Abstract: Systems and methods for tracking, predicting, and mitigating Advanced Persistent Threat (APT) attacks in a network include detecting, from monitoring, events related to one or more subscribed entities, wherein the monitoring includes two or more of analyzing traffic flow, analyzing virtual currency transactions, and monitoring information related to the one or more subscribed entities on the Internet; analyzing the events to determine a likelihood of an attack on a specific subscribed entity of the one or more subscribed entities; and causing mitigation of the attack based on the determined likelihood, wherein the mitigation comprises one or more actions in the network relative to the specific subscribed entity.

Abstract: Systems and methods to detect and characterize fake cell towers in a network operator's network include receiving live data comprising any of crowd-sourced data and tower data; performing live data analysis on the live data and reference data; and detecting the fake cell towers based on the live data analysis. Optionally, spectrum data captured at cell towers by a baseband processor coupled to backhaul equipment can be used as additional input.

Abstract: A method and server to detect, diagnose, and mitigate issues in a network include receiving Operations, Administration, and Maintenance (OAM) data related to the network, the OAM data related to current operation of the network; instantiating a rule engine to evaluate one or more rules based on any one of the OAM data, an event, policy, and an anomaly; and performing one or more actions based on the evaluating the one or more rules. A Software Defined Networking (SDN) controller is also described.

Abstract: A method, operated by a Software Defined Networking (SDN) controller associated with an Autonomous System (AS) with one or more peering points, each peering point with an associated router communicatively coupled to the SDN controller, the method for detecting and defending against Distributed Denial of Service (DDoS) attacks, and the method includes receiving data from the one or more peering points; detecting malicious traffic at the one or more peering points; determining a peer quality measurement for the one or more peering points; and communicating the peer quality measurement and other data associated with the malicious traffic to one or more other SDN controllers, associated with Autonomous Systems connected through the one or more peering points, to facilitate convergence of the peer quality measurement back to a nominal level.

Abstract: A method, through a server, to determine carbon footprint of a network service, in a network, includes determining power consumption and cooling requirements of network devices associated with the network service; determining associated carbon footprint coefficients for power sources associated with each of the network devices; and determining carbon footprint of the network service based on the power consumption, the cooling requirements, and the associated carbon footprint coefficients.

Abstract: A data synchronization method, in a network element operating in a network, includes generating an event at the network element that needs to be synchronized with other devices in the network; based on assigned tokens for the network element, generating a row key for the event; and providing the row key to a Highly-Available (HA) key-value storage system for synchronization therewith, wherein the HA key-value storage system includes a plurality of nodes including the network element and the other devices.

Abstract: A computer-implemented method, a controller, and a Software Defined Network (SDN) perform steps of correlating users based on unique identifiers to service addresses; receiving historical data from associated control area operator for the service addresses; correlating the users' bandwidth usage behavior to the users' power usage behavior; monitoring the users' bandwidth usage over time; characterizing bandwidth usage type for the users with abnormal bandwidth usage patterns; and notifying the control area operator of the users with the abnormal bandwidth usage patterns based on the characterized bandwidth usage type. Accordingly, electric power forecasting by the control area operator can include improved accuracy through correlating the users' bandwidth usage behavior and detecting abnormal conditions.

Abstract: A method, a Software-Defined Networking (SDN) controller, and a network include operation of a multi-layer SDN network and uniquely identifying streaming content on higher layers relative to the multi-layer SDN network through deep packet inspection; associating the streaming content to a multi-layer service on the SDN network; and monitoring the streaming content on the SDN network over the multi-layer service. This can include dynamically adjusting bandwidth of the multi-layer service utilizing OpenFlow on the SDN network based on the monitoring. The deep packet inspection can utilize a Bloom filter embedded in a resource identifier of the streaming content by the content provider, wherein the embedded Bloom filter is transparent to content players and does not require changes to storage on associated web servers for the streaming content.

Abstract: Methods and apparatus for monetizing a carrier network are provided. In an example, a wavelength service is captured from deployed network assets in a carrier network. A revenue factor (R), a capital expenditure factor (C), an operational expenditure factor (O), and a service level agreement factor (S) are selected from an analytic profile of the carrier network based on the wavelength service requirements. The R, C, O, and S factors are hexadecimal numbers, and can be weighted relative to each other. An index is calculated by concatenating the R, C, O, and S factors a prioritized order and converting the resultant hexadecimal number into a decimal number. The calculated index is assigned to the wavelength service. The index can be displayed, along with indices for other wavelengths on other paths, to a user in a graphical form.

Abstract: A mobile-device method and system implement validating installation of a network device, for example the installation and validation of cards within a network element. Installation data is loaded onto the mobile device and one or more cards are installed in a network element, the cards having QR codes. An image of the installation is captured and the QR codes are recognized in the captured image. The cards are identified by association with the recognized markers and the physical locations, such as slot positions, of the cards relative to the network element are determined. The installation is validated with regard to slot assignments of cards and an installation report is uploaded from the mobile device to central servers.

Abstract: A mobile-device method and system implement validating installation of a network device, for example the installation and validation of cards within a network element. Installation data is loaded onto the mobile device and one or more cards are installed in a network element, the cards having QR codes. An image of the installation is captured and the QR codes are recognized in the captured image. The cards are identified by association with the recognized markers and the physical locations, such as slot positions, of the cards relative to the network element are determined. The installation is validated with regard to slot assignments of cards and an installation report is uploaded from the mobile device to central servers.

Abstract: A method, a server, and a management system correlate performance data in loosely coupled software, such as network and element management systems, with minimal overhead. The systems and methods can be used to determine performance bottlenecks and interdependencies between components by correlating and analyzing collected data. In an exemplary embodiment, the systems and methods can relate to network management systems (NMSs), element management systems (EMSs), and the like, which are collectively referred to herein as management systems. Management systems can include a loosely coupled software architecture that utilizes a message-based communication mechanism. As messages are processed, synchronous calls between components of the management system as employed as well. For the purpose of performance analysis and optimization, the systems and method correlate data between synchronous and asynchronous interactions as each message is processed through a management system.