the VPC via the second interface and the first interface within the PAT gateway.

Abstract: There is provided an apparatus, said apparatus comprising means for determining, at a first core network entity, an indication of domains supported on a data network, determining domain name system configuration information based at least on the indication of domains supported on the data network and providing the domain name system configuration information to a second core network entity.

Abstract: In an example embodiment, a solution is provided that reduces downtime during operating system patching. This reduces the downtime, regardless of which activity is being performed, and is platform-agnostic. More specifically, a target image for the operating system is obtained. During a preparation phase, a virtual machine with the target image is deployed. This virtual machine is deemed a reference virtual machine. A backup of the reference virtual machine bootable root disk is then taken, and a reference root block device is updated with a customer virtual machine operating system/application/database configuration files and folders. These customer-specific configuration files are then copied from block devices of the customer virtual machine to the reference virtual machine. The reference virtual machine can then be powered on. Only then is the customer virtual machine shut down, and the reference virtual machine swapped in for the customer virtual machine, minimizing the downtime during this period.

Abstract: Methods and systems for user communication in an online community and/or website are provided. User profile data may be accessed to from a memory. An analysis system compares the user profile data for the user with a time-dependent goal to determine a result. The time-dependent goal may be determined based on an analysis of a set of (successful) users. A user interface system generates a representation of the result for prompting the user to initiate a communication to a different user based on the time-dependent goal. The representation may comprise a metered representation indicating an amount of progress, by the user, toward the time-dependent goal.