Abstract: Systems, methods, and computer-readable media for evaluation of trustworthiness of network devices are proposed. In one aspect, a first network device can determine a first determine a first probability of a security compromise of a second network device based on visible indicators. The first network device can also determine a second probability of the security compromise of the second device based on invisible indicators. The first network device also determines a trust degradation score for the second network device and establishes, based on the trust degradation score, a specified type of communication session with the second network device.

Abstract: A method is provided to anonymize the media access control (MAC) address of a client device. The method involves generating a plurality of media access control (MAC) addresses for use by a client device in a network. Policies are defined that determine which one of the plurality of MAC addresses is to be used by the client device. The plurality of MAC addresses allocated for use by the client device are registered with a management entity in the network.

Abstract: In one embodiment, a network monitoring service trains, using a training dataset from one or more wireless networks, a machine learning model to output an optimized set of media access control (MAC) mode parameters for a wireless access point given an input set of network characteristics. The service receives a plurality of network characteristics associated with a particular wireless access point in a particular wireless network. The service determines, using the received network characteristics as input to the machine learning-based model, a set of MAC mode parameters for the particular wireless access point. The service controls the particular wireless access point to communicate with one or more clients in the particular wireless network based on the determined set of MAC mode parameters.

Abstract: In one embodiment, a system, apparatus, and method are described for requesting access authorization from an access network access point (AP) via an access network interface, generating at a processor a public-private key pair to be used to generate a cryptographically generated address (CGA) upon receiving the access authorization, sending a secure neighbor discovery (SeND)—neighbor solicitation (NS) to the AP via the access network interface after the public-private key pair has been generated, receiving a signed user location information (ULI) from the AP in response to the SeND-NS, and sending the signed ULI to one of a 3GPP mobility controller or an emergency service via a 3GPP network interface. Related systems, apparatuses, and methods are also described.

Abstract: In one embodiment, a method is performed. A device may receive a registration request from a user equipment (UE) device associated with a category. The device may receive a registration response from an access and mobility function (AMF). The registration response may comprise a group identifier associated with the category. The device may select resources from a resource pool based on the group identifier. The resource pool may be dedicated for use for emergency communications. The device may allocate the selected resources to the UE device.

Abstract: In one embodiment, a method includes determining a first node as a current termination node of a first multicast flow; determining whether a link between the first node and a downstream next-hop node has available bandwidth to accommodate the first multicast flow, where the downstream next-hop node is not currently associated with the first multicast flow; and transmitting the first multicast flow to the downstream next-hop node according to a determination that the link between the first node and a downstream next-hop node has available bandwidth to accommodate the first multicast flow. According to some implementations, the method is performed by a controller with one or more processors and non-transitory memory, where the controller is communicatively coupled to a plurality of network nodes in a network.

Abstract: In one embodiment, a network monitoring service trains, using a training dataset from one or more wireless networks, a machine learning model to output an optimized set of media access control (MAC) mode parameters for a wireless access point given an input set of network characteristics. The service receives a plurality of network characteristics associated with a particular wireless access point in a particular wireless network. The service determines, using the received network characteristics as input to the machine learning-based model, a set of MAC mode parameters for the particular wireless access point. The service controls the particular wireless access point to communicate with one or more clients in the particular wireless network based on the determined set of MAC mode parameters.

Abstract: In one embodiment, a method includes discovering at a network controller, a topology and link capacities for a network, the network controller in communication with a plurality of spine nodes and leaf nodes, the link capacities comprising capacities for links between the spine nodes and the leaf nodes, identifying at the network controller, a flow received from a source at one of the leaf nodes, selecting at the network controller, one of the spine nodes to receive the flow from the leaf node based, at least in part, on the link capacities, and programming the network to transmit the flow from the spine node to one of the leaf nodes in communication with a receiver requesting the flow. An apparatus and logic are also disclosed herein.

Abstract: In one embodiment, a system, apparatus, and method are described for requesting access authorization from an access network access point (AP) via an access network interface, generating at a processor a public-private key pair to be used to generate a cryptographically generated address (CGA) upon receiving the access authorization, sending a secure neighbor discovery (SeND)—neighbor solicitation (NS) to the AP via the access network interface after the public-private key pair has been generated, receiving a signed user location information (ULI) from the AP in response to the SeND-NS, and sending the signed ULI to one of a 3GPP mobility controller or an emergency service via a 3GPP network interface. Related systems, apparatuses, and methods are also described.

Abstract: In one embodiment, a device between a Controller Area Network (CAN)-based network and an Internet Protocol (IP)-based network receives a CAN message from a node in the CAN-based network. The CAN message comprises a CAN message identifier and a data field. The device determines an IP header based on the CAN message identifier and the CAN message. The device converts the data field of the CAN message into an IP message that includes the determined IP header. The device sends the IP message via the IP network to one or more eligible destinations for the IP message.

Abstract: In one embodiment, a method includes determining a first node as a current termination node of a first multicast flow; determining whether a link between the first node and a downstream next-hop node has available bandwidth to accommodate the first multicast flow, where the downstream next-hop node is not currently associated with the first multicast flow; and transmitting the first multicast flow to the downstream next-hop node according to a determination that the link between the first node and a downstream next-hop node has available bandwidth to accommodate the first multicast flow. According to some implementations, the method is performed by a controller with one or more processors and non-transitory memory, where the controller is communicatively coupled to a plurality of network nodes in a network.

Abstract: In one embodiment, a method includes discovering at a network controller, a topology and link capacities for a network, the network controller in communication with a plurality of spine nodes and leaf nodes, the link capacities comprising capacities for links between the spine nodes and the leaf nodes, identifying at the network controller, a flow received from a source at one of the leaf nodes, selecting at the network controller, one of the spine nodes to receive the flow from the leaf node based, at least in part, on the link capacities, and programming the network to transmit the flow from the spine node to one of the leaf nodes in communication with a receiver requesting the flow. An apparatus and logic are also disclosed herein.

Abstract: In one embodiment, a method of a kernel dumper module includes generating a dump file associated with a kernel when the kernel crashes, storing the dump file to a functional memory upon applying an overwrite protection to a core dump of the dump file, restarting the kernel through a warm reboot of the kernel such that the core dump is not erased from the functional memory, and transferring the core dump to a system file using the kernel.

Abstract: In one embodiment, a method of a kernel dumper module includes generating a dump file associated with a kernel when the kernel crashes, storing the dump file to a functional memory upon applying an overwrite protection to a core dump of the dump file, restarting the kernel through a warm reboot of the kernel such that the core dump is not erased from the functional memory, and transferring the core dump to a system file using the kernel.

Abstract: A lightweight messaging method and apparatus that includes creating a temporary receive data area, and if a receive operation is seen first, then creating an operational receive data area, and waiting for a corresponding send operation to fill the operational receive data area with sent data; and if the send operation is seen first, then filling the temporary receive data area with sent data, when the corresponding receive operation is seen, creating the operational receive data area, and moving the sent data from the temporary receive data area to the operational receive data area.

Abstract: A method and system utilizing a peer mapping system call, called by a first process, to map allocated shared memory into the address space of a second process. Code for implementing the system call can reside in a server which provides services to map allocated shared memory into all the processes having access to shared memory or the code can be located in a library linked to all the processes having access to shared memory.