Abstract: Methods and systems for managing security in a cloud computing environment are provided. Exemplary methods include: gathering data about workloads and applications in the cloud computing environment; updating a graph database using the data, the graph database representing the workloads of the cloud computing environment as nodes and relationships between the workloads as edges; receiving a security template, the security template logically describing targets in the cloud computing environment to be protected and how to protect the targets; creating a security policy using the security template and information in the graph database; and deploying the security policy in the cloud computing environment.

Abstract: A communication platform can leverage a network-based computing system to enable applications to exchange data with one or more applications via channels. In some examples, a first application may post messages to the channel and a second application may listen to the posted messages to identify an event based on one or more of the messages. Responsive to detecting an event, the second application may notify a user, create a new channel, add a user to a channel, or the like, and/or the second application may take an action to remediate an issue. The first application and the second application and users added to the channel may be associated with a same or different organizations.

Abstract: Methods and apparatus for active queue management in user space networking stacks. Unlike prior art monolithic networking stacks, the exemplary networking stack architecture described hereinafter includes various components that span multiple domains (both in-kernel, and non-kernel). For example, unlike traditional “socket” based communication, disclosed embodiments can transfer data directly between the kernel and user space domains. Additionally, user space networking stacks require a new flow control methodology that is responsive to networking congestion and/or packet loss. For example, embodiments of the present disclosure introduce a flow advisory table that may, for example, utilize an eventing methodology for active queue management in addition to, or alternatively then, legacy active queue management. Exemplary systems can support multiple networking protocol stack instances (including an in-kernel traditional network stack) as well as flow advisory tables (and legacy active queue management).

Abstract: A method for synchronizing an identity of a user between a network observer and a third party includes: reading, by the network observer, a connection request sent from the user to the third party, the connection request including a host field having a host part corresponding to the third party and a sub-host part corresponding to identification information of the user; and associating, by the network observer in a database, the identification information of the user derived from the sub-host part with the identity of the user and an identity of the third party.

Abstract: Techniques are provided for offloading the management of sensor data and generating custom views of sensor data. Sensor data received from a data network through a message is stored within storage managed by a computing device. A handle is generated to identify the sensor data. The sensor data within the message is replaced with the handle, and the message is transmitted to a device within the data network. The device may use handles of sensor data to request custom views of sensor data.

Abstract: In an approach for augmenting contextual timeline markers on a virtual video conversation, a processor records a virtual meeting on a virtual meeting platform with one or more participants. Responsive to the virtual meeting chair ending the virtual meeting with one or more incomplete tasks, a processor creates an augmented recording of the virtual meeting, wherein the augmented recording includes a timeline composed of a plurality of timeline markers, wherein a timeline marker is associated with a conversation that occurs at a particular contextual conversation point during the virtual meeting. A processor enables one or more post-meeting collaboration enabled conversations between the virtual meeting chair and one or more nonparticipants, wherein the one or more incomplete tasks are completed. A processor requests feedback on a timeline marker response associated with the one or more incomplete tasks from a timeline marker creator. A processor applies the feedback received.

Abstract: Embodiments of the present disclosure provide systems and methods for sharing encrypted organization data packets among network devices using service-oriented protocol. Method implemented at first network device associated with first autonomous system (AS) includes accessing organization packet (OP) routing information, data structure and service information relating to organization associated with first AS. OP routing information and the service information are being accessed based on organization identifier of the organization and the service information indicating service type associated with the organization. Method includes sending connection request including the data structure and the service information to second network device to establish linked network path. The method includes receiving acknowledgment from the second network device.

Abstract: A system for multimedia content delivery includes one or more processors; and a storage medium storing instructions. When executed, the instructions may configure the one or more processors to perform operations including: delivering to a set of client devices a manifest including fake segment URLs; receiving, from a client device, a segment request including a client ID and a requested URL. The method may also include selecting content for the at least one of the client devices based on the client ID when determining the requested URL is unavailable; redirecting the segment request to a content address associated with the selected content; and providing the selected content to the at least one of the client devices.

Abstract: This disclosure relates to methods and systems for providing contemporaneous audio streaming from a host Bluetooth device (201) to a plurality of receiving Bluetooth devices (202). In an embodiment, a method (400) may include disabling a stream end point (SEP) restriction in an audio streaming profile of a Bluetooth protocol stack of the host Bluetooth device (201) to allow contemporaneous connection between the host Bluetooth device (201) and each of the plurality of receiving Bluetooth devices (202). The method may further include creating one or more streaming sessions in the Bluetooth protocol stack in response to one or more connection requests from one or more receiving Bluetooth devices, wherein the one or more streaming sessions are mutually independent of each other, and wherein each streaming session correspond to one receiving Bluetooth device and comprise an instance of an audio streaming protocol and an instance of a streaming channel.

Abstract: A method for using a distributed ledger (DL) of a blockchain applicable to a network of blockchain nodes is provided.

Abstract: A server system receives an indication of a media content item from a device and determines a first set of values that correspond to characteristics of the indicated content item. The server system analyzes a defined set of content items to identify a proxy media content item. The identified proxy media content item has a second set of values that meets similarity criteria for the first set of values. The server system determines, based on analysis of a plurality of sets of media content items, a result set of one or more media content items that are related to the proxy media content item. The server system provides information associated with the result set of media content items to the device of the user.

Abstract: A server system receives an indication of a media content item from a device and determines a first set of values that correspond to characteristics of the indicated media content item. The method further includes analyzing a defined set of media content items to identify a proxy content item. The identified proxy media content item has a second set of values that meets similarity criteria for the first set of values. The method includes generating, from the defined set of media content items, a result set of media content items that are associated with the proxy media content item. The method also includes determining a result set of users of the media content provider associated with the result set of media content items and transmitting, to the device of the user, information associated with the result set of users of the media content provider.

Abstract: A method for operating a portable document file (PDF) communication system involves receiving a composition control through a structured message user interface (UI) on a first device. The method uploads a PDF to a document transformation engine. A PDF analyzer identifies at least one break point within the PDF. A PDF splitter is configured with the at least one break point to generate at least one image from the PDF and transmit the PDF and the at least one image to an archiver. The archiver is operated to store the at least one image and the PDF and generate an archival link. A multimedia message service (MMS) composer is operated to generate a message parcel from the at least one image and the archival link. The structured message user interface is operated to communicate the message parcel as an MMS message to an endpoint.

Abstract: A method and system for remote diagnostic of Quality of Experience (QoE) for a subscriber on a computer network. The method includes: reviewing a traffic flow associated with a subscriber to determine performance statistics correlated with the traffic flow; determining subscriber data related to the subscriber associated with the traffic flow; analyzing the subscriber data and performance statistics to determine a traffic signature associated with the traffic flow; determining whether the traffic signature matches any of the plurality of known traffic signatures; and diagnosing the QoE issue based on the match of the traffic signatures.

Abstract: Various examples are provided related to software and hardware architectures that enable lightweight and trust-aware routing. In one example, among others, a method for trust-aware routing includes calculating trust values to represent how much a node can be trusted to route packets through its router. Each node can store the trust values of routers that are one hop and two hops away from it, which represent direct trust and delegated trust, respectively. When a router receives a packet, the router can update trust values and forward the packet to the next hop.

Abstract: An apparatus, system, and method are provided herein to provide simultaneous delivery of output communications to a client device and a secondary client device are discussed herein. Some embodiments may include an apparatus including processing circuitry configured to: receive one or more electronic communications; configure the one or more electronic communications for presentation to the client device and the secondary client device based on the delivery identifier; and provide the one or more electronic communications to the client device via a wide area network to facilitate simultaneous delivery of the one or more output communications corresponding to the one or more electronic communications on the client device and the secondary client device. The one or more output communications may be provided to the secondary client device via the client device and a personal area network that is separate from the wide area network.

Abstract: The system determines a first source MAC associated with a switch. The system updates a MAC address table by mapping the first source MAC to a first tag which indicates a source role corresponding to a network infrastructure. A processor associated with the switch generates a first packet which indicates the first source MAC. The system performs a first search in the MAC address table based on the indicated first source MAC to obtain the first tag, and performs a second search in a policy table based on the first tag for a policy which indicates an action to be applied to the first packet. If the second search is not successful, the system modifies a header of the first packet by adding the first tag. If the second search is successful, the system determines that the indicated action comprises allowing the first packet and transmits the first packet.

Abstract: A workflow may include function calls to functions executed with respect to instances of elements. Health checks of elements of the workflow may be performed with reference to topology such that health checks of elements are omitted where a health check is performed by a parent in the topology. Batch processing of stages of a workflow may be performed with commencement of a stage being initiated based on completion percentage and execution time of a previous stage. Tasks of each stage may be performed by a pool of workers that are reused with pool size being selected based on expected completion time of each stage.

Abstract: A system and method for optimizing defragmentation of content in a content delivery network (CDN). In an example, a manifest available to the content delivery node with respect to a particular content as well as segment files stored in a database cache of the content delivery node are analyzed to determine if any segment files referenced by the manifest are absent from the database cache. If so, one or more delivery rules associated with the content delivery node based on historical ABR asset delivery patterns may be applied to determine representations of the absent segment files that satisfy the one or more delivery rules. After determining compliant representations of the absent segment files, they may be pulled from another content delivery node of the CDN (e.g., a parent node or an edge server node).

Abstract: Disclosed is a method of adaptive assignment of location to internet protocol (IP) indexed data streams using machine learning from partially observable location data. The method includes (i) generating an IP to location map (NM1) and a location to IP map (NM2) by (i) mapping the IP address from location indexed data streams to corresponding location temporally and vice versa, in a base map, (ii) scoring and ranking each entry in the NM1 and the NM2 based on a frequency of use of the IP address, and a number of unique entity identifiers per IP address or per location, (iii) filtering each entry in the NM1 and the NM2 to generate a dynamic IP to location map, and (iv) estimating, a location for an IP indexed data streams at multiple levels of resolutions based on the dynamic IP to location map and an active ST region of each entity.