Abstract: Embodiments related to using a foundational model for network packet traces. A technique includes receiving network traffic of a network and extracting features from the network traffic, the features having a function related to communications in the network. The technique includes generating tokens from the features, each of the features corresponding to a respective one of the tokens, training a machine learning model by inputting the tokens, the machine learning model being trained to output contextual embeddings for the tokens, and using the contextual embeddings to determine an anomaly in the network traffic.

Abstract: A system may receive an existing base set of knowledge, train a neural network on the base set of knowledge, deploy the neural network on a new data set, generate, using the deployment, instances of new knowledge, and validate the instances of new knowledge.

Abstract: A first classification is received from a neural network regarding a training dataset sent to the neural network. A modified training dataset with a perturbation of the training dataset is identified, where this modified training dataset causes the neural network to return a second classification. The perturbation is analyzed to identify a negative rule of the neural network.

Abstract: A computer implemented method for analyzing network connections includes identifying a connection of interest and a corresponding set of connection data. The method additionally includes generating one or more saliency maps corresponding to the connection of interest. The method additionally includes mapping the generated one or more saliency maps to underlying protocols and fields, and identifying one or more values corresponding to each of the underlying protocols and fields. The method additionally includes extracting general correspondences from the identified one or more values corresponding to each of the underlying protocols and fields.

Abstract: A computer implemented method for analyzing network connections includes identifying a connection of interest and a corresponding set of connection data. The method additionally includes generating one or more saliency maps corresponding to the connection of interest. The method additionally includes mapping the generated one or more saliency maps to underlying protocols and fields, and identifying one or more values corresponding to each of the underlying protocols and fields. The method additionally includes extracting general correspondences from the identified one or more values corresponding to each of the underlying protocols and fields.

Abstract: A first classification is received from a neural network regarding a training dataset sent to the neural network. A modified training dataset with a perturbation of the training dataset is identified, where this modified training dataset causes the neural network to return a second classification. The perturbation is analyzed to identify a negative rule of the neural network.

Abstract: For multipathing using a network of overlays, a set of virtual network interfaces (VNICs) corresponding to a physical network interface (PNIC) is created in a first data processing system. A first virtual network interface (VNIC) from the set of VNICs is bound to a virtual machine (VM) executing in a first data processing environment across a data network from the first data processing system. During a data communication with a second data processing system, data is divided into a first portion and a second portion, the first portion using a first path from the first VNIC to the first VM to the second data processing system, and the second portion using a second path from the PNIC to the second data processing system.