Abstract: Some embodiments provide a method for identifying security threats to a datacenter. The method receives flow attribute sets for multiple flows from multiple host computers in the datacenter on which data compute nodes (DCNs) execute. Each flow attribute set indicates at least a source DCN for the flow. The method identifies flow attribute sets that correspond to DCNs responding to name resolution requests. For each DCN of a set of DCNs executing on the host computers, the method determines whether the DCN has sent responses to name resolution requests in a manner that deviates from a historical baseline for the DCN based on the identified flow attribute sets. When a particular DCN has sent responses to name resolution requests in a manner that deviates from a historical baseline for the particular DCN, the method identifies the particular DCN as a security threat to the datacenter.

Abstract: A method, apparatus, and computer program product provide for network communication error originator identification with a header, such as an HTTP header. In the context of a method, the method causes a service request from a NF client to be transmitted to a NF server via one or more intermediary network proxy functions. The method receives a service response with error information identifying the type or identity of the originator of the error response or identifying the type or identity of network proxy function having relayed the error response. The method may also be enabled to redirect a service request to a different NF server or a different network proxy function, and to enable the NF client to determine whether to redirect the request to a different NF server or a different network proxy function.

Abstract: Techniques and systems for suppressing messages destined for a server device that is at least partially out-of-service are disclosed. An example process performed by a client device, such as a PCRF or a PCF, may include sending a message to a server device, such as a PGW or a SMF, receiving, in response to the sending of the message to the server device, a notification indicating that the server device is at least partially out of service, and refraining, based at least in part on the receiving of the notification, from sending one or more messages to the server device until the client device is notified that the server device is back in service. Suppressing messages in this manner reduces extraneous traffic in the network to conserve computing resources (e.g., network bandwidth resources).

Abstract: A data center includes: a server including a control plane; a data plane that is configured to receive network connection information from the control plane; and a storage group including a plurality of first storage devices. The data plane may be configured to set connections between the server and the plurality of first storage devices based on the network connection information corresponding to each first storage device of the plurality of first storage devices.

Abstract: Various methods and systems for implementing dependency management for an infrastructure are provided. A dependency service manager of the dependency management system includes a plurality of dependency management system components that facilitate automatically discovering and analyzing data to generate dependency data. The dependency data includes dependencies and dependents of dependency service tenants which are tenant services of the infrastructure. The dependency data is generated based on data retrieved by a plurality of collectors. A collector from the plurality of collectors is an agent that retrieves data associated with dependency service tenants based on a corresponding collection time attribute of the collector. A collector accesses data for generating the dependency data at one of the following collection times: design time, deployment time and runtime.

Abstract: An example operation may include one or more of: receive a first set of annotation information, determine a first approval decision for the first set of annotation information, record the first approval decision in a blockchain, retrieve a first set of approval decisions from the blockchain, generate a consensus based on the first set of approval decisions, and record the consensus in the blockchain.

Abstract: Computer technology for helping to ensure various types of compliance for a first user on a multi-cloud platform, the technology including the following operations: (i) receiving an initial version of a compliance template for use with a multi-cloud computer system; (ii) applying corrective ensemble modelling under a recommender and reinforcement framework to dynamically update the compliance template to obtain an updated version of the compliance template; (iii) applying corrective ensemble modelling under a recommender and reinforcement framework to dynamically select a recommended set of compliance tools for the first user; and (iv) validating multi-cloud compliance using the template and tools.

Abstract: The method for an automated IPv6/IPv4 fallback approach in proxy networks is presented. In some embodiments, the method comprises receiving, at a proxy server, a request from a client executing on a client computer for access to a target computer; determining identification-information of the client; determining an address pair including an IPv6 address and an IPv4 address of the proxy server; assigning the address pair to the identification-information of the client; establishing a first communications connection between the client computer and the proxy server using one of IP addresses included in the address pair, and a second communications connection between the proxy server and the target computer using one of IP addresses included in the address pair; and facilitating a network packet flow between the client computer and the target computer using the first communications connection and the second communications connection.

Abstract: Systems and methods for establishing a voice communications link between multiple users accessing a media asset are provided. A media asset is accessed using a first user device, the first user device being associated with a first user at a first location. A second user who is accessing the media asset using a second user device is identified, wherein the second user is associated with the first user and is at a second location. A voice communications link between the first and second user devices that enables the first and second users to speak to each other while accessing the media asset is established. A volume level of audio received via the voice communications link is set based on content of the media asset, causing the audio received via the voice communications link from the second user to be presented to the first user at the set volume level.

Abstract: In some embodiments, a computer-implemented method for an automated proxying TCP fingerprints comprises: receiving, at a proxy server, a request from a source host, to establish a first communications connection between the source host and a destination host; establishing, by the proxy server, a second communications connection between the source host and the proxy server; determining a plurality of fingerprint values specific to the source host; establishing by the proxy server, using at least the plurality of fingerprint values specific to the source host, a third communications connection between the proxy server and the destination host; facilitating, by the proxy server, communications between the source host and proxy server via the second communications connection and between the proxy server and the destination host via the third communications connection.

Abstract: One example process may include identifying a paused active communication session between a client device and a server, releasing communication session resources dedicated to the communication session to a session resource pool, and re-establishing the active data session responsive to receiving a message from the client device including one or more session re-establishment parameters.

Abstract: A method and system for automatically adjusting a participation queue among multiple participants of a communication session are disclosed, comprising adding contribution requests to speak or share content in the communication session to the participation queue, calculating a participation metric for each of the multiple participants, determining an order of entries in the participation queue based on a comparison of the participation metrics of the respective participants in the participation queue to a determined participation metric threshold, to increase a priority of an entry of a respective participant having a calculated participation metric below the determined participation metric threshold.

Abstract: Provided herein are systems and methods for determining relationships between events occurring in networks. Notifications describing events occurring in networks can be received and processed to determine groups of network event types. A root-cause network can be generated based on the events, with the nodes of the root-cause network representing different event types and the edges of the root-cause network indicating directional, causal relationships between the nodes. A received network event can be processed to determine potential causes of the received network event based on the root-cause network and other events received by the network.

Abstract: A web browser can manage different session cookies associated with a website by storing the session cookies in distinct tab storage locations associated with different tabs of the web browser, instead of in a global storage location accessible by any tab of the web browser. When the web browser prepares to send a request associated with an active tab to a server associated with the website, the web browser can temporarily copy a corresponding session cookie into the global storage location from the tab storage location associated with the active tab. Accordingly, even if the website does not natively support multiple concurrent user sessions with the web browser, the web browser can send different session cookies to the website based on which tab of the web browser is active, and thereby allow users to engage in different user sessions with the website in different tabs.

Abstract: A method and a system for managing sub-tenants (in a cloud computing environment. In one embodiment, the method includes receiving a request to access sub-set of data of an asset from the cloud computing system from a sub-tenant device associated with a sub-tenant of a tenant. The sub-tenant is associated with an asset. The request includes a sub-tenant identifier, a tenant identifier, and an asset identifier. The method includes determining whether the sub-tenant is authorized to access the requested sub-set of data of the asset using the sub-tenant identifier, the tenant identifier, and the asset identifier based on at least one role and associated permissions to access the requested sub-set data of the asset. If the sub-tenant is authorized to access the requested sub-set data of the asset, the method includes providing access to the requested sub-set data of the asset to the sub-tenant.

Abstract: The present disclosure is related to mixed mode management. A machine-readable medium may store instructions executable by a processing resource to determine that a first management node is operating according to a different configuration profile than a second management node and, responsive to the determination, transfer a mixed mode management plug-in from the first management node. The machine-readable medium may further store instructions executable by the processing resource to execute the mixed mode management plug-in on the second management node.

Abstract: Methods, systems, and apparatuses, for real-time operation control, among other things. There may be adjustments to a first device in which a first network service operates. The adjustment to the device may include moving a second network service of the first device to a second device. The first network service and the second network service may be associated with virtual machines.

Abstract: In a communication system, a first network node is configured to execute at least one service application executing a first service and at least one analytics application executing at least part of a distributed analytics service. The first network node obtains information about a new telecommunication service and transmits, to a second network node in the communication system, a request for a policy for the new telecommunication service. The first network node receives, from the second network node, the policy for the new telecommunication service and updates a currently applied policy on the basis of the received policy. The updated policy rebalances resources allocated from a shared computing resource pool of the first network node between the new telecommunication service and the at least one analytics application such that the new telecommunication service maintains adherence to the one or more requirements of a service level agreement.

Abstract: A server system according to the present application includes an issuing unit configured to issue a meeting identification, a storage unit configured to store the issued meeting ID and a file in association with each other, a first control unit configured to receive an instruction to display the file from a first user and configured to display an operation of the first user on an image of the file for which the display instruction is issued on a display unit of an information processing apparatus operated by a second user, and a second control unit configured to display an icon for printing the file associated with the meeting ID together with the image of the file that is operated by the first user on the display unit of the information processing apparatus operated by the second user.

Abstract: This disclosure describes techniques for configuring software defined network (SDN) controllers within different cloud computing domains and, in particular, a multi-cluster controller that operates and presents, in some examples, a single interface for seamlessly controlling and configuring SDN controllers in different cloud computing domains. In one example, this disclosure describes a system that includes a plurality of clusters, each of the plurality of clusters including a plurality of configurable endpoints; a storage system; and processing circuitry having access to the storage system and capable of communicating with each of the plurality of configurable endpoints. In some examples, the processing circuitry is configured to receive a plurality of requests, each specifying a configuration operation, identify, for each of the requests, a configuration cluster and a configuration endpoint within the configuration cluster, and perform, for each of the requests, the specified configuration operation.