Abstract: Systems, methods, and computer-readable media for collector high availability. In some embodiments, a system receives, from a first collector device, a first data report generated by a capturing agent deployed on a host system in a network. The system can also receive, from a second collector device, a second data report generated by the capturing agent deployed on the host system. The first and second data reports can include traffic data captured at the host system by the capturing agent during a period of time. The system can determine that the first data report and the second data report are both associated with the capturing agent, and identify duplicate data contained in the first data report and the second data report. The system can then deduplicate the first and second data reports to yield a deduplicated data report.

Abstract: An example method includes detecting, using sensors, packets throughout a datacenter. The sensors can then send packet logs to various collectors which can then identify and summarize data flows in the datacenter. The collectors can then send flow logs to an analytics module which can identify the status of the datacenter and detect an attack.

Abstract: An enzymatically produced ?-glucan oligomer/polymer compositions is provided. The enzymatically produced ?-glucan oligomer/polymers can be derivatized into ?-glucan ether compounds. The ?-glucan oligomers/polymers and the corresponding ?-glucan ethers are cellulose and/or protease resistant, making them suitable for use in fabric care and laundry care applications. Methods for the production and use of the present compositions are also provided.

Abstract: Systems and methods for verifiable, private and secure omic analysis are provided. Secure multiparty computation techniques can be utilized to enable two parties to perform an omic transaction, such as determining genetic compatibility with one another, by jointly computing a result without either party disclosing their genetic information to the other. Privacy-preserving techniques to ensure authenticity of each party's omic data and metadata are also provided. Personalized matching scores can be computed, in which each party's score is weighted to reflect user preferences associated with the matching analysis.

Abstract: An enzymatically produced ?-glucan oligomer/polymer compositions is provided. The enzymatically produced ?-glucan oligomer/polymers can be derivatized into ?-glucan ether compounds. The ?-glucan oligomers/polymers and the corresponding ?-glucan ethers are cellulose and/or protease resistant, making them suitable for use in fabric care and laundry care applications. Methods for the production and use of the present compositions are also provided.

Abstract: Disclosed herein are proteins capable of forming glucans having alpha-1,2 linkages/branches, reactions and methods for producing such glucan, compositions comprising such glucan, and various applications thereof.

Abstract: Provided herein are glycerol-3-phosphate dehydrogenase (GPD) enzymes with increased KM for NADH and GPD enzymes with substantially the same affinity for NADH and NADPH and/or are feedback inhibited by glycerol-3-phosphate. Also provided herein are recombinant microorganisms comprising a heterologous gene encoding GPD and a deletion or disruption in an endogenous gene encoding GPD. Also provided are recombinant microorganisms comprising a heterologous gene encoding GPD and a butanol biosynthetic pathway. Further provided are methods of producing butanol comprising providing the recombinant microorganisms described herein and contacting the recombinant microorganism with at least one fermentable carbon substrate under conditions wherein butanol is produced.

Abstract: Systems, methods, and computer-readable media for determining sensor placement and topology. In some embodiments, a system can receive messages from sensors deployed around a network, each of the messages reporting a respective flow captured by a reporting sensor from the sensors. Next, the system can identify flows reported in the messages and, for each of the flows, generate a respective list of sensors that reported that flow. Based on the respective list of sensors, the system can infer a respective placement of the sensors within the network and a topology of the sensors. For example, the system can determine that a first sensor is deployed in a virtual machine, a second sensor is deployed in a hypervisor hosting the virtual machine, and a third sensor is deployed in a network device configured to route traffic associated with the hypervisor.

Abstract: An enzymatically produced soluble ?-glucan fiber composition is provided suitable for use as a digestion resistant fiber in food and feed applications. The soluble ?-glucan fiber composition can be blended with one or more additional food ingredients to produce fiber-containing compositions. Methods for the production and use of compositions comprising the soluble ?-glucan fiber are also provided.

Abstract: In one embodiment, a controller determines a particular compartment of a smart postal box in which a package is to be delivered. The controller associates the particular compartment with an authorized entity. The controller provides the authorized entity access to the particular compartment by aligning rolling doors of the smart postal box with the particular compartment.

Abstract: In one embodiment, a controller determines a particular compartment of a smart postal box in which a package is to be delivered. The controller associates the particular compartment with an authorized entity. The controller provides the authorized entity access to the particular compartment by aligning rolling doors of the smart postal box with the particular compartment.

Abstract: Systems and methods for conducting secure, privacy-preserving, verifiable omic transactions are provided. An omic service may authenticate one or more individual users and store each users omic information as encrypted data, without storing decryption keys, and also ensure fidelity and correct correspondence of each user's data with the user. A dedicated private virtual appliance can be instantiated to obtain encrypted omic data, query each user for decryption keys, decrypt the user omic data, perform an omic calculation, report results and terminate itself, thereby erasing all copies of decrypted user omic data. Alternatively, the appliance can operate with user-managed genome storage. A genome-on-a-stick construct facilitates end user interaction with such omic service providers.

Abstract: An enzymatically produced soluble ?-glucan fiber composition is provided suitable for use as a digestion resistant fiber in food and feed applications. The soluble ?-glucan fiber composition can be blended with one or more additional food ingredients to produce fiber-containing compositions. Methods for the production and use of compositions comprising the soluble ?-glucan fiber are also provided.

Abstract: Provided herein are glycerol-3-phosphate dehydrogenase (GPD) enzymes with increased KM for NADH and GPD enzymes with substantially the same affinity for NADH and NADPH and/or are feedback inhibited by glycerol-3-phosphate. Also provided herein are recombinant microorganisms comprising a heterologous gene encoding GPD and a deletion or disruption in an endogenous gene encoding GPD. Also provided are recombinant microorganisms comprising a heterologous gene encoding GPD and a butanol biosynthetic pathway. Further provided are methods of producing butanol comprising providing the recombinant microorganisms described herein and contacting the recombinant microorganism with at least one fermentable carbon substrate under conditions wherein butanol is produced.

Abstract: Systems, methods, and computer-readable media for identifying bogon addresses. A system can obtain an indication of address spaces in a network. The indication can be based on route advertisements transmitted by routers associated with the network. The system can receive a report generated by a capturing agent deployed on a host. The report can identify a flow captured by the capturing agent at the host. The system can identify a network address associated with the flow and, based on the indication of address spaces, the system can determine whether the network address is within the address spaces in the network. When the network address is not within the address spaces in the network, the system can determine that the network address is a bogon address. When the network address is within the address spaces in the network, the system can determine that the network address is not a bogon address.

Abstract: An example method includes detecting, using sensors, packets throughout a datacenter. The sensors can then send packet logs to various collectors which can then identify and summarize data flows in the datacenter. The collectors can then send flow logs to an analytics module which can identify the status of the datacenter and detect an attack.

Abstract: Systems, methods, and computer-readable media for determining sensor placement and topology. In some embodiments, a system can receive messages from sensors deployed around a network, each of the messages reporting a respective flow captured by a reporting sensor from the sensors. Next, the system can identify flows reported in the messages and, for each of the flows, generate a respective list of sensors that reported that flow. Based on the respective list of sensors, the system can infer a respective placement of the sensors within the network and a topology of the sensors. For example, the system can determine that a first sensor is deployed in a virtual machine, a second sensor is deployed in a hypervisor hosting the virtual machine, and a third sensor is deployed in a network device configured to route traffic associated with the hypervisor.

Abstract: Systems, methods, and computer-readable media for hierarchichal sharding of flows from sensors to collectors. A first collector can receive a first portion of a network flow from a first capturing agent and determine that a second portion of the network flow was not received from the first capturing agent. The first collector can then send the first portion of the network flow to a second collector. A third collector can receive the second portion of the network flow from a second capturing agent and determine that the third collector did not receive the first portion of the network flow. The third collector can then send the second portion of the network flow to the second collector. The second collector can then aggregate the first portion and second portion of the network flow to yield the entire portion of the network flow.

Abstract: Systems, methods, and non-transitory computer-readable storage media for synchronizing timestamps of a sensor report to the clock of a device. In one embodiment, the device receives a report from a sensor of a node. The report can include a network activity of the node captured by the sensor and a first timestamp relative to the clock of the node. The device can then determine a second timestamp relative to the clock of the collector indicating receipt of the report by the device and from the sensor at the node. The device can also determine a delta between the first timestamp and the second timestamp, and a communication latency associated with a communication channel between the device and the sensor. Next, the device can adjust the delta based on the communication latency, and generate a third timestamp based on the adjusted delta.

Abstract: Managing a network environment to identify spoofed packets is disclosed. A method includes analyzing, via a first capture agent, packets processed by a first environment in a network associated with a first host, and analyzing, via a second capture agent, packets processed by a second environment in the network associated with a second host. The method includes collecting the first data and the second data at a collector and generating a topological map of the network and a history of network activity associated with the first environment and the second environment. The method includes extracting network data from a packet and comparing the extracted network data with stored network data in the database. When the comparison indicates that the extracted network data does not match the stored network data (i.e., the reported source does not match an expected source for the packet), determining that the packet is a spoofed packet.