Abstract: Disclosed herein are system, method, and computer program product embodiments for instantiating virtual network functions (VNFs). In some embodiments, a computer network infrastructure device comprises a purpose-built router (e.g., a packet routing and forwarding device) and a virtual machine host. The virtual machine host instantiates VNFs and identifies a first function to be executed on the data packet based on an attribute associated with the data packet. Moreover, the virtual machine host identifies a first VNF from the VNFs that are instantiated based on a first function type executed by the first VNF and the first function to be executed on the data packet. The virtual machine host coordinates the first VNF to execute a first function on the data packet. The first VNF outputs a resultant data packet in response to executing the first function on the data packet.

Abstract: Disclosed herein are systems and methods for reducing or mitigation alert fatigue from real-time alerts in cyber-physical systems or other types of edge computing systems are provided. In one or more examples, the edge computing system monitor can look for one or more patterns within received data that can indicate malicious activity or other conditions that may warrant a real-time or near-real time response from the operator. In one or more examples, a detection of any of the specified patterns in the streaming data can trigger an alert to the operator of the edge computing system. In one or more examples, the alerts can be suppressed until the number of alerts associated with a particular pattern crosses a pre-determined threshold. Additionally or alternatively, alerts can be suppressed based on a duration that the alerts have been generated. The suppression of alerts can be configured to reduce operator alert fatigue.

Abstract: Disclosed herein are systems and methods for reducing or mitigation alert fatigue from real-time alerts in cyber-physical systems or other types of edge computing systems are provided. In one or more examples, the edge computing system monitor can look for one or more patterns within received data that can indicate malicious activity or other conditions that may warrant a real-time or near-real time response from the operator. In one or more examples, a detection of any of the specified patterns in the streaming data can trigger an alert to the operator of the edge computing system. In one or more examples, the alerts can be suppressed until the number of alerts associated with a particular pattern crosses a pre-determined threshold. Additionally or alternatively, alerts can be suppressed based on a duration that the alerts have been generated. The suppression of alerts can be configured to reduce operator alert fatigue.

Abstract: Disclosed herein are system, method, and computer program product embodiments for instantiating virtual network functions (VNFs). In some embodiments, a computer network infrastructure device comprises a purpose-built router (e.g., a packet routing and forwarding device) and a virtual machine host. The virtual machine host instantiates VNFs and identifies a first function to be executed on the data packet based on an attribute associated with the data packet. Moreover, the virtual machine host identifies a first VNF from the VNFs that are instantiated based on a first function type executed by the first VNF and the first function to be executed on the data packet. The virtual machine host coordinates the first VNF to execute a first function on the data packet. The first VNF outputs a resultant data packet in response to executing the first function on the data packet.