Abstract: For a communication channel having a first endpoint in a customer on-premise network and a second endpoint on a primary host machine in a cloud service provider infrastructure, the primary host machine determines a change in a state information of the communication channel and identifies a backup host machine for the communication channel. The primary host machine causes the change in the state information to be replicated to the backup host machine, wherein the replicated state information stored by the backup host machine is usable by the backup host machine after a failover causes the backup host machine to become the second endpoint of the communication channel.

Abstract: Systems and methods described herein may provide a system that enables the dynamic assignment of network resources between multiple workloads executing on a network. A computing device may receive workload information relating to a plurality of workloads executing within a network. The computing device may use the workload information to determine engagement and dependency predictions for the plurality of workloads and resource predictions for the plurality of workloads. Based on the workload information and the engagement and dependency predictions, the computing device may determine workload priority predictions for the plurality of workloads. The computing device may assign, based on the resource predictions and workload priority predictions, network resources of the network to the plurality of workloads.

Abstract: The present disclosure has been made in view of such a problem, and an object of the present disclosure is to make it possible to predict fluctuation of unsteady traffic with a small amount of calculation.

Abstract: A computer-implemented method of identifying associated communications between a first network with a first addressing scheme and a second network with a second addressing scheme is presented. The technique can include: detecting a first protocol data unit addressed from a first device in the first network and addressed to a destination in the second network, prior to translation by a network address translator; inserting, prior to translation from the first addressing scheme to the second addressing scheme, a breadcrumb protocol data unit that is addressed to the second network, the breadcrumb protocol data unit including, in a location immune from address translation by the network address translator, the source address of the first protocol data unit; receiving a translated breadcrumb protocol data unit; and reporting an association of the source address of the first protocol data unit with the translated source address of the first protocol data unit.

Abstract: Users of personalized messaging systems can encounter message fatigue, thereby reducing the efficacy of a message on its intended recipient. Message fatigue can result in wasted computational resources and bandwidth as messages transmitted over a network to the user's client device are not acted upon at the client device. For applications involving desired user interactions and responses, personalized messaging can be a tool to achieve user engagement targets. The systems and methods presented herein may address several of the technical challenges with personalized messaging.

Abstract: Methods, systems, and computer storage media for providing a multi-attribute cluster-identifier that supports identifying malicious activity in computing environments. An instance of an activity having an attribute set can be assessed. The attribute set of the instance of the activity is analyzed to determine whether the instance of the activity is a malicious activity. The attribute set of the instance of the activity is compared to a plurality of multi-attribute cluster-identifiers of previous instances of the activity, such that, a determination that the instance of the activity is a malicious activity is made when the attribute set of the instance of the activity corresponds to an identified multi-attribute cluster-identifier. The identified multi-attribute cluster-identifier has a risk score and an attribute set that indicate a likelihood that the instance of the activity is a malicious activity. A visualization that identifies the instance of the activity as a malicious activity is generated.

Abstract: Disclosed are systems and methods for temporal link prediction based on (generalized) random dot product graphs (RDPGs), as well as applications of such temporal link prediction to network anomaly detection. In various embodiments, starting from a time series of adjacency matrices characterizing the evolution of the network, spectral embeddings and time-series models are used to predict estimated link probabilities for a future point in time, and the predicted link probabilities are compared against observed links to identify anomalous behavior. In some embodiments, element-wise independent models are used in the prediction to take network dynamics into account at the granularity of individual nodes or edges.

Abstract: Persistent connections are provided between components in a container environment. A hypertext transfer protocol (HTTP) client may include a monitoring service and a proxy service. To obtain information regarding containers in the container environment, the monitoring service communicates a request to the proxy service. The proxy service in turn maintains a persistent connection for a session with a container management service using an authentication token, and communicates the request to the container management service during the session. The container management service obtains the requested information from the container(s) and returns the information in a response to the proxy service, which in turn returns the response to the monitoring service. The session is destroyed/ended only under certain error conditions—otherwise, the session between the proxy service and the container management system is kept persistent.

Abstract: Techniques for incremental stream switching in a distributed system with flip events are described. A special-purpose flip event is inserted into an event stream that indicates, to recipients of the stream, whether they are to switch to use of an alternate event stream. The flip event may identify which other event stream to use, how to obtain events of that event stream, when to switch to the other event stream, and/or whether that particular recipient is to switch. The recipients may be selectively or iteratively migrated using flip events targeting different recipients, limiting the blast radius of a switch. Via use of a tracking data structure, event replay and event skips can be avoided.

Abstract: Apparatus and methods are disclosed for geographic region-based network address translation (NAT) between a public network and a private network having a plurality of defined geographic regions. In some embodiments, region-based NAT may assist to reduce latency, enhance quality, enhance security, and/or improve efficiency of network communications. In response to a data packet from a first port of a private IP address, of an endpoint in the private network, a region of the private network that includes an endpoint identified by the private IP address is determined. A public IP address is selected that is mapped to the determined region in the database. An available port of the selected public IP address is assigned for NAT. NAT is performed for data communicated between the public and private networks using a mapping of the first port of the first IP address to the second port of the second IP address.

Abstract: A method of routing data packets for a router is provided. The router includes a software network address translator (NAT) and a hardware NAT. The method includes routing, by the software NAT, a first data packet based on a routing rule stored in the software NAT, wherein the software NAT has a routing rule removing function to remove the routing rule stored in the software NAT; sending, by the software NAT, the routing rule to the hardware NAT; storing the routing rule, by the hardware NAT, in the hardware NAT; and routing, by the hardware NAT instead of the software NAT, a second data packet based on the routing rule stored in the hardware NAT. The routing rule removing function of the software NAT for the routing rule stored in the software NAT is disabled.

Abstract: Systems and methods of controlling a state of electronic messaging applications are provided. A system detects a launch of a network application via an embedded browser. The network application is associated with a session identifier of a user. The system identifies one or more electronic messaging applications on a client device of the user. The system transmits, responsive to the launch of the network application associated with the session identifier, an instruction to one or more servers managing the one or more electronic messaging applications to control a state of the one or more electronic messaging applications.

Abstract: A system provides for event-driven redirection of IP service flows and receives, by a DHCP server, an add event corresponding to a specified MAC address; provides a new DHCP lease for the specified address; transmits, by the DHCP server and to an Internet gateway, new instructions comprising one or more of a new IP address, subnet mask, and specified DNS servers; and, through DNS services and routing, redirects all network traffic originating from the Internet gateway to a specified destination. Some embodiments receive a remove event corresponding to the specified address; provide a second new DHCP lease for the specified address; transmit to an Internet gateway, second new instructions comprising one or more of a second new IP address, second subnet mask, and second specified DNS servers; and, through DNS services and routing, direct all network traffic originating from the Internet gateway back to unfettered, but monitored, Internet access.

Abstract: A dynamic network resource allocation method based on network slicing is provided. A historical resource demand dataset of an accessed network slice is inputted into a first neural network for training. Based on a trained first neural network and the historical resource demand of the accessed network slice, a resource demand prediction information corresponding to the accessed network slice in a first prediction time period is determined. Resources are pre-allocated to the accessed network slice based on the resource demand prediction information, and resources are allocated to the accessed network slice when the first prediction time period arrives. In this way, the service provider can reasonably allocate network resources for network slices without violating the SLA, thus avoiding the waste of network resources.

Abstract: A computer-implemented method of identifying associated communications between a first network with a first addressing scheme and a second network with a second addressing scheme is presented. The technique can include: detecting a first protocol data unit addressed from a first device in the first network and addressed to a destination in the second network, prior to translation by a network address translator; inserting, prior to translation from the first addressing scheme to the second addressing scheme, a breadcrumb protocol data unit that is addressed to the second network, the breadcrumb protocol data unit including, in a location immune from address translation by the network address translator, the source address of the first protocol data unit; receiving a translated breadcrumb protocol data unit; and reporting an association of the source address of the first protocol data unit with the translated source address of the first protocol data unit.

Abstract: A technology is provided for delivering a data object to a device. Data delivery instructions to distribute a data object to a device may be received at a delivery service and indicate a storage location of the data object, a messaging topic, and a size of data receivable by the device. The data object is then divided into blocks corresponding to the size of data receivable by the device. A messaging topic is identified to which the device is subscribed via a messaging service. The blocks are sent to the device using the messaging topic and a network protocol available to the device.

Abstract: Techniques for enabling access to external data of a user for facilitating communications via a communication platform are described herein. A user of the communication platform maintains external data with a third-party service provider. The communication platform receives, in association with a user account of the user, an indication of intent to grant the communication platform access to the external data and an authorization code (the “code”). The communication platform later receives, from the first user account, a request to access the external data. For example, the request can include an input corresponding to an intended recipient of a message. In response to the input, the communication platform sends a request, with the code, to the third-party service provider to obtain contact data associated with the intended recipient and causes the contact data to be presented in association with the message, such as in a “To” field of the message.

Abstract: The present invention relates generally to a novel and improved method of loading clickstream data into a web analytics platform, and, a commercial off the shelf (COTS) web analytics platform. The process of loading traffic into COTS Web Analytics platform from clickstream data relates to: (1) the process of discovering ecommerce sales by looking for specific tracking beacons in clickstream or resource stream and loading them into a COTS web analytics platform; (2) a process of discovering website “goals” by looking for clusters of tracking “beacon” activity in clickstream or resource stream data; and (3) a process of unlocking the search term that a website visitor typed into a search engine immediately prior to visiting that website when web analytics platforms can't see that data for many searches (99%+) having all of the features described above.

Abstract: The multi-agent simulation system includes a plurality of agent simulators provided for each of the plurality of agents and a center controller. The plurality of agent simulators are programmed to simulate a state of each of the plurality of agents while causing the plurality of agents to interact with each other by exchanging messages. The center controller is programmed to manage participation of the plurality of agent simulators in a simulation of the target world and separation of the plurality of agent simulators from the simulation of the target world. The center controller separates an agent simulator whose processing does not keep up with a flow of time in the target world from the simulation of the target world.

Abstract: The present disclosure relates generally to systems and methods for facilitating proactive two-way communication sessions. One example includes proactively sending a message, where when the message is received, the message initiates a conversation with a user across a first messaging platform. When it is dynamically determined that the first messaging platform is unavailable, a list of prioritized alternative messaging platforms is dynamically generated. A prioritized second messaging platform is selected from the list of prioritized alternative messaging platforms, and the message is dynamically modified in accordance with standards associated with the prioritized second messaging platform. When a response is then received after sending the modified message on the prioritized second messaging platform, an agent is selected from a pool of agents to respond.