Abstract: In one embodiment, a device forms a telemetry cluster by applying clustering to telemetry data regarding a plurality of network connections over an access network between a plurality of entities and a remote application. The device applies anomaly detection to the telemetry cluster, to identify one or more anomalies. The device makes a determination as to whether the one or more anomalies are attributable to the remote application or to the access network. The device initiates a corrective measure, based on the determination as to whether the one or more anomalies are attributable to the remote application or to the access network.

Abstract: In one embodiment, a service receives software version data regarding versions of software executed by devices in a network. The service detects a version change in the version of software executed by one or more of the devices, based on the received software version data. The service makes a determination that a drop in data quality of input data for a machine learning model used to monitor the network is associated with the detected version change. The service reverts the one or more devices to a prior version of software, based on the determination that the drop in quality of the input data for the machine learning model used to monitor the network is associated with the detected version change.

Abstract: In one embodiment, a device in a network obtains data indicative of a device classification rule, a device type label associated with the rule, and a set of positive and negative feature vectors used to create the rule. The device replaces similar feature vectors in the set of positive and negative feature vectors with a single feature vector, to form a reduced set of feature vectors. The device applies differential privacy to the reduced set of feature vectors. The device sends a digest to a cloud service. The digest comprises the device classification rule, the device type label, and the reduced set of feature vectors to which differential privacy was applied. The service uses the digest to train a machine learning-based device classifier.

Abstract: In one embodiment, a network assurance service that monitors a network detects a behavioral anomaly in the network using an anomaly detector that compares an anomaly detection threshold to a target value calculated based on a first set of one or more measurements from the network. The service uses an explanation model to predict when the anomaly detector will detect anomalies. The explanation model takes as input a second set of one or more measurements from the network that differs from the first set. The service determines that the detected anomaly is explainable, based on the explanation model correctly predicting the detection of the anomaly by the anomaly detector. The service provides an anomaly detection alert for the detected anomaly to a user interface, based on the detected anomaly being explainable. The anomaly detection alert indicates at least one measurement from the second set as an explanation for the anomaly.

Abstract: A method for fabricating a fluid container, wherein at least two half containers are mated in said fluid to be contained in said container. This method allows the incorporation of prefabricated devices into each half containers as well as the functional coupling of these devices after mating of the half containers, thus resulting in a functional hybrid MEMS fluid container.