Abstract: Some embodiments provide a method for a first network slice selector that selects network slices for connections from endpoint devices located within a first geographic range. The method selects a network slice for a connection between a mobile endpoint device and a network domain that originates when the mobile endpoint device is located within the first geographic range. The method stores state that maps the connection to the selected network slice. The method forwards data traffic belonging to the connection from the mobile endpoint device onto the selected network slice using the stored state. After the mobile endpoint device moves from the first geographic range to a second geographic range, the method receives data traffic belonging to the connection from a second network slice selector that selects network slices for connections from endpoint devices within the second geographic range and forwards said received data traffic onto the selected network slice.

Abstract: Some embodiments provide a method for a first network slice selector that assigns data messages to a first set of network slices that each comprises an ordered set of network services. The method receives a data message originating from an electronic endpoint device. A second network slice selector previously (i) assigned the data message to a first network slice of a second set of network slices and, (ii) based on the assignment of the data message to the first network slice, provided the data message to the first network slice selector. The method assigns the data message to a second network slice from the first et of network slices. The method provides the data message to a first network service of the selected second network slice.

Abstract: Some embodiments provide a method for a network slice selector that forwards messages from endpoint electronic devices onto different network slices of multiple network slices. The method receives a set of connection initiation messages setting up a connection between an endpoint electronic device and a network domain. The method forwards the set of connection initiation messages from the endpoint electronic device onto a default network slice while storing data regarding the connection initiation messages. After the connection is setup, the method receives a data message belonging to the connection from the endpoint electronic device. The method selects one of the plurality of network slices to which the electronic device has access as the network slice for the connection based on analysis of the received data message. The method retransmits the set of connection initiation messages on the selected network slice between the network slice selector and a network gateway.

Abstract: Examples can include an optimizer that dynamically determines where to place virtual network functions for a slice in a distributed Telco cloud network. The optimizer can determine a slice path that complies with a service level agreement and balances network load. The virtual network functions of the slice can be provisioned at clouds identified by the optimal slice path. In one example, performance metrics are normalized, and tenant-selected weights can be applied. This can allow the optimizer to prioritize particular SLA attributes in choosing an optimal slice path.

Abstract: Examples can include an optimizer that dynamically determines where to place virtual network functions for a slice in a distributed Telco cloud network. The optimizer can determine a slice path that complies with a service level agreement and balances network load. The virtual network functions of the slice can be provisioned at clouds identified by the optimal slice path. In one example, performance metrics are normalized, and tenant-selected weights can be applied. This can allow the optimizer to prioritize particular SLA attributes in choosing an optimal slice path.

Abstract: The present disclosure is directed towards systems and methods for evaluating or mitigating a network attack. A device determines one or more client internet protocol addresses associated with the attack on the service. The device assigns a severity score to the attack based on a type of the attack. The device identifies a probability of a user account accessing the service during an attack window based on the type of attack. The device generates an impact score for the user account based on the severity score and the probability of the user account accessing the service during the attack window. The device selects a mitigation policy for the user account based on the impact score.

Abstract: A method for optimizing network performance includes receiving data related to one or more network metrics, and determining whether the received data is to be used for creating a new model or updating an existing model that represents a recurring pattern in the received data to be used to predict or detect one or more network events. If the received data is not to be used for creating the new model or updating the existing model, then apply the data to the existing model. The method further includes determining a configuration related to one or more network devices based on the received data being applied to the determined model, and configuring the one or more network devices according to the determined configuration.

Abstract: The present disclosure is directed towards systems and methods for evaluating or mitigating a network attack. A device determines one or more client internet protocol addresses associated with the attack on the service. The device assigns a severity score to the attack based on a type of the attack. The device identifies a probability of a user account accessing the service during an attack window based on the type of attack. The device generates an impact score for the user account based on the severity score and the probability of the user account accessing the service during the attack window. The device selects a mitigation policy for the user account based on the impact score.

Abstract: Systems and methods for authenticating a user through behavioral analysis. The methods comprise: collecting observation data specifying an observed behavior of the user while interacting with a computing device; obtaining a confidence value reflecting a degree of confidence that the user is an authorized or unauthorized user of the computing device (where the confidence value is determined based on the observation data and a machine learning model trained with a known behavior pattern of the authorized user); using at least the confidence value and the observed behavior's amount of deviation from a normal behavior pattern to derive a risk level score value for a user account to which the computing device is associated; comparing the risk level score value to a threshold value; and performing at least one action to protect user account security when the threshold value is equal to or greater than the threshold value.

Abstract: The disclosure is directed to a system for improving security of SSL communications. The system can include an device intermediary between one or more servers, one or more clients, a plurality of agents, and a web service. The servers can be configured to receive SSL connections and issue SSL certificates. The device can include a virtual server associated with a respective one of the servers, such that the SSL certificate of the respective server is transmitted through the device. The device can generate service fingerprints for the one or more servers. Each service fingerprint can include information corresponding to an SSL certificate of the virtual server, one or more DNS aliases for a virtual IP address of the respective virtual server, one or more port numbers serving the SSL certificate, and an IP address serviced by the device. The device also can transmit the service fingerprints to a web service.

Abstract: The present disclosure is directed towards systems and methods for evaluating or mitigating a network attack. A device determines one or more client internet protocol addresses associated with the attack on the service. The device assigns a severity score to the attack based on a type of the attack. The device identifies a probability of a user account accessing the service during an attack window based on the type of attack. The device generates an impact score for the user account based on the severity score and the probability of the user account accessing the service during the attack window. The device selects a mitigation policy for the user account based on the impact score.

Abstract: The disclosure is directed to a system for improving security of SSL communications. The system can include an device intermediary between one or more servers, one or more clients, a plurality of agents, and a web service. The servers can be configured to receive SSL connections and issue SSL certificates. The device can include a virtual server associated with a respective one of the servers, such that the SSL certificate of the respective server is transmitted through the device. The device can generate service fingerprints for the one or more servers. Each service fingerprint can include information corresponding to an SSL certificate of the virtual server, one or more DNS aliases for a virtual IP address of the respective virtual server, one or more port numbers serving the SSL certificate, and an IP address serviced by the device. The device also can transmit the service fingerprints to a web service.

Abstract: A method for optimizing network performance includes receiving data related to one or more network metrics, and determining whether the received data is to be used for creating a new model or updating an existing model that represents a recurring pattern in the received data to be used to predict or detect one or more network events. If the received data is not to be used for creating the new model or updating the existing model, then apply the data to the existing model. The method further includes determining a configuration related to one or more network devices based on the received data being applied to the determined model, and configuring the one or more network devices according to the determined configuration.

Abstract: A method for optimizing network performance is described. The method comprises: receiving data related to one or more network metrics for measuring current network traffic or determining network patterns; determining, based on received data associated with the one or more network metrics, a model associated with at least one of detection and prediction of one or more future network events; determining a configuration related to the one or more network devices based on the received data and the determined model; and configuring the one or more network devices according to the determined configuration.

Abstract: The present invention relates to probiotic compositions and methods of using such compositions. In particular, the present invention provides method of using Faecalibacterium spp. to improve weight gain, provide prophylaxis against diarrhea and/or improve feed efficiency in an animal.

Abstract: The present invention relates to probiotic compositions and methods of using such compositions. In particular, the present invention provides method of using Faecalibacterium spp. to improve weight gain, provide prophylaxis against diarrhea and/or improve feed efficiency in an animal.

Abstract: A method for optimizing network performance is described. The method comprises: receiving data related to one or more network metrics for measuring current network traffic or determining network patterns; determining, based on received data associated with the one or more network metrics, a model associated with at least one of detection and prediction of one or more future network events; determining a configuration related to the one or more network devices based on the received data and the determined model; and configuring the one or more network devices according to the determined configuration.

Abstract: The disclosure is directed to a system for improving security of SSL communications. The system can include an device intermediary between one or more servers, one or more clients, a plurality of agents, and a web service. The servers can be configured to receive SSL connections and issue SSL certificates. The device can include a virtual server associated with a respective one of the servers, such that the SSL certificate of the respective server is transmitted through the device. The device can generate service fingerprints for the one or more servers. Each service fingerprint can include information corresponding to an SSL certificate of the virtual server, one or more DNS aliases for a virtual IP address of the respective virtual server, one or more port numbers serving the SSL certificate, and an IP address serviced by the device. The device also can transmit the service fingerprints to a web service.

Abstract: The present disclosure is directed towards systems and methods for evaluating or mitigating a network attack. A device determines one or more client internet protocol addresses associated with the attack on the service. The device assigns a severity score to the attack based on a type of the attack. The device identifies a probability of a user account accessing the service during an attack window based on the type of attack. The device generates an impact score for the user account based on the severity score and the probability of the user account accessing the service during the attack window. The device selects a mitigation policy for the user account based on the impact score.

Abstract: The present invention relates to probiotic compositions and methods of using such compositions. In particular, the present invention provides method of using Faecalibacterium spp. to improve weight gain, provide prophylaxis against diarrhea and/or improve feed efficiency in an animal.