Abstract: In various embodiments, an adaptive bitrate ladder (ABL) application limits streaming bitrates during live events. The ABL application receives a value from an edge server included in a CDN and determines a policy based on the value. The policy includes a maximum bitrate for streaming downloadables associated with a live event. The ABL application transmits the policy to the edge server. The edge server implements the policy to prohibit a client device from requesting a first segment of a first downloadable that is associated with the live event and has a bitrate that exceeds the maximum bitrate.

Abstract: The disclosed technology includes systems and methods of identifying and managing sensitive information. The method can include detecting data entered into a form on a user interface, and generating, by a natural language understanding model, comprehension data based on the data entered into the form. The method can include determining, by a machine learning model, a risk score of the data and determining whether the risk score is greater than or equal to a threshold risk score. In response to determining that the risk score is greater than or equal to the threshold risk score, the method can include outputting a message to the user interface to alert a user that the data likely comprises sensitive information. The method can include receiving an input from the user interface indicative of whether the data comprises sensitive information and storing the data, the risk score, and the input in a database.

Abstract: In general, techniques are described for performing network segmentation for container orchestration platforms. A network controller comprising a memory and processing circuitry may be configured to perform the techniques. The memory may be configured to store a request, conforming to a container orchestration platform, to configure a new pod of a plurality of pods with a primary interface to communicate on a virtual network to segment a network formed by the plurality of pods. The processing circuitry may be configured to configure, responsive to the request, the new pod with the primary interface to enable communications via the virtual network.

Abstract: Configuration management persistent storage contains entries representing configuration items and relationships between pairs of the configuration items. Event management persistent storage contains entries representing alert records. Change request persistent storage contains change records respectively referring to changes made to the configuration items.

Abstract: Methods, systems, and apparatuses for improved content delivery are described herein. During delivery of content to one or more user devices of a content distribution network (CDN), a content session may be created for each user device. During each content session, each user device may send one or more upstream communications, such as heartbeat signals and bitrate requests, to the CDN. A monitoring module of the CDN may aggregate the upstream communications into session data. The monitoring module may use the session data to determine an impairment associated with content delivery to the one or more user devices.

Abstract: A computing platform may train, using historical information classification information, an information classification model, which may configure the information classification model to classify information and identify, based on the classification, a storage location. The computing platform may receive, from a user device, a request to store information. The computing platform may identify, using the information classification model, a cloud based storage location for the information. The computing platform may generate an NFT representative of the first cloud based storage location. The computing platform may direct a cloud based storage system to store the information at the cloud based storage location. The computing platform may send, to the user device, the NFT. The computing platform may receive, from the user device, the NFT and a request to access the information. Based on validating the NFT, the computing platform may grant the user device access to the information.

Abstract: Managing access to stored objects includes receiving, by a storage OS in a computing system, an access key identifier (ID) and access key associated with a user of an object storage service (OSS); determining, by a directory service, whether the user is a member of a group authorized to access a storage object in at least one of a network accessible storage (NAS) volume and an OSS bucket, based at least in part on the access key ID; in response to the user being a group member, attempting to authenticate the user by the storage OS with the directory service based at least on the access key ID and the access key; and in response to the user being authenticated by the directory service, allowing, by the storage OS, access by the user to the storage object stored in at least one of the NAS volume and the OSS bucket.

Abstract: Aspects relate to dynamic link speed switching of a link between a device and an additional device based on the current utilized bandwidth on the link. The device may be configured to calculate the current utilized bandwidth and compare the current utilized bandwidth to the current link speed of the link. The device may further be configured to modify or switch the current link speed to a new link speed that is nearest to and greater than the current utilized bandwidth by at least a threshold amount.

Abstract: A computing device may receive a request to store a content segment(s). The request may include an estimated storage size. The computing device may determine a plurality of storage devices based on an estimated capacity of each of the storage devices to store the content segment(s). The computing device may cause each of the storage devices to allocate storage for the content segment(s). The allocated storage may be tracked and/or retrieved based on location metadata indicative of the allocated storage that may be stored at a cache and/or metadata repository.

Abstract: In one embodiment, a method includes accessing a rule set for a group of networking assets; creating, based on the rule set, a primary automaton including a set of keys, each key including (1) a string identifying a network asset from the group of network assets (2) a separator character following the string and (3) a key branch number identifying a state. The method further includes creating, based on the rule set, one or more secondary automata by creating a secondary automaton for each type of result classification in the rule set; and for each secondary automaton, populating that secondary automaton with a set of values, each including (1) a value branch number identifying a state of that secondary automaton, each value branch number corresponding to a specific key branch number in the primary automaton, and (2) a string identifying a domain identified in the rule set.

Abstract: A microphone of a primary client device is used to capture audio for a conference participant. During the conference, audio is sampled from the microphone of the primary client device and from microphones of one or more secondary client devices at the same location as the primary client device. Based on a score calculated for the audio sampled from the secondary client device being higher than a score calculated for audio sampled from the primary client device, the microphone of the secondary client device is selected for audio capture for the remote conference participant. The audio is output through conferencing software to which the primary client device is connected via a user interface tile for the conference.

Abstract: A server and a device can support secure sessions with both (i) post-quantum cryptography (PQC) key encapsulation mechanisms (KEM) and (ii) session resumption. In an initial secure session, the device and server can mutually generate a first shared secret key K1 from a first KEM based on a device PKI key pair. The device and server can mutually generate a second shared secret key K2 from a second KEM based on a server PKI key pair. The device and server can mutually generate a symmetric ciphering key S2 from both K1 and K2. The server can encrypt an identity for a “pre-shared” secret key (PSK-ID) with S2. The device and server can (i) mutually generate a PSK from both K1 and K2 and (ii) close the initial secure session. The device can transmit a message to resume the session, where the message includes the PSK-ID and a MAC value.

Abstract: A system may include a device that may communicate data associated with the device. The data may include an authentication key generated via a circuit configured to generate the authentication key based on a presence of a signal. The system may also include a sensor device that may output the signal to the device based on a determination of tampering of a housing of the device. The system may also include a server device that may receive a request to publish the data, verify the authentication key, and store the data in a storage component in response to verifying the authentication key.

Abstract: A secure inter-cloud authentication system uses time-synchronized tokens for verifying user access requests across multiple cloud providers. By generating an authentication token that includes a timestamp and time-based one-time password (TOTP), synchronized with a Network Time Protocol (NTP) server, the system ensures that each access request is valid only within a specific time window. When a user requests data access, the token is verified by each participating cloud provider against the synchronized timestamp, allowing secure, time-sensitive validation across platforms. An identity provider (IdP) manages token issuance and synchronization, centralizing the authentication process while maintaining precise time alignment across clouds. This time-sync verification reduces the risk of replay attacks and ensures that only legitimate requests are processed, enabling secure, synchronized data access in multi-cloud environments.

Abstract: A protocol-layer governance system is disclosed for controlling execution of autonomous computational processes at the session layer. The system establishes a non-bypassable enforcement sequence in which behavioral qualification, authorization token issuance, directive propagation, and execution reconciliation occur in a fixed, canonical order. A protocol enforcement boundary ensures that execution requests cannot proceed unless derived from a verified protocol session state, and authorization is bound to behavioral qualification rather than identity or policy inference. The system generates immutable execution lineage records and prevents replay, substitution, privilege escalation, reordering, or parallel execution outside the defined sequence.

Abstract: A data storage method and system comprising: at least one encrypted server that comprise a storage volume and configured to run an operating system designated to host data accessible and exposable over a data plane (DP) network, at least one orchestrator configured to interact with each of said server and designated to control a control plane (CP) of said DP network, wherein the orchestrator is configured to manage the encryption by storing at least one key in its database such that the key is stored separately from the server, and wherein the orchestrator is configured to deliver the key to the server using a tunnel without exposing the key to the server.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The method may be performed by a device. In certain configurations, the device autonomously manages, by a device compute orchestrator (DCO), orchestration of compute resources and network connectivity resources in a network. The device is capable of creating a first cluster for an application executed on the user device and functioning as a master node and a worker node in the first cluster, and joining a second cluster for another application executed on another user device and functioning as a worker node in the second cluster for sharing compute resources and network connectivity resources of the device in the second cluster.

Abstract: It is possible to enable a reception side to easily recognize that metadata is inserted into an audio stream. A metafile including meta information for acquiring an audio stream into which metadata is inserted through a reception device is transmitted. The identification information indicating that the metadata is inserted into the audio stream is inserted into the metafile. At the reception side, it is possible to easily recognize that the metadata is inserted into the audio stream based on the identification information inserted into the metafile.

Abstract: Embodiments of the systems described herein can implement one or more processes remotely delivering customized code to a host application and/or computing device. The host application may be configured as an Application Programming Interface with a customized code processing library that may configure the host application to receive further instructions remotely. The host application may be further configured to execute host code and/or third-party code. The host application may be configured to receive remote application logic, after the host application has been installed on a computing device, and to execute the received application logic to alter the behavior of the host application, such as selectively tracking end user interactions.

Abstract: Methods, systems, and devices for wireless communications are described. A user equipment (UE) may receive, at a first modem and from a first device, one or more data packets. Based on an explicit congestion notification (ECN) capable transport (ECT) codepoint indication in respective header portions of the data packets, the UE may route the data packets from the first modem to two or more queues associated with a second modem of the UE. Based on receiving buffer and link state information associated with the second modem, the UE may perform a congestion indication procedure that is associated with congestion of a communication link associated with the UE. The UE may thereafter transmit, to a second device, packet data from the two or more queues associated with the second modem of the UE based on a respective priority associated with the two or more queues.