Abstract: A method for managing a wireless connection of an Unmanned Aerial Vehicle (UAV) is described herein. The method may include detecting a handover condition for the UAV within a wireless network, wherein the UAV is connected to a source cell in the wireless network when the handover condition is detected; determining, in response to detecting the handover condition, a target cell in the wireless network based on a flight path of the UAV; and initiating a handover of the UAV from the source cell to the target cell.

Abstract: A method for controlling an Unmanned Aerial Vehicle (UAV) is described. The method includes receiving an enhanced flight plan, wherein the enhanced flight plan includes one or more predefined points and each of the predefined points is associated with a set of conditions and a set of locations; storing the one or more predefined points in the UAV; flying the UAV according to the enhanced flight plan; detecting, by the UAV, a condition associated with a predefined point in the one or more predefined points stored in the UAV; and adjusting, autonomously by the UAV and in response to detecting the condition, a flight of the UAV using a set of locations associated with the predefined point and associated with the detected condition.

Abstract: A method for managing a wireless connection of an Unmanned Aerial Vehicle (UAV) is described herein. In one embodiment, the method comprises receiving flight information describing a flight path for the UAV; determining a set of network resources for the UAV based on the flight information; and reserving the set of network resources by a first network cell and a second network cell of a wireless network based on the flight information.

Abstract: A method for managing an unmanned aerial vehicle (UAV) is described. The method may include receiving flight plan information describing a flight path of the UAV; generating one or more cell lists based on the flight plan information; and transmitting the one or more cell lists to a source cell in a wireless network in which the UAV is currently operating, wherein the one or more cell lists are used in a handover procedure between the source cell that the UAV is currently connected to and a target cell that the UAV will connect to after completing the handover procedure.

Abstract: A method for managing an Unmanned Aerial Vehicle (UAV) is described. The method includes receiving a flight plan that describes a proposed flight mission of the UAV in an airspace; adding one or more predefined points to the flight plan to create an enhanced flight plan, wherein each of the predefined points is associated with a set of conditions and a set of locations; and transmitting the enhanced flight plan to the UAV for storage of the predefined points on the UAV while the UAV carries out the proposed flight mission.

Abstract: Broadcasting geolocation information of an Unmanned Aerial Vehicle (UAV) from the UAV by determining current geolocation of the UAV by communicating with a geolocation service and utilizing the geolocation service to geolocate the UAV. Then the UAV prepares a radio frame that includes geolocation information identifying the current geolocation of the UAV and other information associated with the UAV using a radio protocol of one of a 3rd Generation Partnership Project (3GPP) radio protocol, a WiFi radio protocol, a wireless personal area network protocol and a low-power wide-area network protocol and transmits the radio frame to broadcast the current geolocation of the UAV.

Abstract: A method is implemented by a network device communicatively coupled to a datacenter to detect a presence of unauthorized software and hardware in the datacenter. The method includes initiating deployment of a virtual agent on a node in the datacenter, where the virtual agent is to perform a security scan of the node and store results of the security scan in a memory allocated to the virtual agent at the node, and where the results of the security scan are to be encrypted using a data encryption key. The method further includes initiating migration of the virtual agent to a preconfigured location, where the results of the security scan are to be extracted from the virtual agent and decrypted at the preconfigured location.

Abstract: Exemplary methods for marking packets include in response to receiving a packet, determining whether the packet has been classified, and in response to determining the packet has not been classified, classifying the packet to determine a class to which the packet belongs, wherein the class identifies a set of zero or more markers that are to be included as part of packets belonging to the class. The methods include marking the packet with a first marker selected from the set of one or more markers, and forwarding the marked packet. Exemplary methods for processing markers include in response to receiving a packet, determining whether the packet has been marked with a marker, and in response to determining the packet has been marked with the first marker, performing a set of one or more operations required by the first marker.

Abstract: A method implemented by a computing device to optimize resource usage of service function chains (SFCs) in a network using machine learning. The method includes obtaining, from an autoscale machine learning (ML) system associated with a virtual network function (vNF), a suggested adjustment to an amount of resources provisioned for the vNF. The autoscale ML system is trained online using machine learning to predict an amount of resources to be utilized by the vNF. The autoscale ML system is configured to receive as input an amount of resources currently utilized by the vNF and an amount of resources currently available to the vNF, determine using machine learning the suggested adjustment to the amount of resources provisioned for the vNF based on the input, and output the suggested adjustment. The method further includes providing the suggested adjustment to a resource re-allocator component.

Abstract: A method and a computing device are provided for improving datacenter operation. The datacenter operation is improved by establishing differentiated communication protocol stack support as a set of nano-services. The nano-services are executed to service connections on a per application or server basis for the datacenter to reduce overhead caused by virtual machines or containers utilizing separate communication protocol stacks. The method includes receiving a request to for a server via a known network access type, from a known application type, by a known user, or a known policy, determining whether the request can be serviced by an existing nano-service for the server, and establishing a new nano-service with a differentiated communication protocol stack instance for the server, in response to the request not being serviced by the existing nano-service.

Abstract: A method is executed by a computing device to receive a request for a server via a known network access type, from a known application type, by a known user, or a known policy, instantiate a new unikernel with a differentiated communication protocol stack instance, in response to determining the request is not being serviced by a previously instantiated unikernel, and service the request by a previously instantiated unikernel, in response to determining the previously instantiated unikernel is available, where the new unikernel and the previously instantiated unikernel are separate from an operating system of the computing device.

Abstract: A method is implemented by a network device communicatively coupled to a datacenter to detect a presence of unauthorized software and hardware in the datacenter. The method includes initiating deployment of a virtual agent on a node in the datacenter, where the virtual agent is to perform a security scan of the node and store results of the security scan in a memory allocated to the virtual agent at the node, and where the results of the security scan are to be encrypted using a data encryption key. The method further includes initiating migration of the virtual agent to a preconfigured location, where the results of the security scan are to be extracted from the virtual agent and decrypted at the preconfigured location.

Abstract: A method and system to improve datacenter security by configuring a security layer as a set of nano-services that are executed to service a single tenant of the datacenter such that the nano-service protects the single tenant from other entities in the datacenter and the nano-service being compromised does not compromise the security of other tenants of the datacenter. The method includes receiving a request to instantiate a virtual resource for a tenant, generating a nano-service to implement at least one security layer function for the virtual resource, and connecting the nano-service to the virtual resource and a virtual bridge in the datacenter to enable communication between the virtual resource (vR) and a network of the datacenter with the security layer function processing traffic between the virtual resource and the virtual bridge. The nano-service can be immutable once it begins execution. The security layer function can be an L2 or L3 function.

Abstract: A method is implemented by a network device for determining parameter values for a base station of a cellular network. The base station operates in a wireless band that is shared with one or more wireless access points. The parameter values are determined to optimize network performance while ensuring fair coexistence between the base station and the one or more wireless access points. The method includes obtaining proximity information for the one or more wireless access points relative to the base station, obtaining activity information for the one or more wireless access points, and determining parameter values for the base station based on the proximity information and the activity information.

Abstract: A network device implements a method for providing a service chain in a network by instantiating services on demand using a lightning module. The lightning module provides the services as applications executed by a unikernel where the unikernel is supported by a hypervisor. The method further includes receiving authentication, administration and accounting (AAA) service authentication of a user by the lightning module, instantiating a special unikernel to monitor a session for packets from the user, and instantiating service chain unikernels identified in at least one unikernel configuration file, in response to receiving a packet from the user.

Abstract: A system and method for steering traffic through a set of services is provided. A service path or chain is assigned to a received packet based on a classification of the packet. A position and/or a direction of the traffic in the service path can be determined based on the previous service performed on the traffic. A next destination for the traffic can be assigned in accordance with the assigned service chain and determined position and direction information.

Abstract: A method is implemented by a computing device to determine a root cause of a performance issue in a software defined networking (SDN) network using flow statistics maintained by hosts in the network. The method includes receiving a request to perform a root cause analysis (RCA) for a first flow in the network that is experiencing a performance issue, obtaining flow path information for flows in the network, and obtaining flow statistics for the flows in the network, where the flow statistics are end-to-end flow statistics maintained by one or more hosts in the network. The method further includes executing an RCA algorithm for the first flow, where the RCA algorithm determines a root cause of a performance issue experienced by the first flow based on the flow path information and the flow statistics.

Abstract: Methods implemented in an electronic device are disclosed for checkpoint and rollback recovery in a SDN system. The method utilizes message identifiers to indicate an order of consistent states of forwarding tables of a plurality of network elements of the SDN system. The SDN controller of the SDN system receives a request to recover the network to a previous state, and identifies a consistent state of forwarding table for each of the plurality of network elements utilizing the message identifiers associated the consistent states, where the identified consistent states represent the previous state of the network without the identified consistent states being captured at the same time at the plurality of network elements. The SDN controller indicates the identified consistent state for each of the plurality of the network elements to a corresponding network element, where the corresponding network element makes its forwarding table consistent with the identified consistent state.

Abstract: A method and apparatus for an enhanced proxy device are described. Upon receipt of a first packet with a header including a set of header fields, a proxy device stores a subset from the set of header fields with an identification of the first packet, wherein the identification of the first packet is based on a portion of the packet; and transmits the packet without the subset of the header fields to be processed at the processing device.

Abstract: A datacenter is configured to execute a method to improve multi-tenant security by isolating container applications or nano-service applications by implementing a set of system call separation functions (SCSFs) in a set of corresponding nano-services for each container application or nano-service application. The method includes receiving a request to initiate a container application or a nano-service application, determining a set of nano-services and SCSFs to service the container application or the nano-service application, packaging the set of nano-services and SCSFs to service the container application or the nano-service application, and sending the set of nano-services and SCSFs to be instantiated by the datacenter.