Abstract: In some aspects, the disclosure is directed to methods and systems for detection and classification of stamps in documents. The system can receive image data and textual data of a document. The system can pre-process and filter that data, and covert the textual data to a term frequency inverse document frequency (TF-IDF) vector. The system can detect the presence of a stamp on the document. The system can extract a subset of the image data including the stamp. The system can extract text from the subset of the image data. The system can classify the stamp using the extracted text, the image data, and the TF-IDF vector. The system can store the classification in a database.

Abstract: A system and a method for eliminating data loss in a virtually aggregated network are described. A first network device may identify inactivity of a central network device present in a communication network. The central network device is responsible for distributing routing information between a plurality of network devices including the first network device. The first network device delays network route calculations until a second network device is elected from the plurality of network devices to perform functions of the central network device. The second network device generates link state information related to the plurality of network devices, and shares the link state information with the plurality of network devices. Upon receiving the link state information, the plurality of network device may resume the route calculations.

Abstract: A method and system for enhanced time synchronization with lesser delay and jitter, from a gateway of a network or an external standard time source, over the internet, in a traditional network, including SDN, by NTP clients like newly added devices, spawned VMs and the like, by automatic deployment of the distributed NTP service through DHCP and DNS servers by spawning NTP demons (ntpd), according to the time synchronization requests received, thereby offloading the NTP functionality of the gateway and decreasing NTP traffic.

Abstract: A system, method, and computer program for providing tunneling redundancy is provided. The method may include using router redundancy protocols on routers at endpoints of virtual IP tunnels to allow for failover of a master router to a backup router that assumes control over a virtual IP address in order to keep packet transmission in the virtual IP tunnel flowing with minimal interruption and no remote reconfiguration.

Abstract: Examples disclosed herein relate to a method comprising changing a state at a first device in a virtual stack forwarding (VSF) stack topology, wherein each device in the VSF stack topology has a synchronized state in a corresponding local database storing state and configuration for the device. The method may also comprise transmitting, from the first device, the changed state to a commander node of the VSF stack topology, committing, by the commander node, the changed state to a first local database of the commander node and transmitting, by the commander node, the changed state to a root node of the VSF stack topology. The method may also comprise committing, by the root node, the changed state to a second local database of the root node and propagating, by the root node, the changed state throughout the VSF stack topology.

Abstract: Systems, methods and devices for adding key chain and key derivative functions (KDF) support for Network time protocol (NTP) authentication using password based key derivation functions-NTP (PBKDF-NTP) are disclosed. In one embodiment, a method includes generating time bound multiple short lived keys instead of long lived keys for NTP security which ensures that attacker will not get enough time to crack the key values. The usage of time bound multiple short lived keys instead of long lived keys for NTP security will ensure that attacker will not get enough time to crack the key values within key lifetime. Hence man-in-middle attack can be avoided in NTP.

Abstract: Examples provided herein describe a method for providing security for Internet of Things (IoT) devices. For example, a data packet from an IoT device may be received at an edge device. A signature associated with the IoT device may be accessed at the edge device, where the signature includes network layer information about the IoT device. A set of rules may be applied by the edge device to validate the IoT device based on the accessed signature. Responsive to the IoT device being validated based on the accessed signature, received data packet, and the applied set of rules, the edge device may process the data packet from the IoT device.