Abstract: An approach is disclosed for optimizing jobs, which involve effective data retrieval across multiple data sources, via an externalized query pattern. The approach receives a query. The approach allocates computing power to one or more computing nodes to process a job for the received query. The approach determines whether the job for the received query corresponds to an identifier indexed in a search engine. The approach retrieves, in response to determining the job for the received query corresponds to the indexed identifier, attribute data corresponding to the indexed identifier from the search engine. The approach provides a response to the received query request, in which the response includes the attribute data corresponding to the indexed identifier.

Abstract: A method, apparatus, and system provide the ability to act on cyber risks and reduce cyber attacks. System characteristics and system information for a cyber system are gathered. The system characteristics and system information are preprocessed to identify vulnerabilities that are relevant to the cyber system. A system model of a cyber environment is generated for the cyber system. One or more features are converted from cyber threat reports to one or more semantically relevant queries over the system model. The system model is reasoned over to generate one or more answers relevant to the one or more semantically relevant queries. Attack models are executed over the system model to generate actionable intelligence and reduce cyber attacks.

Abstract: A method, apparatus, and system provide the ability to act on cyber risks and reduce cyber attacks. System characteristics and system information for a cyber system are gathered. The system characteristics and system information are pre-processed to identify vulnerabilities that are relevant to the cyber system. A system model of a cyber environment is generated for the cyber system. One or more features are converted from cyber threat reports to one or more semantically relevant queries over the system model. The system model is reasoned over to generate one or more answers relevant to the one or more semantically relevant queries. Attack models are executed over the system model to generate actionable intelligence and reduce cyber attacks.

Abstract: A system and method of generating platform-dependent queries from a platform-agnostic query are disclosed. A data pipeline comprising a plurality of events is implemented. Each event in the plurality of events has a set of platform-dependent metadata associated therewith and each of the plurality of events is processed by one of a plurality of ingestion platforms. Metadata associated with each of the plurality of events is stored in a combined metadata repository. The combined metadata repository stores metadata extracted from two or more platforms in a first repository. A platform-agnostic query configured to obtain one or more metadata search results from the platform-dependent metadata is received and deployed to the first repository within the combined metadata repository. The platform-agnostic query is configured to return a result set including metadata obtained from each of the two or more platforms.

Abstract: An approach is disclosed for optimizing jobs, which involve effective data retrieval across multiple data sources, via an externalized query pattern. The approach receives a query. The approach allocates computing power to one or more computing nodes to process a job for the received query. The approach determines whether the job for the received query corresponds to an identifier indexed in a search engine. The approach retrieves, in response to determining the job for the received query corresponds to the indexed identifier, attribute data corresponding to the indexed identifier from the search engine. The approach provides a response to the received query request, in which the response includes the attribute data corresponding to the indexed identifier.

Abstract: A system and method of generating platform-dependent queries from a platform-agnostic query are disclosed. A data pipeline including a plurality of events having a set of platform-dependent metadata associated therewith is implemented. Each of the plurality of events is processed by one of a plurality of ingestion platforms. A platform-agnostic query configured to obtain one or more metadata search results from the platform-dependent metadata is received and a first platform-dependent query is generated from the platform-agnostic query. The first platform-dependent query is configured to be implemented by at least one target ingestion platform.

Abstract: A system and method of generating platform-dependent queries from a platform-agnostic query are disclosed. A data pipeline comprising a plurality of events is implemented. Each event in the plurality of events has a set of platform-dependent metadata associated therewith and each of the plurality of events is processed by one of a plurality of ingestion platforms. Metadata associated with each of the plurality of events is stored in a combined metadata repository. The combined metadata repository stores metadata extracted from two or more platforms in a first repository. A platform-agnostic query configured to obtain one or more metadata search results from the platform-dependent metadata is received and deployed to the first repository within the combined metadata repository. The platform-agnostic query is configured to return a result set including metadata obtained from each of the two or more platforms.

Abstract: A system and method of generating platform-dependent queries from a platform-agnostic query are disclosed. A data pipeline including a plurality of events having a set of platform-dependent metadata associated therewith is implemented. Each of the plurality of events is processed by one of a plurality of ingestion platforms. A platform-agnostic query configured to obtain one or more metadata search results from the platform-dependent metadata is received and a first platform-dependent query is generated from the platform-agnostic query. The first platform-dependent query is configured to be implemented by at least one target ingestion platform.

Abstract: A method, apparatus, and system provide the ability to act on cyber risks and reduce cyber attacks. System characteristics and system information for a cyber system are gathered. The system characteristics and system information are pre-processed to identify vulnerabilities that are relevant to the cyber system. A system model of a cyber environment is generated for the cyber system. One or more features are converted from cyber threat reports to one or more semantically relevant queries over the system model. The system model is reasoned over to generate one or more answers relevant to the one or more semantically relevant queries. Attack models are executed over the system model to generate actionable intelligence and reduce cyber attacks.

Abstract: The technique relates to a system and method for implementing petabyte scale online analytical processing solutions using MapReduce. The technique involves receiving an OLAP query from a user through an OLAP-QL Driver. After receiving the query it is parsed through the compiler. Then the metadata information is retrieved from the parsed query through the metadata manager. Validating the parsed query using plan generator module for generating a MapReduce job execution plan based on the retrieved metadata information. The next step is to identify the scope for optimization in the generated MapReduce job execution plan and optimizing the MapReduce job execution plan using the identified scope. Then executing the optimized MapReduce job plan using the execution engine and finally storing the output data in the cube specific distributed file system directory.

Abstract: The technique relates to a system and method for generating billing data of a composite cloud service. The technique tracks and meters manual service usage along with the infrastructure and software usage to generate billing data for the composite cloud service. The technique involves receiving a user request for the composite cloud service. After receiving the user request, one or more infrastructure, software and manual resources required to fulfill the user request are provisioned. Thereafter, the consumption of the one or more infrastructure, software and manual resources in real time to fulfill the user request is measured based on a predefined monitoring metrics. Finally, billing data for the composite cloud service is generated based on the measured consumption data of the one or more infrastructure, software and manual resources, a predefined chargeback model and a predefined billing policy.

Abstract: A LAN includes a router that is connected to two or more racks of servers and each of the servers can support a plurality of virtual machines. The router is configured to forward data packets based on IP destination addresses or based on destination MAC addresses and builds and maintains forwarding tables in support of data packet forwarding in the layer 3 and the layer 2 network environment. In support of layer 2 forwarding, the router builds and maintains an aggregated MAC switching table that is comprise of a subset of the table entries typically needed to switch packets to their destination, and in support of layer 3 forwarding, the router or switch builds and maintains an aggregated ARP forwarding table that is comprised of a subset of the table entries typically needed to forward packets to their destination.

Abstract: A multiprocessor system includes multiple processors executing multiple processes that send messages to each other. The system uses a connectionless single-window inter-process communication (IPC) protocol to avoid the high message-processing overhead of a connection-based protocol like TCP. The IPC protocol uses a central message-receive service that runs in the kernel on each processor to handle error-checking and sequence number checking and acknowledge received messages, while the single-window mechanism avoids out-of-order message reordering/buffering complexity. Since each process sending a message does not need to wait for the receiving process (which may be otherwise preoccupied or not even the focus of the receiving processor when the message is received and queued) before receiving acknowledgments, the protocol greatly reduces single-window message latency for all processes without resorting to complex connection-based multi-packet transmission windows.

Abstract: A LAN includes a router that is connected to two or more racks of servers and each of the servers can support a plurality of virtual machines. The router is configured to forward data packets based on IP destination addresses or based on destination MAC addresses and builds and maintains forwarding tables in support of data packet forwarding in the layer 3 and the layer 2 network environment. In support of layer 2 forwarding, the router builds and maintains an aggregated MAC switching table that is comprise of a subset of the table entries typically needed to switch packets to their destination, and in support of layer 3 forwarding, the router or switch builds and maintains an aggregated ARP forwarding table that is comprised of a subset of the table entries typically needed to forward packets to their destination.

Abstract: A method is disclosed for preventing an unstable BGP Peer from repeatedly initializing unstable BGP connections. In one embodiment, BGP speakers are penalized for causing errors that result in BGP restarts. When a speaker accumulates enough penalty points, its peer notifies it that it has been dampened (prevented from establishing a BGP connection). A memory decay function allows the speaker to automatically attempt a new connection once a given amount of time has passed. The method allows at least two, and possibly more, BGP speakers to avoid network and processor costs from servicing unstable BGP peerings.

Abstract: Each of multiple radio devices in a region (e.g., a zone) receives time reference information for synchronizing themselves amongst each other. For example, based on the timing reference information, each radio device in a region synchronizes itself with respect to a common time reference, enabling communications according to shared access schedule (e.g., a time slotted access schedule). Each of the radio devices schedules communications to one or more target devices (e.g., RFID tags) in a monitored region based at least in part according to the shared access schedule. For example, each of multiple transmitters of the tag readers are assigned one or more time slots of the shared access schedule in which they are permitted to communicate in the monitored region.

Abstract: A switching apparatus (and method and program storage device for storing the method) for receiving and transmitting data units each segmented into a series of cells of data, including a first cell and a last cell, each cell of a series including a label common to all cells of said series, includes at least one incoming port for receiving cells of a plurality of series at each incoming port, at least one outgoing port for transmitting cells out of the apparatus with an outbound label, a storage device for storing a series of cells received at each incoming port until the last cell of the series is received, and, a device for transmitting each of the series of cells sequentially from the first cell to the last cell from the storage device to a selected outgoing port. Each cell of each series has an outbound label common to all cells of the series, and all cells of each of the series are transmitted before transmitting any cells of other series having the same outbound label.

Abstract: This invention discloses a way to map IP or similar routing information onto a technology that uses label switching and swapping, such as ATM, without the need to change the network paradigm. This allows a network to continue to function and appear as a standard IP network, but with much higher performance. One of the requirements of IP networks is to decrement the IP packet Time-To-Live (TTL) field on each hop it traverses. Currently, switched packets within an ATM like network cannot decrement the TTL. This invention can decrement packet TTLs appropriately by maintaining a hop-count per each switched path. This hop-count maintains the total number of hops a packets would have traversed, had it been forwarded in the IP hop-by-hop model, rather than through the ATM like switched path. Before forwarding a packet on a switched path, an ingress ISR decrements the TTL by the hop-count. In this way, at the switched path exit point, the TTL is the same as if it had been forwarded by IP.

Abstract: In networks that use the label switching paradigm, labels are typically allocated to a "flow", where a flow is identified as an end-to-end connection between two or more user applications. This approach may quickly lead to exhaustion of the label space, because the number of user connections across a network is unbounded and hence can be too numerous. Moreover, this requires that the setup and teardown procedures be exercised for each user connection. This demands large amounts of resources (in terms of labels, memory and processing) from the network devices. An important objective of this inventive proposal is to reduce the consumption of labels in a network. Several methods are identified through which multiple flows that traverse the same network hops can use a single connection through the network to transport data from the ingress to the egress point of a network. In other words, the flows are "aggregated" onto a single connection from an ingress to an egress point of a network.

Abstract: IP based networks use a number of different IP routing protocols to determine how packets ought to be routed. However, due to the rapid growth of the Internet, there is a great need for higher packet forwarding performance. This invention describes a way to map IP routing information onto a technology that uses label switching and swapping, such as ATM, without the need to change the network paradigm. This allows a network to continue to function and appear as a standard IP network, but with much higher performance. In this invention, an Integrated Switch Router (ISR), is a switch that has been augmented with standard IP routing support. The ISR at an entry point to the switching environment performs standard IP forwarding of datagrams, but the "next hop" of the IP forwarding table has been extended to include a reference to a switched path (for example, the VCC in ATM technology).