Abstract: Implementations described herein disclose a method, an article of manufacture, and a system for displaying user profile information using extendible user profiles for user groups. A user profile with an application user profile is maintained. A value provided by a user joining a group for a group specific field is used to override a user profile field maintained in the application user profile.

Abstract: A method at an electronic device, the method including initiating authentication with a network through a network element; providing a configuration request, the configuration request including an attribute set for the electronic device; and receiving a configuration response, the configuration response including a certificate or credential for future authentication with the network.

Abstract: A mobile terminal including: a memory having a plurality of applications stored therein; an application management module configured to receive application information corresponding to the respective applications, and generate status information of the applications, corresponding to the application information; and a controller configured to determine execution history information of the applications through the status information provided from the application management module, wherein the application management module includes: an application information collection unit configured to collect cache data size information of the respective applications at preset time intervals; and a comparison unit configured to generate the status information of the applications by comparing the cache data size information of the applications, collected by the application information collection unit, to reference values corresponding to the respective applications.

Abstract: At least some embodiments of the present disclosure disclose a program production method, a program production device, a program production system and a computer-readable medium. The program production method includes that: at least one medium is acquired; at least one playlist is generated according to the at least one medium, each of the at least one playlist being associated with the at least one medium; at least one program is generated according to the at least one playlist, each of the at least one program including a play region and the play region corresponding to the at least one playlist; and the play region is scheduled.

Abstract: Methods and devices are presented for managing communications in an ephemeral communication system. In some embodiments, messages in the system are associated with a default trigger for deleting each message following an initial viewing of the message. A non-ephemeral analysis module analyses elements of the message to identify any content elements indicating that a message status should be changed from a default ephemeral status to a non-ephemeral status. Following identification of such elements in the message, the message status is changed from ephemeral to non-ephemeral. Based on the non-ephemeral message status, a copy of the message may be automatically stored in a non-ephemeral format, or a default trigger for deletion of the message may be changed.

Abstract: Methods, apparatuses, and computer program products for edge device assisted mitigation of publish-subscribe denial of service (DoS) attacks are disclosed. An edge device hosts a virtualized copy of an Internet-of-Things (IoT) device subscribed to one or more publish-subscribe topics. When the edge device receives an indication to activate the virtualized copy of the IoT device, for example, during a DoS attack on the IoT device, the edge device activates the virtualized copy of the IoT device, which receives traffic from the publish-subscribe topic. The virtualized copy of the IoT device applies security policies to incoming traffic received from the subscription topics and transmits to the IoT device sanitized traffic obtained from the received incoming subscription content traffic.

Abstract: In some examples, a cloud-based management system receives information identifying electronic devices to be onboarded for cloud-based management by the cloud-based management system, receives, from a first electronic device, a request to establish a secure connection between the cloud-based management system and the first electronic device, and receives, from the first electronic device, a certificate. The cloud-based management system confirms, based on information in the certificate and the information identifying the electronic devices to be onboarded for cloud-based management, that the cloud-based management system is to perform the cloud-based management of the first electronic device over the secure connection.

Abstract: Implementations described and claimed herein provide systems and methods for tuning and sizing one or more storage appliances in a storage system with respect to an application load and for optimizing a storage system based on a configuration of a client network and/or a storage appliance in a storage network. In one implementation, data corresponding to an application load configured to be applied to a storage appliance in the storage system is obtained. The application load is characterized in the context of a configuration of the storage system. One or more recommendations for optimizing performance of the storage system based on the characterized application load are generated.

Abstract: An embodiment provides a method, including: communicating with a server to obtain a set of event data, said set of event data comprising timestamped event data; automatically determining, using a processor and without additional user input, a delta between said set of event data and a predetermined scheduling milestone, the delta resulting in an event gap; identifying, using a processor, one or more display elements impacted by the event gap; and updating, using the processor, the one or more display elements according to the delta; said updating comprising adjusting a visual characteristic of a display graphic in a schedule view to visually indicate the event gap. Other embodiments are described and claimed.

Abstract: A system may include a central computational instance configured to provide a service to a plurality of computational instances, wherein the service is associated with configurations respectively corresponding to the computational instances. The system may also include a computational instance dedicated to a managed network and storing a synchronization history specifying information that was synchronized between the computational instance and the central computational instance.

Abstract: A network apparatus detects connection requests and extracts related data. The data is analyzed to determine whether the host is in an active state, whether the host matches a domain referrer and an amount of time from a last connection request. If it is detected that the host is not in an active state, the host is not matching the domain referrer and the amount of time from the last connection request exceeds a predetermined new session threshold, then a connection request is classified as a main request. If the amount of time from the last connection request is below a predetermined continuous session threshold, then any connection requests following the main request are classified as sub-requests. If the domain of host in the active state does not match current host for a sub-request, the sub-request is classified as a third-party request.

Abstract: A computing device includes an interface configured to interface and communicate with a dispersed storage network (DSN), a memory that stores operational instructions, and a processing module operably coupled to the interface and memory such that the processing module, when operable within the computing device based on the operational instructions, is configured to perform various operations. The computing device receives, from another computing device, a vault provisioning request and processes the vault provisioning request to determine whether the other computing device is authorized to request provisioning of another vault within the DSN. When the other computing device is authorized, the computing device generates a vault within the DSN in response to the vault provisioning request from the other computing device and updates access control information within the DSN to include an initial access control for the vault and an identifier of the other computing device.

Abstract: An information handling system includes a network hardware device and a processor. The network hardware device transmits Internet Protocol (IP) datagram packets. Each of the IP datagram packets includes a respective user datagram protocol (UDP) packet. The processor detects a UDP packet. The UDP packet includes a real-time protocol (RTP) packet. The processor inspects one or more fields of the RTP packet, and determines whether a conferencing application generated the RTP packet. In response to a conferencing application generating the RTP packet, the processor determines whether the RTP packet is a real-time audio/video packet, and determines whether an audio/video session is in-progress. In response to the audio/video session being in-progress, the processor determines a network traffic policy for the RTP packet, and the network hardware device to transmit the UDP packet encapsulating the RTP packet based on the determined network traffic policy.

Abstract: Aspects of the present disclosure involve a CDN utilizing a Direct Server Return (DSR) request command to create a tunnel from one content server to another content server of the CDN. Through the DSR tunnel, a request for content may be served from a content server that is more advantageous for the CDN for any number of reasons, such as from a content server that is logically closer to the content server. In determining when a DSR tunnel is created to provide the content, the CDN may access a database storing various information concerning the CDN, such as the location of egress gateways of the CDN in relation to one or more content servers, connecting network location information, the capabilities of one or more content servers, and/or load information of available content servers.

Abstract: Disclosed are various approaches for preauthorizing the joining of a client device to a domain managed by a cloud-based directory service. An authorization token can be generated prior to a client device joining the domain. The authorization token can be subsequently installed on a client device at an OEM facility. When a user first logs into the client device, the client device can send the authorization token to the cloud-based directory service in lieu of administrative credentials to prove that the client device has been previously authorized to join the domain.

Abstract: Generally described, one or more aspects of the present application relate to prefetching container images for use in a cluster of virtual machines. For example, the cluster manifest may indicate an ordered list of image repositories and a set of container images that are likely to be executed on the cluster. Based on this indication, the set of container images can be prefetched onto the caches of the virtual machines in the cluster, such that when requests to execute those container images are eventually received, the container images can be accessed from the caches rather than from a remote repository.

Abstract: A method for securing cloud applications is described. The method may include establishing a connection between a cloud application isolation portal, a cloud access security broker, and a cloud application based on an indication of the cloud application and a set of credentials associated with an end user of the cloud application, and managing, via the cloud application isolation portal and the cloud access security broker, a session between the cloud application and a computing device associated with the end user based on the connection between the cloud application isolation portal with the cloud access security broker and the cloud application.

Abstract: Systems and methods provide for scaling service discovery in a micro-service environment. A controller can inject a service discovery agent onto a host. At least one of the controller or the agent can identify a first set of micro-service containers that are dependencies of the first micro-service container and a second set of micro-service containers that are dependencies of the second micro-service container. At least one of the controller or the agent can update routing data for the first set of micro-service containers and the second set of micro-service containers. At least one of the controller or the agent can determine the second micro-service container has terminated on the host computing device. At least one of the controller or the agent can update the agent to remove the routing data for the second set of micro-service containers.

Abstract: Embodiments herein include a method for concurrently performing asynchronous operations over IPv4 and IPv6 in a mobile device. The method includes capturing a DNS query-pattern of a plurality of DNS queries for a plurality of services of an application in the mobile device. Further, the method includes performing a DNS lookup in a DNS cache, to obtain a DNS resolution over the IPv4 and the IPv6 based on the DNS query-pattern of the plurality of DNS queries for the plurality of services of the application. Further, the method includes storing the DNS resolution based on the DNS lookup in the DNS cache. Further, the method includes triggering a TCP connection using a pre-connected connection descriptor based on a domain name resolution. Further, the method includes storing the pre-connected connection descriptor corresponding to the TCP connection in a connection pool cache.

Abstract: An industrial control system and a method of inspecting one or more communication packets in an industrial control system may be provided, the industrial control system firewall module comprising a packet accessing component configured to access a communication packet of an industrial control system; a firewall rules database, the firewall rules database configured to store one or more firewall rules; an inspection module configured to access the one or more firewall rules based on an industrial protocol associated with the communication packet; and the inspection module is further configured to perform a comprehensive inspection of all header fields and data fields of the communication packet based on the one or more firewall rules accessed based on the industrial protocol associated with the communication packet.