Abstract: A system, method and computer program product for protecting a deep neural network image classifier against receiving perturbed images. A plurality of watermark bits are embedded into an original digital image intended for the deep neural network image classifier. The watermarked image is transmitted through a potentially adversarial environment. A potentially perturbed image intended for the deep neural network image classifier is received from the potentially adversarial environment. The potentially perturbed image is determined to be an adversely modified or benign image by determining whether the potentially perturbed image includes a plurality of embedded bits matching the plurality of watermark bits embedded into the original digital image. The potentially perturbed image is prevented from being provided to the deep neural network image classifier in response to determining that the potentially perturbed image is the adversely modified image.

Abstract: Secure sharing of a document on a co-browse session is implemented by causing a JavaScript implemented document viewer to create HTML5 description of a rendered view of a document's content, and transmitting the HTML5 description of the rendered view of the document content as a DOM elements on the co-browse session. The rendered view of the document is overlayed on the web page being co-browsed, which enables the participants to the co-browse session to collaboratively view the rendered view of the document. However, since the document itself only resides in the visitor's browser, the document itself is not transmitted on the co-browse session. Media URLs can also be shared, and the participants' views of the audio/video media is synchronized by causing the video to play locally at each participant but synchronized with the visitor. Live video of the participants to the co-browse session is also implemented.

Abstract: A method of operating the physically unclonable function (PUF)-based key management system includes upon receiving a key generation request including a parameter, a load balancer dispatching a key generation request including a parameter from an external device according to workloads of a plurality of key management components (KMCs). A KMC having minimum workload among the plurality of KMCs is designated as the key-generation KMC and the key generation request is dispatched thereto, and remaining KMCs of the plurality of KMCs are designated as backup KMCs. The method further includes the key-generation KMC generating a key according to the parameter and a first PUF sequence, transmitting the key and an identifier associated therewith to the backup KMC via a backup channel, and the backup KMC generating a wrapped key according to the key and a second PUF sequence.

Abstract: In one embodiment, a computing system executes an application defining a bound variable that references a bound value. The bound value references computation instructions to derive a corresponding current value of the bound variable and the application lacks access permission to the current value of the bound variable. An operating system of the computing system receives a request to perform an operation that references the bound variable. The operating system identifies, based on computation instructions, one or more services separate from a process running the application to process the computation instructions referenced by the bound value. At least one of the one or more services has access permission to the current value of the bound variable. The operating system computes, using the one or more identified services, the current value of the bound variable according to the computation instructions of the bound value.

Abstract: The systems and methods described herein relate to providing review content which is verifiable in a public blockchain network. The system receives an identity verification for a user of a review engine, then assigns a unique pseudonymous identity to the user based on the identity verification. Next, the system receives an identity verification for a provider on the review engine, and generates an authentication token unique to the provider to be displayed on a user client device associated with the user of the review engine. In response to the user capturing the authentication token via the client device, the system generates a review-in-progress to be displayed on the client device. Upon receiving a completed review from the user, the system records hashed data associated with the review into a transaction record on a public blockchain network, such that the transaction record can be publicly audited on the public blockchain network.

Abstract: A distributed cloud computing system is statistics logic a controller configured to deploy a first gateway in a spoke virtual private cloud network (VPC) and a second gateway in a transit VPC, wherein the second gateway is configured to connect to a first firewall instance deployed within the transit VPC. The spoke VPC and the transit VPC are both located within a cloud computing network. The logic, upon execution by one or more processors, causes performance of operations including receiving network traffic by the second gateway from the first gateway, providing the network traffic to the first firewall instance for inspection, and routing the network traffic to a destination VPC deployed within the cloud computing network. In some embodiments, the first gateway is attached to a first interface of the second gateway and the first firewall instance is connected to a second interface.

Abstract: Machine learning automatic pipeline management for automated software deployment is described. An adjustment to computing capacity for a region of a multi-region computing network is identified. A service to be deployed in the region of the multi-region computing network is further identified. Configuration settings for deployment of the service in the region is generated using past deployment data for the service in other regions of the multi-region computing network. A continuous code delivery service is directed to add a stage to a software deployment pipeline for the region. The stage may be configured using the at least one configuration setting.

Abstract: A cloud-based method and system for autonomously providing collaborative communication events to one or more users of client devices. The method and system are configured to analyze an active user communication for the purposes of determining, predicting, presenting, and/or triggering collaboration opportunities (e.g., later communication sessions or events) automatically or for manual selection by the active user. The analysis is performed in the context of a specific user communication and is completed with support from cloud-based communication services, data, and workflows.

Abstract: Examples described herein generally relate to hosting kernel isolated containers within a virtual machine. A server includes a physical processor and a physical computer memory storing executable code, the executable code providing a host virtual machine including a kernel and at least one kernel isolated container within the host virtual machine. The server includes a physical network interface controller, NIC, including a first physical NIC switch and a second physical NIC switch. The first physical NIC switch is configured to distribute incoming data packets to a first plurality of functions including a physical function and virtual functions. At least one of the virtual functions is assigned to the host virtual machine. The second physical NIC switch is configured to distribute the incoming data packets for the host virtual machine to a second plurality of virtual functions including a respective virtual function assigned to an individual kernel isolated container.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer-storage media, for connecting processors using twisted torus configurations. In some implementations, a cluster of processing nodes is coupled using a reconfigurable interconnect fabric. The system determines a number of processing nodes to allocate as a network within the cluster and a topology for the network. The system selects an interconnection scheme for the network, where the interconnection scheme is selected from a group that includes at least a torus interconnection scheme and a twisted torus interconnection scheme. The system allocates the determined number of processing nodes of the cluster in the determined topology, sets the reconfigurable interconnect fabric to provide the selected interconnection scheme for the processing nodes in the network, and provides access to the network for performing a computing task.

Abstract: A system and method for enabling software engine virtualization and dynamic resource and task distribution across edge and cloud, comprising at least one cloud server comprising memory and at least one processor, the at least one cloud server hosting at least one cloud engine configured to store and process application data from one or more applications; one or more client devices connected to the cloud server via a network, the one or more client devices hosting at least one local engine configured to store and process application data from the one or more applications and to provide output to users; and a virtual engine hosted across edge and cloud configured to virtualize, via a virtualization logic component, one or more system network components, applications, and engine components, creating a virtual layer connected to the one or more client devices and cloud server via the network.

Abstract: Systems and methods to remotely store and provide telecast programs are provided. The method includes storing an exclusive first transcoded copy of a program in a first configuration for a first user along with multiple shared transcoded copies in respective multiple configurations. The method includes receiving a request from the first user to view the program, streaming the first transcoded copy, determining based on one or more criteria whether the first transcoded copy is supported, and continuing to stream the first transcoded copy or switching to a second transcoded copy from the multiple transcoded copies based on the criteria.

Abstract: A computer-implemented method for accessing user resources in a virtual private cloud (VPC) using a serverless function within a network architecture includes instantiating a first warm application container for hosting the serverless function. The first warm application container includes a runtime language library without function code of the serverless function. A virtual machine for hosting a Port Address Translation (PAT) gateway is instantiated. The PAT gateway includes a first interface to the VPC and a second interface to the first warm application container. In response to detecting a trigger event for triggering the serverless function, the function code of the serverless function is mounted within the first warm application container. During execution of the function code from the first warm application container, VPC-addressed network packets associated with the serverless function are routed to the VPC via the second interface and the first interface within the PAT gateway.

Abstract: There is provided an apparatus, said apparatus comprising means for determining, at a first core network entity, an indication of domains supported on a data network, determining domain name system configuration information based at least on the indication of domains supported on the data network and providing the domain name system configuration information to a second core network entity.

Abstract: In an example embodiment, a solution is provided that reduces downtime during operating system patching. This reduces the downtime, regardless of which activity is being performed, and is platform-agnostic. More specifically, a target image for the operating system is obtained. During a preparation phase, a virtual machine with the target image is deployed. This virtual machine is deemed a reference virtual machine. A backup of the reference virtual machine bootable root disk is then taken, and a reference root block device is updated with a customer virtual machine operating system/application/database configuration files and folders. These customer-specific configuration files are then copied from block devices of the customer virtual machine to the reference virtual machine. The reference virtual machine can then be powered on. Only then is the customer virtual machine shut down, and the reference virtual machine swapped in for the customer virtual machine, minimizing the downtime during this period.

Abstract: Methods and systems for user communication in an online community and/or website are provided. User profile data may be accessed to from a memory. An analysis system compares the user profile data for the user with a time-dependent goal to determine a result. The time-dependent goal may be determined based on an analysis of a set of (successful) users. A user interface system generates a representation of the result for prompting the user to initiate a communication to a different user based on the time-dependent goal. The representation may comprise a metered representation indicating an amount of progress, by the user, toward the time-dependent goal.

Abstract: A computer-implemented method includes receiving a selection of an information technology service; initializing a machine avatar; establishing a network tunnel; and receiving network traffic. A computing system comprising: one or more processors; and memory storing instructions that, when executed by the one or more processors, cause the computing system to: receive a selection of an information technology service; initialize a machine avatar; establish a network tunnel; and receive network traffic. A non-transitory computer readable medium containing program instructions that when executed, cause a computer to: receive a selection of an information technology service; initialize a machine avatar; establish a network tunnel; and receive network traffic.

Abstract: Disclosed herein are systems and methods for transmitting a message reaction captured in a recording. A method includes determining that a message has been sent to a first computing device of a first user from a second computing device; in response to determining that the first user provided consent for a recording of the first user during output of the message on the first computing device, retrieving the recording of the first user, wherein the recording is indicative of a reaction of the first user to the message, and wherein receiving the consent enables instructing of a camera on board the first computing device to capture the recording when the message is output on the first computing device and to stop capturing the recording immediately after the output of the message has ended; and transmitting the recording to the second computing device.

Abstract: Systems and methods are disclosed for parallelizing service function chains.

Abstract: Embodiments of the present invention provide a method for sharing an application between terminals. The method includes: generating, by a first terminal according to an application that has been installed, a shared application installation package of the application; sending, by the first terminal, the shared application installation package to a second terminal; determining, by the first terminal, shared data of the application that has been installed, where the shared data is data that is from an application server and required for the application to run; and sending, by the first terminal, the shared data to the second terminal. In the embodiments of the present invention, when sharing an application, two terminals not only share an installation package of the application, but also share shared data of the application.