Abstract: A system, method, and computer program product are provided for automatically pruning rules in an AI-based network management system. In operation, a network configuration identifier is defined for a configuration of a communication network in an AI-based network management system. Log data is collected of the communication network, and the log data is associated with the network configuration identifier. Next, training data is created for a first AI-engine for the network configuration identifier, based on the log data associated with the network configuration identifier. The one or more rules are associated with the network configuration identifier. Additionally, at least one rule of the one or more rules are provided to a second AI-engine used by the AI-based network management system.

Abstract: A system, method, and computer program product are provided for a determining a network situation in a communication network. In use, at least one threshold value of at least one operational parameter of a communication network is obtained, the at least one operational parameter representing at least one operational status of at least one of a computational device or a communication device. Additionally, log data of the communication network is obtained, the log data containing at least one value of the at least one operational parameter reported by at least one network entity of the communication network. The at least one value of the at least one operational parameter of the log data is compared with a corresponding threshold value of the at least one threshold value to form a detection of a network situation.

Abstract: A system, method, and computer program product are provided for automatic labeling of training and testing data in a communication system. In use, log data of a communication network is received, the log data including one or more parameters associated with an operation of network entities and a time of reporting. Additionally, the log data is stored in a log data set. At least one definition of at least one network situation is received. Further, a scan of the log data set by the time range is restricted and values of the one or more parameters of a first entry of the log data are compared with the at least one condition. It is determined that the values satisfy the at least one condition, whereupon, a first detected network situation is determined, the first entry of the log data is selected, and the first entry of the log data is automatically labeled.

Abstract: A system, method, and computer program product are provided for isolating services of a communication network in response to a distributed denial of service attack. In use, an indication of a detection of a distributed denial of service (DDoS) attack directed at one or more resources of a communication network is received. Additionally, at least one first network service associated with the communication network that is subject to the DDoS attack is identified. Further, the at least one first network service associated with the communication network that is subject to the DDoS attack is isolated.

Abstract: A system, method, and computer program product are provided for preparing multi-feed of log data in an AI-managed communication system. In use, log data of a communication network is obtained and a plurality of artificial intelligence (AI) models are obtained. The log data is analyzed with a first AI model of the plurality of AI models to detect at least one occurrence of a respective classifier. A first confidence level for the first AI model is computed. A reduced log data feed is formed by eliminating at least one parameter from the log data. Further, a second confidence level for the first AI model is calculated by repeating the analysis of the log data, the computation of the first confidence level, and the formation of the reduced log data feed until at least one: the second confidence level is lower than the first confidence level, or the second confidence level reaches a threshold.

Abstract: A system, method, and computer program product are provided for automatic reconfiguration of a communication network. In use, a scoring function, a scoring goal, and data of a first network situation of a communication network are obtained. An initial network entity associated with the first network situation, and an initial parameter associated with the first network situation are selected. Additionally, a migration of the initial network entity is planned to prevent the initial parameter from reaching a predefined threshold to form a network reconfiguration. Further, a score value of the network reconfiguration using the scoring function is computed, and it is determined that the score value does not match the scoring goal. Moreover, the method is repeated until the score value matches the scoring goal.

Abstract: A system, method, and computer program product are provided for providing security in Network Function Virtualization (NFV) based communication networks and Software Defined Networks (SDNs). In use, a system implements one or more network changes or security configuration changes to an NFV based communication network or a SDN to change an attack surface. In one embodiment, implementing the one or more network changes or security configuration changes to the NFV based communication network or the SDN may occur periodically to change the attack surface. In another embodiment, implementing the one or more network changes or the security configuration changes to the NFV based communication network or the SDN to change the attack surface may occur based on detection of a malicious event or a suspicious event.

Abstract: A system, method, and computer program product are provided for automatically certifying a Virtual Network Function (VNF) for use in a Network Function Virtualization based (NFV-based) communication network. In use, an online automated VNF certification system receives information associated with at least one VNF. Further, the online automated VNF certification system performs a first level of certification for the at least one VNF by validating metadata corresponding to the information associated with the at least one VNF. Additionally, the online automated VNF certification system performs a second level of certification for the at least one VNF, including testing deployment based functionality associated with the at least one VNF and validating results of testing the deployment based functionality.

Abstract: According to one aspect of the present invention there is provided a system, method, and computer program product for recovering from a network failure in a communication network using network function virtualization (NFV-based network), the method including: selecting a first network component of the NFV-based network, detecting at least one probable failure of the first network component, selecting a second network component to be used for replacing the instance of the VNF in the first network component prior to a failure of the first network component, and securing at least one resource of the selected second network component for the other instance of the VNF and maintaining, in the selected second network component, an updated copy of data associated with the instance of the VNF in the first network component.

Abstract: A system, method, and computer program product are provided for product/service design and creation. In use, at least one new resource is identified in a master catalog. The at least one resource is tested. Additionally, the at least one resource is released for service generation. Further, at least one service is generated utilizing the at least one resource. The at least one service is stored in the master catalog. In addition, the at least one service is released for product generation. Furthermore, at least one product is generated utilizing the at least one service. The at least one product is stored in the master catalog. Moreover, the at least one product is presented for sale.

Abstract: A system, method, and computer program product are provided for training an AI-based network management system, in accordance with one embodiment. In use, log data and first network configuration data are received for a first configuration of a communication network. Additionally, second network configuration data is received for a second configuration of the communication network. Further, simulated log data is produced for the second configuration of the communication network, based on the log data and the second network configuration data.

Abstract: A system, method, and computer program product are provided for reducing common work of components in a Network Function Virtualization based (NFV-based) communication network. In use, at least one virtual network function (VNF) capable of being used in a chain of virtual network functions in a network function virtualization based network is identified. Additionally, the at least one virtual network function is configured to utilize a control component, the control component being capable of being enabled or disabled and being operable to perform one or more functions associated with the at least one virtual network function.

Abstract: A system, method, and computer program product are provided for preserving service continuity in a Network Function Virtualization based (NFV-based) communication network. In use, a first virtual network function (VNF) instance associated with a first VNF in a first hardware unit in a Network Function Virtualization based (NFV-based) communication network is identified. Additionally, a second VNF instance on a second hardware unit is instantiated, the second VNF instance being compatible with the first VNF instance. Further, communication directed to the first VNF instance is diverted to the second VNF instance on the second hardware unit, in response to initiating the second VNF instance on a second hardware unit.

Abstract: A system, method, and computer program product are provided for migrating availability of a resource type in a communication network using network function virtualization, comprising: selecting a resource type; selecting a first section of the network where demand for the resource type is expected to grow; selecting a second section of the network where demand for the resource type is expected to be stable relative to the first section; selecting a third section of the network communicatively coupled to the first and second sections, the third section comprising higher availability of the resource type than the first section; migrating a first virtual network function (VNF) instance from the third section to the first section; and migrating a second virtual network function instance from the second section to the third section.

Abstract: A system, method, and computer program product are provided for automatically certifying a Virtual Network Function (VNF) for use in a Network Function Virtualization based (NFV-based) communication network. In use, an online automated VNF certification system receives information associated with at least one VNF. Further, the online automated VNF certification system performs a first level of certification for the at least one VNF by validating metadata corresponding to the information associated with the at least one VNF. Additionally, the online automated VNF certification system performs a second level of certification for the at least one VNF, including testing deployment based functionality associated with the at least one VNF and validating results of testing the deployment based functionality.

Abstract: A system, method, and computer program product are provided for providing security in Network Function Virtualization (NFV) based communication networks and Software Defined Networks (SDNs). In use, a system implements one or more network changes or security configuration changes to an NFV based communication network or a SDN to change an attack surface. In one embodiment, implementing the one or more network changes or security configuration changes to the NFV based communication network or the SDN may occur periodically to change the attack surface. In another embodiment, implementing the one or more network changes or the security configuration changes to the NFV based communication network or the SDN to change the attack surface may occur based on detection of a malicious event or a suspicious event.

Abstract: A system, method, and computer program product are provided for implementing a virtual obfuscation service in a network. In use, an obfuscation service component is initiated in a network system including one or more virtual services, the obfuscation service component including at least one of: at least one first obfuscation service component associated with a physical portion of the network system or at least one second obfuscation service component associated with a cloud-based virtual portion of the network system. Further, communication to be sent from the physical portion of the network system to the cloud-based virtual portion of the network system is identified. Additionally, the communication is directed from the physical portion of the network system to the first obfuscation service component associated with the physical portion of the network system.

Abstract: A system, method, and computer program product are provided for providing feedback indicating an impact of user directives on a software system. In use, user input associated with a software system is received. Additionally, an impact of the user input on the software system is determined. Further, feedback is provided indicating the impact of the user input on the software system.

Abstract: According to one aspect of the present invention there is provided a system, method, and computer program product for recovering a structure of network function virtualization orchestration (NFV-O) domains, including: providing an initial structure of NFV-O domains, the initial structure representing assignment of network resources to the domains; providing a current structure of NFV-O domains, the current structure representing a modification of the initial structure due to reassignment of network resources between the domains; identifying at least one network resource reassigned by at least a first domain to at least a second domain; and instructing the at least second domain to surrender the network resource to the at least first domain; wherein the at least one network resource is a part of a communication network using network function virtualization (NFV-based network) orchestration; and wherein the NFV-based network comprises a plurality of network resources assigned to domains managed by respective NF

Abstract: A system, method, and computer program product are provided for automatically certifying a Virtual Network Function (VNF) for use in a Network Function Virtualization based (NFV-based) communication network. In use, an online automated VNF certification system receives information associated with at least one VNF. Further, the online automated VNF certification system performs a first level of certification for the at least one VNF by validating metadata corresponding to the information associated with the at least one VNF. Additionally, the online automated VNF certification system performs a second level of certification for the at least one VNF, including testing deployment based functionality associated with the at least one VNF and validating results of testing the deployment based functionality.