Abstract: The disclosed technology relates to a distributed policy store. A system is configured to locate, in an index, an entry for a network entity, determine, based on the entry, a file identifier for a file containing a record for the network entity and an offset indicating a location of the record in the file. The system is further configured to locate the file in a distributed file system using the file identifier, locate the record in the file using the offset, and retrieve the record.

Abstract: Provided are methods, network devices, and computer-program products for targeted threat intelligence using a high-interaction network. In some implementations, a network device in a network may receive suspect network traffic. The suspect network traffic may include network traffic identified as potentially causing harm to the network. The network device may determine that the suspect traffic is associated with an unknown threat. The network device may further analyze the suspect network traffic using a high-interaction network. In various implementations, the high-interaction network may be configured to emulate at least a part of the network. In various implementations, analyzing the suspect network traffic may include determining a behavior of the suspect network traffic in the high-interaction network. The network device may further generate indicators, where the indicators may describe the suspect network traffic.

Abstract: Devices and techniques are generally described for image editing. In various examples, color image data and segmentation image data may be identified. In some examples, the segmentation image data may identify a first portion of the color image data as a foreground region and a second portion of the color image data as a background region. A segmentation boundary may be identified between the foreground region and the background region. A first area of the second portion may be identified, where the first area extends from the segmentation boundary to a first area outer boundary. A second area of the second portion may be identified, where the second area extends from the first area outer boundary to a second area outer boundary. A blended and blurred representation of the first area and the second area may be generated.

Abstract: Devices and techniques are generally described for segmentation of object image data from background image data. In some examples, the segmentation of object image data may comprise capturing image data comprising color data and depth data. In some examples, the segmentation of object image data may further include separating the depth data into a plurality of clusters of image data, wherein each cluster is associated with a respective range of depth values. In various examples, the segmentation of object image data may comprise selecting a main cluster of image data as corresponding to an object of interest in the image data. In various other examples, the segmentation of object image data may comprise identifying pixels of the main cluster that correspond to the object of interest.

Abstract: According to one embodiment, a computerized method comprises conducting a first static scan on content within a file. Thereafter, if the first static scan did not result in the file being classified as malicious, the file is deconstructed to gain access to one or more objects within the file. A second static scan associated with the one or more objects is performed to determine whether the one or more objects are suspected of including malware. The file may then be classified as malicious based on results of the second static scan.

Abstract: Methods, systems, and apparatuses manage rolling out of updates in a network-accessible server infrastructure which operates a plurality of instances of a supporting service. The supporting service is comprised by a plurality of service portions. The instances of the supporting service each include of the service portions. The instances of the supporting service are partitioned into a plurality of slices. Each instance is partitioned to include one or more of the slices, and each slice of an instance includes one or more of the service portions. A software update is deployed to the instances by applying the software update to the slices in a sequence such that the software update is applied to a same slice in parallel across the instances containing that same slice before being applied to a next slice, and waiting a wait time before applying the software domain to a next slice in the sequencing.

Abstract: A modal antenna array is described where modal antenna elements capable of generating multiple radiation modes are used to form array radiation patterns. Nulls in the array radiation pattern can be formed and positioned by proper modal antenna element mode selection, with these nulls used to provide interference suppression or mitigation. The shift in array radiation pattern maxima generated by modal element mode selection can be used to improve communication system link quality by optimizing array radiation pattern characteristics. Specifically, a ring or circular array configuration is described where a simplified common feed port can be implemented to feed multiple modal antenna elements used to form the array. A switch can be used to connect or disconnect one modal element from the array, with this feature providing additional unique array beam states. The modal array can be commanded via a look-up table or algorithm.

Abstract: Methods, systems, and apparatuses manage rolling out of updates in a network-accessible server infrastructure which operates a plurality of instances of a supporting service. The supporting service is comprised by a plurality of service portions. The instances of the supporting service each include of the service portions. The instances of the supporting service are partitioned into a plurality of slices. Each instance is partitioned to include one or more of the slices, and each slice of an instance includes one or more of the service portions. A software update is deployed to the instances by applying the software update to the slices in a sequence such that the software update is applied to a same slice in parallel across the instances containing that same slice before being applied to a next slice, and waiting a wait time before applying the software domain to a next slice in the sequencing.

Abstract: A technique is described where the switch and/or tunable control circuit for use with an active multi-mode antenna is positioned remote from the antenna structure itself for integration into host communication systems. Electrical delay and impedance characteristics are compensated for in the design and configuration of transmission lines or parasitic elements as the active multi-mode antenna structure is positioned in optimal locations such that significant electrical delay is introduced between the RF front-end circuit and multi-mode antenna. This technique can be implemented in designs where it is convenient to locate switches in a front-end module (FEM) and the FEM is located in vicinity to the transceiver.

Abstract: An alternating current (AC) drive signal having a first frequency and a high logic level at a boosted supply voltage is applied to drive a capacitive sensing line of a capacitive touch panel. The boosted supply voltage is generated by boosting an input voltage. The voltage boosting is effectuate by a charge pump circuit operating synchronous to assertion of the AC drive signal with a charge transfer time that is adaptable to different capacitive load conditions.

Abstract: An alternating current (AC) drive signal having a first frequency and a high logic level at a boosted supply voltage is applied to drive a capacitive sensing line of a capacitive touch panel. The boosted supply voltage is generated by boosting an input voltage. The voltage boosting is effectuate by a charge pump circuit operating synchronous to assertion of the AC drive signal with a charge transfer time that is adaptable to different capacitive load conditions.

Abstract: Methods, systems, apparatuses, and computer program products are provided that enable the automated deployment of microservices to a network-accessible server set. The automated deployment may be based on constraint(s) that are specified by a declarative deployment model that is associated with the microservice to be deployed. For example, a centralized deployment orchestrator may receive microservice(s) and their associated declarative deployment model(s). The deployment orchestrator analyzes the declarative deployment model(s) and determines which microservice(s) are to be deployed based on the constraint(s) specified by the declarative deployment model(s). The foregoing techniques advantageously determine when to deploy microservice(s), while also minimizing human intervention typically required to deploy microservice(s).

Abstract: Systems, methods and computer program products are described herein that can be used to help achieve a safe rollout of software in a production datacenter environment. In accordance with certain embodiments, cloud services requests from certain users of a cloud services system (e.g., users that are authorized to receive cloud services via computing devices running test versions of infrastructure software) are dynamically matched to clusters (groups of commonly-managed computing devices called nodes) that are capable of providing the requested services on nodes running test versions of infrastructure software. Within such clusters, the requested services are provided to the users on a subset of cluster nodes that run a test version of an infrastructure software component, while the remaining cluster nodes are not running the particular test version.

Abstract: Devices and techniques are generally described for segmentation of object image data from background image data. In some examples, the segmentation of object image data may comprise capturing image data comprising color data and depth data. In some examples, the segmentation of object image data may further include separating the depth data into a plurality of clusters of image data, wherein each cluster is associated with a respective range of depth values. In various examples, the segmentation of object image data may comprise selecting a main cluster of image data as corresponding to an object of interest in the image data. In various other examples, the segmentation of object image data may comprise identifying pixels of the main cluster that correspond to the object of interest.

Abstract: The disclosed technology relates to a distributed policy store. A system is configured to locate, in an index, an entry for a network entity, determine, based on the entry, a file identifier for a file containing a record for the network entity and an offset indicating a location of the record in the file. The system is further configured to locate the file in a distributed file system using the file identifier, locate the record in the file using the offset, and retrieve the record.

Abstract: The disclosed technology relates to intent driven network management. A system is configured to maintain an inventory store comprising records for a set of network entities in a network, wherein each network entity in the set of network entities is associated with a record in the inventory store. The system receives a user intent statement comprising an action and a flow filter representing network data flows on which the action is to be applied and queries, based on the flow filter, the inventory store to identify a plurality of network entities in the set of network entities to which the user intent statement applies. The system generates a plurality of network policies that implement the user intent statement based on the plurality of network entities and the action and enforces the plurality network policies.

Abstract: A modal antenna array is described where modal antenna elements capable of generating multiple radiation modes are used to form array radiation patterns. Nulls in the array radiation pattern can be formed and positioned by proper modal antenna element mode selection, with these nulls used to provide interference suppression or mitigation. The shift in array radiation pattern maxima generated by modal element mode selection can be used to improve communication system link quality by optimizing array radiation pattern characteristics. Specifically, a ring or circular array configuration is described where a simplified common feed port can be implemented to feed multiple modal antenna elements used to form the array. A switch can be used to connect or disconnect one modal element from the array, with this feature providing additional unique array beam states. The modal array can be commanded via a look-up table or algorithm.

Abstract: An embedded antenna system is described for use with metallized enclosures and housings used with wireless communication devices. One or multiple radiators are coupled to a metal cover, with ground points established on the metal cover to improve radiation efficiency and control the frequency response of the antenna system. Dynamic tuning methods are described wherein detuning of the antenna system for sources such as body-loading are compensated at adjusting impedance properties of the combination of radiator and metallized cover.

Abstract: A computerized technique is provided to analyze a message for malware by determining context information from attributes of the message. The attributes are determined by performing one or more of a static analysis of meta information of the message (e.g., delivery protocol attributes) to generate a first result; a dynamic analysis of an object contained in the message to generate a second result; and, in some embodiments, an emulation of the object to generate a third result. The first result, second result, and third result are correlated in accordance with one or more correlation rules to generate a threat index for the message. The threat index is compared with a predetermined threshold to determine whether the message should be classified as malware and, if so, an alert is generated.

Abstract: The disclosure concerns a beam steering antenna system that can be integrated into a portion of a mobile device, such as a ring conductor that encompasses the device or traverses a portion of the periphery of the mobile device. The single port antenna is capable of generating multiple radiation modes which possess different radiation pattern characteristics. An offset parasitic is implemented to couple to the main radiating element and alter the current distribution to affect a change in radiation mode. The coupling typically occurs at a coupling region designed into the conductive ring used as the antenna in a wireless device.