Abstract: A mechanism is provided for spatial annotated graph queries. A geomap query is received to identify a number K-closest geometry objects within a distance D to a geo-location L. A geohash is computed for the geo-location L. A set of geometry objects are identified from an indexed set of geometry objects having at least NB common-prefix bits to a number of bits NB of the geo-location L. K-closest geometry objects are identified from the set of geometry objects that are closest to the geo-location L. The K-closest geometry objects are then returned to a user who submitted the geomap query.

Abstract: A mechanism is provided for spatial annotated graph queries. A geomap query is received to identify a number K-closest geometry objects within a distance D to a geo-location L. A geohash is computed for the geo-location L. A set of geometry objects are identified from an indexed set of geometry objects having at least NB common-prefix bits to a number of bits NB of the geo-location L. K-closest geometry objects are identified from the set of geometry objects that are closest to the geo-location L. The K-closest geometry objects are then returned to a user who submitted the geomap query.

Abstract: A method for multicategory classification of streaming data records includes receiving a list of signature rules, each comprising a Boolean expression of a set of atomic recognizers (ARs) of one or more input fields of an input record and an assignment of a signature if the Boolean expression evaluates to TRUE, generating a list of all signature contexts from the list of signature rules, generating a context lookup table for each context, and processing a stream of input records on which signature detection is performed by using said ARs, said list of signature contexts, and said context lookup table for each context, wherein each input record in the stream of input records is classified into one of a plurality of categories based on the signature detection result, wherein an amount of processing grows sublinearly with a number of signature rules being processed.

Abstract: The present disclosure relates generally to the field of identifying network flows (e.g., IP flows) under network address translation. In various examples, identifying network flows (e.g., IP flows) under network address translation may be implemented in the form of systems and/or algorithms.

Abstract: A method includes positioning a proxy between a client and a server; the proxy receiving the client's Transmission Control Protocol (TCP) communications intended for establishing a communication connection to the server; the proxy initiating a TCP communication with the server after receiving the client's TCP; and the proxy determining a TCP congestion control algorithm based upon identifying information of the received client's TCP and on properties of the sever to provide optimum communications as a communication proxy between the client and the server.

Abstract: Quality of information (QoI) assessment in dynamic sensor networks that includes evaluating, by a computer, a first value reflective of available reports from sensors that are dynamically associated with the computer. A second value reflective of reports expected to have been available for evaluation about the observed phenomena is estimated. A QoI of the available reports is assessed. The assessing is based on the first value reflective of the available reports and the second value reflective of reports expected to have been available for evaluation. A third value, based on the assessing is output.

Abstract: A method, system and computer program product for managing content distribution in a mobile communications environment. The communications environment includes a core network and a multitude of end-user devices. In one embodiment, the method comprises downloading content from the core network to the end-user devices; and maintaining a map between the end-user devices, the content downloaded to the end-user devices, and the locations of the end-user devices. When a first of the end-user devices requests a specified content, this map and one or more rules are used to identify a second of the end-user devices having the specified content. The first of the end-user devices fetches the specified content from this identified second of the end-user devices. In one embodiment, object location descriptors embedded in the content are rewritten when the content is downloaded to the end-user devices.

Abstract: Method and system are provided for optimization of mobile data communication using byte caching. The method includes: intercepting data communications at a base station, wherein the data communications are between a user equipment and a network; and implementing byte caching at the base station to optimize data transfer between the base station and a byte cache server in the network at a peering point; wherein the network containing the base station supports mobility management of data transfer to and from the user equipment. The method includes providing a byte cache server as a transparent proxy with byte caching functionality where traffic for the user equipment is no longer tunnelled.

Abstract: Methods for removing a middlebox from a network connection include determining a degree of mismatch between a sequence number in a first connection between the middlebox and a client and a sequence number in a second connection between the middlebox and a server, delaying acknowledgment signals from the middlebox on a connection to decrease the degree of mismatch, and establishing a direct connection between the client and the server without mediation by the middlebox when the degree of mismatch is zero.

Abstract: A geohash based cover for a geometry whose uncertainty is described as a circle with center point and a radius is disclosed. In one example, a geohash cover is computed that does not require any expensive geodesic calculations, providing roughly an order of magnitude improvement in speed up of cover calculation. In another example, distance computations are exact compared to a conventional process. In another example, the geohashes returned by the technique can vary between 4 to 9—with a median 6 (a certain conventional process would always return 9 hashes (all the 8 neighbors and the self geohash)). In another example, results are accurate, while still avoiding expensive geodesic computations.

Abstract: A system and method for instantiation of a virtual machine (VM) in a datacenter includes providing a network appliance in a location for listening to management information traffic. Indices are created for data center images in the network appliance. VM instantiation requests are intercepted in the network appliance. Locations from which blocks for the VM should be fetched based upon network cost are determined. VM image blocks are populated from the locations.

Abstract: An aspect of this invention is a method that includes a computing apparatus estimating geographic locations as a function of time for each of a plurality of sensor nodes. The method further includes estimating a quality of information as a function of time for sensed data to be sensed by the plurality of sensor nodes at the estimated geographic locations; and sending the estimated quality of information as a function of time to one or more applications or consumers of the sensed data.

Abstract: Methods for inserting a middlebox into a network connection include monitoring network state information in a connection between a client and a server. When the connection is idle, a connection entry is created for each device and is initialized using state information gathered by monitoring the network connection. Redirection of the network connection is activated between the client and the server such that the middlebox mediates the connection. Methods for removing a middlebox from a network connection include determining a degree of mismatch between a sequence number in a first connection between the middlebox and a client and a sequence number in a second connection between the middlebox and a server, delaying acknowledgment signals from the middlebox on a connection to decrease the degree of mismatch, and establishing a direct connection between the client and the server without mediation by the middlebox when the degree of mismatch is zero.

Abstract: A method and system for providing on-line services to a user from a services provider over a wireless cellular network. The cellular network is located between the user and the services provider, and a distributed computer system such as the Internet is located between the services provider and the cellular network for transmitting data between the services provide and the cellular network. In one embodiment, the services provider transmits software and operating characteristics over the distributed computer system to the cellular network, and the cellular network installs this software on one or more nodes of the network. When a user connects to the cellular network for services from the service provider, the network operates the software on the one or more nodes in accordance with the operating characteristics, to provide one or more services from this one or more nodes to the user from the service provider.

Abstract: Quality of information (QoI) assessment in dynamic sensor networks that includes evaluating, by a computer, a first value reflective of available reports from sensors that are dynamically associated with the computer. A second value reflective of reports expected to have been available for evaluation about the observed phenomena is estimated. A QoI of the available reports is assessed. The assessing is based on the first value reflective of the available reports and the second value reflective of reports expected to have been available for evaluation. A third value, based on the assessing is output.

Abstract: Various embodiments detecting wireless communication device mobility in a wireless communication network. In one embodiment, one or more Internet Protocol (IP) data packets associated with a wireless communication device are analyzed. The wireless communication device is coupled with the edge entity. A determination is made, based on the analyzing, that the wireless communication device is a newly coupled device at the edge entity. A central entity disposed within the wireless communication network is notified that the wireless communication device is currently coupled to the edge entity.

Abstract: A method and system for providing on-line services to a user from a services provider over a wireless cellular network. The cellular network is located between the user and the services provider, and a distributed computer system such as the Internet is located between the services provider and the cellular network for transmitting data between the services provide and the cellular network. In one embodiment, the services provider transmits software and operating characteristics over the distributed computer system to the cellular network, and the cellular network installs this software on one or more nodes of the network. When a user connects to the cellular network for services from the service provider, the network operates the software on the one or more nodes in accordance with the operating characteristics, to provide one or more services from this one or more nodes to the user from the service provider.

Abstract: A computer system, and computer program product monitor resource usage of a virtual machine. When a virtual machine is instantiated, resource usage of the virtual machine is monitored to form monitoring data. The monitoring is performed externally from the virtual machine. When the virtual machine is later suspended, the monitoring data is stored as metadata associated with the virtual machine.

Abstract: The present disclosure relates generally to mechanisms for the estimation of location privacy risk, comprising: building one or more trajectory models from auxiliary information (e.g., one or more maps, one or more routes); capturing common behavioral patterns (e.g., shortest route(s),/fastest route(s)); identifying, given unlinked trajectories for a plurality of users, most likely linkages using the trajectory model(s); eliminating one or more unlikely linkages based on deviation from the shortest route(s) and/or the fastest route(s); measuring privacy as the percentage of linkages correctly identified; and outputting the measured privacy.

Abstract: A computer implemented method monitors resource usage of a virtual machine. When a virtual machine is instantiated, resource usage of the virtual machine is monitored to form monitoring data. The monitoring is performed externally from the virtual machine. When the virtual machine is later suspended, the monitoring data is stored as metadata associated with the virtual machine.