Abstract: A method of managing a configuration of a computer network system includes creating of an instance of a server by a user through an interface of a public cloud service. A management process detects the existence of the instance by regularly polling the cloud service for infrastructure data and analyzing the infrastructure data to determine that the newly created instance exists. The method also includes testing parameters of the server indicated in the infrastructure data, which parameters are fully determined by the request, against predefined one or more infrastructure policies, whereby the parameters are available and testable against the policies during the generating, but are tested after the request is enacted to create the instance without creating policy enforcement encumbrance on the user when the user creates the new instance of the server.

Abstract: An information processing system including Application Platform capable of communicating with Edge1 connected to each other to be able to communicate each other, in which Application Platform includes a second processor, information on microservices and data possessed by Edge1, and performance information describing the performance of Edge1, and the second processor uses predetermined data to combine a plurality of predetermined microservices and causes Edge1 to execute them in a predetermined order. When executing the application, microservices and data are moved between Edge1 based on the information of the microservices and the data possessed by Edge1, and the performance information.

Abstract: Systems and methods are described for managing a user device in multiple management modes. In an example, an agent executing on the user device can enroll the user device with a Unified Endpoint Management (“UEM”) system in a limited management mode. The agent can receive and install a first configuration profile from a server that configures the agent to operate on an unmanaged channel of the user device. In one example, the user device can have a third-party management client that manages the user device on a managed channel. The third-party management client can be removed. The agent can enroll the user device with the UEM in a full management mode. The agent can receive and install a second configuration profile that configures the agent to operate on the managed channel of the user device.

Abstract: A method of managing a configuration of a computer network system includes creating of an instance of a server by a user through an interface of a public cloud service. A management process detects the existence of the instance by regularly polling the cloud service for infrastructure data and analyzing the infrastructure data to determine that the newly created instance exists. The method also includes testing parameters of the server indicated in the infrastructure data, which parameters are fully determined by the request, against predefined one or more infrastructure policies, whereby the parameters are available and testable against the policies during the generating, but are tested after the request is enacted to create the instance without creating policy enforcement encumbrance on the user when the user creates the new instance of the server.

Abstract: Systems and methods for managing nodes that have lost contact with a control plane are disclosed. A first node among a plurality of nodes may use a polling process to monitor for a polling signal response from a control plane at periodic intervals, wherein the polling signal response indicates a health status of the first node as healthy. In response to not receiving the polling signal response for a threshold number of consecutive intervals, the first node may identify a subset of peer nodes among the plurality of nodes and instruct each peer node in the subset to inquire as to the health status of the first node from the control plane. The first node may perform an action based on a response received from each of the subset of peer nodes after inquiring as to the health status of the first node from the control plane.

Abstract: A server computer can receive, from a terminal via a satellite, a configuration request that includes a location of the terminal. The server computer can select, based on the location, configuration data including a specification of communications by the terminal, and then send the configuration data to the terminal via the satellite.

Abstract: A maintenance recommendation for containerized services can find a time to perform maintenance on a particular service based on resource usage patterns such that the maintenance will have a reduced impact on dependent services. The dependent services can be determined for the particular service based on network interactions between the services.

Abstract: A method performed by a network device of segmenting a corporate communications network is provided. The method comprises receiving, from a plurality of client devices in the corporate communications network, a measured value of a connectivity performance metric of a communication link over which each of the plurality of client devices has transferred data to at least one other randomly selected client device, and mapping the client devices into segments of the corporate communications network based on the measured value of the connectivity performance metric of each communication link, where two client devices communicating over a communication link having a measured value exceeding a connectivity quality measure will be mapped into a same segment. Devices for segmenting a corporate communications network are also provided.

Abstract: Systems, methods, and other embodiments associated with autonomous cloud-node scoping for big-data machine learning use cases are described. In some example embodiments, an automated scoping tool, method, and system are presented that, for each of multiple combinations of parameter values, (i) set a combination of parameter values describing a usage scenario, (ii) execute a machine learning application according to the combination of parameter values on a target cloud environment, and (iii) measure the computational cost for the execution of the machine learning application. A recommendation regarding configuration of central processing unit(s), graphics processing unit(s), and memory for the target cloud environment to execute the machine learning application is generated based on the measured computational costs.

Abstract: Novel techniques are described for platooning of computational resources in automated vehicle networks. An on-board computational processor of an automated vehicle typically performs a large number of computational tasks, and some of those computational tasks can be computationally intensive. Some such tasks, referred to as platoonable tasks herein, are well-suited for parallel processing by multiple processors. Embodiments can detect one or more on-board computational processors in one or more automated vehicles that are likely, during the time window in which the platoonable task will be executed, to have available computational resources and to be traveling along respective paths that are close enough to each other to allow for ad hoc network communications to be established between the processors. In response to detecting such cases, embodiments can schedule and instruct shared execution of the platoonable tasks by the multiple processors via the ad hoc network.

Abstract: An information handling system includes a cloud device including an on-the-cloud analytics device, and a node device. The node device includes an on-the-box analytics device, a data collector device, a data management device, and a load mitigator device. The data collector device sources a plurality of data-producing agents within the information handling system. The data management device receives and manages data produced by the data collector. The load mitigator device receives the data from the data management device, and analyzes the data and additional system data. The additional system data is associated with the information handling system. The load mitigator device also determines whether to route analytics for the information handling system to the on-the box analytics device or to the on-the-cloud analytics. Based on the determination, the load mitigator device routes the analytics to either the on-the box analytics device or to the on-the-cloud analytics device.

Abstract: Methods, apparatus, systems and articles of manufacture are disclosed to coordinate node level adaptations. An example apparatus includes an adaptation support determiner to determine if an adaptation in an adaptation message is supported by a first device, an extractor to, in response to the determination that the adaptation in the adaptation message is supported by the first device, calculate a start-time for the first device based on (a) a transit duration of the adaptation message, (b) an execution duration of the adaptation in the adaptation message, and (c) a timestamp of when the second device sent the adaptation message, and an initiate a timer value for the first device and the second device, the timer value being a function of the start-time. The example apparatus further includes an installer to, in response to the timer value satisfying a threshold, execute the adaptation to reduce disruptions in the CPS.

Abstract: The invention relates to a network segmentation effectiveness attestation system and method. The method may comprise receiving a list of internet protocol (IP) addresses for information technology (IT) assets within a defined scope, and executing a plurality of segmentation scans from outside a cardholder data environment (CDE) using a plurality of software agents. The software agents may be deployed and orchestrated across multiple network tiers. The method may also comprise receiving, automatically interpreting, and certifying results from the segmentation scan, automatically generating a report from the results of the segmentation scan, and automatically posting the report for authorized users to access.

Abstract: A method for managing network slices for the benefit of users monitors and obtains key performance indicators configured by a user, the indicator values being collected in real time and visually presented. When a user wants to optimize the network slices, weightings, value intervals, and variables are applied by the user to target key performance indicators. The network slices are optimized by a particle swarm algorithm configured by the user. A device and a computer readable and permanent storage medium for executing the network slices management method are also disclosed.

Abstract: Described herein are enhancements for operating cache nodes in a content delivery network to synchronize edge dictionary configurations. In at least one implementation, a cache node of a content delivery network receives a content request from an end user device. In response to the request, the cache node identifies a modification to a key-value pair of an edge dictionary, wherein the edge dictionary comprises a reference key-value function for a Hypertext Transfer Protocol (HTTP) accelerator service. The method further provides generating a modified version of the edge dictionary based on the modification, and transferring a notification of the modification to at least one other cache node in the content delivery network.

Abstract: A cloud server for providing a container-based cloud service, and a method thereof are provided. The cloud server includes a communicator configured to receive a volume mount request, a memory storing one or more instructions, and a processor configured to execute the one or more instructions stored in the memory to, when the processor receives a volume mount request from a first user of a first container among a plurality of containers, identify the first container, check a volume mount right of the first container, and mount a volume that is mountable on the first container.

Abstract: Methods and apparatus, including computer program products, are provided for transport method selection of asynchronous notifications. In some example embodiments, there may be provided a method that includes sending, by a client, a hypertext transfer protocol request for at least one asynchronous notification to be sent by a server to the client, the hypertext transfer protocol request including at least one proposed transport method for carrying the at least one asynchronous notification; determining, by the client, whether a first transport method selected by the server from the at least one proposed transport method is successfully established; and when the determination is that the first transport method is not established successfully, sending, by the client, another hypertext transfer protocol request to the server, the other hypertext transfer protocol request including at least one other proposed transport method. Related systems, methods, and articles of manufacture are also described.

Abstract: A method, computer system, and computer program product are provided for peer risk benchmarking. Customer data for a first network is obtained, wherein the customer data comprises a role of one or more network devices in the first network and a plurality of risk reports corresponding to the one or more network devices, and wherein each risk report is associated with a particular dimension of a plurality of dimensions of risk for the one or more network devices. A network profile image is generated by processing the plurality of risk reports. A generative adversarial network generates a synthetic network profile image from the network profile image, wherein the synthetic network profile image does not include the customer data. A second network is evaluated using the synthetic network profile image to identify differences between the first network and the second network.

Abstract: A cloud based intelligent secretary application, a method and a system for scheduling a meeting is disclosed. The invention includes a cloud based intelligent secretary application, running on a mobile device (200, 500, 800, 1100) and a cloud server (222, 522, 822, 1122). The cloud based intelligent secretary application enables multiple users to form a group. The members of the group allow their mobile devices to be accessed by the cloud based intelligent secretary application. The cloud based intelligent secretary application receives a request for arranging a meeting (312) with at least two members of the group. The cloud based intelligent secretary application calculates the meeting means, place and time that allow the minimum total disruption and cost, and/or, maximum efficiency for the meeting. The cloud based intelligent secretary application suggests (340) the meeting means, place and time that allows the minimum total disruption and cost.

Abstract: A domain is automatically attributed to a cloud application hosted on a cloud service. The attribution of a domain with a cloud application is used to initiate session policies that protect the cloud applications. A security session monitors the operations performed by a user with a cloud application and applies session policies that are pre-configured automated actions used to protect a particular cloud application, such as blocking downloads, blocking modifications, etc.