Abstract: In one implementation, a device may facilitate the hunting, detection, and forensic assessment of threats utilizing a knowledge graph. The device obtains telemetry data collected within a cloud computing environment. The device forms a temporal graph that represents changes in the cloud computing environment over time based on the telemetry data. The device maps the temporal graph into a knowledge graph for storage in a graph database. The device makes the graph database available to an artificial intelligence model that issues queries to detect security threats to the cloud computing environment.

Abstract: A method includes, at a media bridge configured to distribute a plurality of media streams among a plurality of client devices connected to the media bridge over a network during a real-time communication (RTC) instance, receiving a plurality of quality of experience (QoE) preferences from the plurality of client devices via the media bridge, the plurality of QoE preferences being transmitted as a real-time transport protocol (RTP) control protocol (RTCP) extension header of a transmitted data packet. The method also includes receiving a plurality of QoE metrics at the media bridge, and in response to a determination that a degradation in network conditions of the network has occurred, downgrading at least one of the plurality of media streams based on the plurality of QoE preferences.

Abstract: A system and method for a coordinated edge-assisted reliability mechanism for real-time media services. In one embodiment, a method includes forwarding, by an edge relay device, data packets between a media server and a client device; measuring packet loss and latency associated with communications between the edge relay device, the media server, and the client device; determining an error correction procedure based at least in part on the measured latency; and implementing the error correction procedure at the edge relay device.

Abstract: Systems and methods for associating a client computing device with an edge node. The method includes providing, by a cloud server, a resource to the client computing device. Filtering, by the cloud server, one or more edge nodes to identify a subset of edge nodes that meet a predetermined criteria and communicating the subset of edge nodes to the client computing device. The client probes the subset of edge nodes, and based on at least the probing results, the cloud server then selects one of the edge nodes from the subset to provide the resource to the client computing device.

Abstract: A method includes, at a media bridge configured to distribute a plurality of media streams among a plurality of client devices connected to the media bridge over a network, receiving the plurality of media streams from the plurality of client devices via the media bridge. The media bridge connects the plurality of client devices. The method further includes assigning a pair of names for each of the plurality of media streams. The pair of names include a contribution name and a distribution name. The method further includes presenting a first list to the plurality of client devices. The first list including a plurality of the distribution names for the plurality of media streams received from the plurality of client devices. The method further includes providing an indication of a current active speaker within the plurality of media streams via a signaling process.

Abstract: In one embodiment, an agent executed by a device receives a profile for an application executed by the endpoint device that specifies one or more flow treatment policies for the application. The agent obtains performance metrics regarding a plurality of network interfaces of the endpoint device. The agent selects a particular network interface of the plurality of network interfaces by comparing the profile for the application to the performance metrics. The agent sends a packet for an application flow of the application over the particular network interface.

Abstract: A system and method for a coordinated edge-assisted reliability mechanism for real-time media services. In one embodiment, a method includes forwarding, by an edge relay device, data packets between a media server and a client device; measuring packet loss and latency associated with communications between the edge relay device, the media server, and the client device; determining an error correction procedure based at least in part on the measured latency; and implementing the error correction procedure at the edge relay device.

Abstract: A method includes, at a media bridge configured to distribute a plurality of media streams among a plurality of client devices connected to the media bridge over a network, receiving the plurality of media streams from the plurality of client devices via the media bridge. The media bridge connects the plurality of client devices. The method further includes assigning a pair of names for each of the plurality of media streams. The pair of names include a contribution name and a distribution name. The method further includes presenting a first list to the plurality of client devices. The first list including a plurality of the distribution names for the plurality of media streams received from the plurality of client devices. The method further includes providing an indication of a current active speaker within the plurality of media streams via a signaling process.

Abstract: This disclosure describes techniques for controlling group access to a collaboration technology. The techniques include generating a shared encryption key among authorized producers of content associated with a collaboration technology. The techniques include receiving, by the authorized producers and from authenticated consumers, requests to access the content. The requests may be received in a partitioned manner, such that individual producers are serving a particular subset of the authenticated consumers. In response to receiving the requests, the techniques include sending the shared encryption key from the individual producers to the corresponding subset of authenticated consumers. The techniques include using the shared encryption key to encrypt content by the authorized producers, which may then be decrypted by the authenticated consumers using the shared encryption key, achieving end-to-end encryption of event content.

Abstract: A method includes, at a media bridge configured to distribute a plurality of media streams among a plurality of client devices connected to the media bridge over a network, receiving the plurality of media streams from the plurality of client devices via the media bridge. The media bridge connects the plurality of client devices. The method further includes assigning a pair of names for each of the plurality of media streams. The pair of names include a contribution name and a distribution name. The method further includes presenting a first list to the plurality of client devices. The first list including a plurality of the distribution names for the plurality of media streams received from the plurality of client devices. The method further includes providing an indication of a current active speaker within the plurality of media streams via a signaling process.

Abstract: In one embodiment, a device executing an application estimates capacity metrics for paths between the device and a data source from which the device pulls data associated with the application. The device estimates a number of data requests by the device that must be pending with the data source to maintain synchronization with the application. The device determines an amount of capacity of the paths to be used by a packet recovery mechanism without causing congestion, based on the capacity metrics for the paths between the device and the data source and the number of data requests by the device that must be pending with the data source to maintain synchronization. The device requests, from the data source, use of the packet recovery mechanism for the data associated with the application, according to the amount of capacity of the paths to be used by the determined packet recovery mechanism.

Abstract: In one embodiment, an agent executed by a device receives a profile for an application executed by the endpoint device that specifies one or more flow treatment policies for the application. The agent obtains performance metrics regarding a plurality of network interfaces of the endpoint device. The agent selects a particular network interface of the plurality of network interfaces by comparing the profile for the application to the performance metrics. The agent sends a packet for an application flow of the application over the particular network interface.

Abstract: In one example, a location of a potential bottleneck of network traffic in a network is identified. Based on the location of the potential bottleneck, a first QoE inference model is selected from a plurality of respective QoE inference models. The respective QoE inference models are each trained to infer a respective QoE of the network traffic based on one or more respective network traffic metrics generated by monitoring the network traffic at a respective location in the network. One or more first network traffic metrics of the one or more respective network traffic metrics are generated by monitoring the network traffic at a first respective location. The one or more first network traffic metrics are provided to the first QoE inference model to infer a first respective QoE.

Abstract: In one embodiment, a device obtains traffic for an application to be sent to a plurality of hybrid Information-Centric Networking clients. The device divides the plurality of hybrid Information-Centric Networking clients into active hybrid Information-Centric Networking clients and passive hybrid Information-Centric Networking clients, based in part on whether a given hybrid Information-Centric Networking client is sharing content with the plurality of hybrid Information-Centric Networking clients via the application. The device sends, to the active hybrid Information-Centric Networking clients, the traffic using a first transport mechanism that guarantees a level of end-to-end latency between the device and the active hybrid Information-Centric Networking clients.

Abstract: In one example, a location of a potential bottleneck of network traffic in a network is identified. Based on the location of the potential bottleneck, a first QoE inference model is selected from a plurality of respective QoE inference models. The respective QoE inference models are each trained to infer a respective QoE of the network traffic based on one or more respective network traffic metrics generated by monitoring the network traffic at a respective location in the network. One or more first network traffic metrics of the one or more respective network traffic metrics are generated by monitoring the network traffic at a first respective location. The one or more first network traffic metrics are provided to the first QoE inference model to infer a first respective QoE.

Abstract: A method includes, at a media bridge configured to distribute a plurality of media streams among a plurality of client devices connected to the media bridge over a network, receiving the plurality of media streams from the plurality of client devices via the media bridge. The media bridge connects the plurality of client devices. The method further includes assigning a pair of names for each of the plurality of media streams. The pair of names include a contribution name and a distribution name. The method further includes presenting a first list to the plurality of client devices. The first list including a plurality of the distribution names for the plurality of media streams received from the plurality of client devices. The method further includes providing an indication of a current active speaker within the plurality of media streams via a signaling process.

Abstract: This disclosure describes techniques for controlling group access to a collaboration technology. The techniques include generating a shared encryption key among authorized producers of content associated with a collaboration technology. The techniques include receiving, by the authorized producers and from authenticated consumers, requests to access the content. The requests may be received in a partitioned manner, such that individual producers are serving a particular subset of the authenticated consumers. In response to receiving the requests, the techniques include sending the shared encryption key from the individual producers to the corresponding subset of authenticated consumers. The techniques include using the shared encryption key to encrypt content by the authorized producers, which may then be decrypted by the authenticated consumers using the shared encryption key, achieving end-to-end encryption of event content.

Abstract: A method includes, at a media bridge configured to distribute a plurality of media streams among a plurality of client devices connected to the media bridge over a network during a real-time communication (RTC) instance, receiving a plurality of quality of experience (QoE) preferences from the plurality of client devices via the media bridge, the plurality of QoE preferences being transmitted as a real-time transport protocol (RTP) control protocol (RTCP) extension header of a transmitted data packet. The method also includes receiving a plurality of QoE metrics at the media bridge, and in response to a determination that a degradation in network conditions of the network has occurred, downgrading at least one of the plurality of media streams based on the plurality of QoE preferences.

Abstract: A method includes, at a media bridge configured to distribute a plurality of media streams among a plurality of client devices connected to the media bridge over a network during a real-time communication (RTC) instance, receiving a plurality of quality of experience (QoE) preferences from the plurality of client devices via the media bridge, the plurality of QoE preferences being transmitted as a real-time transport protocol (RTP) control protocol (RTCP) extension header of a transmitted data packet. The method also includes receiving a plurality of QoE metrics at the media bridge, and in response to a determination that a degradation in network conditions of the network has occurred, downgrading at least one of the plurality of media streams based on the plurality of QoE preferences.