Abstract: A network device includes multiple ports, a Shared Buffer (SB) and a SB controller. The ports to connect to a communication network. The SB to temporarily store packets received from the communication network via the ports, the packets belonging to multiple flows. The SB controller to allocate one or more flow-specific storage regions in the SB, a given flow-specific storage region being allocated to store the packets that (i) belong to respective one or more of the flows and (ii) are to be transmitted via a respective egress queue. In response to detecting that an occupancy level in the given flow-specific storage region exceeds a specified occupancy threshold, the SB controller to report the flows in the given flow-specific storage region as congested.

Abstract: A technique and method for detection and display of the cybersecurity risk context of a cloud environment initiates an inspection of cybersecurity objects within a cloud environment utilizing an inspection environment and stores information pertaining to discovered cybersecurity objects within the inspected cloud environment in a storage environment. The technique and method further generate a cybersecurity risk context for the inspected cloud environment based on the observations made concerning the cybersecurity objects contained within it. The technique and method further configure a web browser running on a client device to automatically display the generated cybersecurity risk context to a user, either through a web page overlay or through a toolbar plugin which has been installed in the web browser and configured to enable inspections of a cloud environment, once the user has navigated to a web page containing cybersecurity object identifiers.

Abstract: A technique and method for detection and display of the cybersecurity risk context of a cloud environment initiates an inspection of cybersecurity objects within a cloud environment utilizing an inspection environment and stores information pertaining to discovered cybersecurity objects within the inspected cloud environment in a storage environment. The technique and method further generate a cybersecurity risk context for the inspected cloud environment based on the observations made concerning the cybersecurity objects contained within it. The technique and method further configure a web browser running on a client device to automatically display the generated cybersecurity risk context to a user, either through a web page overlay or through a toolbar plugin which has been installed in the web browser and configured to enable inspections of a cloud environment, once the user has navigated to a web page containing cybersecurity object identifiers.

Abstract: Apparatus for global policing of a bandwidth of a flow, the apparatus including a network device including a local policer configured to perform bandwidth policing on the flow within the network device, and a communications module configured to: send local policer state information from the local policer to a remote global policer, and receive policer state information from the remote global policer and update the local policer state information based on the remote global policer state information. Related apparatus and methods are also provided.

Abstract: In one embodiment, a method includes receiving data of a set of configurations of preprocessor engines, receiving measurements of performance of a device executing benchmark applications while changing a configuration of preprocessor engines selected from the set of configurations of preprocessor engines, defining an order of at least some of the configurations based on the measurements, and providing a pruned set of configurations based on the defined order of the at least some configurations.

Abstract: In one embodiment, a system includes a processor to control a resource according to policies selected by a multi-armed bandit machine learning agent in exploration phases and in exploitation phases, and execute the multi-armed bandit machine learning agent to select from the policies to control the resource in the exploration phases according to probabilities to explore corresponding one of the policies, wherein the probabilities include different probabilities, perform measurements on the system during execution of the multi-armed bandit machine learning agent, and execute the multi-armed bandit machine learning agent to select from the policies to maximize potential rewards from controlling the resource in exploitation phases based on the performed measurements, and a memory to store data used by the processor.

Abstract: In one embodiment, a method includes finding an impact on performance of a device from changing settings of preprocessor engines applied to benchmark applications being executed by the device, defining groups of the preprocessor engines responsively to the impact on the performance of the device from changing the settings of the preprocessor engines, and providing different preprocessor engine configurations based on the settings to be applied to the preprocessor engines such that for each one of the defined groups a respective setting is to be applied equally to the preprocessor engines of the one group, thereby reducing a number of the preprocessor engine configurations available for selection by a machine learning agent.

Abstract: In one embodiment, a system includes a processor to receive machine learning training data including label scores based on measurements of device performance during execution of benchmark applications for different prefetcher engine configurations, and corresponding device hardware states, and train configuration specific machine learning regression models based on the received machine learning training data to provide corresponding configuration specific device performance predictions based on given device hardware states, and a memory to store data used by the processor.

Abstract: In one embodiment, a system includes prefetcher engines to predict next memory access addresses of a memory from which to load data to a cache during execution of a software application, and load the data from the predicted next memory access addresses to the cache during execution of the software application, and a processor to control the prefetcher engines according to configurations of the prefetcher engines selected by a machine learning agent in exploration phases and in exploitation phases during execution of the software application, and execute the machine learning agent to select from a pruned set of configurations to control the prefetcher engines in the exploration phases, perform measurements on the system during execution of the machine learning agent, and execute the machine learning agent to select from the configurations to maximize potential rewards from controlling the prefetcher engines in the exploitation phases based on the performed measurements.

Abstract: A network device includes one or more ports, and action-select circuitry. The ports are to exchange packets over a network. The action-select circuitry is to determine, for a given packet, a first search key based on a first header field of the given packet, and a second search key based on a second header field of the given packet, to compare the first search key to a first group of compare values, to output a multi-element vector responsively to a match between the first search key and a first compare value, to generate a composite search key by concatenating the second search key and the multi-element vector, to compare the composite search key to a second group of compare values, and, responsively to a match between the composite search key and a second compare value, to output an action indicator for applying to the given packet.

Abstract: A technique and method for detection and display of the cybersecurity risk context of a cloud environment initiates an inspection of cybersecurity objects within a cloud environment utilizing an inspection environment and stores information pertaining to discovered cybersecurity objects within the inspected cloud environment in a storage environment. The technique and method further generate a cybersecurity risk context for the inspected cloud environment based on the observations made concerning the cybersecurity objects contained within it. The technique and method further configure a web browser running on a client device to automatically display the generated cybersecurity risk context to a user, either through a web page overlay or through a toolbar plugin which has been installed in the web browser and configured to enable inspections of a cloud environment, once the user has navigated to a web page containing cybersecurity object identifiers.

Abstract: A method, system and product including obtaining offline user information at an end device, wherein the offline user information is obtained from offline sensors of the end device; based on the offline user information, generating a user profile indicating that a user of the end device matches at least one micro-segment, wherein the at least one micro-segment comprises at least one detailed population category; based on the at least one micro-segment, selecting a campaign from a set of one or more campaigns retained at a server, wherein the campaign comprises one or more rules for displaying at least one content item; monitoring the offline sensors of the end device to identify real time user activities; and upon identifying, based on the real time user activities, that a rule of the one or more rules for displaying a content item is complied with, displaying the content item in the end device.

Abstract: A technique and method for detection and display of the cybersecurity risk context of a cloud environment initiates an inspection of cybersecurity objects within a cloud environment utilizing an inspection environment and stores information pertaining to discovered cybersecurity objects within the inspected cloud environment in a storage environment. The technique and method further generate a cybersecurity risk context for the inspected cloud environment based on the observations made concerning the cybersecurity objects contained within it. The technique and method further configure a web browser running on a client device to automatically display the generated cybersecurity risk context to a user, either through a web page overlay or through a toolbar plugin which has been installed in the web browser and configured to enable inspections of a cloud environment, once the user has navigated to a web page containing cybersecurity object identifiers.

Abstract: In one embodiment, a communication apparatus, including a network interface configured to receive over a network a sequence of data packets of a network flow having a defined packet order, wherein the network interface is configured to receive an out-of-order data packet instead of multiple missing data packets according to the defined packet order, a timer, and packet processing circuitry configured to activate the timer responsively to receiving the out-of-order data packet, and set the time period over which the timer is activated responsively to a quantity of the multiple missing data packets.

Abstract: A system, a computing system, and a switch are provided. In one example, a system for routing data to one of a plurality of queues comprises a processor to poll a depth of one or more queues of the plurality of queues, determine a weight for each polled queue based on the depth of each polled queue, and route data received via a port to a first queue of the plurality of queues based on the determined weight for each polled queue.

Abstract: A method, system and product including obtaining offline user information at an end device, wherein the offline user information is obtained from offline sensors of the end device; based on the offline user information, generating a user profile indicating that a user of the end device matches at least one micro-segment, wherein the at least one micro-segment comprises at least one detailed population category; based on the at least one micro-segment, selecting a campaign from a set of one or more campaigns retained at a server, wherein the campaign comprises one or more rules for displaying at least one content item; monitoring the offline sensors of the end device to identify real time user activities; and upon identifying, based on the real time user activities, that a rule of the one or more rules for displaying a content item is complied with, displaying the content item in the end device.

Abstract: A parsing apparatus includes a packet-type identification circuit and a parser. The packet-type identification circuit is to receive a packet to be parsed, and to identify a packet type of the packet by extracting a packet-type identifier from a defined field in the packet. The parser is to store one or more parsing templates that specify parsing of one or more respective packet types. When the packet type of the packet corresponds to a parsing template among the stored parsing templates, the parser is to parse the packet in accordance with the stored parsing template. When the packet type of the packet does not correspond to any of the stored parsing templates, the parser is to parse the packet using an alternative parsing scheme.

Abstract: A system for computer-aided triage includes a router, a remote computing system, and a client application. Additionally or alternatively, the system 100 can include any number of computing systems, servers, storage, lookup table, memory, and/or any other suitable components. A method for computer-aided triage includes receiving a data packet associated with a patient and taken at a first point of care; checking for a suspected condition associated with the data packet; in an event that the suspected condition is detected, determining a recipient based on the suspected condition; and transmitting information to a device associated with the recipient.

Abstract: A system for computer-aided triage includes and/or interfaces with a computing system. A method for computer-aided triage includes receiving a data packet including a set of images; and processing the set of images to determine a suspected condition and/or associated features. Additionally or alternatively, the method can include any or all of: preprocessing the set of images; triggering an action based on the suspected condition and/or associated features; determining a recipient based on the suspected condition; preparing a data packet for transfer; transmitting information to a device associated with the recipient; receiving an input from the recipient and triggering an action based on the input; aggregating data; and/or any other suitable processes.

Abstract: A system for computer-aided triage includes a router, a remote computing system, and a client application. Additionally or alternatively, the system 100 can include any number of computing systems, servers, storage, lookup table, memory, and/or any other suitable components. A method for computer-aided triage includes receiving a data packet associated with a patient and taken at a first point of care; checking for a suspected condition associated with the data packet; in an event that the suspected condition is detected, determining a recipient based on the suspected condition; and transmitting information to a device associated with the recipient.