Abstract: Aspects of the invention include systems and methods configured to prevent masquerading service attacks. A non-limiting example computer-implemented method includes sending, from a first server in a cloud environment, a communication request comprising an application programming interface (API) key and a first server identifier to an identity and access management (IAM) server of the cloud environment. The API key can be uniquely assigned by the IAM server to a first component of the first server. The first server receives a credential that includes a token for the first component and sends the credential to a second server. The second server sends the credential, a second server identifier, and an identifier for a second component of the second server to the IAM server. The second server receives an acknowledgment from the IAM server and sends the acknowledgment to the first server.

Abstract: The present disclosure describes multi-parameter dynamic sampling methods and systems. An example method includes: configuring two sampling rates for each parameter in a set of sampling parameters; selecting one of the sampling rates for each parameters to sample it; calculating a load for each parameter at the selected sampling rate, sorting the parameters according to the loads, and determining high-loaded parameters according to a sorting result; and determining whether each parameter has data loss, and if at least one of the sampling parameters has data loss, performing down-sampling on the high-loaded sampling parameters within a range of the configured at least two sampling rates.

Abstract: An approach for protecting container image and runtime data from host access may be presented. Container systems have allowed for more efficient utilization of computing resources, removing the requirement of a hypervisor, and packaging all necessary dependencies within an application. Preventing host access to container image and runtime data can be advantageous for a multitude of reasons. The approach herein may include, flattening a plurality of root file system of a one or more container images into a single layer. The approach may also include generating a container base image for each of the one or more flattened root file system. The approach may include encrypting each of the generated container base images with the flattened root file system.

Abstract: Aspects of the invention include splitting a first file retrieved from a first cloud computing environment of a hybrid cloud computing environment into multiple chunks. A respective chunk signature is calculated for each chunk of the multiple chunks, wherein the calculation is based at least in part on static metadata and the dynamic metadata retrieved from the first file. The respective chunk signatures are compared to chunk signatures from a metadata repository to identify a duplicate second file, wherein the first file is a variant of a second file stored in a second cloud computing environment of the hybrid cloud computing environment. Either the first file or the second file is selected as candidate for deletion. The candidate for deletion is deleted.

Abstract: Aspects of the invention include systems and methods configured to prevent masquerading service attacks. A non-limiting example computer-implemented method includes sending, from a first server in a cloud environment, a communication request comprising an application programming interface (API) key and a first server identifier to an identity and access management (IAM) server of the cloud environment. The API key can be uniquely assigned by the IAM server to a first component of the first server. The first server receives a credential that includes a token for the first component and sends the credential to a second server. The second server sends the credential, a second server identifier, and an identifier for a second component of the second server to the IAM server. The second server receives an acknowledgment from the IAM server and sends the acknowledgment to the first server.

Abstract: Aspects include providing isolation between a plurality of containers in a pod that are each executing on a different virtual machine (VM) on a host computer. Providing the isolation includes converting a data packet into a serial format for communicating with the host computer. The converted data packet is sent to a router executing on the host computer. The router determines a destination container in the plurality of containers based at least in part on content of the converted data packet and routes the converted data packet to the destination container.

Abstract: A method for operating a bot platform includes receiving, from a bot client, an input associated with an intent, and storing the input associated with the intent as part of a user profile maintained at the bot platform. The method further includes storing the input associated with the intent as part of a user profile maintained at the bot platform, and passing the input to the selected bot.

Abstract: A method for operating a bot platform includes receiving, from a bot client, an input associated with an intent, and storing the input associated with the intent as part of a user profile maintained at the bot platform. The method further includes storing the input associated with the intent as part of a user profile maintained at the bot platform, and passing the input to the selected bot.

Abstract: A wireless electronic device may serve as a device under test in a test system. The test system may include an array of over-the-air antennas that can be used in performing over-the-air wireless tests on the device under test (DUT). A channel model may be used in modeling a multiple-input-multiple-output (MIMO) channel between a multi-antenna wireless base station and a multi-antenna DUT. The test system may be configured to perform over-the-air tests that emulate the channel model. A design and analysis tool may be used to identify an optimum over-the-air test system setup. The tool may be used in converting a geometric model to a stochastic model for performing conducted tests. The tool may be used in converting a stochastic model to a geometric model and then further convert the geometric model to an over-the-air emulated stochastic model. The over-the-air emulated stochastic model may be used in performing conducted tests.

Abstract: A single-input single-output (SISO) downlink channel with K users is analyzed in the presence of Rayleigh flat fading. A limited channel state information (CSI) feedback scheme is included, where only an outdated 1-bit feedback per user is available at the base station for each fading block. A closed-form expression for the achievable ergodic sum-rate of the 1-bit feedback scheme is presented for any number of users, as a function of the fading temporal correlation coefficient, the threshold of the 1-bit CSI quantizer and the SNR. The sum-rate scales with increasing number of users as log log K, which is the same scaling law achieved by the optimal non-delayed full CSI feedback scheme.

Abstract: A wireless electronic device may serve as a device under test in a test system. The test system may include an array of over-the-air antennas that can be used in performing over-the-air wireless tests on the device under test (DUT). A channel model may be used in modeling a multiple-input-multiple-output (MIMO) channel between a multi-antenna wireless base station and a multi-antenna DUT. The test system may be configured to perform over-the-air tests that emulate the channel model. A design and analysis tool may be used to identify an optimum over-the-air test system setup. The tool may be used in converting a geometric model to a stochastic model for performing conducted tests. The tool may be used in converting a stochastic model to a geometric model and then further convert the geometric model to an over-the-air emulated stochastic model. The over-the-air emulated stochastic model may be used in performing conducted tests.

Abstract: A single-input single-output (SISO) downlink channel with K users is analyzed in the presence of Rayleigh flat fading. A limited channel state information (CSI) feedback scheme is included, where only an outdated 1-bit feedback per user is available at the base station for each fading block. A closed-form expression for the achievable ergodic sum-rate of the 1-bit feedback scheme is presented for any number of users, as a function of the fading temporal correlation coefficient, the threshold of the 1-bit CSI quantizer and the SNR. The sum-rate scales with increasing number of users as log logK, which is the same scaling law achieved by the optimal non-delayed full CSI feedback scheme.