Abstract: An analysis unit 6 generates one or more pairs of a start point fact which is a fact representing possibility of the attack in a device that is a start point and an end point fact which is a fact representing possibility of the attack in the device that is an end point, analyzes, for each pair, whether or not it is possible to derive the end point fact from the start point fact, based on facts representing states of the devices generated based on information regarding the device that is the start point and information regarding the device that is the end point, the start point fact, and one or more analysis rules for analyzing the attack, and generates an attack scenario in a case where it is possible to derive the end point fact from the start point fact.

Abstract: A serverless function execution system enables fast, efficient and flexible deployment and execution of serverless functions. Functions in the system are stored as code at a location accessible by a Uniform Resource Locator (URL) or unique hostname. A combinatorial URL, the combination of the two locations, is utilized to combine specific code with a specific computation system to execute that code along with optional parameters. The system utilizes function isolation to prevent an executing function from being able to directly access or modify unauthorized data or processes external to the isolation unit.

Abstract: Apparatuses, methods, and systems are disclosed for establishing a connection with a dual registered device. One method includes receiving a first request to establish an internet protocol multimedia subsystem session with a first device, wherein the first device is dual registered to: a first network access supporting 5G core network connectivity; and a second network access supporting evolved packet core network connectivity and circuit switched network connectivity, wherein the first device has connectivity to an internet protocol multimedia subsystem via either the first network access or the second network access. The method includes determining first information corresponding to a network access connectivity selected from the first network access and the second network access through which the first device has internet protocol connectivity with the internet protocol multimedia subsystem. The method includes transmitting a second request to a first network function to retrieve second information.

Abstract: Systems and methods are provided herein for streaming immersive content to a device. This may be accomplished by a system displaying a piece of media on a display in a first format and determining that the piece of media is approaching a segment of the piece of media that is available in a second format (e.g., light field content). In response to determining that the upcoming segment is available in the second format, the system can use one or more sensors to determine a position of a user in relation to the display. The system can then send a request for the piece of media in the second format, wherein the request comprises the position of the user. The system can then receive and display the segment of the piece of media in the second format, wherein the segment is customized according to the position of the user.

Abstract: A system for a building management system simulation includes one or more processors and memory. The memory includes instructions stored thereon, that when executed by the one or more processors, cause the one or more processors to generate a space agent representing a space in a building, the space agent to maintain an environmental condition of the space based on an optimization state of the space, generate an equipment agent representing a device that serves the space, and register the space agent and the equipment agent to a space communication channel associated with the space. The space agent communicates with the equipment agent over the space communication channel.

Abstract: Various embodiments described herein relate to provisioning edge layer to cloud layer connectivity for asset devices. In an embodiment, an application programming interface (API) payload to facilitate network provisioning related to a set of industrial assets within an industrial network system is received. Additionally, a set of subscription domain features included in the API payload is mapped to a set of application content features associated with a cloud platform and a gateway profile for configuring a connection between the industrial network system and the cloud platform is generated based at least in part on the set of application content features. Execution of the gateway profile via a gateway device implemented as a network node between the industrial network system and the cloud platform can also be caused.

Abstract: Described is a learning system for multi-agent applications. In operation, the system initializes a plurality of learning agents. The learning agents include both tactical agents and strategic agents. The strategic agents take an observation from an environment and select one or more of the tactical agents to produce an action that is used to control a platform's actuators or simulated movements in the environment to complete a task. Alternatively, the tactical agents produce the action corresponding to a learned low-level behavior to control the platform's actuators or simulated movements in the environment to complete the task.

Abstract: The present disclosure relates to computer-implemented methods, software, and systems for the replication of secret keys between server nodes. Keys for encryption and decryption are persisted in a log file on a first database hosted on a primary server. The log file comprises data for executed database transactions at the first database and key management operations at a first key store. In response to triggering a synchronization between the primary server and a secondary server, a set of sequential entries of the log file are replayed at the secondary server from the first database. An execution of a transaction is replicated at a secondary database at the secondary server based on data for an entry at the log file and a key management operation associated with a key at the first key store that is persisted in another entry of the log file is replicated.

Abstract: An automation system includes a first system area including a transmitting redundancy handling device and a second system area including a receiving redundancy handling device. Device obtains a first communication protocol packet with automation application data and a sequence number linked thereto, extracts the sequence number and places it in a destination option header of a first IPv6 packet, which also includes the first communication protocol packet, sends packet to the receiving redundancy handling device, obtains a second communication protocol packet having the same automation application data and sequence number, places the sequence number in a destination option header of a second IPV6 packet also including the second communication protocol packet, and sends packet to device. Device receives the packets, analyses the destination option headers, determines that the sequence number is the same in the packets and discards the first or the second IPv6 packet based on the determination.

Abstract: A data stream processing system is operable to generate key assignment data indicating assignment of each of a plurality of subsets of a plurality of possible keys to a plurality of feed receiver modules by assigning one owner feed receiver module of the plurality of feed receiver modules to each key of the plurality of possible keys for a plurality of incoming messages, and by further assigning a set of follower feed receiver modules of the plurality of feed receiver modules to the each key of the plurality of possible keys. The plurality of incoming messages are processed via the plurality of feed receiver modules based on the key assignment data.

Abstract: Techniques for accessing shared content based on a recipient's subscriptions are described. A recipient user may receive a notification that a sender user shared content. The recipient user may request to output the shared content. The system may determine which content providers the recipient user is subscribed to, and may perform entity resolution processing to identify potential content, from the subscribed content providers, corresponding to the shared content. The system may output the identified potential content in response to the request to output the shared content.

Abstract: An intercommunication system includes one or more modular units utilizing a standards-based audio-over-IP configuration. The modularity of the system provides improved scalability. For instance, a number of audio channels is not limited by physical constraints (e.g. number and type of ports) of a central switch. Accordingly, the addition of audio channels may not require swapping one central switch for a larger switch. Moreover, security applications may be layered onto the standards-based audio-over-IP configuration to implement security requirements often found with intercommunications systems.

Abstract: Techniques for using more-specific routing to perform scalable Layer-2 (L2) stretching of subnets across hybrid-cloud environments. Routing tables in a public cloud may allow for routes that are more specific than the default local route, and the more-specific routes may be used to send all traffic to a dedicated, cloud router. The more-specific routes are set up for a VPC where a subnet resides such that the more specific-routes cover at least a portion of subnet range. The next hop for the more-specific routes point to the cloud router which is capable of doing host routing and segmentation extension. Thus, traffic originating from endpoints in a VPC is routed to the cloud router, and the cloud router determines whether the traffic is to be re-routed back to a destination endpoint in the VPC (or another cloud location), or sent to a destination endpoint residing in the on-premises site.

Abstract: Disclosed herein are systems and methods for monitoring delivery of messages passed between processes from different operating systems. In one aspect, an exemplary method comprises, creating a proxy process in a first Operating System (OS) for a second process, wherein the second process is from a second OS, the first and second OS being installed in respective computing environments, assigning at least one security policy to the created proxy process for monitoring delivery of messages associated with the created proxy process, where the messages are transmitted through a programming interface of the created proxy process corresponding to a programming interface of the second process, generating a security monitor for the first OS based on the created proxy process and security policies of the first OS, and monitoring the delivery of messages between at least a first process in the first OS and the second process based on the security policies.

Abstract: Some embodiments of the invention provide novel methods for facilitating a distributed SNAT (dSNAT) middlebox service operation for a first network at a host computer in the first network on which the dSNAT middlebox service operation is performed and a gateway device between the first network and a second network. The novel methods enable dSNAT that provides stateful SNAT at multiple host computers, thus avoiding the bottleneck problem associated with providing stateful SNAT at gateways and also significantly reduces the need to redirect packets received at the wrong host by using a capacity of off-the-shelf gateway devices to perform IPV6 encapsulation for IPv4 packets and assigning locally unique IPv6 addresses to each host executing a dSNAT middlebox service instance that are used by the gateway device.

Abstract: Disclosed are a method and system for monitoring streaming. The method for streaming monitoring includes registering a streaming channel of a user as monitoring target information, performing monitoring on broadcast streaming using the streaming channel based on configuration information of the user, and providing monitoring information for the broadcast streaming.

Abstract: A system and method for managing resources for computation in an Internet of Things (IoT) environment. The system includes wireless devices, Fog servers, and a centralized Fog node controller, each connected by a wireless communication network. Communication over the communication network uses millimeter wave or submillimeter wave signals. The wireless devices generate application-related IoT tasks. The Fog servers provide computation resources to the IoT tasks, where each of the IoT tasks are of various sizes, in bytes, and have compute resource requirements. The Fog node controller manages computation of the IoT tasks, for each Fog server, subject to a predetermined number of Fog server computation cycles that are performed in parallel.

Abstract: In accordance with an embodiment, described herein is a system and method for use of dynamic templates with a network traffic flow information protocol, such as, for example, an Internet Protocol Flow Information Export (IPFIX) protocol. An exporter, that operates an exporting process, generates a capability message that indicates the network traffic flow fields that can be implemented and exported from the exporter (e.g., in an IPFIX data format), and communicates the capability message to a collector that operates a collecting process. The collector examines the network traffic flow fields identified by the capability message, and generates a dynamic template request message indicating (in the manner of a virtual template) a combination of fields for which network traffic flow information is to be provided. The exporter thereafter communicates, to the collector, data messages comprising the network traffic flow fields as indicated by the dynamic template.

Abstract: Novel tools and techniques are provided for implementing encoding or decoding of adaptive bitrate streams. In various embodiments, one or more first computing systems may divide a live media content stream into one or more segments, each segment might include a starting segment boundary and an ending segment boundary. The one or more first computing systems might encode the one or more segments into one or more primary adaptive bitrate streams. The one or more first computing systems might also divide the one or more segments of the live media content stream into one or more subsegments. Each subsegment might be less than a length of a corresponding segment of the one or more segments. The one or more first computing systems might the encode and/or a second computing system might decode the one or more subsegments into or from one or more secondary adaptive bitrate streams.

Abstract: In general, this disclosure describes techniques for leveraging a containerized routing protocol process to implement virtual private networks using routing protocols. In an example, a system comprises a container orchestration system for a cluster of computing devices, the cluster of computing devices including a computing device, wherein the container orchestration system is configured to: deploy a containerized application to a compute node; and in response to deploying the containerized application to the compute node, configure in the compute node a virtual routing and forwarding (VRF) instance to implement a virtual private network (VPN) for the containerized application.