Abstract: A method, computer program product, and computer system for using, by a computing device, free central processing unit (CPU) cycles for processing Non-Volatile Memory express Over Fiber (NVMeoF)/Transmission Control Protocol (TCP) sockets. Using the free CPU cycles for processing the NVMeoF/TCP sockets may include exposing a character device with a callback that iterates over the NVMeoF/TCP sockets for processing.

Abstract: A cloud-based, geospatially-enabled data recording, notification, and rendering system.

Abstract: An endpoint protection system is provided. The system comprises: an endpoint agent deployed to an endpoint device, wherein the endpoint agent is built-into one or more existing applications running on the endpoint device and is configured to capture network session activity between the endpoint device and one or more internet servers to detect a phishing attack using a set of machine learning algorithm trained classifiers, and block the phishing attack; and an endpoint management system in remote communication with the endpoint agent, wherein the endpoint management system is configured to train and develop the set of classifiers, and receive information about the detected phishing attack and an incident report from the endpoint agent, the endpoint agent provides a graphical user interface running on the endpoint device allowing an end user to configure one or more protections provided by the endpoint agent.

Abstract: Receive a transaction generated by a user of a non-internet application; identify transaction life cycle steps of previous similar transactions; and generate a transaction risk score for the transaction using machine learning models and a blockchain record of the previous similar transactions. In response to the transaction risk score exceeding a threshold value, authenticate the transaction and the user using two-step authentication. The two-step authentication uses challenge/answer templates derived from the blockchain record of previous transactions.

Abstract: The main objective of Certificate Transparency (CT) is to detect mis-issued certificates or rouge certificate authorities. It has been observed that phishing sites have been increasingly acquiring certificates to look more legitimate and reach more victims, thus providing an opportunity to predict phishing domains early. The present disclosure provides systems and methods for early detection of phishing and benign domain traces in CT logs. The provided system may predict phishing domains early even before content is available via time-, issuer-, and certificate-based characteristics that are used to identify sets of CT-based inexpensive and novel features. The CT-features are augmented with other features including passive DNS (pDNS) and domain-based lexical features.

Abstract: An Ethernet solid-state drive (eSSD) system includes a plurality of eSSDs, an Ethernet switch and a baseboard management controller. The Ethernet switch is coupled to each of the eSSDs, and the baseboard management controller is coupled to the each of the eSSDs and to the Ethernet switch. The baseboard management controller controls the Ethernet switch to provide to each eSSD a corresponding predetermined bandwidth that is based on bandwidth information for the eSSD that is stored in a policy table of the baseboard management controller. The at least one predetermined bandwidth may include a predetermined ingress bandwidth and a predetermined egress bandwidth for the corresponding eSSD. The at least one predetermined bandwidth may be based on a service level associated with the corresponding eSSD, and may be adaptively based on operating parameters of the corresponding eSSD.

Abstract: A method of the present disclosure includes confirming second state information received from a second electronic device, confirming first state information of the first electronic device, comparing the first state information and the second state information with pre-set state information, and performing a function of the second electronic device by switching to the first electronic device according to the comparison result. Accordingly, since the first electronic device can be selected and controlled with a gesture or motion agreed between the first electronic device and the second electronic device, security can be enforced by avoiding an accident of data leakage, and selecting the second electronic device for controlling can be decreased.

Abstract: A service layer (SL) function may be used for managing a user profile that is associated with a SL user and using this profile to automatically configure different types of devices connected to an IoT service provider's platform. A SL function may be used to support user data privacy and security when data is imported and exported between gateways or servers temporarily.

Abstract: In some implementations, a system may obtain a first model that is trained to identify feature data associated with a client system using one or more services of a service platform. The system may train, based on the feature data, a second model to identify anomalies associated with devices accessing the one or more services in association with a client identifier of the client system. The system may receive access data associated with an acting device accessing a service of the service platform. The system may determine, using the second model, that the acting device accessing the service corresponds to potential anomalous activity based on the access information. The system may obtain, from a verification device, a verification that the acting device accessing the service is anomalous activity. The system may perform, based on obtaining the verification, an action associated with the acting device.

Abstract: A method implemented to provide a virtual network to tenants requiring bandwidth in a cloud computing environment is disclosed. The method starts with receiving a request for a task at a network device, the request including a first parameter indicating VMs required, a second parameter indicating bandwidths the required VMs need, a third parameter indicating a duration of the task, and a fourth parameter indicating a deadline of the task. The network device then selects a starting time and a bandwidth allocation of the task, where the bandwidth allocation is shrank to be smaller than the second parameter indicating, and where the selection aims at minimizing a measurement of cloud resource utilization considering consumptions of both VMs and bandwidth. Then the network device allocates VMs for the request at the starting time with the bandwidth allocated at a particular location in the cloud computing environment.

Abstract: A computer system automatically tests a network communication model by predicting whether particular traffic (whether actual or simulated) should be allowed on the network, and then estimating the accuracy of the network communication model based on the prediction. Such an estimate may be generated even before the model has been applied to traffic on the network. For example, the model may be generated based on a first set of network traffic. The accuracy of the model may then be estimated based on a second set of network traffic. This allows the accuracy of the model to be estimated without first waiting to apply the model to actual network traffic, thereby reducing the risk associated with applying the model before its accuracy is known.

Abstract: Examples relate to preventing scheduling or executing a resource on an inconsistent host node in a networked system. Some examples track a taint status of the host node and identify whether the host node is inconsistent based on the taint status of the host node over a predefined period of time. Upon identifying that the host node is inconsistent, a master taint is applied on the inconsistent host node, which prevents scheduling or executing a resource on the identified inconsistent host node.

Abstract: Systems and methods for enhancing user engagement with network applications include client application executed by a client device, the client application comprising an embedded browser, in communication with one or more application servers providing a plurality of network applications. The embedded browser is configured to access a first network application and a second network application. The client application is configured to: track interactions of a user via the embedded browser with the first network application and the second network application, each interaction having a corresponding score; generate an aggregate score for the user from the scores of each tracked interaction; transmit, to a first application server, the aggregate score for the user; and receive, from the first application server, a score table comprising a plurality of scores of users including the aggregate score for the user. The embedded browser is further configured to display the score table to the user.

Abstract: A system and method of pre-fetching data in a network includes displaying first data to a user, the first data being upstream of other data in a data flow. Before receiving a request from the user to view the other data, retrieving at least some of the other data and storing the retrieved other data in a memory device. After a request is received from the user to display the other data, using the stored data for the display to the user.

Abstract: A computer-implemented method, operable on a device in a content delivery network (CDN), wherein the CDN delivers content on behalf of at least one content provider, the device implementing a content delivery (CD) service, the method includes, by the service on the device: receiving a request for a particular resource from a client; determining whether the client includes an optimization support mechanism; when the client includes an optimization support mechanism, providing the client with a first version of the particular resource, optimized, at least in part, for the capabilities of the client in combination with the optimization support mechanism; otherwise providing the client with either (i) an un-optimized version of the particular resource, or (ii) a version of the particular resource optimized, at least in part, for the capabilities of the client without the capabilities of the optimization support mechanism.

Abstract: Examples described herein relate to standardizing content requests and responses in a content delivery network (CDN). An edge node receives a control object including sets of instructions each implementing portions of a customer's business logic. The edge node may receive, from a client, a content request identifying a content item, and may apply a set of the instructions which causes the edge node to (i) determine whether any changes are needed for the benefit of a cache server and whether any changes are need for the benefit of an origin server, and (ii) generate a processed client request identifying the content item and including, if needed, any changes for the benefit of the cache server and the origin server. The edge node transmits the processed client request to the cache server, receives a response from the cache server, and transmits a processed client response to the client.

Abstract: A method is provided of extracting file content from a live stream of network data streaming multiple files.

Abstract: A system, method, and computer-readable medium are disclosed for performing a data center monitoring and management operation. The data center monitoring and management operation includes: monitoring data center assets within a data center; identifying an issue within the data center, the issue being associated with an operational situation associated with a particular component of the data center; notifying an administrator of the issue within the data center; tracking administrator reactions based upon the notifying; identifying a remediation task, the remediation task being designed to address the issue within the data center, the identifying being based upon at least some of the administrator reactions; and, prioritizing the remediation task based upon the administrator reactions to the notifying.

Abstract: A control system determines whether a browser is retrieving supplemental content over a slow or faulty network using a tracking indicator. Based on determining that browser is retrieving supplemental content over a slow or faulty network, the control system modifies responses to opportunities to provide supplemental content to the browser. The control system may modify responses by declining to bid, responding with a lower bid amount, or responding with alternate supplemental content. Based on determining that browser is no longer retrieving supplemental content over a slow or faulty network, the control system modifies responses to opportunities to provide supplemental content to the browser by responding with a higher bid amount or responding with the original supplemental content. Thus, the control system maximizes the use of control system and campaign manager resources by responding to opportunities according to the likelihood that they will result in an impression or a conversion.

Abstract: A log output device includes a generation unit that generates a log indicating history information of execution of processing, a memory that stores a first list including first static information indicating that the processing is abnormal; a second list including second static information indicating that the processing is normal; and a third list including dynamic information to be used for determining the necessity of output of the log according to the log, and a selection unit that determines to output the generated log when the log has the first static information, and decides not to output the generated log when the log has the second static information. The selection unit determines the necessity of output of the generated log on the basis of the log and the third list.