Abstract: Examples provide an electronic device including at least one electronic processor configured to request first accessibility data associated with a first user interface (“UI”) displayed by a first device and including at least one of (a) information identifying one or more UI elements in the first UI or (b) information identifying one or more UI events in the first UI; train, based on at least the first accessibility data and an error state associated with the first device, an artificial intelligence (“AI”) model; request second accessibility data associated with a second UI displayed by a second device and including (a) information identifying one or more UI elements in the second UI or (b) information identifying one or more UI events in the second UI; and detect, based on at least the second accessibility data and the AI model, the error state on the second device.

Abstract: Examples provide an electronic device including at least one electronic processor configured to receive, via an accessibility application programming interface (“API”), first accessibility data associated with a first user interface (“UI”) displayed by a user device and including information identifying one or more UI elements and/or UI events in the first UI; identify, based on the first accessibility data, a first action performed by a user of the user device and defining a first set of operations; train, based on the first accessibility data and the first set of operations, an artificial intelligence (“AI”) model; receive, via the accessibility API, second accessibility data associated with a second UI displayed by the user device; determine, based on the second accessibility data and the AI model, a recommended action defining a second set of operations; and output a command to perform the recommended action on the user device.

Abstract: A segmentation server configures and distributes rules for enforcing a segmentation policy that includes one or more virtual patches. The rules including the virtual patches are enforced by distributed enforcement modules that may execute on host devices or on network devices upstream from the host devices. An enforcement module enforces the rules using traffic filters that filter traffic based on network layer data. To implement a virtual patch, the traffic filters are configured to redirect traffic to or from an application being patched to a transparent application proxy. The transparent application proxy implements an application layer filter that filters traffic based on application layer data to block specific types of traffic associated with a vulnerability addressed by the virtual patch.

Abstract: A segmentation server configures and distributes rules for enforcing a segmentation policy that includes one or more virtual patches. The rules including the virtual patches are enforced by distributed enforcement modules that may execute on host devices or on network devices upstream from the host devices. An enforcement module enforces the rules using traffic filters that filter traffic based on network layer data. To implement a virtual patch, the traffic filters are configured to redirect traffic to or from an application being patched to a transparent application proxy. The transparent application proxy implements an application layer filter that filters traffic based on application layer data to block specific types of traffic associated with a vulnerability addressed by the virtual patch.

Abstract: A virtual network is overlaid upon physical networks. The virtual network is a layer-2 network that expands an organization's LAN using virtual MAC addresses. A VN device driver shim intercepts LAN packets and their virtual MAC and IP addresses and encapsulates them with physical packets. As new nodes are created, a VN switch table is expanded so that all nodes on the virtual network can reach the new node. A copy of the VN switch table is stored on each node by a virtual network management daemon on the node. A VN configuration controller in a central server updates the VN switch tables. Organizations can expand their virtual network as nodes are created at remote cloud computing providers without action by the staff at the cloud computing provider. Hybrid cloud virtual networks include on-premises physical and virtual-machine nodes, and off-premises guest nodes and instances.

Abstract: In one embodiment, a device (e.g., a sync daemon) connects to peer nodes in a communication network. Each of the peer nodes has a switch that supports a flow table and an action table. The device facilitates a connection between a switch of a first peer node and a switch of a second peer node, and maintains the flow table and the action table of each of the peer nodes, such that the flow tables and the action tables are kept in synchronization with one another across each of the peer nodes via a distributed hash table.

Abstract: A virtual network is overlaid upon physical networks. The virtual network is a layer-2 network that expands an organization's LAN using virtual MAC addresses. A VN device driver shim intercepts LAN packets and their virtual MAC and IP addresses and encapsulates them with physical packets. As new nodes are created, a VN switch table is expanded so that all nodes on the virtual network can reach the new node. A copy of the VN switch table is stored on each node by a virtual network management daemon on the node. A VN configuration controller in a central server updates the VN switch tables. Organizations can expand their virtual network as nodes are created at remote cloud computing providers without action by the staff at the cloud computing provider. Hybrid cloud virtual networks include on-premises physical and virtual-machine nodes, and off-premises guest nodes and instances.

Abstract: A layer-3 virtual router connects two or more virtual networks. Virtual networks are overlaid upon physical networks. Each virtual network (VN) is a layer-2 network that appears to expand an organization's LAN using virtual MAC addresses. The network stack forms a virtual-network packet with a virtual gateway MAC address of the virtual router to reach a remote virtual network. A VN device driver shim intercepts packets and their virtual MAC and IP addresses and encapsulates them with physical packets sent over the Internet. A VN switch table is expanded to include entries for nodes on the remote virtual network so that all nodes on both virtual networks are accessible. A copy of the VN switch table is stored on each node by a virtual network management daemon on the node. A Time-To-Live field in the virtual-network packet is decremented for each virtual hop and a checksum recalculated.

Abstract: A virtual network is overlaid upon physical networks. The virtual network is a layer-2 network that appears to expand an organization's LAN using virtual MAC addresses. A VN device driver shim intercepts LAN packets and their virtual MAC and IP addresses and encapsulates them with physical packets that can be routed over the Internet. As new nodes are created, a VN switch table is expanded so that all nodes on the virtual network can reach the new node. A copy of the VN switch table is stored on each node by a virtual network management daemon on the node. A VN configuration controller in a central server updates the VN switch tables. Organizations can expand their virtual network as nodes are created at remote cloud computing providers without action by the staff at the cloud computing provider. Hybrid cloud virtual networks include on-premises physical and virtual-machine nodes, and off-premises guest nodes and instances.

Abstract: In one embodiment, a device (e.g., a sync daemon) connects to peer nodes in a communication network. Each of the peer nodes has a switch that supports a flow table and an action table. The device facilitates a connection between a switch of a first peer node and a switch of a second peer node, and maintains the flow table and the action table of each of the peer nodes, such that the flow tables and the action tables are kept in synchronization with one another across each of the peer nodes via a distributed hash table.

Abstract: A layer-3 virtual router connects two or more virtual networks. Virtual networks are overlaid upon physical networks. Each virtual network (VN) is a layer-2 network that appears to expand an organization's LAN using virtual MAC addresses. The network stack forms a virtual-network packet with a virtual gateway MAC address of the virtual router to reach a remote virtual network. A VN device driver shim intercepts packets and their virtual MAC and IP addresses and encapsulates them with physical packets sent over the Internet. A VN switch table is expanded to include entries for nodes on the remote virtual network so that all nodes on both virtual networks are accessible. A copy of the VN switch table is stored on each node by a virtual network management daemon on the node. A Time-To-Live field in the virtual-network packet is decremented for each virtual hop and a checksum recalculated.

Abstract: A layer-3 virtual router connects two or more virtual networks. Virtual networks are overlaid upon physical networks. Each virtual network (VN) is a layer-2 network that appears to expand an organization's LAN using virtual MAC addresses. The network stack forms a virtual-network packet with a virtual gateway MAC address of the virtual router to reach a remote virtual network. A VN device driver shim intercepts packets and their virtual MAC and IP addresses and encapsulates them with physical packets sent over the Internet. A VN switch table is expanded to include entries for nodes on the remote virtual network so that all nodes on both virtual networks are accessible. A copy of the VN switch table is stored on each node by a virtual network management daemon on the node. A Time-To-Live field in the virtual-network packet is decremented for each virtual hop and a checksum recalculated.