Abstract: A system and method are provided for discriminating the nature of traffic flowing through a computer network. Various types of traffic are distinguished. For example, traffic sourced by a software application that generates them may be distinguished. The problem of detecting malicious traffic either originating outside a target network, or inside a target network from a compromised computer is addressed, as is the problem of distinguishing malicious traffic from legitimate web surfing or other applications activity. Traffic distinctions are made based on signal envelope characteristics in such manner as to preserve robust performance even when the subject traffic is encrypted.

Abstract: A computer-implemented method, a controller, and a Software Defined Network (SDN) perform steps of correlating users based on unique identifiers to service addresses; receiving historical data from associated control area operator for the service addresses; correlating the users' bandwidth usage behavior to the users' power usage behavior; monitoring the users' bandwidth usage over time; characterizing bandwidth usage type for the users with abnormal bandwidth usage patterns; and notifying the control area operator of the users with the abnormal bandwidth usage patterns based on the characterized bandwidth usage type. Accordingly, electric power forecasting by the control area operator can include improved accuracy through correlating the users' bandwidth usage behavior and detecting abnormal conditions.

Abstract: A wireless network of a first type receives a request for network entry from a mobile station. A service continuity query is sent to a service node. A service continuity response is received from the service node. The service continuity response includes a network access identifier. The network access identifier is determined to be associated with an existing session on a wireless network of a second type. The existing session is using a mobile internet protocol address. On the wireless network of the first type, a session is assigned the mobile internet protocol address.

Abstract: Various implementations described herein relate to routing network data traffic using network tunnels. In some implementations, one or more tunnels are established between a remote gateway device and a central gateway device central gateway system. The remote gateway device can receive data traffic from one or more client devices and analyzed the data traffic. Based at least in part on the resulting analysis, the remote gateway device identified an application or an application type associated with the data traffic. The remote gateway device can select one or more select tunnels, from the one or more tunnels, based at least in part on the identification of the application or the application type associated with the data traffic. Eventually, the remote gateway device can route the data traffic to the central gateway system using the one or more select tunnels.

Abstract: Method for use in updating a routing table of a router of a plurality of routers, said routing table comprising the route(s) to be used for at least one destination, wherein update messages with routing information are sent between said plurality of routers, typically BGP routers, wherein the following steps are performed at the router: receiving of an update message containing a path or a withdrawal of a path for a destination; determining if the (withdrawn) path is associated with a path exploration event; deciding on the updating of the routing table taking into account the result of the determination.

Abstract: Systems and methods for fusing, for a subscriber, a plurality of applications and subscriber data across a plurality of subscriber access devices are described. The system includes a fusion server coupled to a voice-over-IP telephony switch and a television EBIF server. The fusion server receives and stores the subscriber data such as a list of contacts. The fusion server receives a communication in a first format from a first subscriber access device such as a set-top box, and translates the communication from the first format to a second format. The first and second formats include at least two of session initiation protocol (SIP), hypertext transfer protocol (HTTP), voice-over-IP (VoIP), simple object access protocol over extensible markup language (SOAP/XML), remote procedure call (RPC), and enhanced tv binary exchange format (EBIF). The fusion server transmits the translated communication to a second subscriber access device such as a smart phone or tablet computer.

Abstract: The disclosed embodiments relate techniques for using annotations to extract parameters from messages. During operation, a computing device receives a message from a network interface. After determining a message type for the message, a format decoder in the computing device uses the message type to determine an annotation that is associated with the message type. The message and the annotation are then output to one or more functional units of the computing device, with the annotation output aligned with the message on a per-message-byte basis.

Abstract: A communications system for general business environments that exploits knowledge of user state to provide advantages of efficiency and control for individual users and for the business. The communications system also provides particular advantages in environments where users have multiple communication devices and for communications of a business with external parties. In other aspects, the communication system provides features of application flexibility and system fault-tolerance with broad applicability to communication systems. The communication system includes a controller that receives requests for establishing communications when a user is in an appropriate state to receive communications and communicates state of the user to other users.

Abstract: In one embodiment, a traffic engineering (TE) label switched path (LSP) is established between a head-end node in a local domain and a tail-end node in a remote domain. The TE-LSP spans one or more intervening domains located between the local domain and the remote domain. The head-end node sends a routing information request over the TE-LSP to a target node on the TE-LSP that is in the remote domain. The head end node receives routing information from the target node. The received routing information includes a list of address prefixes reachable by the target node. The head end node uses the received routing information to calculate routes reachable via the TE-LSP to the target node. The calculated routes have a next-hop interface set to be the TE-LSP. The calculated routes are inserted into a routing table of the head-end node.

Abstract: A hybrid routing—application network fabric apparatus is presented where a fabric apparatus has multiple apparatus components or resources that can be dedicated to one or more application topologies. The apparatus can receive a topology image definition file describing an application topology and the apparatus can dedicate its local components for use with the application topology. The apparatus can dedicate general purpose processing cores, dedicated routing cores, data channels, networking ports, memory or other local resources to the application topology. Contemplated application topologies include routing topologies, computation topologies, database topologies, storage topologies, or other types of application topologies. Furthermore, application topologies can be optimized by modeling or simulating the topologies on a network fabric.

Abstract: Systems and methods for network management, including adaptively installing one or more monitoring rules in one or more network devices on a network using an intelligent network middleware, detecting application traffic on the network transparently using an application demand monitor, and predicting future network demands of the network by analyzing historical and current demands. The one or more monitoring rules are updated once counters are collected; and network paths are determined and optimized to meet network demands and maximize utilization and application performance with minimal congestion on the network.

Abstract: The various embodiments herein provide a system and method for providing collaborative designing, development, deployment, execution, monitoring and maintenance of an enterprise application. The system comprises a distributed cache shared across a plurality of nodes to form a cluster of nodes, a cluster manager to implement one or more clustering strategies, a load balancer to distribute a load across the nodes in the cluster, a data access layer to connect to a plurality of data stores using one or more persistent store adaptors, a data management layer to provide access to business data and meta-data, a processing engine to support Online Transaction Processing (OLTP), a service container for generating business services by wiring platform services with business rules and an Enterprise Application Designer to build the enterprise applications by wiring platform services as business services using the business rules.

Abstract: Disclosed are examples of apparatus, methods, and computer readable storage media for informing one or more users of social network data such as group data when the data is relevant to the user(s). For example, when one or more keywords are identified as being associated with both a group of an online social network and the user, a communication with information identifying the group data can be generated and provided to a display device accessible by the user. In another example, social network data is associated with an entity of the online social network, and the entity is not being followed by the user. Social network data identified as related to one or more keywords can be provided to a display device in a suitable presentation accessible by the user.

Abstract: In an embodiment of the invention, a method which speeds up the transfer of data and increases the data throughput in an IO network comprised of Host Bus Adapters (HBAs)/IO bridges-switches, IO devices, and hosts is described. In the embodiment of the present invention, HBAs and IO bridges-switches utilize a multi-level cache composed of volatile memories (such as SRAM, SDRAM, etc.) and solid-state memories (such as flash, MRAM, etc.). These memories are used to cache the most recently accessed IO data by an active host or by another HBA/IO bridge-switch. Cache content can be from the local IO devices (the ones connected directly to the HBA/IO bridge-switch), from remote IO devices (the ones connected to different HBA/IO bridges/switches), or from both (a portion from local IO devices and another portion from remote IO devices). The combination of these caches from different HBAs/IO bridges-switches creates the cache for all IO devices in the entire network.

Abstract: A method to send an alert for nonproductivity associated with a conversation is provided. The method may include recording a plurality of communication outputs of at least two users engaged in a remote message exchange or a remote conversation. The method may also include creating a plurality of text tokens based on the recorded plurality of communication outputs. The method may include analyzing, by a graphical text analyzer, the created plurality of text tokens to determine whether the plurality of text tokens has fallen below a threshold. The method may further include sending an alert to the plurality of users involved in the conversation if it is determined that the plurality of text tokens has fallen below the threshold.

Abstract: A system includes a first service registry that includes a first list of services available in a first one or more nodes of the system and a second service registry that includes a second list of services available in a second one or more nodes of the system, wherein the second service registry is connected to the first service registry. The system further includes a service manager configured to manage a capability of the system, which is realized through a set of one or more services; connect to the first service registry; receive a notification, from the first service registry, indicating a change in the second list of services included in the second service registry; and initiate deployment of a new service for the capability, or locate a deployed instance of the new service in the system, in response to receiving the notification.

Abstract: In particular embodiments, a method comprising, by one or more computing devices, communicating, from a client device, to a remote host a resource locator of a content object being currently accessed by a first user at the client device, receiving from the remote host an indication that one or more second users have accessed the content object or a domain hosting the content object, and responsive to the indication, displaying a chat messaging interface to the first user at the client device, wherein the chat messaging interface includes identifiers for the one or more second users and messaging controls operative to establish a chat session with the one or more second users.

Abstract: Certain embodiments of the present disclosure generally relate to allocating a sub-area of Fiber Channel addresses (FCIDs) to a device. A range of addresses may be assigned to the device using a mask address, where the most significant bits represent a mask and the least significant bits represent a sub-range of FCIDs available to be assigned to the device. Therefore, routing information may be stored efficiently in a Ternary Content Addressable Memory (TCAM) by storing a single entry in the TCAM for each sub-area of FCIDs allocated to a device, instead of storing an entry for each FCID. The single entry may indicate the mask address and the width of the mask.

Abstract: A method, apparatus, and program product stream data between a host element and a target element in a parallel computing system. The method comprises partitioning data used to perform a task into a plurality of data streams based at least in part upon data associated with the task and partitioning a data stream into a plurality of data stream views based at least in part on a memory size associated with a target element configured to process the data stream. The method further comprises sequentially communicating at least a portion of the data stream views to the target element via a data streaming infrastructure implemented on at least a host element and the target element, wherein the portion of the data streaming infrastructure on the host element transfers the portion of the data stream views to the portion of the data streaming infrastructure on the target element.

Abstract: A solution is provided for associating network traffic traversing a networked environment according to a selected category item, such as a user name or other network entity identity-related information. The solution includes a collector and a monitor. The collector extracts a user name and a network address from an event log maintained on the networked environment. The monitor receives the network traffic and identifies at least one packet having a network address that matches the extracted network address. After at least one of the packets is identified, the collector associates the identified packet(s) with the extracted user name.