Abstract: A method for providing communication services as VASs to subscribers of a communication service provider based on building a subscriber relationship data structure in a data store. The method includes building the subscriber relationship data structure such that it comprises a first layer which comprises a first VAS node corresponding to a first VAS and a second layer comprising one or more service group nodes and corresponding service groups. The method additionally includes receiving a first request from a first subscriber and from a second. The method further includes modifying the subscriber relationship data structure such that the one or more service group nodes comprises a first service group node in which the first subscriber and the second subscriber are each identified as belonging to a corresponding first service group of the one or more service groups, and deploying the first VAS to the first and second subscribers.

Abstract: A policy management server manages a segmentation policy and automatically configures an enclave protection device consistently with the segmentation policy so that that the segmentation policy can be enforced with respect to workloads within a secure enclave protected by the enclave protection device. The policy management server identifies protected workloads that are members of a secure enclave and external workloads that are external to the secure enclave. The policy management server identifies cross-boundary rules of the segmentation policy affecting traffic between the protected workloads and external workloads. The policy management server generates and distributes a configuration of the enclave protection device to enable enforcement of the cross-boundary rules pertaining to traffic passing through the enclave protection device.

Abstract: The disclosure is directed to a topology recommendation platform that implements a method that includes receiving an original topology that indicates a first design for an application. The original topology is associated with a first resiliency score. The first design is associated with a set of functionalities for the application. A recommended topology is determined based on a model and the original topology. The recommended topology indicates an alternative design for the application. The recommended topology is associated with a second resiliency score that is greater than the first resiliency score. The alternative design is associated with the set of functionalities for the application. The recommended topology is provided. The original topology and/or the recommended topology is based on and/or encoded via one or more topology templates. The first design indicates a first set of components for the application. The alternative design indicates an alternative set of components for the application.

Abstract: Technologies are provided for distributed network management. An access-point computing device is configured to receive commands that target network devices in different computer networks. When a command is received, the access-point device determines which network is targeted by the command and stores the command in a queue associated with that network. Other computing devices are configured to access the multiple computer networks and to execute commands that target devices in the multiple networks. These other computing devices can be configured to transmit requests for commands to the access-point device. When such a request is received, the access-point device determines which network the request is for, retrieves a command from the queue associated with the computer network, and transmits the command to the requestor. The requestor, upon receipt of the command, executes the command against network device(s) in the computer network and transmits any result back to the first computing device.

Abstract: A computing device may include a memory and a processor configured to cooperate with the memory to determine, based upon at least one multimedia filter running at a first client computing device, a uniform resource locator (URL) associated with a media cloud source of a video being streamed to the first client computing device using a source filter, and playback control data associated with the video being streamed to the first client computing device. The processor may also cause a second client computing device to independently stream the video from the media cloud source based upon the determined URL, and play the video at the second client computing device synchronously with playback of the video at the first client computing device based upon the playback control data, with the first client computing device being the controller for playback of the video at the second client computing device.

Abstract: Systems, methods, and related technologies are provided for generating interactive emails and tracking user interactions. In one implementation, an email an be received within an email client. The email can be rendered within the email client, such as by: presenting a first selectable element within the email client, presenting a second selectable element within the email client, and presenting one or more content items within the email client. A selection of the first selectable element can be received within the email client. In response to the selection of the first selectable element, a presentation of the one or more content items can be adjusted within the email client.

Abstract: For a multi-tenant environment, some embodiments of the invention provide a novel method for forwarding tenant traffic through a set of service machines to perform a set of service operations on the tenant traffic. In some embodiments, the method performs a classification operation on a data message flow of a tenant, in order to identify a set of service operations to perform on the data message flow. For some data message flows, the classification operation selects the identified set of service operations from several candidate sets of service operations that are viable service operation sets for similar data message flows of the tenant. In some embodiments, the classification operation is based on a set of attributes associated with the data message flow (e.g., five tuple identifier, i.e., protocol and source and destination ports and IP addresses).

Abstract: A configuration serving network element may configure information about the configuration serving network element for a fifth generation (5G) network architecture. A terminal device may obtain the information about the configuration serving network element from the 5G network architecture. The information about the configuration serving network element includes address information of the configuration serving network element. Therefore, the terminal device can establish a connection to the configuration serving network element based on the address information of the configuration serving network element, so that the configuration serving network element can automatically configure the terminal device by using the 5G network architecture.

Abstract: Systems and methods for reducing data movement in a computer system. The systems and methods use information or knowledge about the structure of an algorithm, operations to be executed at a receiving processing unit, variables or subsets or groups of variables in a distributed algorithm, or other forms of contextual information, for reducing the number of bits transmitted from at least one transmitting processing unit to at least one receiving processing unit or storage device.

Abstract: The present disclosure relates to methods, systems, and non-transitory computer readable media for discovering policy scopes within an enterprise network and managing network policies for discovered policy scopes. In one aspect, a method includes identifying one or more communities of devices in an enterprise network; defining, from the one or more communities of devices, policy scopes in the enterprise network; generating a hierarchical representation of the policy scopes; identifying, based on the hierarchical representation of the policy scopes, one or more policies governing traffic flow between devices associated with each of the policy scopes; and managing application of the one or more policies at the devices.

Abstract: A system for generating a global conversation thread includes a processor that receives data associated with a plurality of individual conversations between one or more users using one or more user devices and models individual conversation threads based on the data. The processor also extracts features from the modeled conversation threads, and links the conversations based on the extracted features to create a global conversation thread. The individual conversations occur on different platforms and the global conversation thread includes content from the different platforms.

Abstract: In one embodiment, an apparatus includes one or more ports for coupling to an external media-capturing device, wherein the one or more ports are configured to receive a media stream from the external media-capturing device and send an instruction to the external media-capturing device to control a bitrate of the media stream, a network connector configured to communicate with an edge device that provides access to a network, a retransmission unit configured to retransmit the media stream to the network through the network connector and the edge device, and a control unit configured to monitor the retransmission unit to determine a performance metric associated with a retransmission of the media stream and send an instruction through the one or more ports to the external media-capturing device to reduce the bitrate of the media stream in response to a determination that the performance metric fails to satisfy a predetermined criterion.

Abstract: Resource allocation to workloads is disclosed. Telemetry data associated with existing or previously executed workloads is stored and used to develop models. Telemetry data from new workloads are collected and, using the models, a fingerprint is extracted and compared to the fingerprints of previous workloads. This allows the initial allocation of resources to the new workload to be improved and aids in resource allocation convergence.

Abstract: A first security service function chain is generated that identifies at least a first service function path comprising an identified set of security service functions, with at least one of the identified set of security service functions comprising a virtualized network function in a software defined networking (SDN) network architecture. The first security service function chain is utilized to create classification policies associating packets of a given packet type with the first security service function chain, and the first service function path is utilized to create forwarding policies specifying handling of packets of the given packet type by respective ones of the identified set of security service functions. The classification policies are provided to one or more nodes in a communication network comprising the SDN network architecture, and the forwarding policies are provided to one or more of the identified set of security service functions in the communication network.

Abstract: A method, computer-readable medium, and apparatus for modeling data of a service for providing a policy are disclosed. For example, a method may include a processor for generating a first policy for a first service by a first policy model using machine learning for processing first data of the first service, determining whether the first policy is to be applied to a second service, applying the first policy to the second service when the first policy is deemed to be applicable to the second service, wherein the applying the first policy provides the first policy to a second policy model using machine learning for processing second data of the second service, generating a second policy for the second service, and implementing the second policy in the second service, wherein the first service and the second service are provided by a single service provider.

Abstract: In one embodiment, a service tracks performance of a machine learning model over time. The machine learning model is used to monitor one or more computer networks based on data collected from the one or more computer networks. The service also tracks performance metrics associated with training of the machine learning model. The service determines that a degradation of the performance of the machine learning model is anomalous, based on the tracked performance of the machine learning model and performance metrics associated with training of the model. The service initiates a corrective measure for the degradation of the performance, in response to determining that the degradation of the performance is anomalous.

Abstract: Embodiments herein describe an upgrade system that provides suggestions for upgrades using a confidence metric. In one embodiment, the upgrade system tracks network elements in multiple network fabrics to determine whether an upgrade performed on a first network element was successful. The upgrade system can generate one or more vectors that store various data about the network elements such as enabled features, telemetry data, control plane faults, system settings, locations of the network elements in a fabric, and the like. By evaluating these vectors, the upgrade system can derive a reliability confidence metric regarding the upgrade. If the reliability confidence metric exceeds a threshold, this indicates the upgrade was successful. The upgrade system can then compare vectors for different network elements to determine whether to apply the same upgrade to similar network elements.

Abstract: Disclosed embodiments are related to grouping sets of intercommunicating objects to minimize the number of rules/policies needed to be stored to enforce those rules/policies. Given a set of objects communicating with each other using different services, embodiments group these objects to minimize the total number of final rules that are implemented. This allows an original set of policies to be reduced into a smaller set of policies, which conserves computational resources. Other embodiments may be described and/or claimed.

Abstract: Systems, methods, and computer-readable storage media for monitoring queue occupancy in a network buffer, detecting microbursts, and analyzing the same.

Abstract: A server system is provided that includes at least one processor configured to receive a set of client audio parameters from a client computing device, determine a set of audio tuning parameters based on the set of client audio parameters, execute a server-side rendered application program for the client computing device, render a stream of visual data for the server-side rendered application program based on a stream of user input received from the client computing device, render a stream of audio for the server-side rendered application program based on the set of audio tuning parameters, and send the stream of visual data and the stream of audio to the client computing device.