Abstract: A computer-implemented method, operable on a device in a content delivery network (CDN), wherein the CDN delivers content on behalf of at least one content provider, the device implementing a content delivery (CD) service, the method includes, by the service on the device: receiving a request for a particular resource from a client; determining whether the client includes an optimization support mechanism; when the client includes an optimization support mechanism, providing the client with a first version of the particular resource, optimized, at least in part, for the capabilities of the client in combination with the optimization support mechanism; otherwise providing the client with either (i) an un-optimized version of the particular resource, or (ii) a version of the particular resource optimized, at least in part, for the capabilities of the client without the capabilities of the optimization support mechanism.

Abstract: Techniques for smart whitelisting for Domain Name System (DNS) security are provided. In some embodiments, a system/process/computer program product for smart whitelisting for DNS security in accordance with some embodiments includes receiving a set of network related event data, wherein the set of network related event data includes Domain Name System (DNS) related event data; receiving a set of network related threat data, wherein the set of network related threat data includes DNS related threat data; and generating a whitelist using the set of network related event data and the set of network related threat data, wherein the whitelist includes a subset of network domains included in the DNS related event data based on a data driven model of the DNS related event data and the DNS related threat data.

Abstract: Example methods and systems for a computer system to perform security threat detection during service query handling are described. In one example, a process running on a virtualized computing instance supported by the computer system may generate and send a first service query specifying a query input according to a service protocol. The first service query may be detected by a security agent configured to operate in a secure enclave that is isolated from the process. Next, the security agent may generate and send a second service query specifying the query input in the first service query. It is then determined whether there is a potential security threat based on a comparison between (a) a first reply received responsive to the first service query and (b) a second reply received responsive to the second service query.

Abstract: Aspects of the subject disclosure may include, for example, receiving workload requests for tenant devices providing services to user devices; partitioning node resources to facilitate network slicing in a software defined network to provide the services; determining that the workload requests exceed available resources of the node; and outsourcing a portion of a load to one or more neighboring nodes, where the outsourcing is performed in coordination with a regional orchestrator and a SDN intelligence module. Other embodiments are disclosed.

Abstract: Methods, apparatus, systems and articles of manufacture are disclosed to build privacy preserving models. An example apparatus disclosed herein includes a training manager to generate a first modeling plan for client-side resources, and transmit the first modeling plan to the client-side resources. The example apparatus also includes a data aggregator to search for a primary validation flag in response to retrieving client-side model parameters, and an accuracy calculator to, in response to detecting the primary validation flag, perform a secondary validation corresponding to the client-side model parameters using a server-side ground truth data set, and determine whether to update the global model with the client-side model parameters based on a comparison of results of the secondary validation and a validation threshold.

Abstract: A first device may establish a connection with a second device, and may provide a connection check RPC message to the second device. The first device may receive a verification RPC message from the second device, and may provide, to the second device, a sync domains RPC request that includes a first list of active domains with associated address pools. The first device may receive, from the second device, a sync domains RPC response that includes threshold values for the active domains included in the first list of active domains, and may provide, to the second device, a sync pools RPC request that includes a first list of address pools associated with the active domains. The first device may receive, from the second device, a sync pools RPC response that includes confirmation of the first list of address pools, and may allocate addresses of an address pool to a CPE.

Abstract: Examples described herein relate to standardizing content requests and responses in a content delivery network (CDN). An edge node receives a control object including sets of instructions each implementing portions of a customer's business logic. The edge node may receive, from a client, a content request identifying a content item, and may apply a set of the instructions which causes the edge node to (i) determine whether any changes are needed for the benefit of a cache server and whether any changes are need for the benefit of an origin server, and (ii) generate a processed client request identifying the content item and including, if needed, any changes for the benefit of the cache server and the origin server. The edge node transmits the processed client request to the cache server, receives a response from the cache server, and transmits a processed client response to the client.

Abstract: Some embodiments provide a method for identifying security threats to a datacenter. From multiple host computers in the datacenter, the method receives attribute sets for multiple flows. Each respective attribute set for a respective flow includes at least (i) a source identifier for the respective flow and (ii) an indicator as to whether the respective flow is indicative of the source of the respective flow being a security threat. For each of multiple source identifiers, the method aggregates the received attribute sets to generate an aggregate attribute set for the source identifier that includes a combined measurement of security threat indicators. For a particular source identifier, the method adjusts a security threat likelihood score for the source corresponding to the particular source identifier based on the combined measurement of security threat indicators for the source identifier.

Abstract: Embodiments of the present invention provide a system for auto-segmentation of digital resources for facilitating resource processing events in a virtual ecosystem. The system is configured for identifying that a user is initiating a resource event, receiving resource credentials associated with entity resources and digital resources from the user, automatically performing Application Programming Interface (API) calls to verify that the user can perform the resource event, receiving an input from the user to use the entity resources as a first order of resource and the digital resources as a second order of resource for the resource event, determining that entirety of the entity resources do not meet resource value associated with the resource event, and automatically initiating segmentation of the digital resources.

Abstract: A method of initiating a KPI backfill operation for a cellular network based on detecting a network data anomaly, where the method includes receiving, by an anomaly detection and backfill engine (ADBE) executed by a computing device, a data quality metric that is based on a KPI of the cellular network; detecting, by the ADBE, the network data anomaly based on the data quality metric being more than a threshold amount different than a predicted value for the data quality metric, where the network data anomaly indicates that at least a portion of a data stream from which the KPI is calculated was unavailable for a previous iteration of the KPI; and providing, by the ADBE and based on detecting the network data anomaly, a backfill command to a backfill processing pipeline to perform the backfill operation by reaggregating the KPI when the portion of the data stream becomes available.

Abstract: A mobile computing device includes a touchscreen configured to display a user interface for receiving user input, memory hardware configured to store computer-executable instructions and information regarding scheduled conference calls, and processor hardware configured to execute the computer-executable instructions. The computer-executable instructions include communicating with a server via one or more wired/and or wireless communication networks, and parsing the information stored on the mobile computing device according to a parsing protocol to obtain information regarding at least one scheduled conference call. The instructions further include, in response to receiving user input via the user interface, transmitting at least a portion of the obtained information regarding the at least one scheduled conference call to the server to control a system controller in communication with the server to initiate the at least one scheduled conference call via a videoconferencing codec.

Abstract: Embodiments provide predictive dynamic caching in edge devices when connectivity may be potentially lost. A technique includes registering devices that require a connectivity to a cloud server via a network and predicting a likelihood of a network outage of the connectivity to the network for the devices having been registered. The technique includes determining data to cache for each of the devices by analyzing traffic for each of the devices to the cloud server, at least one piece of the data being currently in use by at least one of the devices. The technique includes responsive to predicting the likelihood of the network outage, caching the data to edge devices, and responsive to the connectivity to the network being restored, removing the data cached on the edge devices.

Abstract: Techniques for detecting anomalies in communication networks are provided. Bayesian networks (first and second) are trained for each feature in first and second lists of features. Third and fourth lists of features are generated and then the first and second Bayesian networks are used to classify each value of the third list of features and of the fourth list of features, respectively, as normal or anomalous. In some examples, a Support Vector Machine can be used for the classification.

Abstract: A computing device including a memory and a processor is provided. The processor is configured to receive, from a device configured to communicate data generated by at least one sensor disposed in a location being monitored, a request to establish a bi-directional connection between the device and a computing environment; identify a structure of data storing a uniform resource locator (URL) and a set of identifiers, the set of identifiers being representative of a group of connections with the computing environment; and respond, to the device, with a response specifying the URL, thereby enabling the device to establish the bi-directional connection.

Abstract: Systems and methods that provide for the pre-fetching of data, including receiving user input data from a user device, and in response, identifying a first set of objects for enabling an application operating on the user device to render a first interface in a sequence of interfaces, and determining a second set of objects for enabling the application to render a second interface in the sequence of interfaces. The first set of objects are transmitted to the user device, as well as instructions for directing the user device to render the first interface in the application using the first set of objects, and receive and store the second set of objects in an information repository associated with the user device. In response to a user input, the second interface is rendered in the application using the second set of objects.

Abstract: Systems and methods of enforcing policies in a computer environment for content distribution using pointwise mutual information (PMI) based clustering are provided. The system can maintain a network of nodes representing a plurality of assets. Upon detecting that an asset is associated with a policy label, the system can identify attributes of the asset and compute a PMI score indicating whether nodes of the network sharing the attributes belong to a single content source. Upon determining that the PMI score exceeds a predefined threshold value, the system can identify a cluster of nodes including the nodes sharing the attributes. The system can tag the cluster, for example, as being associated with a content source that is associated with the policy label.

Abstract: Provided are a method and a system for transmitting multiple data, in which the method includes receiving a plurality of transmission files for transmission from a transmission device of the first network to a reception device of the second network, and temporarily storing the received files, generating flexible packets by dividing each of the plurality of transmission files by a flexible packet length determined according to size of the files, in which a transmission file in a size smaller than the flexible packet length among the plurality of transmission files is generated as one flexible packet without being divided, loading the flexible packets into a plurality of flexible frames based on a corresponding transmission file priority according to a maximum data transmission size, and transmitting the plurality of flexible frames to the second network.

Abstract: Arrangements for controlling data retrieval are provided. In some aspects, a data request may be received by a computing platform. A pre-fetch engine may be executed to analyze the data request and generate, using a machine learning model, a pre-fetch template identifying data sets responsive to the request. The pre-fetch template may be transmitted to one or more data repositories and response data sets may be received. The response data sets may be generated by a data controller associated with a respective data repository. The data controller may identify data sets and evaluate the date sets to determine whether they meet local requirements of the geographic location of the data repository. The received data sets may be analyzed to identify missing data sets. If missing data sets are identified, the data may be processed by ignoring the missing data sets or inserting a substitute value for the missing data sets.

Abstract: A network connectivity system identifies potential connection mechanisms between datacenter entities (e.g., between service instances) on the cloud platform. The network connectivity system provides recommendations including one or more connectivity paths that are preferred with respect to one or more indicators, for example, cost, latency, or security. Specifically, the network connectivity system receives a request to configure a network connection between a first service instance and a second service instance on the cloud platform. The first service instance and the second service instance may reside within the same or different datacenters, different geographical locations, and the like. A network connectivity system identifies, from network connectivity information, one or more connectivity mechanisms for establishing connection between a first datacenter entity (e.g., first service instance) and a second datacenter entity (e.g., second service instance).

Abstract: A broadcast signal transmitting method is disclosed. The broadcast signal transmitting method comprises the steps of: processing at least one component of a broadcast service on the basis of a delivery protocol; generating service layer signaling (SLS) information including information on the component; generating service list table (SLT) information including bootstrap information for acquiring the SLS information; and generating a signal frame including a physical layer pipe (PLP) by performing a physical layer processing on the at least one component, the SLS information and the SLT information.