Abstract: In some implementations, an event data analysis system may identify event data that indicates user interactions with an application, each of the user interactions corresponding to an interaction with data filters. The system may generate specificity scores, each of the specificity scores indicating, for a corresponding user interaction, a measure of specificity associated with data filters that correspond to the corresponding user interaction. The system may filter the event data stream based on the specificity scores. The system may generate at least one entropy value for at least one data filter, each entropy value indicating a rate of change of a corresponding data filter. The system may identify, based on the specificity scores and the at least one entropy value, a set of relevant filter values associated with the event data. The system may provide output indicating the set of relevant filter values.

Abstract: A computer-implemented method, according to one embodiment, includes causing a first fault injection configuration to be injected into a first node of a first edge site of a cloud environment, where the first edge site includes a plurality of nodes, and the cloud environment includes a second edge site. The method further includes computing a first minimum cost maximum flow value for the first fault injection configuration, and causing a second fault injection configuration to be injected into a second node of the second edge site for causing a second fault injection. A second minimum cost maximum flow value is computed for the second fault injection configuration. In response to a determination that a difference of the minimum cost maximum flow values is less than a predetermined threshold, one of the fault injection configurations is retained and the other fault injection configuration is discarded.

Abstract: A computing system accesses actual aggregate service group utilization values that correspond to ones of a plurality of intervals over a first period of time and that identify an aggregate service group bandwidth utilization by cable modems in a service group at a plurality of intervals, the first period of time including multiple second periods of time having a same time duration, each second period of time having I ordinal intervals, and estimated aggregate service group utilization values that correspond to the actual aggregate service group utilization values. The computing system determines an additional bandwidth quantity for the service group such that an aggregate probability over a predetermined period of time that the plurality of cable modems will exceed a current provisioned bandwidth of the service group and the additional bandwidth quantity is within a desired probability range. A computing system sends, to a destination, the additional bandwidth quantity.

Abstract: Disclosed herein are embodiments of systems, methods, and products comprise an analytic server, which improves security of a system. The analytic server may monitor the system by retrieving status information from various devices within the system. The analytic server may generate an attack tree model based on a set of aggregation rules that are configured based on the monitored status information. The analytic server may detect one or more attacks by associating the status information with corresponding nodes of the attack tree model and executing a logic of the attack tree model. The analytic server may determine aggregated impact and risk metrics and calculate an impact score for each attack based on aggregated impact and risk metrics. The analytic server may generate reports comprising the one or more attacks ranked based on the impact scores. The analytic server may respond to one or more attacks by taking automated actions.

Abstract: A system and method for comprehensive data utilization and tracking comprising an ontological engine which in some embodiments is configured to create and curate various industry-specific ontologies which can be used to provide deeper context to an enterprise's network traffic and data transmission. The system and method further comprise a tagging and tracking engine configured to inspect network packets, apply a first tag associated with an authentication object, apply a second tag associated with an identified ontology, and track the tagged packets as they traverse the enterprise network, generating data utilization tracking information as the packets move through the network. A scoring engine may leverage the data utilization tracking information in combination with user entity and behavior data to compute a risk score associated with data utilization on the enterprise network.

Abstract: The present disclosure relates to methods and systems for load balancing traffic per the capacities of direct IPs (DIPs). The methods and systems use latency measurements from each DIP to determine the capacity of each DIP. The methods and systems use the latency measurements to determine the weights for each DIP using an Integer Linear Program (ILP). The weights identify an amount of traffic to provide to each DIP. The methods and systems provide the weights for each DIP to a load balancer controller to program the load balancer dataplane with the weights.

Abstract: A topology-reprogrammable test environment is provided that can support the needs of CI/CD/CV in the field. The system disclosed provides a highly scalable network architecture to simplify the implementation of network slicing, TaaS and network CI/CD, and solves problems related to the complexity of cloud-native network (CNN) deployments. A Network Cell (NC), comprises or consists of a Containerized Network Function (CNF), a Containerized Digital Twin (CDT), and a Containerized Test Agent (CTA). The CDT has at least two personalities, e.g., an emulator of the CNF in the same NC or a nodal of the CNF. The choice of personality of the CDT is controlled by the CTA of the NC. A number of NCs use a 3D IP address to interconnect and form a new kind of CNN over the infrastructure of VRs.

Abstract: A dynamically-managed microservices platform. The microservices platform is configured to selectively accept admission of microservices and to selectively throttle microservices based on a continually-trained machine learning model. The system is configured to implement multiple microservice lifecycle strategies, where individual ones of the multiple microservice lifecycle strategies use a prediction model having long-term and short term demand predictions. One or another of the multiple microservice lifecycle strategies are invoked at different times under different conditions. Under a first set of conditions, a prediction model is used to select a first strategy to admit or throttle a microservice based upon long-term or short-term demand predictions. Under a second set of conditions, the prediction model is used to select a different strategy to admit or throttle a microservice.

Abstract: Certain aspects of the disclosure provide a method for detecting data collection errors by processing error data with a plurality of regression models to generate a plurality of predicted error rates over a plurality of time intervals. The method includes determining an error mode by applying a set of policy rules optimized for determining the error mode to the plurality of predicted error rates.

Abstract: A Deterministic Traffic (DT) transmission method and device is provided. The method includes: in a case where it is determined that a received packet belongs to a DT, and the packet does not carry Cycle Specified Queuing and Forwarding (CSQF) domain schedule information, determining a target time slot number corresponding to an arrival time of the packet; according to the target time slot number, querying a time slot schedule cycle mapping table at an egress interface for the packet, and determining a target cycle schedule queue corresponding to the target time slot number, where the time slot schedule cycle mapping table is determined based on intra-node jitter at the network node, and is used to record a mapping relationship between a time slot number and a cycle schedule queue number; scheduling the packet to the target cycle schedule queue at the egress interface for the packet.

Abstract: A method for deploying a service includes a controller that creates a service instance corresponding to a service, and creates, in the service instance, a first network instance and a second network instance that correspond to the service. The first network instance is a network instance corresponding to a first device, and the first network instance includes a device identifier of the first device. The second network instance is a network instance corresponding to a first cloud provider edge PE, and the second network instance includes a device identifier of the first cloud PE. The first cloud PE is for connecting to the first cloud.

Abstract: Containerized orchestration of secure socket layer virtual private network benchmarking is disclosed. A test portal can accommodate developing test event information (TEI) based on test input information. Test input information can be used to generate event images, e.g., containers, that can be readily scaled, mutated, etc., via a containerization environment instance. One or more event image can be groups into a pod. An event image can be a new container, a previously used container, or a permutation of a container. Event image(s) can be retrieved from external sources, e.g., a library, a commercial vendor of event images, etc. TEI can be based on a pod(s) and communicated to a device-under-test (DUT). DUT performance can be measured, and results can be accessed by an entity, e.g., a test engineer, a results analysis engine, etc. Results can be employed to direct subsequent DUT testing.

Abstract: A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The client device accesses an acceleration server to receive a list of available tunnel devices. The requested content is partitioned into slices, and the client device sends a request for the slices to the available tunnel devices. The tunnel devices in turn fetch the slices from the data server, and send the slices to the client device, where the content is reconstructed from the received slices. A client device may also serve as a tunnel device, serving as an intermediate device to other client devices. Similarly, a tunnel device may also serve as a client device for fetching content from a data server. The selection of tunnel devices to be used by a client device may be in the acceleration server, in the client device, or in both.

Abstract: The present invention provides a debugging system, which is embedded on a forwarding path of a Wi-Fi module and includes a service flow matching module and a service flow debug execution module. The service flow matching module receives and analyzes a message, and determines a service flow type and a debugging means involving the message according to a dynamic service flow type association table, wherein the dynamic service flow type association table includes a corresponding service flow type and a corresponding debugging means involving the message. The service flow debug execution module executes the corresponding debugging means for the message according to a determination result from the service flow matching module; wherein the message is an 802.11 protocol message or an 802.3 protocol message.

Abstract: The present disclosure relates to methods and apparatuses for processing a control packet in a collective communication system, where the collective communication system includes a switch network and multiple computing nodes, and the switch network includes a first switch. In one example method, the first switch forwards a query packet transmitted by a source node to a destination node, where the query packet is generated by the source node based on a context of the collective communication system. Then, the first switch forwards a notification packet transmitted by the destination node to the source node, where the notification packet carries an in-network computing capability of the switch network.

Abstract: A system includes domains comprising systems generating data from a cellular network employing clusters created using a containerized application, and an observability (OBF) layer configured to collect the data over all of the domains and store the data at a common source. The system also includes a streaming platform data store configured for ingesting and processing streaming data in real-time and distributing the data to applications requesting such data. The streaming platform extends completely over the OBF layer so that all data collected by the OBF layer is available to the streaming platform data store. The system also includes a processor configured to collect data at the common source and manage the domains directly using the data collected at the common source.

Abstract: In some embodiments, a contact stream is generated or modified based on configuration data received from a machine-learning model. Multiple contact items are selected for a contact stream, to be delivered to a user device via electronic communication channels. In addition, a success metric is identified indicating an engagement with the contact stream or an action performed following the engagement. A machine-learning model is applied to the contact items, where the machine-learning model is trained to identify relationships among actions in an online environment and configuration parameters that control delivery of contact streams. The machine-learning model provides an output indicating configuration data or a success probability for the contact stream. The configuration data includes configuration parameter values computed by the machine-learning model for achieving the identified success metric.

Abstract: Disclosed herein is a method and system for performing audits of one or more IOT devices in an IOT system, prior to deployment of the IOT device or during deployment in the field. The audits are used to determine if an IOT device is functional and capable of performing a task assigned to the IOT device. If an audit is failed, the IOT system may determine that the IOT device is defective and needs to be replaced for the respective task. The IOT system remotely initiates the audits, and tracks the status and results of the audits of the IOT devices.

Abstract: In a network system, network switching devices such as routers may store routes to various networks. The system may on occasion be reconfigured, e.g., as new network switching devices are brought on line, or as servers are moved to new locations. Such reconfiguring may involve the storing of new routes in a network switching device, or the deletion of routes stored in a network switching device. As such, systems and methods for cloaking routes are provided.

Abstract: A network node modifies an association between the 3GPP defined Network Functions (NFs) and one or more cloud-native services thereby changing how those NFs are realized by the cloud-native services. To accomplish this, the node (200) “decouples” the NFs from the cloud-native services such that the NFs are unaware of the underlying cloud-native services that realize them and orchestrates the cloud-native services executing in the cloud that will realize those NFs. Additionally, the node automatically deploys, upgrades, scales, and heals the cloud-native services, as well as exposes the NFs and their interfaces, thereby facilitating the management of fault, configuration, accounting, performance, and security (FCAPS).