Abstract: A facility for enrolling a software implementer in a code signing. In one example facility, the facility receives information identifying the implementer, and credentials authenticating the implementer. The facility generates secret state for the implementer. Based on at least one or both of (1) at least a portion of the received credentials and (2) at least a portion of the generated secret state, the facility generates for the implementer a key pair comprising a private key and a public key, and persistently stores the secret state.

Abstract: A method executable via operation of configured processing circuitry to identify applications by remote monitoring may include initiating remote communication with a target device through an access point, the access point providing network access to the target device, providing a series of ping messages to the target device via the access point to determine a delay signature of an application running on the target device, comparing the delay signature of the application to a plurality of malware traffic signatures stored in a malware traffic signature library, and determining a matching score between the delay signature of the application and at least some of the malware traffic signatures.

Abstract: Techniques are described for managing program execution capacity used to execute software programs, such as for a group of computing nodes in use executing one or more programs for a user. Dynamic modifications to the program execution capacity of the group may include adding or removing computing nodes, such as based on automated determinations that previously specified criteria are currently satisfied. The described techniques further include tracking information about changes that occur in one or more capacity utilization metrics of interest in response to dynamic modifications to the program execution capacity of the group, and then using such learned responses to determine a customized capacity modification policy that is configured for the actual operation of the software program(s) for the user. In some situations, the techniques are used in conjunction with a fee-based program execution service that executes multiple programs on behalf of multiple users of the service.

Abstract: A method for securing data by embedding the data in a data structure and utilizing a sensor to detect transfer of the data structure. The data is embedded such that the data is only accessible by first executing an executable program. If the executable program determines that the device attempting to access the data (the accessing device) does not have permission to access the data, then the executable program destroys the data. If the data structure is transferred to another device, a sensor positioned to detect the data structure when transferred will identify the data. If the sensor determines that the data structure is not permitted to be transferred, then the sensor destroys the data.

Abstract: In embodiments, methods and systems for implementing configuration management are provided. A configuration management system facilitates processing and preserving configurations associated with a software infrastructure. The software infrastructure operates as a co-located environment, high availability environment, disaster recovery environment or migration environment. The configuration management system specifically maintains implementation of firewall configurations for a source computing environment and a destination computing environment. The source computing environment communicates with the destination computing environment using a communication channel via an untrusted network. The configuration management system includes a leader component that accesses the firewall configurations, from the source computing environment, transforms the firewall configurations to a transformed version and communicates the transformed version to the destination computing environment.

Abstract: Embodiments are directed towards automatically learning user behavioral patterns when interacting with messages and based on the learned patterns, suggesting one or more predicted actions that a user might take in response to receiving subsequent message. One or more classifiers are trained and employed to predict one or more actions that a user might take in response to receiving the message. In one embodiment, the one or more predicted actions are provided suggested to the user as an action the user might take on the message. Messages may be rank ordered within a given suggested action based on a confidence level of the prediction.

Abstract: Examples of systems and methods for bridging virtual and physical spaces are described. In some of these examples, a particular communicant's real world state drives changes in one or more of the communications connections, virtual state, and communications interface of the particular communicant or another communicant.

Abstract: Embodiments of the present invention disclose a method, an apparatus, and a system for controlling a self-optimization switch. By using technical solutions provided in embodiments of the present invention, enabling and disabling of self-optimization can be controlled, and a state of the self-optimization switch can be obtained. A technical solution provided in embodiments of the present invention is as follows: A method for controlling a self-optimization switch includes: obtaining a target state of a self-optimization switch; and sending a setting command that includes the target state to a managed unit, where the setting command instructs the managed unit to change the state of the self-optimization switch to the target state.

Abstract: An energy management system for a data center network may include a central computer to establish an energy use policy for the computer data center network. The system may also include computer nodes in the computer data center network to receive a packet which is a query that obtains energy information from the nodes and/or a transmission reservation that provides instructions for the energy use policy to be implemented at the computer nodes. The computer nodes may reallocate data traffic on the computer data center network based on the energy use policy to improve energy consumption of the computer data center network.

Abstract: A system and method can provide source ID spoof protection in an InfiniBand (IB) fabric. The IB fabric can support a plurality of tenants in a subnet that connects a plurality of physical servers, wherein the plurality of tenants are associated with different partitions in the subnet. Then, the plurality of tenants can use at least one shared service, and the IB fabric can be configured to determine what ID values are legal for different physical servers and different partitions.

Abstract: A device may receive an update playlist file that lists segments of a content stream in an order that the segments are to be recombined by a client device; update a live playlist file based on the update playlist file; update a time playlist file by appending segment identifiers, which are included in the update playlist file and not included in the time playlist file, to the time playlist file; create a new playlist file that includes the segment identifiers and that does not include other segment identifiers; and send one of the live playlist file, time playlist file, or the new playlist file to a client device.

Abstract: Traffic data while the system is in operation is collected for a certain time as a preprocess. Typical patterns are extracted from the collected traffic data. Next, stream programs are created for the individual typical patterns and stored for the future reference. Next, the IDs of alternative tasks for transition among different stream programs are stored. In actual system operation, the system measures traffic data regularly or at any time, compares the resultant patterns with the typical patterns, and selects a stream program corresponding to the closest typical pattern as the next phase. Program shutdown time when shifting from the stream program in the present phase to the next phase can be reduced by gradually shifting empty tasks in the present phase to the next stream program as alternative tasks in consideration of the cost of switching between tasks, the cost of transferring data among resources, and so on.

Abstract: Techniques for maintaining high availability servers are disclosed. For example, a method comprises the following steps. One or more client requests are provided to a first server for execution therein. The one or more client requests are also provided to a second server for storage therein. In response to the first server failing, the second server is configured to execute at least one client request of the one or more client requests provided to the first server and the second server that is not properly executed by the first server.

Abstract: An information processing apparatus includes an image generation unit configured to generate an image that is changed according to operation commands received from a terminal and to be displayed at the terminal; a video-coding area determining unit configured to identify, in the image, a video-coding area that is changed within a predetermined period of time for a number of times greater than a first threshold and to be encoded according to a video compression format; an estimation unit configured to estimate a maximum data rate based on a round trip time of the network; a filtering unit configured to thin out the operation commands according to a thin-out rate when the operation commands are of a predetermined type and the estimated maximum data rate is less than a second threshold; and a threshold changing unit configured to change the first threshold based on the thin-out rate.

Abstract: An apparatus comprising a Local Mobility Anchor (LMA) configured to couple to a mobile node (MN), a network address translation (NAT) server, and an Internet Protocol (IP) version four (IPv4) only host and to associate an IP version six (IPv6) address for an interface with the MN with an IPv4 address for an interface with the IPv4 only host in a NAT state table entry, wherein the NAT state table entry is used to translate an IPv6 packet associated with the MN to an IPv4 packet associated with the IPv4 only host.

Abstract: A switch creates and dynamically updates a latency map of a network to adjust routing of flows. Further, the network is monitored to detect latency issues and trigger a dynamic adjustment of routing based on the latency map. In this manner, a flow can be routed along a route (i.e., a faster route) that provides less latency than other available routes. The latency map can be generated based on latency probe packets that are issued from and returned to the source switch. By evaluating many such latent probe packets that have traveled along many available routes (e.g., corresponding to various ports of the switch), the switch or associated administrative logic can dynamically adjust the latency map to updated latency information of available routes. Therefore, responsive to a trigger, the source switch can dynamically adjust the routing of a flow based on latency issues discerned from the network.

Abstract: A computer implemented method processes STREAMS messages over an Infiniband system area network. STREAMS messages received at a STREAMS over Infiniband module from a STREAMS based application are encapsulated in Infiniband verbs to create an encapsulated STREAMS message. A STREAMS identifier header is appended onto the Infiniband verb. The STREAMS over Infiniband module forwards the encapsulated STREAMS message to a streams interface layer where the encapsulated STREAMS message is then forwarded to a host channel adapter of the Infiniband system area network.

Abstract: Between a CPU and a communication module, a write buffer, a write control section, a read buffer and a read control section are provided. The CPU directly accesses and the write buffer and the read buffer. By periodically outputting a communication request, the read control section reads data, which the communication module received from other nodes, and transfers the data to the read buffer. The write control section transfers to the communication module the data written in the write buffer as transmission data. In addition, a bypass access control section and an access sequence control section are provided. The bypass access control section controls direct data read and data write between the CPU and the communication module. The access sequence control section controls sequence of accesses of the control sections to the communication module.

Abstract: A computer implemented method processes STREAMS messages over an Infiniband system area network. STREAMS messages received at a STREAMS over Infiniband module from a STREAMS based application are encapsulated in Infiniband verbs to create an encapsulated STREAMS message. A STREAMS identifier header is appended onto the Infiniband verb. The STREAMS over Infiniband module forwards the encapsulated STREAMS message to a streams interface layer where the encapsulated STREAMS message is then forwarded to a host channel adapter of the Infiniband system area network.

Abstract: A social networking system includes a mechanism for integrating user actions on objects outside of the social networking system in the social graph. External system operators include widgets that, when executed by user devices, record user interactions that correspond to a defined structure of actions and objects. Third party operators utilize a tool provided by the social networking system to define the structure of actions and objects. External actions are recorded by the social networking system for publishing to the social graph.