Abstract: A system and method for deploying virtual machines in a server farm based on capacity needs of the server farm includes receiving a request to deploy a new virtual machine (VM) in the server farm; determining that a cluster configuration property associated with the new VM specifies one or more parameters for the new VM; upon determining that the cluster configuration property associated with the new VM specifies one or more parameters for the new VM, retrieving at least one of a custom SKU parameter information or custom capacity parameter information for the new VM; and deploying the new VM to the server farm with at least one of the custom SKU parameter or custom capacity parameter.

Abstract: Disclosed are apparatuses, systems, and techniques that improve efficiency and decrease latency of remote direct memory access (RDMA) operations. The techniques include but are not limited to unified RDMA operations that are recognizable by various communicating devices, such as network controllers and target memory devices, as requests to establish, set, and/or update arrival indicators in the target memory devices responsive to arrival of one or more portions of the data being communicated.

Abstract: Systems and methods disclosed herein provide an inter-node interface for communication between client nodes, such as modems, in a local communication network (LCN), where local data does not pass through a network hub or mobile core. To improve signal strength, SINR and handoff speeds in the LCN, the disclosed systems and methods also enable a client node within the LCN to self-direct simultaneous transmission of a common data packet by a plurality of client nodes, without employing components of the Xhaul transport system for coordination.

Abstract: A computer-implemented method, a computer program product, and a computer system for defending against adversarial attacks in federated learning. In the federated learning comprising an aggregator and parties, the aggregator receives weights sent from the respective parties. The aggregator computes values of a performance metric for weight arrays obtained by the respective parties, using a validation dataset. The aggregator ranks the values of the performance metric in a list. The aggregator recursively splits the list in half until one or more adversary updates of the weights are isolated. The aggregator excludes one or more parties that send the one or more adversary updates from participating in a current round of training in the federated learning.

Abstract: An apparatus for use by a communication network element or function configured to act as a management controller in a communication network, the apparatus comprising at least one processing circuitry, and at least one memory for storing instructions to be executed by the processing circuitry, wherein the at least one memory and the instructions are configured to, with the at least one processing circuitry, cause the apparatus at least: to conduct a creation and activation of at least one data source function instance for configuring a data source being not standardized for usage in the communication network to provide data to a data consumer formed by a communication network element or function in a data format allowing the data consumer to process the data, wherein the creation and activation comprises associating the data source function instance to meta data describing either a non-communication network standardized data type or a proprietary data type using attributes defined to the respective data type,

Abstract: A service prevents attacks carried out through container escape for silo-based containers. A callback is registered for a function(s) that may be invoked from inside a container and returns an object handle(s). The callback, when triggered by invocation of the function(s), executes for determination of whether requests for access to objects via their handles are issued by suspicious processes. Access to CExecSvc.exe is restricted for processes that request a handle for CExecSvc.exe and are determined to be associated with a container themselves. Processes that escape their container through a technique that evades detection are also blocked from accessing the host system. When a process requests access to an object via invocation of a function that returns a handle, the callback executes for determination of whether the process but not the requested object is associated with a container, in which case the service restricts the process' access to the host system.

Abstract: A communication network system and a method of operating the same are disclosed. The communication network system includes a controller area network (CAN) controller that generates a CAN message, a gateway that receives the CAN message and generates a conversion message for Ethernet communication based on that preset conversion determination data is included in the CAN message, and an Ethernet controller that receives the conversion message.

Abstract: Systems, devices and methods are described for facilitating gateway prioritization. A system includes a gateway, a first node, and a second node coupled by an internal link. The gateway instantiates an allocator which allocates a link characteristic of the internal link based on a first resource request by the first node and in view of a second resource request by the second node. The requests identify a link characteristic for the internal link. The allocator allocates the link characteristic between the first node and the second node based on a ranking of the first node and the second node. The first link characteristic may be an internal link bandwidth. An ISP server is coupled by an external link to the gateway. The external link includes an external link characteristic which the first resource request identifies and the allocator allocates in view thereof.

Abstract: Presented herein are systems and methods for enabling and providing safe and secure last resort access to a computing system. Embodiments may leverage trusted platform modules that exists in information handling systems to provide a more convenient and more secure rescue account. In one or more embodiments, the last resort access may be based on federated approval from a vendor/provider and a customer. In one or more embodiments, part of the cryptographic information is stored/controlled by a provisioner (or vendor), and another part is stored/controlled by the customer. Since both parts are involved in the last resort access process in order to gain access, neither entity alone can gain access to the information handling system.

Abstract: The subject disclosure pertains to provisioning of a hybrid cloud services solution to users. A request for hybrid cloud service can be received from a user by way of a portal. Target users of a hybrid cloud service are identified in response to the received request. Out-of-band touch points can next be determined based on the target users and the request. In one instance, the touch points can be determined based on enterprise or industry rules regarding touch points. Subsequently, a hybrid cloud service solution can be provisioned that integrates the out-of-band touch points. Automatic life cycle management controls can also be provisioned to address patches.

Abstract: Some implementations described herein provide apparatuses and techniques for correcting a network disruption during a virtual meeting. In response to detecting audio and/or video input to a first device, audio and/or video data is recorded and stored in a temporary buffer of the first device. After the network disruption, and using time stamps, a network disruption server may request the audio and/or video data from the first device and transmit the audio and/or video data to a second device at an accelerated rate.

Abstract: Examples provide a cloud-based distributed secure shell (SSH) file transfer protocol (SFTP) server system for responding to client requests. A load balancer assigns client requests to available SFTP servers within the cloud based distributed SFTP server cluster. Each SFTP server is hosted on an individual VM associated with a cloud server. An authentication service authenticates the client requests using a single user profile. A registry table on a first cloud storage maintains metadata describing all the data records stored within a second cloud storage. The registry table and the data records are accessible to all the SFTP servers within the server cluster. In this manner, any server within the cluster can authenticate a user and respond to a client request while providing a seamless and uniform user experience while simultaneously reducing resource usage and improving scalability.

Abstract: Aspects of the subject disclosure may include, for example, obtaining a reference data set comprising a plurality of reference data records, wherein the reference data set is associated with a cloud infrastructure, and wherein each of the reference data records comprises a reference network name associated with one of a plurality of reference networks that is configured within the cloud infrastructure and a corresponding reference Virtual Local Area Network (VLAN) identifier for the one of the plurality of reference networks that is configured within the cloud infrastructure; obtaining an input data set comprising a plurality of input data records, wherein the input data set is associated with the cloud infrastructure, and wherein each of the input data records comprises a network name associated with one of a plurality of networks that is being considered for configuration within the cloud infrastructure and a corresponding VLAN identifier for the one of the plurality of networks that is being considered for

Abstract: The present disclosure relates generally to systems and methods to enable users to access content authorized to other users. A method for accessing content may include receiving an access activation request from a primary device or a primary user account corresponding to a content item accessible by the primary user account, generating an access identifier corresponding to the content item, where the access identifier identifies the content item and includes access information, receiving an access request including the access identifier from a secondary device or a second user account, determining that the access identifier is valid, and delivering the content item to the secondary device.

Abstract: Embodiments herein provide a method for generating multiple IP addresses in a wireless network by a system (100). The method includes receiving user request to generate multiple IP addresses of at least one network element. Further, the method includes retrieving the IP address template corresponding to the at least one network element from a database (120) based on the user request, wherein the IP address template comprises a plurality of network parameters corresponding to positionally encoded bits of an IP schema. Further, the method includes generating the multiple IP addresses of the at least one network element based on the set of user defined labels, the count of the multiple of IP addresses of the at least one network element, the IP address template and the IP schema. Further, the method includes displaying the generated multiple IP addresses of the at least one network element.

Abstract: Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a user equipment (UE) may relay sidelink data between a first remote UE and a second remote UE. The UE may facilitate end-to-end physical layer security for the sidelink data relayed between the first remote UE and the second remote UE based at least in part on a first link key associated with a first link between the first remote UE and the UE and a second link key associated with a second link between the UE and the second remote UE. Numerous other aspects are described.

Abstract: One example process may include modifying a status of a container after a communication session associated with the container has ended, receiving a token from a client device to establish a communication session with a virtual machine, assigning the client device to the container, updating a container state file to include the token, a file version and a client device identifier, and responsive to assigning the client device, initiating one or more container processes with the container and maintaining one or more container processes already operating in an active status with the container prior to the assignment.

Abstract: The present disclosure is related to Multi-Access Management Services (MAMS), which is a programmable framework that provides mechanisms for the flexible selection of network paths in a multi-access (MX) communication environment, based on an application's needs. Generic Multi-Access (GMA) data plane functions are integrated into the MAMS framework to provide a virtual network connection that acts as the MAMS anchor connection. The virtual (anchor) connection is used for sending time-sensitive MAMS control/management messages. Virtual network configuration parameters are discussed in the present disclosure, which are used for establishing and setting up the virtual (anchor) connection. Other embodiments may be described and/or claimed.

Abstract: An electronic apparatus communicating with a display apparatus including a plurality of display modules is provided. The electronic apparatus includes an Ethernet switch; and a processor connected to the Ethernet switch and including a virtual Ethernet port to which an Internet Protocol (IP) address is pre-allocated, wherein the processor is configured to: configure a network with an external electronic apparatus based on the IP address, and based on a signal for setting a screen of a display module, among the plurality of display modules, connected to a port of the Ethernet switch being received from the external electronic apparatus through the network, control the Ethernet switch to transmit the signal for setting the screen to the display module.

Abstract: A system includes a first processing device and a second processing device, each of which is coupled to a NIC implemented with an RDMA interface. The NICs are capable of rendezvous flows of RDMA write exchange. In an example where the first NIC is at the sender side and the second NIC is at the receiver side, a rendezvous flow is initiated by an execution of a RDMA write operation by the second NIC. The second NIC provides at least an address of a buffer in the second processing device to the first NIC through the RDMA write operation. Then the first NIC initiates a RDMA write operation to send data in a buffer in the first processing device to the second NIC. The second NIC may acknowledge receipt of the data with the second NIC. The second NIC can update a CI of the WQE based on the acknowledgement.