Abstract: Structures for response shaping in frequency and time domain, include an optical response shaper and/or a modulator device with multiple injection. The device comprises a resonator having an enclosed geometric structure, for example a ring or racetrack structure, at least two injecting optical waveguides approaching the resonator to define at least two coupling regions between the resonator and the injecting waveguides, and may define at least two Free Spectral Range states. One or both of the coupling regions has a coupling coefficient selected for a predetermined frequency or time response, and the coupling coefficient or other device parameters may be variable, in some case in real time to render the response programmably variable.

Abstract: Structures for response shaping in frequency and time domain, include an optical response shaper and/or a modulator device with multiple injection. The device comprises a resonator having an enclosed geometric structure, for example a ring or racetrack structure, at least two injecting optical waveguides approaching the resonator to define at least two coupling regions between the resonator and the injecting waveguides, and may define at least two Free Spectral Range states. One or both of the coupling regions has a coupling coefficient selected for a predetermined frequency or time response, and the coupling coefficient or other device parameters may be variable, in some case in real time to render the response programmably variable. In addition, the injection power at one of the optical waveguides serves to modify the response.

Abstract: Structures for response shaping in frequency and time domain, include an optical response shaper and/or a modulator device with multiple injection. The device comprises a resonator having an enclosed geometric structure, for example a ring or racetrack structure, at least two injecting optical waveguides approaching the resonator to define at least two coupling regions between the resonator and the injecting waveguides, and may define at least two Free Spectral Range states. One or both of the coupling regions has a coupling coefficient selected for a predetermined frequency or time response, and the coupling coefficient or other device parameters may be variable, in some case in real time to render the response programmably variable.

Abstract: Structures for response shaping in frequency and time domain, include an optical response shaper and/or a modulator device with multiple injection. The device comprises a resonator having an enclosed geometric structure, for example a ring or racetrack structure, at least two injecting optical waveguides approaching the resonator to define at least two coupling regions between the resonator and the injecting waveguides, and may define at least two Free Spectral Range states. One or both of the coupling regions has a coupling coefficient selected for a predetermined frequency or time response, and the coupling coefficient or other device parameters may be variable, in some case in real time to render the response programmably variable.

Abstract: A network of nodes is organized into a data pipeline for one or more applications that require image understanding. The nodes are configurable to form different data pipelines, depending on the application. The process of configuring a data pipeline from the nodes may be standardized. In one implementation, the nodes have various capabilities, which may include sensor functions (e.g., image capture) and image understanding functions (e.g., object detection and recognition). Based on descriptions of the capabilities of the nodes, various nodes are selected for inclusion in the data pipeline and the interconnections between the selected nodes to form the data pipeline are also determined. Control data is transmitted to the selected nodes to form the data pipeline. The control data specifies the sensor and/or image understanding functions for the selected nodes according to each node's role in the data pipeline and also specifies the interconnections between the selected nodes.

Abstract: A network of nodes is organized into a data pipeline for one or more applications that require image understanding. The nodes are configurable to form different data pipelines, depending on the application. The process of configuring a data pipeline from the nodes may be standardized. In one implementation, the nodes have various capabilities, which may include sensor functions (e.g., image capture) and image understanding functions (e.g., object detection and recognition). Based on descriptions of the capabilities of the nodes, various nodes are selected for inclusion in the data pipeline and the interconnections between the selected nodes to form the data pipeline are also determined. Control data is transmitted to the selected nodes to form the data pipeline. The control data specifies the sensor and/or image understanding functions for the selected nodes according to each node's role in the data pipeline and also specifies the interconnections between the selected nodes.

Abstract: Structures for response shaping in frequency and time domain, include an optical response shaper and/or a modulator device with multiple injection. The device comprises a resonator having an enclosed geometric structure, for example a ring or racetrack structure, at least two injecting optical waveguides approaching the resonator to define at least two coupling regions between the resonator and the injecting waveguides, and may define at least two Free Spectral Range states. One or both of the coupling regions has a coupling coefficient selected for a predetermined frequency or time response, and the coupling coefficient or other device parameters may be variable, in some case in real time to render the response programmably variable.

Abstract: A proxy module for monitoring modifications to a database and external to the database includes a query processing module to monitor traffic to and from the database. The traffic includes queries to the database. The query processing module is further to identify a query corresponding to a request to modify the database. A trigger event module is to generate a trigger event based on the request. The trigger event indicates a modification of the database associated with the request. The trigger event module is further to cause the trigger event to be communicated from the proxy module to at least one entity accessing the database.

Abstract: A method and proxy device for on-demand generation of cryptographic certificates. The method includes receiving, by a proxy device, a request to access a cloud application; identifying a domain name designated in the received request; determining if the identified domain name is signed by a valid cryptographic certificate saved locally in the proxy device; and sending, to a certificate generator system, a certification request to issue a new cryptographic certificate to sign the identified domain name, when the identified domain name is not a signed domain name.

Abstract: An interactive live video production monitoring and control system contains a base station, connected to audio and video sources, that transmits live audio and video to an interactive mobile tablet using low-latency wireless communication. The mobile tablet displays the audio and video feeds of single or multiple audio and video sources with imperceptible delay. It allows users in the production team to roam freely throughout the production environment, while interacting directly with other users in the production environment and or remotely with other off-site members of the team. Users can interact with each other while viewing, recording and annotating the video feeds. The mobile tablet incorporates an ultra-low-latency wireless link. The mobile tablet allows users to view, record and playback live audio and video from one or multiple audio and video sources. Users can instantly annotate the live video and textual documents, as well as view and annotate the recorded video.

Abstract: An interactive live video production monitoring and control system is provided. The system includes a base station, connected to audio and video sources, that transmits live audio and video to an interactive mobile tablet using low-latency wireless communication. The mobile tablet displays the audio and video feeds of single or multiple audio and video sources with imperceptible delay. It allows users in the production team to roam freely throughout the production environment, while interacting directly with other users in the production environment and or remotely with other off-site members of the team. Users can interact with each other while viewing, recording and annotating the video feeds. The mobile tablet incorporates an ultra-low-latency wireless link. The mobile tablet allows users to view, record and playback live audio and video from one or multiple audio and video sources. Users can instantly annotate the live video and textual documents, as well as view and annotate the recorded video.

Abstract: A proxy module for monitoring modifications to a database and external to the database includes a query processing module to monitor traffic to and from the database. The traffic includes queries to the database. The query processing module is further to identify a query corresponding to a request to modify the database. A trigger event module is to generate a trigger event based on the request. The trigger event indicates a modification of the database associated with the request. The trigger event module is further to cause the trigger event to be communicated from the proxy module to at least one entity accessing the database.

Abstract: A method and system for protecting cloud-based applications executed in a cloud computing platform are presented. The method includes intercepting traffic flows from a plurality of client devices to the cloud computing platform, wherein each of the plurality of client devices is associated with a user attempting to access a cloud-based application; extracting at least one parameter from the intercepted traffic related to at least each client device and a respective user attempting to access the cloud-based application; determining based on, the at least one parameter and at least a set of parameters combining cloud-based application risk factors for a provider of the cloud computing platform, a risk indicator for the user attempting to access the cloud-based application; and performing an action to mitigate a potential risk to the cloud computing platform based on the determined risk indicator.

Abstract: A method and proxy device for on-demand generation of cryptographic certificates. The method includes receiving, by a proxy device, a request to access a cloud application; identifying a domain name designated in the received request; determining if the identified domain name is signed by a valid cryptographic certificate saved locally in the proxy device; and sending, to a certificate generator system, a certification request to issue a new cryptographic certificate to sign the identified domain name, when the identified domain name is not a signed domain name.

Abstract: Techniques for reconstructing application-layer traffic flowing between client devices and a cloud computing platform are provided. In an embodiment, the method allows for non-intrusive reconstructing application-layer traffic including requests and responses even in cases including packet drops, re-transmitted packets, and jittered packets. The method includes saving received packets into a zero-copy queue and analyzing the packets saved in the zero-copy memory to identify their respective sessions. Then, each identified session is reconstructed into a session window having a configurable size. In an embodiment, each reconstructed session includes application-layer requests and responses; The method further includes for, each identified session, matching each application-layer request to a corresponding application-layer response based on a matching identifier and time-interval threshold.

Abstract: This application relates generally to a system operating on network traffic between a network-based software as a service (SaaS) provider and a client. The system can be configured as a managed communications network proxy and take action on the network traffic based on predefined policies and rules. The system can include a suffix proxy configured for captive page processing by processing SaaS server responses so that subsequent requests are handled by the suffix proxy dependent on file type and response type.

Abstract: A method and system for protecting cloud-based applications executed in a cloud computing platform are presented. The method includes intercepting traffic flows from a plurality of client devices to the cloud computing platform, wherein each of the plurality of client devices is associated with a user attempting to access a cloud-based application; extracting at least one parameter from the intercepted traffic related to at least each client device and a respective user attempting to access the cloud-based application; determining based on, the at least one parameter and at least a set of parameters combining cloud-based application risk factors for a provider of the cloud computing platform, a risk indicator for the user attempting to access the cloud-based application; and performing an action to mitigate a potential risk to the cloud computing platform based on the determined risk indicator.

Abstract: This application relates generally to a system operating on network traffic between a network-based software as a service (SaaS) provider and a client. The system can be configured as a managed communications network proxy and take action on the network traffic based on predefined policies and rules.

Abstract: An intrusion detection system collects architectural level events from a Virtual Machine Monitor where the collected events represent operation of a corresponding Virtual Machine. The events are consolidated into features that are compared with features from a known normal operating system. If an amount of any differences between the collected features and the normal features exceeds a threshold value, a compromised Virtual Machine may be indicated. The comparison thresholds are determined by training on normal and abnormal systems and analyzing the collected events with machine learning algorithms to arrive at a model of normal operation.

Abstract: An intrusion detection system collects architectural level events from a Virtual Machine Monitor where the collected events represent operation of a corresponding Virtual Machine. The events are consolidated into features that are compared with features from a known normal operating system. If an amount of any differences between the collected features and the normal features exceeds a threshold value, a compromised Virtual Machine may be indicated. The comparison thresholds are determined by training on normal and abnormal systems and analyzing the collected events with machine learning algorithms to arrive at a model of normal operation.