Abstract: A semiconductor device includes a substrate, an epitaxial layer, an emitter region, and a collector region. The epitaxial layer is disposed over the substrate and has a first conductivity type. The drift region is disposed in the epitaxial layer and has a second conductivity type that is the opposite of the first conductivity type. The emitter region is disposed in the epitaxial layer outside the drift region. The collector region is disposed in the drift region. The semiconductor device also includes a doped region. The doped region is disposed adjacent to the bottom surface of the drift region and has the first conductivity type.

Abstract: A system and a method for performing programmable analytics on network data are described. A data layer constructs flow behavior information based on information present within headers of data packets flowing across one or more network devices configured in a computer network. An inline heuristics layer performs one or more inline heuristic operations on the flow behavior information to obtain aggregate statistical information. An integrated analytics layer performs one or more analytical operations on the flow behavior information to obtain network insights. A presentation layer filters and plots information obtained from the data layer, the inline heuristics layer, and the integrated analytics layer, based on a user input.

Abstract: A system, computer program product, and method are presented for leveraging structured data and unstructured data, and, more specifically, to ranking documentation from unstructured data sources through leveraging insights provided by the structured data to facilitate associated business risk inquiries. The method includes identifying, by researching subject business entities, one or more structured data sources that include relevant structured data directed to the subject business entities. The method also include extracting the relevant structured data directed toward the subject business entities and leveraging the relevant structured data to identify unstructured data sources. The method further includes identifying documents from the unstructured data sources that have relevant information, thereby identifying relevant unstructured data, and leveraging the relevant structured data to determine relationships with the relevant unstructured data.

Abstract: A computer receives a list of reference topics from a topic database and a set of articles related to said reference topics. The computer generates article n-grams and compares them to the reference topics using NLP to determine a primary theme for each article that corresponds to one of reference topics. The computer collects articles with common primary themes into at least one article group and determining an article comparison value between articles in the article group. Responsive to determining that an article comparison value is below a predetermined similarity threshold, determining a distinguishing feature associated with one of the compared articles that contributed to the article comparison value. The computer assigns articles having the distinguishing feature into a secondary group based, at least in part, on the distinguishing feature.

Abstract: This disclosure provides systems, devices, apparatus, and methods, including computer programs encoded on storage media, for configurable aprons for expanded binning. Aspects of the present disclosure include identifying one or more pixel tiles in at least one bin and determining edge information for each pixel tile of the one or more pixel tiles. The edge information may be associated with one or more pixels adjacent to each pixel tile. The present disclosure further describes determining whether at least one adjacent bin is visible based on the edge information for each pixel tile, where the at least one adjacent bin may be adjacent to the at least one bin.

Abstract: An information handling system includes a plurality of containerized applications, a container service, a hardware device, and a host processor to initialize a host service. The container service is associated with the containerized applications. The hardware device is virtualized to the containerized applications. The host processor identifies the hardware device that is virtualized to the containerized applications. The host processor receives a power notification from the container service. Based on the power notification, the host processor changes a power state of the hardware device.

Abstract: A technique manages bandwidth allocated among input/output operations, such as reads and writes, to storage devices coupled to storage nodes of a cluster. The technique balances the writes in a manner that reduces latency of reads, while allowing the writes to complete in a desired amount of time. The writes include write types, such as client writes, data migration writes, block transfer writes, and recycling writes, which are defined by differing characteristics and relative priorities. To ensure timely completion of the write types, the technique provides periodic time intervals over which the writes may be balanced and allocated sufficient bandwidth to access the storage devices. The time intervals may include shuffle intervals within a larger distribution interval. In addition, the technique throttles certain write types at the storage device level to maintain consistent read performance. Throttling is based on a credit system that allocates bandwidth as “credits” based on write type.

Abstract: Embodiments provide systems and methods to load balance using tenant affinities. A method includes configuring a load balancer with a set of tenant affinities, the set of tenant affinities including a tenant affinity for each of a plurality of tenants with respect to each of a plurality of computing nodes that provide services to users in a multitenant environment. Load balancing may include receiving a user request, associated with a tenant, for a service provided by the computing nodes, determining a highest tenant affinity computing node for the tenant using the set of tenant affinities and directing the user request to the highest tenant affinity computing node for the tenant.

Abstract: Systems, methods, and computer-executable instructions for verifying a chat bot. Registration information for the chat bot is received that includes keywords. Queries are submitted to the chat bot and responses to the queries are received. The responses are classified using a classifier. Verification that the responses are classified as approved responses are done. The registration information is stored and the registration of the chat bot is completed based upon the verified responses. A search query that includes a search keyword is received. The search keyword is matched to the keywords associated with the chat bot. Search results that include a link to the chat bot that are based upon the search query are provided.

Abstract: A system and a method for eliminating data loss in a virtually aggregated network are described. A first network device may identify inactivity of a central network device present in a communication network. The central network device is responsible for distributing routing information between a plurality of network devices including the first network device. The first network device delays network route calculations until a second network device is elected from the plurality of network devices to perform functions of the central network device. The second network device generates link state information related to the plurality of network devices, and shares the link state information with the plurality of network devices. Upon receiving the link state information, the plurality of network device may resume the route calculations.

Abstract: In some aspects, the disclosure is directed to methods and systems for detection and classification of stamps in documents. The system can receive image data and textual data of a document. The system can pre-process and filter that data, and covert the textual data to a term frequency inverse document frequency (TF-IDF) vector. The system can detect the presence of a stamp on the document. The system can extract a subset of the image data including the stamp. The system can extract text from the subset of the image data. The system can classify the stamp using the extracted text, the image data, and the TF-IDF vector. The system can store the classification in a database.

Abstract: Individual interfaces of USB composite devices can be blocked. When a USB device is connected to a host system, a filter driver can be loaded on top of the USB hub driver and can be configured to monitor I/O control (IOCTL) requests that are sent as part of the enumeration process. When the filter driver detects that the USB device is a USB composite device, it can selectively modify the descriptors that the USB composite device reports based on the number of interfaces that will not be blocked. This selective modification of the descriptors enables individual interfaces to be blocked without filtering the USB composite class driver which in turn minimizes or eliminates any conflicts that may otherwise exist.

Abstract: An overlay optimizer can enhance the functionality of a write filter using an auxiliary overlay. An overlay optimizer can be loaded above a write filter. Based on the configuration of the write filter's overlay, the overlay optimizer can be configured to implement a volatile or persistent auxiliary overlay and then use the auxiliary overlay to selectively cache artifacts. To minimize the likelihood that the consumption of the write filter's overlay will exceed a critical threshold, the overly optimizer can be provided a list of monitored artifacts. The overlay optimizer can employ the list to selectively move monitored artifacts from the write filter's overlay to the auxiliary overlay when the overlay's consumption reaches a threshold. The overlay optimizer may also selectively allow I/O requests generated by particular applications while redirecting I/O requests generated by other applications.

Abstract: A method of enabling enhanced Management Plane functions on the fronthaul interface between Open Radio Access Network Radio Unit (O-RU) and O-RAN Distributed Unit (O-DU) includes: identifying four subfields within 16-bit Extended Antenna Carrier Id (Eaxc-ID) field using a first set of four specified bitmasks including DU_Port_ID bitmask, BandSector_ID bitmask, CC_ID bitmask, and RU_Port_ID bitmask; and providing a second set of specified bitmasks including at least one of band-bitmask, sector-bitmask, channel-type-bitmask, and layer-antenna-port-bitmask, wherein: i) band bitmask defines which bits within the BandSector_ID bitmask subfield are used to indicate band; ii) sector bitmask defines which bits within the BandSector_ID bitmask subfield are used to indicate sector-id; iii) channel-type bitmask defines which bits within the RU_Port_ID bitmask subfield are used to indicate channel type; and iv) layer-antenna-port bitmask defines which bits within the RU_Port_ID bitmask subfield are used to indicate one o

Abstract: Individual interfaces of USB composite devices can be blocked. When a USB device is connected to a host system, a filter driver can be loaded on top of the USB hub driver and can be configured to monitor I/O control (IOCTL) requests that are sent as part of the enumeration process. When the filter driver detects that the USB device is a USB composite device, it can selectively modify the descriptors that the USB composite device reports based on the number of interfaces that will not be blocked. This selective modification of the descriptors enables individual interfaces to be blocked without filtering the USB composite class driver which in turn minimizes or eliminates any conflicts that may otherwise exist.

Abstract: Systems and methods include identifying a cloud application; performing one or more automated scripts to determine a first set of attributes of the cloud application; obtaining a second set of attributes of the cloud application based on a manual analysis; obtaining weighting factors for the first set of attributes and the second set of attributes; determining a risk score of the cloud application based on the first set of attributes and the second set of attributes and the associated weighting factors; and displaying the risk score of the cloud application. The steps can further include enforcing security policies for the cloud application based on the risk score, such as via one of a cloud-based system and a Cloud Access Security Broker (CASB) system.

Abstract: The amount of data that is written to disk is minimized when an overlay optimizer is used in conjunction with a write filter to prevent the overlay from becoming full. An overlay optimizer minifilter can be used to intercept writes that were initiated by the overlay optimizer's request to commit files cached in the write filter's overlay to thereby extract only the modified portions of the files that are actually stored in the overlay. The overlay optimizer minifilter can then write these modified portions of the files, as opposed to the entire files, in the overlay cache. Directory change notifications are also enabled when a write filter is employed as well as in other multi-volume filter environments.

Abstract: A multi-API security policy that covers multiple API calls of a transaction is dynamically enforced at runtime, without access to the specification or code of the APIs. Calls made to APIs of the transaction are logged, and the logs are read. Data objects used by the APIs are identified. Specific data labels are assigned to specific fields of the data objects, consistently identifying data fields of specific types. Linkages are identified between specific ones of the multiple APIs, based on the consistent identification of specific types of data fields. An API call graph is constructed, identifying a sequence of API calls made during the transaction. The call graph is used to enforce the security policy, by tracking the flow of execution of the multi-API transaction at runtime, and detecting actions that violate the security policy. Security actions are taken responsive to the detected actions that violate the policy.

Abstract: Resource utilization can be intelligently managed in desktop virtualization environments. Utilization of client and server resources can be tracked during sessions that are established to access desktops. Machine learning models can be applied to the client and server resource utilization to create policies that define configuration settings for dynamically optimizing sessions based on the current utilization of resources during the sessions.

Abstract: A dynamic API security policy is enforced at runtime. This can be done without having access to the API specification or code. A flow of execution initiated by the API is tracked at runtime, and a data object used by the API is identified. Specific data labels are assigned to specific fields of the data object used by the API. The specific data labels consistently identify data fields of specific types. The API security policy that is enforced prohibits specific actions concerning data fields of specific types, which are also consistently identified in the security policy. Actions in the tracked flow of execution that violate the API security policy are detected at runtime, and security actions are taken in response. In some implementations, these dynamic API security techniques are supplemented with static API security analysis of an API specification and a set of rules concerning API risk assessment.