Abstract: A system and method for resolving contradictory device profiling data. The method includes: determining a set of non-contradicting values and a set of contradicting values in device profiling data related to a device based on a plurality of conflict rules; merging values of the set of non-contradicting values in device profiling data into at least one first value; selecting at least one second value from the set of contradicting values, wherein selecting one of the at least one second value from each set of contradicting values further includes generating a certainty score corresponding to each value of the set of contradicting values, wherein each certainty score indicates a likelihood that the corresponding value is accurate, wherein the at least one second value is selected based on the certainty scores; and creating a device profile based on the at least one first value and the at least one second value.

Abstract: An authoritative domain name system (DNS) server receives a DNS query for an address record for a hostname. The DNS server selects an IP address from multiple IP addresses to include in an answer to the DNS query, where each IP address is capable of being selected to be included in the answer regardless of the hostname being queried, where multiple servers of a distributed cloud computing network are capable of receiving traffic at each IP address, and where none of the IP addresses identify a particular server of the distributed cloud computing network. The authoritative DNS server transmits an answer to the DNS query that includes the selected IP address. Sometime after, one of the servers of the distributed cloud computing network receives a request for content that is addressed to the selected IP address and processes the request.

Abstract: The present application describes a method and apparatus for managing a service in a service layer. In particular, a method describes a computer readable storage medium including instructions for managing a service in a service layer where the instructions are executed by a processor. The executed instructions cause the processor to receive a request to manage, via a service enabler function of the service layer, a change of state of the service including adding, removing, activating, or deactivating the service. The request may include a service description. The executed instructions also cause the processor to evaluate, via the service enabler function, the service description comprising identifiers of one or more services to manage. The executed instructions further cause the processor to identify one or more service capabilities in the service layer to assist in managing the one or more services identified in the service description.

Abstract: A network system for accessing situation related information is disclosed. In one embodiment, the system includes a network connection for receiving an indication of an occurrence of a situation; a situational network formed based on the occurrence of the situation, the situational network including a plurality of participant devices determined to be geographically proximate to the situation, each of the participant devices corresponding to a participant in the situational network; a second network connection for presenting a roll call query to each of the plurality of participant devices soliciting a reply related to a status of the participant; a plurality of network connections established for receiving a status response from the participant devices; and a database for aggregating the status responses from responsive participants into a roll call list.

Abstract: A node device for a bus system, including a transceiver for connecting to a bus of the bus system; a controller connected to the transceiver via a transmit line and via a receive line, the controller and the transceiver designed to transfer data from the controller to the transceiver via the transmit line and transferring data from the transceiver to the controller via the receive line; a processor; and an intrusion detection system; the processor being connected to the transceiver via a controller bypass line and being designed to, via the controller bypass line, intercept an intrusion into the bus system identified by the intrusion detection system, the intrusion detection system being designed to detect an intrusion into the bus system in which a further node of the bus system sends a frame including an identifier assigned to a third node of the bus system to the bus.

Abstract: An information processing method based on an IoT device, an information processing apparatus based on an IoT device, an information processing system based on an IoT device, an electronic device, and a storage medium are provided, where the method includes: discovering the IoT device; and detecting a capability of the IoT device; abstracting, for each IoT device, the IoT device into a corresponding node based on the capability of corresponding IoT device; generating, based on the abstracted node, a resource knowledge graph, where the node represents at least part of the capabilities of one IoT device; an edge in the resource knowledge graph represents a relationship between two adjacent nodes; and the resource knowledge graph is configured to manage and/or orchestrate the available capability on a heterogeneous IoT device.

Abstract: A method and network gateway are provided for routing network traffic between internet service providers (ISPs) based on dynamic communication quality of the ISPs. Dynamic communication quality of the ISPs are monitored and compared by processor circuitry of the network gateway. When a session-based connection is being transmitted on an ISP having dynamic communication quality that does not meet a required communication quality of the connection, the processor circuitry transitions the session-based connection to an ISP meeting the required communication quality of the connection.

Abstract: Example resource management systems and methods are described. In one implementation, a system includes a memory and a processing device operatively coupled to the memory. The processing device is to receive a query referencing database data stored in a storage platform, determine a task associated with processing the received query, and create an execution node comprising cache resources and processing resources. Furthermore, a size of the cache resources of the execution node is determined upon creation of the execution node, based at least in part on the task, and processing resources of the execution node are determined upon creation of the execution node, based at least in part on the task. The execution node is included within a plurality of execution nodes to process the task associated with processing the received query.

Abstract: Computer implemented methods for enrolling a user as an authenticated user of a computing device and for authenticating a user of a computing device are provided. The methods make use of behavioral biometrics to determine a set of shares that represent a secret credential according to a secret sharing scheme. The set of shares is initially determined when the user is enrolled based on typical measurements of the user's behavioral biometrics and authentication data indicating how to generate the set of shares from a user's behavioral biometrics is generated. When authenticating the user, the computing device can generate the set of shares based on the authentication data and measurements of the current user's behavioral biometrics. The computing device can use the generated set of shares to recreate a copy of the secret credential with which to authenticate the user.

Abstract: A method for dynamic access network selection by a user equipment based on application orchestration information in an edge cloud system. The method includes determining, by a network discovery function, application orchestration information describing placement of instances of one or more applications in the edge cloud system; generating, by the network discovery function, one or more access network policies for the user equipment based on the application orchestration information; and transmitting, by the network discovery function, the one or more access network policies to the user equipment such that, based on the one or more access network policies, the user equipment is to select one or more of an access network from a plurality of access networks available to the user equipment for the user equipment to connect to and which access network from the plurality of access networks to route particular data flows.

Abstract: A policy created through an administrative user interface is converted into an intermediate representation that can be compiled for execution by a gateway or converted into a human-readable form for modifications by the administrator.

Abstract: A system and method for distributed caching, the system having at least one network-connected storage device, a content server, and a control server. The control server is configured to discover the at least one network-connected storage device, collect device information from the at least one network-connected storage device, where the device information comprises a device location, assign each of the at least one network-connected storage device to a device domain based on each device location, and provide the content server with the device information for the one or more network-connected storage.

Abstract: A computer implemented method processes alerts. A computer system creates a representation of an alert received for processing. The computer system determines a similarity of the alert with previously processed alerts using the representation of the alert and representations of the previously processed alerts. A first evaluator in the computer system evaluates an alert level for the alert based on previously processed similar alerts in response to the similarity being above a similarity threshold for similar alerts. A second evaluator in the computer system evaluates, the alert level for the alert using a machine learning model in response to the similarity not being above the similarity threshold.

Abstract: A computer-implemented method, in accordance with one aspect of the present invention, includes receiving, by a sender multi-protocol gateway (MPG) implemented in software, data from a sender application for transmission to a receiver endpoint. The data is validated against a predefined schema definition by the sender MPG. In response to successfully validating the data, a service request is made, by the sender MPG, using preconfigured information. An endpoint of the service request is a receiver MPG configured to forward the validated data to a receiver application in communication with the receiver endpoint. The receiver MPG is configured to not reply in any way to the sender MPG and sender application in response to receiving the service request.

Abstract: Example resource management systems and methods are described. In one implementation, a resource manager is configured to manage data processing tasks associated with multiple data elements. An execution platform is coupled to the resource manager and includes multiple execution nodes configured to store data retrieved from multiple remote storage devices. Each execution node includes a cache and a processor, where the cache and processor are independent of the remote storage devices. A metadata manager is configured to access metadata associated with at least a portion of the multiple data elements.

Abstract: A framework for joint computation, caching, and request forwarding in data-centric computing-based networks comprises a virtual control plane, which operates on request counters for computations and data, and an actual plane, which handles computation requests, data requests, data objects and computation results in the physical network. A throughput optimal policy, implemented in the virtual plane, provides a basis for adaptive and distributed computation, caching, and request forwarding in the actual plane. The framework provides superior performance in terms of request satisfaction delay as compared with several baseline policies over multiple network topologies.

Abstract: An electronic device includes a memory and a processor. The memory stores information related to an artificial intelligence model that performs arithmetic operations through neural network layers. The processor pre-processes raw data and obtains output data by inputting the pre-processed raw data to the artificial intelligence model. First data used for pre-processing the raw data and second data used in a portion of the neural network layers are stored in a secure area of the memory, and third data used in remaining layers of the neural network layers other than the portion is stored in a non-secure area of the memory.

Abstract: Receiving configuration settings (CSs) from a resource using an API; determining a resource risk score (RERS), a first tactic risk score (TARS), a first plurality of technique risk scores (TERSs), a second TARS, and a second TERSs, wherein the RERS is based on the first TARS and the second TARS, wherein the first TARS is based on the first TERSs, wherein the second TARS is based on the second TERSs, wherein each of the first TERSs is based on a subset of a set of policy scores (SPS), wherein each of the second TERSs is based on a subset of the SPS, and wherein each of the SPS is based on compliance of the CSs with a setting; and selecting a most-important technique (MIT) based on the first TARS, the second TARS, and one of the first TERSs and the second TERSs, and remediating a CS corresponding to the MIT.

Abstract: A secondary authentication platform operates by: probing an application server to imitate an authentication process associated with a first authentication factor; generating, via a learning function and in response to the probing, authentication pattern data associated with the first authentication factor; monitoring data transmissions from a client device that are directed to the application server; identifying authentication data associated with the first authentication factor in the data transmissions from the client device based on a comparison of the authentication data to the authentication pattern data; communicating with the client device via the network interface to authenticate a user of the client device to the secondary authentication platform via a second authentication factor; and when the user of the client device is authenticated to the secondary authentication platform via the second authentication factor, forwarding the authentication data to the application server to authenticate the user o

Abstract: A network system for accessing situation related information is disclosed. In one embodiment, the system includes a network connection for receiving an indication of an occurrence of a situation; a situational network formed based on the occurrence of the situation, the situational network including a plurality of participant devices determined to be geographically proximate to the situation, each of the participant devices corresponding to a participant in the situational network; a second network connection for presenting a roll call query to each of the plurality of participant devices soliciting a reply related to a status of the participant; a plurality of network connections established for receiving a status response from the participant devices; and a database for aggregating the status responses from responsive participants into a roll call list.