Abstract: A method for media content streaming includes: receiving a command to start playback of a first media content item, wherein a first portion of the first media content item has been transcoded to generate at least one passive adaptive streamlet, and the first portion of the first media content item starts at a playback position and ends at an optimal transition point; outputting, by a content streaming device, one of the at least one passive adaptive streamlet; while outputting the one of the at least one passive adaptive streamlet, requesting, receiving, and transcoding a second portion of the first media content item to generate an active adaptive streamlet of the first media content item, wherein the active adaptive streamlet starts at the optimal transition point of the first media content item; and immediately following outputting the one of the at least one passive adaptive streamlet, outputting the active adaptive streamlet of the first media content item.

Abstract: Disclosed are systems and methods for leader node election, comprising a cluster system including a plurality of nodes, a node registry, wherein nodes are configured to transmit registration requests to the node registry, receive node data is response, and to determine a leader node based on the earliest registered node, and wherein the leader node is configured to dynamically allocate data slots between the plurality of nodes, and each of the nodes are configured to store data associated with allocated data slots in an in-memory least recently used component and data associated with all of the data slots in a persistent storage component.

Abstract: Methods, apparatus, and processor-readable storage media for securely executing microservices are described herein. An example computer-implemented method includes: generating a session identifier for a request associated with executing one or more microservices in a microservice architecture; identifying an execution plan for the request based at least in part on a plan identifier specified for a first one of the microservices, wherein the execution plan indicates a specified order for executing the microservices for the request; maintaining a set of chained data structures to track an execution order of the microservices based on the session identifier; detecting, based at least in part on the set of chained data structures, that the execution order of the identified execution plan does not match the specified order for at least a given one of the of the one or more microservices; and in response to the detecting, preventing at least the given microservice from being executed.

Abstract: Methods for reducing storage demands at a centralized database and for reducing probability of a security breach such as an interception attack and a man-in-the-middle attack. Methods may include obtaining a document at the edge computing device. Methods may further include storing the document at the edge computing device. Methods may include executing, using a processor, on the edge computing device, a hashing algorithm on the document. Methods may include outputting, using the processor, a hash-value that is an outcome of the hashing algorithm, where the hash-value corresponds to the document. Methods may include transmitting, using the processor, the hash-value to the centralized database over a low bandwidth communication line while maintaining a storage of the hash-value at the edge computing device. Methods may include storing the hash-value at the centralized database. The hash-value may provide a condensed representation of the document.

Abstract: Transmission of content items through a network may employ a variety of devices that comprise buffers for the content. The content may include buffer priority information to assist in management of the buffers of intermediate devices for the routing. For example, the buffer priority information may assist the devices in managing buffer queue priorities.

Abstract: A method for network group based access control, the method may include (i) receiving a request to access content stored in a storage system, the request is associated with a user and a network group that is suggested to include the user; (ii) generating a user key based on an identifier of the user and the network group; (iii) determining, based in part on the user key, whether the user is a current user of the network group, and (iv) declining the request when the user is not the current user of the network group. The determining may include determining that the user is not a current user of the network group when a user finding timestamp of the user precedes a network group finding timestamp of the network group.

Abstract: A system supporting transferring content between an on-premises network and a public cloud network includes a first cloud computing platform comprising a first software instance having a first IP address, a subnet configured to extend across on-premises network and a public cloud network, a first gateway associated with the on-premises network, a second gateway associate with the public cloud network, a secure communication path between the first and second gateways. The subnet comprises a shared IP address range between the public cloud network and the on-premises network, and the first IP address of the first software instance is the same as an IP address of the first software instance that resided on the on-premises network.

Abstract: As described herein, a system, method, and computer program are provided for intent to service mappings in intent-based orchestration. An intent orchestrator receives an intent specifying one or more parameters of a service required for a network. The intent orchestrator translates the intent to one or more basic data types of a plurality of predefined basic data types based on the one or more parameters. The intent orchestrator forms one or more abstract services using the one or more basic data types. The intent orchestrator determines one or more specific services of a network orchestrator that correlate with the one or more abstract services. The intent orchestrator causes the network orchestrator to fulfill the intent using the one or more specific services.

Abstract: Techniques for providing forward-looking mobile network performance visibility via an intelligent application programming interface are described. Network performance metadata associated with a wireless network of a communications service provider is obtained and stored in a data lake. One or more machine learning models are trained based on use of the wireless network performance metadata. The one or more machine learning models, or predictions such as forecasts generated via use of the models, are used to service requests received at a cloud provider network seeking forward-looking performance characteristics of the wireless network.

Abstract: A method and system for detecting ransomware and repairing data following an attack. The method includes, collecting file statistics for files in a file system, identifying an affected file based on collected file statistics, locking down of access to the file system in response to identifying the affected file, undoing of reconcile processing, repairing the affected files, and unlocking access to the file system. The system includes a computer node, a file system, a plurality of disc storage components, a backup client, a backup client, and a hierarchical storage client. The hierarchical storage client is configured to collect file statistics for files in file system, identify affected files based on collected file statistics for the file, lock down of access to the file system in response to an identified affected file, undo reconcile processing, repair the affected file; and unlock access to the file system.

Abstract: A method for securing messages includes obtaining, at a message server, a message for a user of a message service hosted by the message server. The message includes a header and the header includes a digital signature signed by an author of the message and a list of one or more recipients of the message. The method includes determining whether the digital signature by the author is valid and determining, using the list of one or more recipients, whether the user is a declared recipient of the message. When the digital signature by the author is valid and the user is the declared recipient of the message, the method includes delivering the message to a user device of the user. When the digital signature by the author is valid and the user is not the declared recipient of the message, the method includes alerting the user.

Abstract: Network traffic is monitored over a period of time (e.g., network traffic of a corporate network). Based on the monitored network traffic: an abstract temporal graph of the network traffic is generated; graph-based node embeddings of the abstract temporal graph are learned; edge tabular embeddings for edges of the abstract temporal graph are learned; and hybrid embeddings are computed. The computed hybrid embeddings are based on the learned graph-based node embeddings for the abstract temporal graph and the learned edge tabular embedding for the edges of the abstract temporal graph. This process is then repeated over multiple time periods and temporal trajectories are computed using the computed hybrid embeddings for each time period. The temporal trajectories are then used for analysis of the network. For example, the temporal trajectories are used to identify anomalies for prevention of security breaches of the network.

Abstract: A compute system that includes an Internet of things (IoT) device is provided. The IoT device includes a common services interface (CSI) to create a self-managing network of devices with other nodes comprising the CSI.

Abstract: A method for controlling the authentication of a user by an authentication device, the authentication being implemented by verification, by the authentication device, that a code entered by the user on an interaction interface of the authentication device corresponds to a predetermined code associated with the user is disclosed. A signal representative of a radio signal characteristic of an interaction of the user on the interaction interface of the authentication device is received by the user's terminal. The radio signal is transmitted by an antenna of the authentication device via a channel using electromagnetic wave conduction capacities of the user's body when the user enters the code. It is verified that the radio signal corresponds to a previously stored reference signal, and, in the event of a positive verification, a piece of data representative of the user's identity is transmitted to the authentication device for verification with the user's identity.

Abstract: A system to physically remove data including customer personal information from mobile devices includes a computer; an input device to input to the computer a unique identifier associated with a board; a computer numerical control (CNC) machine controlled by the computer and configured to physically remove a predetermined chip from the board; a camera to record the CNC machine physically removing the predetermined chip from the board; and a memory to store a first file comprising the camera's recording and to store a second file comprising a record associating the unique identifier associated with the board to the camera's recording.

Abstract: Systems and methods are disclosed including receiving an electronic access request to add a secondary electronic profile of a secondary user to a primary electronic profile of a primary user. A processor generates and sends a first security challenge to the primary user and a secondary security challenge to the secondary user. The processor receives a response from the primary user in response to the first security challenge and a response from the secondary user in response to the secondary security challenge. The processor authenticates the electronic access request based on the first response being a valid response and the secondary response being a valid response. The processor generates the secondary electronic profile as a nested profile within the primary electronic profile. The processor instructs the primary user device or the secondary user device to display a confirmation of the secondary user being added to the primary electronic profile.

Abstract: In one embodiment, a processing device includes a plurality of display interfaces, a plurality of display controllers, and display synchronization circuitry. The display interfaces are used to interface with a plurality of display devices, and the display controllers are used to output video frames to the display devices via the display interfaces. Moreover, the display synchronization circuitry includes a clock synchronization interface and a frame synchronization interface. The clock synchronization interface is used to synchronize a clock rate across the display controllers, while the frame synchronization interface is used to synchronize a frame rate across the display controllers.

Abstract: A system and method for controlling consumption of data, the system including a data consumption device, an acquisition device and a back-end server. Information relating to a user is acquired, and an assessment whether the user is in a predetermined physical state is made. In response to assessing that the user is in the predetermined physical state, a signal is transmitted to reduce the data consumed by the data consuming device.

Abstract: Methods, apparatus, systems and articles of manufacture for re-use of a container in an edge computing environment are disclosed. An example method includes detecting that a container executed at an edge node of a cloud computing environment is to be cleaned, deleting user data from the container, the deletion of the user data performed without deleting the container from the memory of the edge node, restoring settings of the container to a default state; and storing information identifying the container, the information including a flavor of the container, the storing of the information to enable the container to be re-used by a subsequent requestor.

Abstract: Methods, apparatus, systems and articles of manufacture are disclosed including means for identifying to identify a first request having a first source port number, from a device, determine whether a second request, having a second source port number, is within a threshold number of ports from the first source port number, group the first and the second requests as a first session when the second source port number is within the threshold number of ports from the first source port number, and means for classifying to generate session windows, the session windows including the threshold number of ports, wherein the session windows are applied to lowest and highest source port numbers associated with a current session.