Abstract: Systems, devices, media, and methods are presented for categorizing unknown devices using benchmark applications. Benchmark applications are distributed to client devices to produce performance metrics for the client devices. Performance metrics of the client devices are used to categorize unknown devices by comparing the performance metrics of these devices to performance metrics of known devices.

Abstract: A virtual network function (VNF) deployment method and apparatus, the method including separately setting indication information of a common parameter and dedicated parameter in a virtual network function descriptor (VNFD), to indicate a source of a value of the common parameter and a source of a value of the dedicated parameter, where the common parameter and the dedicated parameter are included in input parameters. When assigning values to the common parameter and the dedicated parameter, a virtualization service provider obtains the value of the common parameter based on the indication information of the common parameter, and obtains the value of the dedicated parameter based on the indication information of the dedicated parameter.

Abstract: A computer system includes a calendar containing appointments. The system also includes one or more logic modules. Each logic module specifies a condition and a corresponding action. The profile may be applied to context data, such as data representing the current time, to perform the actions specified by the logic modules in response to detecting that the context data satisfies the conditions specified by the logic modules. In particular, the actions specified by the logic modules may be performed in response to detecting that the current time falls within the time period of an appointment on the calendar.

Abstract: A novel machine learning-based network analytics, troubleshoot, and self-healing holistic telemetry system is configured to perform modem-embedded machine analysis of multi-protocol stacks (e.g. OSI model stacks) simultaneously from one integrated coherent diagnostic system alone, and identify sources of data network problems autonomously within an entire end-to-end network topology of a network operator, while not necessitating human diagnosis of the data network problems. This system uniquely embeds a smart universal telemetry (SUT) as a quality-of-experience (QoE) parameter collection agent in intermediary transport-level network equipment and each end-user modem, which in turn enables periodic or on-demand collection of robust diagnostic data from all end-user modems and intermediary transport level nodes in a data network.

Abstract: Example methods and systems are provided for simulation-based cross-cloud connectivity checks. One example method may include injecting a connectivity check packet in a first cloud environment, and obtaining first report information associated with a first stage of forwarding the connectivity check packet from one or more first observation points in the first cloud environment. The method may also comprise: based on configuration information associated with one or more second observation points in the second cloud environment, simulating a second stage of forwarding the connectivity check packet towards a second virtualized computing instance via the one or more second observation points. The method may further comprise: generating second report information associated with the simulated second stage to identify a connectivity status between a first virtualized computing instance and the second virtualized computing instance based on the first report information and the second report information.

Abstract: Spatio-cohesive service discovery and handover methods for distributed IoT environments are disclosed. The spatio-cohesive service discovery and handover methods include discovering a set of IoT (internet of thing) resources for providing a set of services which is a set of functionalities necessary for a task in distributed IoT environments, wherein the discovering a set of IoT resources may discover the set of IoT resources through a spatio-cohesive method considering spatial distance between a user and a service and between two services.

Abstract: An approach is proposed to support user-specific real time anti-phishing training of email recipients using real phishing attacks. When a recipient triggers an active content such as an URL link embedded in and/or opens an attachment to an email arrived at the recipient's account, the triggered active content is synchronously intercepted and examined in real time for potential malicious intent of a phishing attack. If the triggered active content is determined to be safe, the recipient is allowed to access the content. If the active content is determined to be malicious, the active content is blocked and the recipient is redirected a safe blocking mechanism. The recipient is then provided with an anti-phishing training exercise, which is specifically customized for the recipient based on the blocked active content in the payload of the email and/or the recipient's security posture and awareness.

Abstract: Example methods and systems are provided for network diagnosis. One example method may comprise: detecting an egress packet and determining whether each of multiple network issues is detected for the egress packet or a datapath between a first virtualized computing instance and a second virtualized computing instance. The method may also comprise: generating network diagnosis code information specifying whether each of the multiple network issues is detected or not detected; generating an encapsulated packet by encapsulating the egress packet with an outer header that specifies the network diagnosis code information; and sending the encapsulated packet towards the second virtualized computing instance to cause a second computer system to perform one or more remediation actions based on the network diagnosis code information.

Abstract: The invention provides a method for managing a plurality of events, wherein each event comprises physical attributes and logical attributes by creating tuples with the events with the same logical attributes, providing a set of hierarchized relations between tuples, by means of a pipeline algorithm, wherein parent-child relations are provided between tuples, classifying the tuples in families, each family contains all the tuples related according to the parent-child relation provided by the pipeline algorithm, identify the parent tuple of each family, defined as the tuple which has at least one children and has no parent and present the parent tuples, together with the physical attributes of the events associated to each parent tuple.

Abstract: Allowing a network function (such as a router, firewall or SD-WAN endpoint) or service chain of network functions to transparently access a network uplink, while also allowing a set of management entities to access the same link without interference or configuration. To the extent that a conflict arises between ports allocated to the management functions and to the network functions, the relevant port is automatically removed from use by management functions and allocated to network functions to end the conflict.

Abstract: In various example embodiments, a system and method are provided for a service data platform. The service data platform includes an application management API configured to receive software uploaded by a third party using a management application API. The service data platform also includes a plurality of graph servers configured to identify a group of lighting nodes to distribute the uploaded software and determine the uploaded software is safe for deployment to the identified group of lighting nodes. The service data platform further includes a device manager configured to distribute, using an administrative API, the uploaded software to the identified group of lighting nodes.

Abstract: Obtaining location metadata for network devices using augmented reality (AR) is disclosed herein. In one embodiment, an AR computing device receives first user inputs indicating boundary points of a device region, and determines first spatial coordinates for each boundary point. The AR computing device next receives a second user input that indicates a network device within the device region, and determines second spatial coordinates for the network device. The AR computing device may also correlate the network device with a known connected network device. The AR computing device then transmits, to a server computing device, first metadata that includes the first spatial coordinates and an identifier of the device region, and second metadata that includes the second spatial coordinates and an identifier of the indicated network device. In some embodiments, the metadata may be employed, e.g., to generate a floorplan visualization and/or a signal strength map of the device region.

Abstract: Some embodiments of the invention provide novel methods for facilitating a distributed SNAT (dSNAT) middlebox service operation for a first network at a host computer in the first network on which the dSNAT middlebox service operation is performed and a gateway device between the first network and a second network. The novel methods enable dSNAT that provides stateful SNAT at multiple host computers, thus avoiding the bottleneck problem associated with providing stateful SNAT at gateways and also significantly reduces the need to redirect packets received at the wrong host by using a capacity of off-the-shelf gateway devices to perform IPv6 encapsulation for IPv4 packets and assigning locally unique IPv6 addresses to each host executing a dSNAT middlebox service instance that are used by the gateway device.

Abstract: Embodiments relate to an intelligent computer platform to use ground truth data to rate source reliability, and application of the source reliability. A computer system, computer program product, and computer implemented method apply the ground truth data to evaluate a source, assess source reliability, and dynamically apply the assessed reliability. The assessed reliability is dynamically applied to response data, with the application yielding selective presentation of the response data based on the applied reliability assessment.

Abstract: Systems and methods are provided for generating content. The systems and methods include operations for: identifying a content item generation template that is associated with instructions for generating a content item; displaying, by a messaging application, an identifier of the content item generation template; receiving, by the messaging application, input that selects the identifier of the content item generation template; retrieving, by the messaging application, a plurality of content items associated with the content item generation template, each of the plurality of content items having been previously generated by a respective user of a plurality of users of the messaging application in accordance with the instructions associated with the content item generation template; and displaying, by the messaging application, the retrieved plurality of content items associated with the content item generation template.

Abstract: Methods and systems for managing security in a cloud computing environment are provided. Exemplary methods include: gathering data about workloads and applications in the cloud computing environment; updating a graph database using the data, the graph database representing the workloads of the cloud computing environment as nodes and relationships between the workloads as edges; receiving a security template, the security template logically describing targets in the cloud computing environment to be protected and how to protect the targets; creating a security policy using the security template and information in the graph database; and deploying the security policy in the cloud computing environment.

Abstract: A computer-implemented method of data transmission comprises: closing a displayed message on a display; displaying an inbox; displaying a reply window in the inbox; receiving reply input in the reply window; and transmitting the reply input to a sender of the closed message.

Abstract: Differentiated sidecars in a service mesh may be provided. A first routing rule includes a first plurality of weights to be associated with a first plurality of data paths of a first microservice instance may be received. Next, first mapping between a first set of features associated with the first microservice instance and the first plurality of weights may be determined. Then a second microservice instance may be detected and a second set of features associated with the second microservice instance may be detected. A second routing rule comprising a second plurality of weights to be associated with a second plurality of data paths of the second microservice instance may be determined. The second plurality of weights may be determined such that a second mapping between the second set of features and the second plurality of weights imitates the first mapping.

Abstract: A network communication device includes a plurality of ports, a memory, and a processor. The plurality of ports is configured to receive a packet. A memory is configured to store a first lookup table and a second lookup table. An entry of the first lookup table includes a flag field. An entry of the second lookup table includes an entry address of the first lookup table. The processor is coupled to the memory and the plurality of ports. The network communication device is configured to: analyze the packet by a software or hardware to obtain a source Media Access Control (MAC) address; obtain, according to the source MAC address of the packet, the entry of the first lookup table; read the flag field of the entry; and determine, according to the flag field, whether the entry is referred by the second lookup table.

Abstract: A novel machine learning-based network analytics, troubleshoot, and self-healing system identifies and locates sources of data network problems autonomously within an entire end-to-end network topology of a network operator, while not necessitating human diagnosis of the data network problems. This system uniquely embeds a smart universal telemetry (SUT) as a quality-of-experience (QoE) parameter collection agent in intermediary transport-level network equipment and each end-user modem, which in turn enables on-demand collection of robust diagnostic data from all end-user modems and intermediary transport level nodes in a data network.