Abstract: A wireless signal-based sensing system is provided. The system includes a plurality of devices, each device capable of sending and receiving wireless signals to create a sensing area. The system also includes at least one connection mechanism to enable at least one of the devices to connect to an application, and at least one analytics application for processing measurements of wireless signals obtained from the sensing area.

Abstract: An enforcement mechanism on an operating system instance enforces a segmentation policy on a container. A configuration generation module executing in a host namespace of the operating system instance receives management instructions from a segmentation server for enforcing the segmentation policy on a container. The configuration generation module executes in the host namespace to configure a traffic control and monitoring module in a container namespace associated with the container. The traffic control and monitoring module in the container namespace controls and monitors communications to and from the container in accordance with its configuration. By executing a configuration generation module in the host namespace to configure traffic control and monitoring module in the container namespace, the enforcement mechanism beneficially enables robust and lightweight enforcement in a manner that is agnostic to different containerization protocols.

Abstract: A thermal management device includes a single contiguous component. The single contiguous component includes a first portion made of a first thermally conductive plastic, and a second portion extending away from the first portion. The second portion is made of a second thermally conductive plastic. The second thermally conductive plastic is different than the first thermally conductive plastic.

Abstract: An enforcement mechanism on an operating system instance enforces a segmentation policy on a container. A configuration generation module executing in a host namespace of the operating system instance receives management instructions from a segmentation server for enforcing the segmentation policy on a container. The configuration generation module executes in the host namespace to configure a traffic control and monitoring module in a container namespace associated with the container. The traffic control and monitoring module in the container namespace controls and monitors communications to and from the container in accordance with its configuration. By executing a configuration generation module in the host namespace to configure traffic control and monitoring module in the container namespace, the enforcement mechanism beneficially enables robust and lightweight enforcement in a manner that is agnostic to different containerization protocols.

Abstract: An enforcement mechanism on an operating system instance enforces a segmentation policy on a container. A configuration generation module executing in a host namespace of the operating system instance receives management instructions from a segmentation server for enforcing the segmentation policy on a container. The configuration generation module executes in the host namespace to configure a traffic control and monitoring module in a container namespace associated with the container. The traffic control and monitoring module in the container namespace controls and monitors communications to and from the container in accordance with its configuration. By executing a configuration generation module in the host namespace to configure traffic control and monitoring module in the container namespace, the enforcement mechanism beneficially enables robust and lightweight enforcement in a manner that is agnostic to different containerization protocols.

Abstract: A segmentation server generates vulnerability exposure scores associated with workloads operating in a segmented computing environment. The segmentation server may automatically aggregate the vulnerability exposure scores in various ways to generate vulnerability exposure information representative of workloads in an administrative domain controlled by the segmentation server. The aggregated vulnerability exposure information may be presented in a manner that enables an administrator to easily evaluate different segmentation strategies and assess the risks associated with each of them. Moreover, the segmentation server can automatically generate a segmentation policy that modifies a configured segmentation strategy based on the vulnerability exposure scores to reduce exposure to certain vulnerabilities without impeding operation of the workloads.

Abstract: A segmentation server generates vulnerability exposure scores associated with workloads operating in a segmented computing environment. The segmentation server may automatically aggregate the vulnerability exposure scores in various ways to generate vulnerability exposure information representative of workloads in an administrative domain controlled by the segmentation server. The aggregated vulnerability exposure information may be presented in a manner that enables an administrator to easily evaluate different segmentation strategies and assess the risks associated with each of them. Moreover, the segmentation server can automatically generate a segmentation policy that modifies a configured segmentation strategy based on the vulnerability exposure scores to reduce exposure to certain vulnerabilities without impeding operation of the workloads.

Abstract: A wireless signal-based sensing system is provided. The system includes a plurality of devices, each device capable of sending and receiving wireless signals to create a sensing area. The system also includes at least one connection mechanism to enable at least one of the devices to connect to an application, and at least one analytics application for processing measurements of wireless signals obtained from the sensing area.

Abstract: A grease interceptor and method of use thereof is provided for separating solids, fats, oils, and grease waste (“F.O.G.”), and other particulate matter. The grease interceptor receives waste water in a liquid storage area where solids in the waste water have residence time long enough to gravitationally separate towards the bottom of the liquid storage area and waste that is less dense than water floats to the top of the liquid storage area. A series of features including channels, interrupter plates, and walls can increase the residence time or otherwise improve the separation of waste from the water. In addition, embodiments of the grease interceptor can have tapered access holes that improve visual inspection of the liquid storage area of the grease interceptor.

Abstract: A system and method for providing an anchor in a structure includes a hollow spline, which may include exterior threading, and an associated containment sleeve. The spline and sleeve are positionable within a borehole in the structure. Curable fluid is injected through the hollow spline and into the containment sleeve and allowed to cure.

Abstract: The invention involves an array of playing-cards playable by three or more persons, which delightfully spontaneous if unpredictable word, term, phrase, or picture comparison combinations, invites stimulating social-intercourse. Of the two essential sets of cards furnished with the basic OuickPik™-game iteration, an exemplified first set of Apple-cards each bear different pictures or terms generally derived from: “people, events, nature, places, things, etc.”; while a set of Orange-cards each may bear a picture or descriptive wording such as the terms—“bumpy, slow, magnificent”. Thus, Apple-cards are randomly issued for comparison as to which best typifies the Orange-card over the others,—hence comparing—“apples and oranges”; and a “quick-pick” feature takes the slowest player briefly out of contention,—thereby compelling an exciting rapid-pace.

Abstract: The invention sets forth an improved procedure and facile supporting apparatus, enabling players in a game for example, to make unbias determination by sole virtue of chanch, (as a random pointer-device employed in place of a traditional spinner), as to whom shall be the player selected for virtually any imaginable purpose. The apparatus is a platonic-solid,--that is, having equal faces, equal vertices, equal dihedral-angles between the faces.