Abstract: An enforcement mechanism on an operating system instance enforces a segmentation policy on a container. A configuration generation module executing in a host namespace of the operating system instance receives management instructions from a segmentation server for enforcing the segmentation policy on a container. The configuration generation module executes in the host namespace to configure a traffic control and monitoring module in a container namespace associated with the container. The traffic control and monitoring module in the container namespace controls and monitors communications to and from the container in accordance with its configuration. By executing a configuration generation module in the host namespace to configure traffic control and monitoring module in the container namespace, the enforcement mechanism beneficially enables robust and lightweight enforcement in a manner that is agnostic to different containerization protocols.

Abstract: A segmentation server configures enforcement of a segmentation policy by allocating enforcement of management instructions between network devices and hosts. The segmentation policy comprises rules that control communications between workloads. For a particular workload, the segmentation server generates management instructions for controlling communications to and from the particular workload in accordance with the rules. The segmentation server determines an allocation of management instructions between enforcement on a host on which the particular workload executes and enforcement on a network device upstream from the workload. The segmentation server sends configuration information to at least one of the host and the network device in accordance with the allocation to enable enforcement of the management instructions.

Abstract: The present invention relates to 4-substituted amidine derivatives of the general formula (I), wherein A1-A4, D, L, Q, R7, R7? and integer's v and w have the meanings as defined in description. The invention further relates to methods for their preparation and use of said compounds to fight undesired phytopathogenic microorganisms, and agents for said purpose, comprising said amidine derivatives, all according to the invention. This invention further relates to a method for controlling undesired phytopathogenic microorganisms by application of said 4-substituted amidine derivatives of general formula (I) to such undesired microorganisms and/or to their habitat, according to the invention.

Abstract: A sensor including an integrated circuit and a piezoelectric substrate is described. The piezoelectric substrate is adapted as an antenna of an integrated circuit. The antenna may be an RFID antenna and the integrated circuit may be and RFID integrated circuit.

Abstract: A segmentation server configures enforcement of a segmentation policy by allocating enforcement of management instructions between network devices and hosts. The segmentation policy comprises rules that control communications between workloads. For a particular workload, the segmentation server generates management instructions for controlling communications to and from the particular workload in accordance with the rules. The segmentation server determines an allocation of management instructions between enforcement on a host on which the particular workload executes and enforcement on a network device upstream from the workload. The segmentation server sends configuration information to at least one of the host and the network device in accordance with the allocation to enable enforcement of the management instructions.

Abstract: An enforcement module operating on a server or on a network midpoint device obtains a management instruction controlling communications of a target workload. The enforcement module configures a firewall of a network midpoint device upstream from the target workload to enforce the management instruction. The configuration mechanism may be dependent on the particular capabilities and characteristics of the network midpoint device.

Abstract: An enforcement mechanism on an operating system instance enforces a segmentation policy on a container. A configuration generation module executing in a host namespace of the operating system instance receives management instructions from a segmentation server for enforcing the segmentation policy on a container. The configuration generation module executes in the host namespace to configure a traffic control and monitoring module in a container namespace associated with the container. The traffic control and monitoring module in the container namespace controls and monitors communications to and from the container in accordance with its configuration. By executing a configuration generation module in the host namespace to configure traffic control and monitoring module in the container namespace, the enforcement mechanism beneficially enables robust and lightweight enforcement in a manner that is agnostic to different containerization protocols.

Abstract: Apparatus (300, 400) and method (600) for passive remote control are provided. The apparatus (300) includes at least two radio-frequency identification (RFID) tag devices (330_1, 330_2, 330_N, 430_1, 430_2) each operable to transmit a signal when activated and a first switch coupled to the at least two RFID tag devices (310_1, 310_2, 310_K, 410_1) and operable to activate the at least two RFID tag devices when the first switch is in a first switch state, said first switch being a first key identified by RFID tag information of the at least two RFID tag devices. Apparatus (110) and method (700) for receiving RFID signals are also provided.

Abstract: An enforcement mechanism on an operating system instance enforces a segmentation policy on a container. A configuration generation module executing in a host namespace of the operating system instance receives management instructions from a segmentation server for enforcing the segmentation policy on a container. The configuration generation module executes in the host namespace to configure a traffic control and monitoring module in a container namespace associated with the container. The traffic control and monitoring module in the container namespace controls and monitors communications to and from the container in accordance with its configuration. By executing a configuration generation module in the host namespace to configure traffic control and monitoring module in the container namespace, the enforcement mechanism beneficially enables robust and lightweight enforcement in a manner that is agnostic to different containerization protocols.

Abstract: An enforcement mechanism on an operating system instance enforces a segmentation policy on a container. A configuration generation module executing in a host namespace of the operating system instance receives management instructions from a segmentation server for enforcing the segmentation policy on a container. The configuration generation module executes in the host namespace to configure a traffic control and monitoring module in a container namespace associated with the container. The traffic control and monitoring module in the container namespace controls and monitors communications to and from the container in accordance with its configuration. By executing a configuration generation module in the host namespace to configure traffic control and monitoring module in the container namespace, the enforcement mechanism beneficially enables robust and lightweight enforcement in a manner that is agnostic to different containerization protocols.

Abstract: A method is described for dynamically determining availability of a computing resource. An application session is established, and an application session data matrix is generated including parameters specifying aspects of the application session, an application associated with the application session, and a computing resource on which the application session depends. A component signature block is derived based on the parameters of the application session data matrix. The component signature block identifies the computing resource on which the application session depends and a total number of sessions dependent on the computing resource. A metric signature block is generated based on one or more parameters of the application session data matrix and the component signature block. The metric signature block is classified according to one or more probability models. A computing resource availability rating for the computing resource is derived based on an output of the one or more probability models.

Abstract: Systems and methods in accordance with various embodiments of the invention enable quality based streaming. A content player in accordance with an embodiment of the invention includes: a processor; a network interface; and memory containing a content player application. The content player application can direct the processor to: receive quality metadata describing a plurality of streams, where: the plurality of streams are encoded at different maximum bitrates; each stream is divided into content segments; and the quality varies between content segments in each stream. Furthermore, the content player application directs the processor to measure available bandwidth; request content segments from the plurality of streams based upon the available network bandwidth and the quality metadata, where the requested content segments include content segments encoded at a maximum bitrate and having quality that is the lowest maximum bitrate that achieves a target quality level.

Abstract: Systems and methods in accordance with various embodiments of the invention enable quality based streaming. A content player in accordance with an embodiment of the invention includes: a processor; a network interface; and memory containing a content player application. The content player application can direct the processor to: receive quality metadata describing a plurality of streams, where: the plurality of streams are encoded at different maximum bitrates; each stream is divided into content segments; and the quality varies between content segments in each stream. Furthermore, the content player application directs the processor to measure available bandwidth; request content segments from the plurality of streams based upon the available network bandwidth and the quality metadata, where the requested content segments include content segments encoded at a maximum bitrate and having quality that is the lowest maximum bitrate that achieves a target quality level.

Abstract: A system selects a set of advertisement media associated with a product. A set of persistent advertisement media from the set of advertisement media is identified based on one or more tests. A Gaussian Bayesian (GB) network based on the set of advertisement media. A net persistence rate for each of the set of persistent advertisement media is determined based on the GB network. a competitor factor associated with another vendor of the product is computed based on one or more marketing parameters associated with the another vendor. A predicted sales (PS) value associated with each of the set of persistent advertisement media is determined. A persistent advertisement medium is selected in real time based on corresponding PS value. An advertisement is rendered on the selected persistent advertisement medium in real time for marketing the product.

Abstract: A method for monitoring physiological signal characteristics of a living subject is disclosed. A salient idea is to electromagnetically couple the antennas of respectively a networking device and a monitoring device, the networking device transmitting a wireless signal, the monitoring device receiving first and second signals from the electromagnetic coupling. The first and second signals include a reflection of the transmitted signal on a living subject as well as a part of the transmitted signal resulting from the antenna coupling. A self-interference cancellation processing is applied to the received first and second signals for extracting the reflected signal from the first signal prior to amplifying and mixing with the received second signal to monitor physiological signal characteristics of the living subject.

Abstract: A method for harvesting an energy from a power cord is disclosed. The method includes mounting two electrodes around the power cord. The electrodes have a first conductive part being partially cylindrical around an axis, and a plurality of spikes, originating from the first conductive part, directed towards the axis, and inserted in an insulating envelope of the power cord, so as to increase the capacitive coupling to the wires inside the power cord and to increase the amount of harvested energy by the two electrodes. A device such as for example a wireless RFID tag is advantageously powered by the energy harvested by the two electrodes.

Abstract: A method for harvesting an energy from a power cord is disclosed. A salient idea of the present principles is to adapt the antenna of a wireless tag device, so as to harvest an energy from a power cord and to power the wireless tag with the harvested energy. The disclosed principles propose to combine in a single antenna a classical antenna function of radio frequency signals reception to a new function of energy harvesting from a power cord. The harvested energy is used to power the wireless tag device or to boost the range performances of the wireless tag, through the powering of its communication circuitry.

Abstract: A computer-implemented database system, method, and computer program product are provided. the database system comprises a plurality of nodes, each node including a data storage device having memory and a server; and a database system controller coupled to each of the plurality of nodes and having a processor and software program code for directing the database system to perform the following function of defining, for a user, a node group including at least one of the plurality of nodes, upon which the user's data is to be stored in a user database; wherein the user database is defined in terms of time-partitioned tables residing on the nodes of the node group, and wherein each time-partitioned table is further defined in terms of shards of the user's data, the shards corresponding with respective ones of the time partitions.

Abstract: A computer-implemented method and system create computer-generated three-dimensional (3D) models in a broken state (broken view representation). To create a 3D model in a broken state, an area of the 3D model in an unbroken state is removed to create the 3D model in the broken state and a mapping between the 3D model in the unbroken state and the 3D model in a broken state is implemented to enable operations performed on the 3D model in the broken state to utilize data defining the 3D model in the unbroken state. The mapping maintains a relationship between data defining the 3D model in the unbroken state and data defining the 3D model in the broken state.

Abstract: Disclosed herein are technologies directed to discovering semantic similarities between images and text, which can include performing image search using a textual query, performing text search using an image as a query, and/or generating captions for images using a caption generator. A semantic similarity framework can include a caption generator and can be based on a deep multimodal similar model. The deep multimodal similarity model can receive sentences and determine the relevancy of the sentences based on similarity of text vectors generated for one or more sentences to an image vector generated for an image. The text vectors and the image vector can be mapped in a semantic space, and their relevance can be determined based at least in part on the mapping. The sentence associated with the text vector determined to be the most relevant can be output as a caption for the image.