Abstract: Introduced here are Internet monitoring platforms configured to define, monitor, and assess the boundary of a private network associated with a client. By monitoring the entire Internet, a private network, and relationships between these networks, an Internet monitoring platform can discover changes in the boundary of the private network that is defined by those assets on the private network capable of interfacing with a public network, such as the Internet. The Internet monitoring platform may, in response to discovering the boundary of the private network has experienced a change, identify an appropriate remediation action by mapping the change to a technological issue, a relevant business relationship, etc. For example.

Abstract: An information processing system according to the present invention includes: a storage device; and at least one processing device coupled to the storage device, the processing device performing operations, the operations includes: acquiring authentication information; performing authentication processing on the acquired authentication information; and performing log-in processing according to an authentication processing result, wherein the operation further includes: performing log-in processing on an authorized system when authentication processing is successful, and performing log-in processing on a dummy system different from the authorized system when authentication processing is unsuccessful.

Abstract: Examples of techniques for service level management of a workload defined environment are disclosed. In one example implementation according to aspects of the present disclosure, a computer-implemented method may include: collecting runtime workload data for a workload executing on a processing system; collecting performance data for the workload within a container; performing, by a processing device, a determination of whether the runtime workload data satisfies the goal set forth in the service level agreement; providing data from within the container in a format utilized by an application program interface; and accessing the data from within the container through the application program interface from outside of the container.

Abstract: Methods and systems are described for reducing malicious attacks on a first device in a computer network comprising a plurality of devices. The method may include, receiving by the first device, a request for a service from a second device. Next, determining that the second device is suspicious based on the request. Next, generating a verifiable delay function (VDF) based on the determination and transmitting the VDF to the second device. Then, receiving a solution associated with the VDF after a predetermined time duration, and verifying that the solution is correct. Finally, generating, based on the verification, a response to the request for the service from the second device. The network can include a client-server network, a decentralized network, or a decentralized data streaming network; the first device can include a server device, a first peer node, or a cacher peer node; and the second device can include a client device, a second peer node, or a viewer peer node.

Abstract: Apparatus and associated methods that allow a user (e.g., cable or satellite network subscriber) to access content, such as a video program, from a location outside the subscriber's network, with dynamic or adaptive insertion of secondary content (e.g., advertisements or promotions) that are more relevant for that context. In one embodiment, a personal content server streams the content to the subscriber over a network connection from the local e.g., (subscription) network to a remote network upon authorization by a content manager process; secondary content is evaluated and selectively inserted or replaced depending on factors such as the user's remote location, the configuration of their platform, the date and time of their access request, and/or the subject matter of the primary content.

Abstract: Systems and methods for efficiently and securely requesting and receiving, from a remote service, data for multiple accounts associated with the same device or application. In one example, a client device is configured to request application data for all accounts associated with the device or application installation using a single remote procedure call, rather than requiring separate calls for each account, and to do so by providing a single identifier rather than including identifiers specific to each associated account. The remote service is further configured to return the requested information in a manner that obfuscates the account identifiers and thus limits their potential use if the communication is intercepted, such that the application data can be efficiently transmitted together even where security or other concerns would otherwise dictate that separate transmissions should be made for each account.

Abstract: Systems, methods, apparatus, and software for pre-fetching and/or pre-loading sub-resources used in rendering HTML files, web pages and the like are provided herein. Implementations include expedited sub-resource loading in which a cache node or other content delivery network component receives a first end user device request seeking a primary resource (e.g., an HTML file). Using information in the first request, the content delivery network pre-fetches one or more identified sub-resources (e.g., JavaScript code) required for rendering of the HTML file. Pre-fetched sub-resources are held by the cache node. During parsing of the HTML file by the end user device, a web browser or other application requires the sub-resource(s) and the end user device thus sends a second request to the cache node asking for the required sub-resource(s). The cache node sends the requested, pre-fetched sub-resource(s).

Abstract: Technology for operating a data-source device for assembling a data stream compliant with a data stream constraint. The technology comprises acquiring a plurality of data items by accessing data in a memory and/or transforming data. Prior to completion of the accessing data in a memory, an accessor is selected based on an estimate of access constraint. Prior to completion of the transforming data, a transformer is selected based on an estimate of transformation constraint, wherein the transportation constraint comprises any data acquisition constraint. The access and transformation constraints are dependent upon system state it the data-source system. The data items are positioned in the data stream, and, responsive to achieving compliance with the data stream constraint, the data strewn is communicated.

Abstract: A system comprises an enterprise network system and engine. The engine has a discovery module coupled to a switch device, an AI and machine learning based monitoring and detection module coupled to the switch device, and a remediation module coupled to the switch device. The remediation module is configured to initiate a remediation process based upon the detection of at least one of the anomalies from the flow of data.

Abstract: Disclosed are systems and methods for securing a network using one or more controllers and one or more network nodes. A method may utilize a packet processing engine configured to process incoming network packets, a processing analysis engine configured to perform relatively more complex processing and analysis, and one or more controllers configured to coordinate one or more packet processing engines and one or more processing analysis engines across a network to perform endpoint threat detection and mitigation.

Abstract: Methods and systems for detecting a data exfiltration event on a network. The method includes receiving traffic data and applying a transformation to transform the traffic data at least closer to a normal distribution. The method further includes selecting at least one outlier identification technique based on a property of the transformed data, and then executing the at least one selected identification technique to determine whether the traffic data is indicative of a data exfiltration event.

Abstract: A system and method for transferring media over a VPN connection are provided. The method includes receiving a first request for connection to a first target at a VPN server from a user device, upon which a domain name of the first target is resolved at the VPN server. A session identification (ID) string for the first request is generated, and the first request and the session ID string are sent from the VPN server to a proxy media server (PMS). A second request for connection to the first target or to a second target, different from the first target is received at the VPN server. The session ID string for the second request is determined or assigned or both, and the second request and the session ID string are sent from the VPN server to the PMS.

Abstract: In a communication apparatus on a network where communication apparatuses perform direct communication with each other, a network management apparatus for managing the network based on message information transmitted and received on the network is determined. When the communication apparatus itself is determined as the network management apparatus, the apparatus collects information indicating device capabilities from other communication apparatuses. On the other hand, the communication apparatus receives information indicating device capabilities from another communication apparatus when the other communication apparatus is determined as the network management apparatus.

Abstract: An apparatus and a method for reducing power consumption of an Application Processor (AP) in an electronic device are provided. The electronic device includes a first processor for supporting a first Internet Protocol (IP) Multimedia Subsystem (IMS) protocol stack, and a second processor for supporting a second IMS protocol stack. The first processor includes an AP for processing a multimedia service, and the second processor includes at least one of a Communication Processor (CP), a Modem Processor (MP), and a Baseband Processor (BP) for processing a communication service.

Abstract: Example methods and systems are provided for simulation-based cross-cloud connectivity checks. One example method may include injecting a connectivity check packet in a first cloud environment, and obtaining first report information associated with a first stage of forwarding the connectivity check packet from one or more first observation points in the first cloud environment. The method may also comprise: based on configuration information associated with one or more second observation points in the second cloud environment, simulating a second stage of forwarding the connectivity check packet towards a second virtualized computing instance via the one or more second observation points. The method may further comprise: generating second report information associated with the simulated second stage to identify a connectivity status between a first virtualized computing instance and the second virtualized computing instance based on the first report information and the second report information.

Abstract: An example embodiment may involve a method performed by a software application executable on a central enterprise resource planning (ERP) client of a plurality of ERP clients. The ERP clients may be contained within a managed network. Each ERP client may be associated with one or more computing devices of the managed network on which ERP software is executable. Each ERP client may include a database that stores user-related data for individual users of the managed network whom are authorized to access the ERP client. The method may involve communicating with other ERP clients of the plurality of ERP clients to retrieve the user-related data stored in databases of the other ERP clients, storing the user-related data from the other ERP clients, and transmitting the user-related data to a computing device of a computational instance contained in a remote network management platform associated with the managed network.

Abstract: Methods and systems are disclosed herein for a media guidance application that provides diverse and reliable media content suggestions. Specifically, the media guidance application may monitor user preferences of a select group of friends of the user and base media recommendations on those user preferences. The media guidance application may determine close friends of the user, such as friends that a user regularly communicates with, and include recommendations on the media preferences of only those close friends.

Abstract: Present technology is directed to a system and method for implementing an offline scheme to automatically and efficiently transform a set of conventional IP-based Access Control Entries in a supplied configuration into compressed form that can then be represented as Object-Group based Access Control Entries. The compression is performed on contiguous blocks of the supplied Access Control List having a common prescribed filtering access. The compression is performed by iteratively selecting a data field with mismatching data values across the ACEs and merging the data values into a corresponding data field of the output ACE. The common values of other data fields are then imported to the corresponding data fields of the output ACE. The process is repeated in an iterative manner by assigning a different data field as the selected data field for each iteration round.

Abstract: Described herein is a method of processing location and level changes for managed devices, which includes a child device sensing a move to a new location and level in a tree structure including levels having different permissions and policies, and the child device receiving permissions and policies for the new location and level via a master clone file. Also described is a method of updating policies in a device in a fleet of image forming devices that includes identifying a setting in the device that should not be updated automatically, setting a respective flag associated with the identified setting, thereby indicating that the setting is not to be updated automatically, receiving a file with updated policy values, and updating settings of the device according to the updated policy values except for the identified setting. Also described is a method for processing exemption requests in a fleet of image forming devices.

Abstract: Disclosed herein are embodiments of systems, methods, and products comprises an analytic server, which automatically manage network policy. The analytic server determines the electronic communication protocol restrictions including access rules and the connectivity restrictions of electronic devices within a local area network, and segments the local area network into multiple subnetworks that are isolated from each other. The analytic server assigns an electronic device joining the local area network into one of the subnetworks according to the communication protocol determined by the device identifier. The analytic server monitors data traffic of the electronic devices of the local area network. The analytic server transmits an alert notification to a user device when the data traffic does not satisfy the electronic communication protocol restrictions, and updates the electronic communication protocol restrictions in a restriction database with new rules learned from the network.