Abstract: The invention provides methods, systems and computer program products for job management and for allocating resources for cloud based or remote device based job processing. The invention provides a scalable architecture for job management and for allocating resources for cloud based or remote device based job processing comprising a job manager machine, having a resource pool of secondary job manager machines assigned thereto. The job manager machine has a resource pool of computing machines assigned thereto—comprising at least a gateway machine and a non-gateway machine. Received jobs or computing tasks are selectively transmitted to one of the gateway machine and the non-gateway machine. Each of the gateway machine and the non-gateway machine are configured to respond differently to forwarded job or computing task.

Abstract: A photographing device, its control method, and a movable platform can include: acquiring a real-time video frame; duplicating the real-time video frame to obtain two real-time video frames; outputting one of the two real-time video frames for display and perform a stability augmentation processing on the other of the two real-time video frames; and saving the stability augmentation processed real-time video frame.

Abstract: In accordance with an embodiment, described herein are systems and methods for use with a microservices or other computing environment, including a web server together with related libraries and features usable to build cloud-native applications or services. The system provides, by means of a header enumeration, an abstraction that allows message headers to be treated as objects, accessible via an application program interface that supports multiple communication protocols and allows clients and servers to communicate request/response messages using any of the supported protocols. When a request message with a known header type is encountered, the system can obtain an indexed value from the enumeration, if available, and provide the associated data directly to the process to which the request is directed, and/or cache the header value for later use.

Abstract: Disclosed communication flow modeling solution is significantly streamlined in a user friendly way to shield users from the technical complexities usually required. At design time, an orchestration flow modeling application receives user instruction to open or create a communication flow modeling project. Per configuration specific to an enterprise associated with the user, a custom drag-and-drop communication flow modeling environment with a canvas and modeling entities is provided. Responsive to the user dragging and dropping a set of modeling entities from the menu onto the communication flow modeling canvas and drawing connections between them, the orchestration flow modeling application logically connects the modeling entities to form a valid communication flow and stores it in a database. The communication flow undergoes an approval process. Once approved, it is activated for execution by an orchestration server.

Abstract: Method and system are provided for scoring events as likely cause events in a resource network. The method processes incoming events relating to resources in a resource network to correlate related events as a related group and maps the events of the related group onto nodes of a sub-topology representing resources of the resource network and having edges representing relationships between the resources. The method scores each event by discovering one or more paths between the node event and other node events of the related group, with the scoring based on a combination of an event classification weight and a discovered path score of aggregated relationship scores of edges of a discovered path.

Abstract: Techniques for redirecting a client device from a server to a mini-server are disclosed herein. Initially, the client device establishes a connection with the server. The server provides a landing page to the client device, where the landing page is programmed to include an element that, when selected, redirects the client device away from its connection with the server. In response to a selection of the element, the client device establishes a connection with the mini-server. The mini-server is part of a first local area network (LAN), and, as a result of switching networks, the client device is now a part of a second LAN. The two LANs are connected to one another via a network bridge. The mini-server is able to receive input from the client device and synchronize that input across other mini-servers in the first LAN in order to redundantly store the input.

Abstract: A monitoring unit for security and automation in a premises are described. The monitoring unit uses remote configuration and control to enable monitoring of a premises. The monitoring unit provides multiple monitoring functions to respond to events within the space and alert a user at a remote device like a smartphone. An image sensor provides a wide field of view which can be segmented on the mobile device to enable specific areas to be viewed enabling the user to view the area and be alerted when an event occurs based upon a rules based configuration.

Abstract: An apparatus may be a UE configured to receive, from a network entity associated with a machine learning procedure, a first indication that a first set of data elements transmitted by the wireless device at a first time is categorized as misinformation and that, based on the categorization of the first set of data elements as misinformation, the network entity will temporarily exclude data from the wireless device from propagation as input for a subsequent machine learning procedure. The apparatus may further be configured to receive a second indication of a set of criteria for requesting a reevaluation of the categorization and transmit, based on meeting one or more criteria in the set of criteria, a second set of data elements to the network entity at a second time.

Abstract: A method for media content streaming includes: receiving a command to start playback of a first media content item, wherein a first portion of the first media content item has been transcoded to generate at least one passive adaptive streamlet, and the first portion of the first media content item starts at a playback position and ends at an optimal transition point; outputting, by a content streaming device, one of the at least one passive adaptive streamlet; while outputting the one of the at least one passive adaptive streamlet, requesting, receiving, and transcoding a second portion of the first media content item to generate an active adaptive streamlet of the first media content item, wherein the active adaptive streamlet starts at the optimal transition point of the first media content item; and immediately following outputting the one of the at least one passive adaptive streamlet, outputting the active adaptive streamlet of the first media content item.

Abstract: Methods, apparatus, and processor-readable storage media for securely executing microservices are described herein. An example computer-implemented method includes: generating a session identifier for a request associated with executing one or more microservices in a microservice architecture; identifying an execution plan for the request based at least in part on a plan identifier specified for a first one of the microservices, wherein the execution plan indicates a specified order for executing the microservices for the request; maintaining a set of chained data structures to track an execution order of the microservices based on the session identifier; detecting, based at least in part on the set of chained data structures, that the execution order of the identified execution plan does not match the specified order for at least a given one of the of the one or more microservices; and in response to the detecting, preventing at least the given microservice from being executed.

Abstract: Disclosed are systems and methods for leader node election, comprising a cluster system including a plurality of nodes, a node registry, wherein nodes are configured to transmit registration requests to the node registry, receive node data is response, and to determine a leader node based on the earliest registered node, and wherein the leader node is configured to dynamically allocate data slots between the plurality of nodes, and each of the nodes are configured to store data associated with allocated data slots in an in-memory least recently used component and data associated with all of the data slots in a persistent storage component.

Abstract: Methods for reducing storage demands at a centralized database and for reducing probability of a security breach such as an interception attack and a man-in-the-middle attack. Methods may include obtaining a document at the edge computing device. Methods may further include storing the document at the edge computing device. Methods may include executing, using a processor, on the edge computing device, a hashing algorithm on the document. Methods may include outputting, using the processor, a hash-value that is an outcome of the hashing algorithm, where the hash-value corresponds to the document. Methods may include transmitting, using the processor, the hash-value to the centralized database over a low bandwidth communication line while maintaining a storage of the hash-value at the edge computing device. Methods may include storing the hash-value at the centralized database. The hash-value may provide a condensed representation of the document.

Abstract: Transmission of content items through a network may employ a variety of devices that comprise buffers for the content. The content may include buffer priority information to assist in management of the buffers of intermediate devices for the routing. For example, the buffer priority information may assist the devices in managing buffer queue priorities.

Abstract: A method for network group based access control, the method may include (i) receiving a request to access content stored in a storage system, the request is associated with a user and a network group that is suggested to include the user; (ii) generating a user key based on an identifier of the user and the network group; (iii) determining, based in part on the user key, whether the user is a current user of the network group, and (iv) declining the request when the user is not the current user of the network group. The determining may include determining that the user is not a current user of the network group when a user finding timestamp of the user precedes a network group finding timestamp of the network group.

Abstract: A system supporting transferring content between an on-premises network and a public cloud network includes a first cloud computing platform comprising a first software instance having a first IP address, a subnet configured to extend across on-premises network and a public cloud network, a first gateway associated with the on-premises network, a second gateway associate with the public cloud network, a secure communication path between the first and second gateways. The subnet comprises a shared IP address range between the public cloud network and the on-premises network, and the first IP address of the first software instance is the same as an IP address of the first software instance that resided on the on-premises network.

Abstract: As described herein, a system, method, and computer program are provided for intent to service mappings in intent-based orchestration. An intent orchestrator receives an intent specifying one or more parameters of a service required for a network. The intent orchestrator translates the intent to one or more basic data types of a plurality of predefined basic data types based on the one or more parameters. The intent orchestrator forms one or more abstract services using the one or more basic data types. The intent orchestrator determines one or more specific services of a network orchestrator that correlate with the one or more abstract services. The intent orchestrator causes the network orchestrator to fulfill the intent using the one or more specific services.

Abstract: Techniques for providing forward-looking mobile network performance visibility via an intelligent application programming interface are described. Network performance metadata associated with a wireless network of a communications service provider is obtained and stored in a data lake. One or more machine learning models are trained based on use of the wireless network performance metadata. The one or more machine learning models, or predictions such as forecasts generated via use of the models, are used to service requests received at a cloud provider network seeking forward-looking performance characteristics of the wireless network.

Abstract: A method and system for detecting ransomware and repairing data following an attack. The method includes, collecting file statistics for files in a file system, identifying an affected file based on collected file statistics, locking down of access to the file system in response to identifying the affected file, undoing of reconcile processing, repairing the affected files, and unlocking access to the file system. The system includes a computer node, a file system, a plurality of disc storage components, a backup client, a backup client, and a hierarchical storage client. The hierarchical storage client is configured to collect file statistics for files in file system, identify affected files based on collected file statistics for the file, lock down of access to the file system in response to an identified affected file, undo reconcile processing, repair the affected file; and unlock access to the file system.

Abstract: A method for securing messages includes obtaining, at a message server, a message for a user of a message service hosted by the message server. The message includes a header and the header includes a digital signature signed by an author of the message and a list of one or more recipients of the message. The method includes determining whether the digital signature by the author is valid and determining, using the list of one or more recipients, whether the user is a declared recipient of the message. When the digital signature by the author is valid and the user is the declared recipient of the message, the method includes delivering the message to a user device of the user. When the digital signature by the author is valid and the user is not the declared recipient of the message, the method includes alerting the user.

Abstract: Network traffic is monitored over a period of time (e.g., network traffic of a corporate network). Based on the monitored network traffic: an abstract temporal graph of the network traffic is generated; graph-based node embeddings of the abstract temporal graph are learned; edge tabular embeddings for edges of the abstract temporal graph are learned; and hybrid embeddings are computed. The computed hybrid embeddings are based on the learned graph-based node embeddings for the abstract temporal graph and the learned edge tabular embedding for the edges of the abstract temporal graph. This process is then repeated over multiple time periods and temporal trajectories are computed using the computed hybrid embeddings for each time period. The temporal trajectories are then used for analysis of the network. For example, the temporal trajectories are used to identify anomalies for prevention of security breaches of the network.