Abstract: This disclosure describes systems that identify one or more models (e.g., large language models and/or virtual assistants) permitted to access content items stored for user accounts within a content management system. The disclosed systems can determine a model available to a user account within the content management system from among the one or more models. For example, the disclosed systems can determine one or more relationships between the user accounts within the content management system, large language models utilized by the user accounts, virtual assistants utilized by the user accounts, and content items accessed by the user accounts. The disclosed systems can determine the model for the user account according to the one or more relationships. The disclosed systems can provide a notification corresponding to the model via a user interface of a client device associated with the user account.

Abstract: Systems and techniques for cross-layer automated fault tracking and anomaly detection are described herein. Anomaly data may be obtained from a plurality of layers of a network. Elements of the anomaly data may be identified that correspond to a data flow of an application executing on the network. An artificial intelligence model may be trained using the elements of the anomaly data to generate an impact score for the application. The impact score may be generated for the application by evaluating current network metrics using the artificial intelligence model. An operational component of the network may be modified based on the impact score.

Abstract: Various aspects of the disclosure relate to distributed ledger computing systems and customizing tokens for securing and facilitating transactions recorded in the distributed ledger. A token customization module may be used to build customized controls into a token for use in a blockchain system. The token customization module may personalize or otherwise customize rules based on requirements of a user's particular use of the distributed ledger system. The customized rules may be used to trigger alerting behavior, prevent and/or automate particular transactions, provide geofencing and/or regional restrictions for transactions of a specified type, among others. Once built, the rules may be incorporated into the tokens and immutably memorialized in the distributed ledger. The customized tokens may be associated with or incorporate a smart contract to layer additional functionality.

Abstract: Methods and systems for controlling users' access to data available on blockchains are described herein, comprising: determining a first right for a first user to first data; determining a location in a permissioned blockchain comprising the first data, the location being a first fork of the permissioned blockchain; determining a first privilege required to access the first fork; determining that the first user corresponds to a first cryptographic address; and assigning the first privilege to the first cryptographic address.

Abstract: Generally discussed herein are devices, systems, and methods for cyber attack response. A method can include receiving, at a compute device, a natural language description of activity on a computer network, executing, based on the natural language description, a natural language processing (NLP) model to provide a tactic and technique of a cyber attack associated with the natural language description, determining, based on the provided tactic and technique, a response to mitigate the cyber attack, and implementing the determined response on the computer network.

Abstract: Some embodiments of the invention provide a method for WAN (wide area network) optimization for a WAN that connects multiple sites, each of which has at least one router. At a gateway router deployed to a public cloud, the method receives from at least two routers at least two sites, multiple data streams destined for a particular centralized datacenter. The method performs a WAN optimization operation to aggregate the multiple streams into one outbound stream that is WAN optimized for forwarding to the particular centralized datacenter. The method then forwards the WAN-optimized data stream to the particular centralized datacenter.

Abstract: The present disclosure relates to techniques for service to service communication and authentication via a network mesh. Particularly, aspects are directed to receiving, at a network mesh, a service request for a first service, and obtaining information associated with the first service. The information includes a location of a first pod encapsulating the first service. The network mesh using the location of the first pod, retrieves security rules specific for the first pod. The network mesh forwards the service request to the first service based on the security rules of the first pod and obtains results of the service request from the first service. The results include a sub result obtained from a second service in accordance with security rules for the first pod encapsulating the first service and security rules for a second pod encapsulating the second service.

Abstract: The technologies described herein are generally directed to provisioning services from a network. For example, a method described herein can include facilitating receiving a provisioning request for a network provisioning task. Further, the method can include, based on the network provisioning task, selecting a logical provisioning template to facilitate a performance of the network provisioning task. Further, based on the logical provisioning template, the method can include identifying a programming object comprising logical commands for the performance of the network provisioning task. The method can include executing the logical commands of the programming object to control service implementation equipment to perform the network provisioning task.

Abstract: In accordance with one aspect of the invention, an automation control device, such as a host or hub, is provided with functionality so that it becomes a multi-role automation control device. One such multi-role automation control device produces an on screen display which enables a user to select predetermined lighting scenes or television channels, and to control other devices.

Abstract: A method for processing messages, implemented by a device in a telecommunication network, is described. The method includes obtaining a correlation identifier, associated uniquely with a service performed by the telecommunication network and allowing the establishment of a correlation between messages that are associated with the service, regardless of the protocols with which the messages conform and/or of the interfaces over which the messages are conveyed. The method also includes saving the correlation identifier in a context associated with the service, and sending at least one message with a view to performing the service, each message sent comprising the correlation identifier saved in the context associated with the service.

Abstract: A network is programmed to, based on a service function policy, determine a first service function chain of services to apply to outbound packets of a first type that arrive at a serving gateway; upon classifying a first outbound packet arriving at the serving gateway as the first type based on an identifier of the first outbound packet, route the first outbound packet to the services of the first service function chain; map the identifier to the first type such that the mapping is accessible by the packet gateway; determine a second service function chain of the same services to apply to inbound packets of the first type that arrive at a packet gateway; and upon classifying a first inbound packet arriving at the packet gateway as the first type based on the mapped identifier, route the first inbound packet to the services of the second service function chain.

Abstract: In one aspect, a device includes at least one processor and storage accessible to the at least one processor. The storage includes instructions executable by the at least one processor to determine a first context and to determine that a threshold number of messages of a message chain have been received within a threshold amount of time. Based on the first context and the threshold number of messages being received within the threshold amount of time, the instructions are executable to delay presenting at least one notification regarding one or more messages of the message chain.

Abstract: Techniques for providing, to a resource on a private network of a service provider, access to a resource on a private network of a customer. Service to customer (S2C) resources deployed on a cloud infrastructure to facilitate the access. Whereas IP address ranges may overlap between private networks and/or private IP addresses may be used in one or more of the private networks, the S2C resources enable the data exchange between the private networks. For example, the S2C resources translate between IP addresses such that data within each private network uses IP addresses that can be properly processed by the private network.

Abstract: A signature verification system includes: a signature apparatus configured to sign a first chameleon hash value, an unmodifiable part of the data, and a second chameleon hash value of an entirety of the data; a changing apparatus configured to change a public key for the changers of the temporary delegator to a public key for changers of an actual delegator, using a private key for the changers; a delegator changing apparatus configured to change a modifiable part of the data, using a private key for the changers of the actual delegator; and a verifying apparatus configured to verify the signature using the public key for the changers and the public key for the changers of the actual delegator.

Abstract: A system for load management in a shared address networking architecture includes a primary point-of-presence (POP) group of servers configured to serve content of a domain and that are each reachable at an address of a first IP address block and a secondary PoP group of servers configured to serve the content of the domain and that are each reachable at an address of a second IP address block. The system further includes a traffic management agent configured to reduce a total volume of incoming requests received by the primary PoP group for a period of time following a return of a first server in the primary PoP group of servers to an online state by selectively directing a first percentage of the incoming requests to the second IP address block instead of the first IP address block.

Abstract: A relay node may detect conflicts regarding media access control (MAC) addresses. A source node may send a request to the relay node. The request may be a request to establish communications with a target node. The source may send, to the relay node, an indication of the MAC address of the source node. The source node may receive a reject message from the relay node. The reject message may comprise an indication of a conflict associated with the MAC address of the source node.

Abstract: A structural encoding unit and an error correction decoding unit are divided. The structure encoding unit is divided into input branch processor and an input proxy processor; and the error correction decoding unit is divided into an output routing processor, an output proxy processor, an adjudication branch processor, an adjudication proxy processor and a voting processor. The input branch processor is used for duplicating and distributing messages, the arbitration branch processor is used for duplicating and distributing data, the voting processor is used for performing voting, and the output routing processor is used for selecting an output result from processing results of the output proxy processor according to a voting result of the voting processor.

Abstract: A computer-implemented method comprises displaying a grid comprising a plurality of cells; receiving user input modifying a state of one or more of the plurality of cells to create a graphical shape in the grid, wherein each of the plurality of cells is limited to one of a plurality of predefined states; requesting an internet protocol (IP) address corresponding to the graphical shape; and in response to receiving the IP address corresponding to the graphical shape, retrieving a web resource located at the IP address.

Abstract: A method for communicating between a first network and a second network is described. The method includes receiving, by a network device via a persistent control channel established between the network device and a server device connected to a first network, a first message that includes: (1) information indicating a tunneling protocol, and (2) information associated with a first tunneling payload. The persistent control channel is for communicating: (1) messages including control information, and (2) messages including tunneling payloads. The method also includes transmitting, by the network device to an endpoint device connected to a second network, a second message including the information associated with the first tunneling payload.

Abstract: Techniques are disclosed for aggregating received data from a data stream. Data is received from a particular stream partition to which a device is subscribed, and subsets of the data, from the particular stream partition, are aggregated based on respective keys associated with the subsets of the data. The device determines whether one or more subsets of data, associated with a particular key, meet at least one processing criteria, such as a threshold amount of data, and refraining from processing the aggregated data when the processing criteria is not met. Once additional subset(s) of data associated with the particular key are received, they are aggregated with the one or more subsets of data. When the processing criteria is satisfied, the device processes the aggregated subsets of data associated with the particular key.