Abstract: A method is implemented by a network device for determining parameter values for a base station of a cellular network. The base station operates in a wireless band that is shared with one or more wireless access points. The parameter values are determined to optimize network performance while ensuring fair coexistence between the base station and the one or more wireless access points. The method includes obtaining proximity information for the one or more wireless access points relative to the base station, obtaining activity information for the one or more wireless access points, and determining parameter values for the base station based on the proximity information and the activity information.

Abstract: A mobile device automatically determines which location of a plurality of locations of a vehicle a user of the mobile device is located at without knowing assistance of the user. The mobile device determines that the mobile device is likely in a moving vehicle and that the user is actively interacting with the mobile device. The mobile device captures an image via an optical sensor of the mobile device without assistance from the user for the capture. The mobile device determines a location of the user within the vehicle based upon an analysis of the image. The analysis includes an execution of a model that utilizes at least the captured image as an input to determine the location. The mobile device, after determining the location, performs one or more actions.

Abstract: A method and system to improve datacenter security by configuring a security layer as a set of nano-services that are executed to service a single tenant of the datacenter such that the nano-service protects the single tenant from other entities in the datacenter and the nano-service being compromised does not compromise the security of other tenants of the datacenter. The method includes receiving a request to instantiate a virtual resource for a tenant, generating a nano-service to implement at least one security layer function for the virtual resource, and connecting the nano-service to the virtual resource and a virtual bridge in the datacenter to enable communication between the virtual resource (vR) and a network of the datacenter with the security layer function processing traffic between the virtual resource and the virtual bridge. The nano-service can be immutable once it begins execution. The security layer function can be an L2 or L3 function.

Abstract: A method is executed by a computing device to receive a request for a server via a known network access type, from a known application type, by a known user, or a known policy, instantiate a new unikernel with a differentiated communication protocol stack instance, in response to determining the request is not being serviced by a previously instantiated unikernel, and service the request by a previously instantiated unikernel, in response to determining the previously instantiated unikernel is available, where the new unikernel and the previously instantiated unikernel are separate from an operating system of the computing device.

Abstract: A system, method and architecture for providing highly granular driving recommendations to a vehicle based on network-assisted scanning of a surrounding environment. In one embodiment, the system is operative for receiving environmental data from one or more collection agents, each operating with a plurality of sensors configured to sense data relating to the environment. At least one collection agent is operative in association with the vehicle for providing vehicular condition data and vehicular navigation data. The system is configured to calibrate the vehicle to identify a vehicle type responsive to the vehicular condition/navigation data. Road condition information and obstacle condition information relating to a road segment, the vehicle is traversing may also be obtained. Responsive to the road condition/navigation data, vehicle type and positioning, etc., an optimal racing line path over the road segment may be determined.

Abstract: An apparatus and method are described herein for training a similarity model that is used to predict similarity between item pairs. In one example, the apparatus is configured to train (build) the similarity model by using machine learning (e.g., a multivariate multiple liner regression process) that utilizes an independent variable including metadata (e.g., title, genre, writer, plot keywords) associated with training items, and two dependent variables including user contributed similarity scores for training item pairs, and collaborative filtering similarity scores for the training item pairs. Then, the apparatus uses the trained model to predict similarity between items.

Abstract: Exemplary methods for marking packets include in response to receiving a packet, determining whether the packet has been classified, and in response to determining the packet has not been classified, classifying the packet to determine a class to which the packet belongs, wherein the class identifies a set of zero or more markers that are to be included as part of packets belonging to the class. The methods include marking the packet with a first marker selected from the set of one or more markers, and forwarding the marked packet. Exemplary methods for processing markers include in response to receiving a packet, determining whether the packet has been marked with a marker, and in response to determining the packet has been marked with the first marker, performing a set of one or more operations required by the first marker.

Abstract: A method implemented by a computing device to optimize resource usage of service function chains (SFCs) in a network using machine learning. The method includes obtaining, from an autoscale machine learning (ML) system associated with a virtual network function (vNF), a suggested adjustment to an amount of resources provisioned for the vNF. The autoscale ML system is trained online using machine learning to predict an amount of resources to be utilized by the vNF. The autoscale ML system is configured to receive as input an amount of resources currently utilized by the vNF and an amount of resources currently available to the vNF, determine using machine learning the suggested adjustment to the amount of resources provisioned for the vNF based on the input, and output the suggested adjustment. The method further includes providing the suggested adjustment to a resource re-allocator component.

Abstract: A method and a computing device are provided for improving datacenter operation. The datacenter operation is improved by establishing differentiated communication protocol stack support as a set of nano-services. The nano-services are executed to service connections on a per application or server basis for the datacenter to reduce overhead caused by virtual machines or containers utilizing separate communication protocol stacks. The method includes receiving a request to for a server via a known network access type, from a known application type, by a known user, or a known policy, determining whether the request can be serviced by an existing nano-service for the server, and establishing a new nano-service with a differentiated communication protocol stack instance for the server, in response to the request not being serviced by the existing nano-service.

Abstract: A method is executed by a computing device to receive a request for a server via a known network access type, from a known application type, by a known user, or a known policy, instantiate a new unikernel with a differentiated communication protocol stack instance, in response to determining the request is not being serviced by a previously instantiated unikernel, and service the request by a previously instantiated unikernel, in response to determining the previously instantiated unikernel is available, where the new unikernel and the previously instantiated unikernel are separate from an operating system of the computing device.

Abstract: A method and system to improve datacenter security by configuring a security layer as a set of nano-services that are executed to service a single tenant of the datacenter such that the nano-service protects the single tenant from other entities in the datacenter and the nano-service being compromised does not compromise the security of other tenants of the datacenter. The method includes receiving a request to instantiate a virtual resource for a tenant, generating a nano-service to implement at least one security layer function for the virtual resource, and connecting the nano-service to the virtual resource and a virtual bridge in the datacenter to enable communication between the virtual resource (vR) and a network of the datacenter with the security layer function processing traffic between the virtual resource and the virtual bridge. The nano-service can be immutable once it begins execution. The security layer function can be an L2 or L3 function.

Abstract: A method is implemented by a network device for determining parameter values for a base station of a cellular network. The base station operates in a wireless band that is shared with one or more wireless access points. The parameter values are determined to optimize network performance while ensuring fair coexistence between the base station and the one or more wireless access points. The method includes obtaining proximity information for the one or more wireless access points relative to the base station, obtaining activity information for the one or more wireless access points, and determining parameter values for the base station based on the proximity information and the activity information.

Abstract: A system, method and architecture for facilitating placement of native advertisements in an AR/MR environment. In one embodiment, the system is operative for receiving real world object identification and spatial mapping data relative to a plurality of real world scenarios sensed in respective AR sessions engaged by corresponding users using a plurality of AR devices. The real world object identification and spatial mapping data may be determined responsive to sensory and environmental information received from at least one of the AR devices and the corresponding users. Responsive to the real world object identification and spatial mapping data, one or more ads are obtained from an advertisement campaign management system that are contextualized within the respective real world scenarios.

Abstract: A method is implemented by a computing device to determine a root cause of a performance issue in a software defined networking (SDN) network using flow statistics maintained by hosts in the network. The method includes receiving a request to perform a root cause analysis (RCA) for a first flow in the network that is experiencing a performance issue, obtaining flow path information for flows in the network, and obtaining flow statistics for the flows in the network, where the flow statistics are end-to-end flow statistics maintained by one or more hosts in the network. The method further includes executing an RCA algorithm for the first flow, where the RCA algorithm determines a root cause of a performance issue experienced by the first flow based on the flow path information and the flow statistics.

Abstract: An apparatus and method to perform assignment of a cell associated with a remote radio unit (RRU) to a coordination set (“C-Set”) associated with at least one BBU to optimize the overall performance of a network. The method, as implemented, is based on a greedy algorithm and uses (1) score variables, (2) cell_score function, and variations thereof and (3) the evaluation scores, and variations thereof to determine C-Set assignments for an overall improvement of network performance.

Abstract: A method and apparatus for an enhanced proxy device are described. Upon receipt of a first packet with a header including a set of header fields, a proxy device stores a subset from the set of header fields with an identification of the first packet, wherein the identification of the first packet is based on a portion of the packet; and transmits the packet without the subset of the header fields to be processed at the processing device.

Abstract: A datacenter is configured to execute a method to improve multi-tenant security by isolating container applications or nano-service applications by implementing a set of system call separation functions (SCSFs) in a set of corresponding nano-services for each container application or nano-service application. The method includes receiving a request to initiate a container application or a nano-service application, determining a set of nano-services and SCSFs to service the container application or the nano-service application, packaging the set of nano-services and SCSFs to service the container application or the nano-service application, and sending the set of nano-services and SCSFs to be instantiated by the datacenter.

Abstract: A method and a computing device are provided for improving datacenter operation. The datacenter operation is improved by establishing differentiated communication protocol stack support as a set of nano-services. The nano-services are executed to service connections on a per application or server basis for the datacenter to reduce overhead caused by virtual machines or containers utilizing separate communication protocol stacks. The method includes receiving a request to for a server via a known network access type, from a known application type, by a known user, or a known policy, determining whether the request can be serviced by an existing nano-service for the server, and establishing a new nano-service with a differentiated communication protocol stack instance for the server, in response to the request not being serviced by the existing nano-service.

Abstract: A method is implemented by a network device in a network for monitoring a segment of the network without direct access to an internal configuration or state of the segment. The method includes receiving a request to perform a monitoring task on a monitoring zone within the network. The monitoring zone includes a subset of network devices of the network. The monitoring zone has an ingress data path that carries ingress traffic into the monitoring zone and an egress data path that carries egress traffic out of the monitoring zone. The method further includes configuring the network to mirror the ingress traffic or the egress traffic to a configurable probe in the network and configuring the configurable probe to perform the monitoring task on the monitoring zone, where the configurable probe is configured to perform the monitoring task based on analysis of the mirrored ingress traffic or the mirrored egress traffic.

Abstract: Exemplary methods include receiving requests comprising of monitoring zones (MZs), each MZ to be allocated a pair of probes in a network, wherein each MZ is associated with a rule identifying a condition for when its probes are to be updated, and wherein each probe in the network is associated with a rule identifying a condition of when it is updated. The methods include determining whether previously allocated pairs of probes in the network can serve as probes for one or more MZs in the requests, wherein a previously allocated pair of probes can serve as probes for a MZ if a rule associated with the MZ is similar to rules associated with the previously allocated pair of probes. The methods include for each MZ that can be served by a previously allocated pair of probes, sending information identifying the MZ and the previously allocated pair of probes.