Abstract: Antibodies that bind ICOS (Inducible T cell Co-Stimulator). Therapeutic use of anti-ICOS antibodies for modulating the ratio between regulatory T cells and effector T cells, to stimulate the immune system of patients, including use in treating cancers. Methods of producing anti-ICOS antibodies, including species cross-reactive antibodies, using transgenic knock-out mice.

Abstract: A policy management server manages a segmentation policy and automatically configures an enclave protection device consistently with the segmentation policy so that that the segmentation policy can be enforced with respect to workloads within a secure enclave protected by the enclave protection device. The policy management server identifies protected workloads that are members of a secure enclave and external workloads that are external to the secure enclave. The policy management server identifies cross-boundary rules of the segmentation policy affecting traffic between the protected workloads and external workloads. The policy management server generates and distributes a configuration of the enclave protection device to enable enforcement of the cross-boundary rules pertaining to traffic passing through the enclave protection device.

Abstract: A policy management server manages a segmentation policy and automatically configures an enclave protection device consistently with the segmentation policy so that that the segmentation policy can be enforced with respect to workloads within a secure enclave protected by the enclave protection device. The policy management server identifies protected workloads that are members of a secure enclave and external workloads that are external to the secure enclave. The policy management server identifies cross-boundary rules of the segmentation policy affecting traffic between the protected workloads and external workloads. The policy management server generates and distributes a configuration of the enclave protection device to enable enforcement of the cross-boundary rules pertaining to traffic passing through the enclave protection device.

Abstract: An energy recovery ventilation device includes a housing having a first side, a second side opposite the first side. The device also includes at least one first channel within the housing, and at least one second channel within the housing. The device includes a first inlet and a first outlet. The first inlet is fluidly coupled to the first outlet via the first channel. The device also includes a second inlet and a second outlet. The second inlet is fluidly coupled to the second outlet via the second channel. The device includes a first cover supported by the first side of the housing. The first cover is made of a first material. The device also includes a second cover supported by the second side of the housing. The second cover is made of a second material that is different than the first material.

Abstract: A segmentation server generates vulnerability exposure scores associated with workloads operating in a segmented computing environment. The segmentation server may automatically aggregate the vulnerability exposure scores in various ways to generate vulnerability exposure information representative of workloads in an administrative domain controlled by the segmentation server. The aggregated vulnerability exposure information may be presented in a manner that enables an administrator to easily evaluate different segmentation strategies and assess the risks associated with each of them. Moreover, the segmentation server can automatically generate a segmentation policy that modifies a configured segmentation strategy based on the vulnerability exposure scores to reduce exposure to certain vulnerabilities without impeding operation of the workloads.

Abstract: A segmentation server generates vulnerability exposure scores associated with workloads operating in a segmented computing environment. The segmentation server may automatically aggregate the vulnerability exposure scores in various ways to generate vulnerability exposure information representative of workloads in an administrative domain controlled by the segmentation server. The aggregated vulnerability exposure information may be presented in a manner that enables an administrator to easily evaluate different segmentation strategies and assess the risks associated with each of them. Moreover, the segmentation server can automatically generate a segmentation policy that modifies a configured segmentation strategy based on the vulnerability exposure scores to reduce exposure to certain vulnerabilities without impeding operation of the workloads.

Abstract: A grease interceptor and method of use thereof is provided for separating solids, fats, oils, and grease waste (“F.O.G.”), and other particulate matter. The grease interceptor receives waste water in a liquid storage area where solids in the waste water have residence time long enough to gravitationally separate towards the bottom of the liquid storage area and waste that is less dense than water floats to the top of the liquid storage area. A series of features including channels, interrupter plates, and walls can increase the residence time or otherwise improve the separation of waste from the water. In addition, embodiments of the grease interceptor can have tapered access holes that improve visual inspection of the liquid storage area of the grease interceptor.

Abstract: The present disclosure relates to encapsulation of a phase change material (PCM) enabled by extrusion of a thermoplastic polymer shell and a PCM core, which can be additively manufactured to form a variety of designs for use in a variety of settings, including for use as thermal energy storage devices in building heating ventilation and air conditioning (HVAC) systems. The thermoplastic polymer shell surrounding a PCM core may be used as a filament in three-dimensional (3D) printing or may be extruded during the additive manufacturing process.

Abstract: A thermal management device includes a single contiguous component. The single contiguous component includes a first portion made of a first thermally conductive plastic, and a second portion extending away from the first portion. The second portion is made of a second thermally conductive plastic. The second thermally conductive plastic is different than the first thermally conductive plastic. The second portion has a greater hardness than the first portion.

Abstract: A segmentation server generates vulnerability exposure scores associated with workloads operating in a segmented computing environment. The segmentation server may automatically aggregate the vulnerability exposure scores in various ways to generate vulnerability exposure information representative of workloads in an administrative domain controlled by the segmentation server. The aggregated vulnerability exposure information may be presented in a manner that enables an administrator to easily evaluate different segmentation strategies and assess the risks associated with each of them. Moreover, the segmentation server can automatically generate a segmentation policy that modifies a configured segmentation strategy based on the vulnerability exposure scores to reduce exposure to certain vulnerabilities without impeding operation of the workloads.

Abstract: A segmentation server generates vulnerability exposure scores associated with workloads operating in a segmented computing environment. The segmentation server may automatically aggregate the vulnerability exposure scores in various ways to generate vulnerability exposure information representative of workloads in an administrative domain controlled by the segmentation server. The aggregated vulnerability exposure information may be presented in a manner that enables an administrator to easily evaluate different segmentation strategies and assess the risks associated with each of them. Moreover, the segmentation server can automatically generate a segmentation policy that modifies a configured segmentation strategy based on the vulnerability exposure scores to reduce exposure to certain vulnerabilities without impeding operation of the workloads.

Abstract: A wireless signal-based sensing system is provided. The system includes a plurality of devices, each device capable of sending and receiving wireless signals to create a sensing area. The system also includes at least one connection mechanism to enable at least one of the devices to connect to an application, and at least one analytics application for processing measurements of wireless signals obtained from the sensing area.

Abstract: A policy management server manages a segmentation policy and automatically configures an enclave protection device consistently with the segmentation policy so that that the segmentation policy can be enforced with respect to workloads within a secure enclave protected by the enclave protection device. The policy management server identifies protected workloads that are members of a secure enclave and external workloads that are external to the secure enclave. The policy management server identifies cross-boundary rules of the segmentation policy affecting traffic between the protected workloads and external workloads. The policy management server generates and distributes a configuration of the enclave protection device to enable enforcement of the cross-boundary rules pertaining to traffic passing through the enclave protection device.

Abstract: A segmentation server generates vulnerability exposure scores associated with workloads operating in a segmented computing environment. The segmentation server may automatically aggregate the vulnerability exposure scores in various ways to generate vulnerability exposure information representative of workloads in an administrative domain controlled by the segmentation server. The aggregated vulnerability exposure information may be presented in a manner that enables an administrator to easily evaluate different segmentation strategies and assess the risks associated with each of them. Moreover, the segmentation server can automatically generate a segmentation policy that modifies a configured segmentation strategy based on the vulnerability exposure scores to reduce exposure to certain vulnerabilities without impeding operation of the workloads.

Abstract: A segmentation server generates vulnerability exposure scores associated with workloads operating in a segmented computing environment. The segmentation server may automatically aggregate the vulnerability exposure scores in various ways to generate vulnerability exposure information representative of workloads in an administrative domain controlled by the segmentation server. The aggregated vulnerability exposure information may be presented in a manner that enables an administrator to easily evaluate different segmentation strategies and assess the risks associated with each of them. Moreover, the segmentation server can automatically generate a segmentation policy that modifies a configured segmentation strategy based on the vulnerability exposure scores to reduce exposure to certain vulnerabilities without impeding operation of the workloads.

Abstract: An enforcement mechanism on an operating system instance enforces a segmentation policy on a container. A configuration generation module executing in a host namespace of the operating system instance receives management instructions from a segmentation server for enforcing the segmentation policy on a container. The configuration generation module executes in the host namespace to configure a traffic control and monitoring module in a container namespace associated with the container. The traffic control and monitoring module in the container namespace controls and monitors communications to and from the container in accordance with its configuration. By executing a configuration generation module in the host namespace to configure traffic control and monitoring module in the container namespace, the enforcement mechanism beneficially enables robust and lightweight enforcement in a manner that is agnostic to different containerization protocols.

Abstract: A segmentation server configures enforcement of a segmentation policy by allocating enforcement of management instructions between network devices and hosts. The segmentation policy comprises rules that control communications between workloads. For a particular workload, the segmentation server generates management instructions for controlling communications to and from the particular workload in accordance with the rules. The segmentation server determines an allocation of management instructions between enforcement on a host on which the particular workload executes and enforcement on a network device upstream from the workload. The segmentation server sends configuration information to at least one of the host and the network device in accordance with the allocation to enable enforcement of the management instructions.

Abstract: A wireless signal-based sensing system is provided. The system includes a plurality of devices, each device capable of sending and receiving wireless signals to create a sensing area. The system also includes at least one connection mechanism to enable at least one of the devices to connect to an application, and at least one analytics application for processing measurements of wireless signals obtained from the sensing area.

Abstract: In order to provide a thermally conductive polymer based filament that may be printed using additive manufacturing techniques, a composition includes a thermoplastic polymer and/or elastomer that is soft and pliable, a polar polymeric thermoplastic, and a thermally conductive filler. The composition includes from 15 to 80 weight percentage of a thermoplastic polymer and/or a thermoplastic elastomer, from 20 to 85 weight percentage of a thermally conductive filler, and from 0 to 25 weight percentage of a thermoplastic polymer having polarity on a main chain of a molecule that results in a dipole moment. The thermoplastic polymer and/or the thermoplastic elastomer has a combined Notched Izod impact strength greater than or equal to 300 J/m and a flexural modulus less than 3 GPa. The filler has an intrinsic thermal conductivity greater than or equal to 1 W/m-K. The composition is characterized by a thermal conductivity of at least 0.75 W/m-K and an Izod notched impact strength of at least 100 J/m.

Abstract: A segmentation server configures enforcement of a segmentation policy by allocating enforcement of management instructions between network devices and hosts. The segmentation policy comprises rules that control communications between workloads. For a particular workload, the segmentation server generates management instructions for controlling communications to and from the particular workload in accordance with the rules. The segmentation server determines an allocation of management instructions between enforcement on a host on which the particular workload executes and enforcement on a network device upstream from the workload. The segmentation server sends configuration information to at least one of the host and the network device in accordance with the allocation to enable enforcement of the management instructions.