Abstract: Systems, methods, and devices for identifying and responding to illegitimate devices on a service provider network include computing devices that are configured to collect dynamic host configuration protocol (DHCP) information related to a device (e.g., a modem, etc.) that establishes or requests to establish an internet protocol (IP) connection to the service provider network. The computing devices may determine features based on the collected DHCP information, apply the determined features to a classification model, and predict whether the device is an illegitimate device based on a result of applying the determined features to the classification model. The computing devices may perform a responsive action (e.g., blacklist or quarantine the device, etc.) in response to predicting that the device is an illegitimate device.

Abstract: Systems and methods for managing an airport passenger processing system. The system includes a computing device and a peripheral device at an airport, a peripherals interface in communicative connection with the peripheral device and operable to execute a second client application, and a network outside the airport. The network includes a virtualization server for virtualizing an application for a first client application executed by the computing device and a peripherals manager in communication with the virtualization server. The first client application is configured to establish a first communication channel with the virtualization server for communication with an application virtualized on the virtualization server. The second client application is configured to establish a second communication channel with the peripherals manager.

Abstract: A notification system is described herein. Notifications can be generated for groupings of devices. A notification indication can be sent to a larger grouping of client devices. The notification indication can include one or more grouping parameters that specify one or more conditions that define a smaller device grouping. Devices that fall within the grouping can request the notification from a messaging service or management service.

Abstract: The disclosure provides an approach for service deployment. Embodiments include receiving an indication of user intent for deployment of one or more services in a network from a user that is not an administrator of the network, wherein the indication of the user intent comprises a domain specific language (DSL). Embodiments include parsing the indication of the user intent to determine one or more constraints for deploying the one or more services. Embodiments include receiving topology information for the network, wherein the topology information comprises associations between racks and machines in the network. Embodiments include receiving network performance information for the network. Embodiments include determining one or more deployment rules for the one or more services based on the one or more constraints, the topology information, and the network performance information. Embodiments include deploying the one or more services in the network based on the one or more deployment rules.

Abstract: Techniques are disclosed for automatically inferring software-defined network policies from the observed workload in a computing environment. The disclosed techniques include monitoring network traffic flow originating from network interfaces corresponding to containers that execute components of an application, recording details of a new network connection or a change in the existing network connection, obtaining information concerning the components of the application, identifying metadata for a component involved in the new network connection or the change in an existing network connection based on a comparison of the details of the new network connection or a change in the existing network connection and the information concerning the components of the application, generating a network policy for the component using at least the metadata for the component, and integrating the network policy for the component into a deployment package for the application.

Abstract: Modifying a flow table for a network accelerator can include, in response to determining that a flow table of a network accelerator does not include any rules corresponding to first packet data of a first flow received from a network, forwarding the first packet data to a host computer. Subsequent to the flow table being updated to include a new rule for the first flow, for second packet data of the first flow received from the network, the second packet data can be processed using the new rule. The second packet data can be queued. In response to receiving the first packet data from the host computer, the first packet data can be processed using the new rule. The processed packet data can be forwarded to a destination port followed by the queued second packet data.

Abstract: A system for providing remote control of assets is disclosed herein. The system provides secure communications with one or more assets and receive operational data from the one or more assets. The system provides a graphical interface that includes one or more icons, one or more indicators, and one or more user input interfaces. The system receives a user input via the one or more user input interfaces and transmit the user input to an asset associated with the one or more user input interfaces. The system detects changes to an operational characteristics of the asset and display the changes.

Abstract: A system for providing remote monitoring of assets is disclosed. The system provides secure communication with one or more assets and receive operational data from the one or more assets. The system generates a graphical user interface that be used for selection of inputs from the one or more assets and specification of conditions to be applied to inputs for generation of alerts. The system can receive a selection of one or more asset outputs and two or more conditions. The conditions are applied to the selection of one or more assets to generate alerts when at least one of the conditions is satisfied.

Abstract: A virtual network manager system comprising a server in communication with a node, the server including at least one virtual network function (VNF), a cluster manager in communication with the server, the cluster manager is configured to detect a change in a health of the VNF on the server and when the change in the health of the VNF occurs generate a signal to a node to perform an action, the action including at least one of throttling traffic to the VNF, rerouting traffic to an alternate VNF, changing a weight value for traffic to the VNF, and generating an alert indicating a relative capacity change at the VNF.

Abstract: A method for changing a member in a distributed system, includes requesting, by a first target node, a node address set from a management server, where the node address set includes first addresses of all nodes in the distributed system, sending, by the first target node, a join request to a master node in the distributed system when the node address set does not comprise a second address of the first target node, adding, by the master node, the second address to the node address set, and instructing all slave nodes in the distributed system to add the second address to a corresponding local member list.

Abstract: A computing system and method for remote monitoring and forecasting of performance of a managed network is disclosed. The computing system may be disposed within a remote network management platform and be configured for monitoring respective performance of each of a plurality of network entities of the managed network. For each network entity, an alert may be issued in response to determining that the monitored respective performance is below a respective threshold performance level. Based on analysis of a group of alerts, a likelihood may be determined that a different alert will be issued for the monitored performance of a particular network entity of the plurality for which no respective alert has yet been issued. In response to the likelihood exceeding a threshold, an alert prediction for the performance of the particular network entity may be issued together with a score corresponding to the likelihood.

Abstract: The disclosed embodiments relate to provisioning of a service, such as a financial service, to a device, such as a mobile device operative to access the service wirelessly or otherwise, in a manner which efficiently provides a consistent user experience which meets a user's expectations as to the functionality and quality of the service, including the user interface therefore and service delivery, which leverages the available capacities of the devices through which the service is provided so as to maximize the functionality and quality of the provided service without diminishing the experience, i.e. without substantially reducing the quality or functionality.

Abstract: A network traffic monitoring process of a communications network including: receiving data packets from a software-defined networking (SDN) flow switch; processing header of the received packets to identify its subsets belonging to respective network flows; detecting large network flows by determining a corresponding cumulative amount of data contained in the received packets for each of the network flow until it reaches or exceeds a predetermined threshold amount of data; for each detected large network flow, sending flow identification data to the SDN flow switch to identify further packets of the large network flow and to stop sending them to the network traffic monitoring component; periodically receiving from the SDN flow switch and processing the corresponding counter data and corresponding timestamp data to generate temporal metrics of the large network flow; and processing the generated temporal metrics with a trained classifier to classify the large network flow.

Abstract: A network node device and method of determining a communication route to one or more other network nodes through a network. The method includes sending current routing information to a network management server (NMS), and receiving new or supplemental routing information from the NMS, this supplemental routing information determined by the NMS based on the current routing information of the network node and the other network node(s). The supplemental routing information may include lateral route information identifying designated routing nodes that form lateral band(s) of nodes that span the network. Each lateral band may include gate node(s) as entrances/exits to the lateral band. The method further includes determining, based on the supplemental routing information, a route to one or more of the other network nodes, which may include an optimal path and/or alternate path(s) from the network node to one or more of the other network nodes.

Abstract: Information may be dynamically disseminated to network devices. In some embodiments, a data structure may be populated with first-type values and second-type values, a first delay time may be assigned to a first value of the first-type values based on the first value being associated with a first priority and a second delay time may be assigned to a second value of the first-type values based on the second value being associated with a second priority, and data structure information may be obtained from the data structure. The data structure information may be delivered such that the delivery of the data structure information to a first network device associated with the first value reflects the first delay time and the delivery of the data structure information to a second network device associated with the second value reflects the second delay time.

Abstract: In one embodiment, a network assurance service that monitors one or more networks identifies changes in a key performance indicator for each of a plurality of network entities in the one or more networks. The service forms a peer group of network entities from the plurality of network entities whose changes in the key performance indicator are correlated. The service monitors the key performance indicator for network entities in the peer group of network entities. The service, based on the monitoring, detects an anomalous change in the key performance indicator for a particular network entity in the peer group of network entities relative to other network entities in the peer group of network entities.

Abstract: A method for automatically generating enhancements to audio-visual (AV) content, a content manager, and a computer program product. One embodiment may comprise, by a processing unit, analyzing data about consumer interactions to generate consumer insights about the original AV content, automatically associating the consumer insights with a segment of original AV content, automatically generating content for the segment responsive to the consumer insights, and injecting the generated content into the original AV content to create modified AV content. The embodiment may further comprise, by a network interface, receiving data about consumer interactions with original AV content and automatically transmitting the modified AV content.

Abstract: Techniques for utilizing Software-Defined Field-Area Network (SD-FAN) controllers to receive a geographic location and transmission power of individual nodes and generate a geographic location topology of a Field-Area Network (FAN) to provide nodes with location-aware route paths for data transmission. One or more SD-FAN controller(s) may maintain a geographic location database to store the geographic location and transmission power of the individual nodes. Each node may utilize a Destination Address Object to advertise its geographic location and transmission power to the SD-FAN controller. The SD-FAN controller(s) may utilize the geographic location table to generate the geographic location topology of the FAN and determine a location-aware route path for optimized data transmission between nodes in the FAN.

Abstract: Controller devices may be configured to execute a network discovery service to identify other devices on a network, including other controller devices, user computing devices, and/or human machine interface devices. The controller devices may communicate with the devices on the network. An individual controller device may, upon connection to a human machine interface device, provide to the human machine interface device via a web server, a graphical user interface from which a user may configure the controller device or connect to another controller device on the network.

Abstract: A virtual-imagery and video-based social media networking system is disclosed that connects individuals, businesses, professionals, and consumers through virtual imagery. The virtual-imagery and video-based social media networking system provides two video feeds including a first connection-based video feed and a second non-connection based video feed. The two video feeds increases virtual exposures to non-connections. The virtual-imagery and video-based social media networking system expedites traffic to offerings of non-connection entities, such as virtual products, services, locations, websites, job announcements, talents, company tours, advice, elevator pitches, and consumer reviews. In this way, the user driven reward/incentive feature of the virtual-imagery and video-based social media networking system allows all users to have the ability to gain and increase exposure at minimum or no cost.