Abstract: Systems and methods are provided for monitoring one or more connection parameters for a local router. The local router is connected to a cellular network and a mobile phone. If one or more connection parameters satisfy the connection threshold, the local router or the mobile device switch from communicating with the network using a first communication technology to communicate with the network using a second communication technology.

Abstract: The present invention relates to a process for producing a recombinant protein in a cell culture medium. comprising culturing mammalian cells expressing the protein of interest in a production medium at suitable conditions: and supplementing the production medium with feed components in such quantity that the residual carbon to nitrogen ratio is controlled. The present invention further relates to a process for producing a recombinant protein in a cell culture medium, wherein recombinant protein of interest has increased acidic variants and/or acidic variants and reduced basic variants.

Abstract: Techniques and architecture are described for providing a service, e.g., a security service such as a firewall, across different virtual networks/VRFs/VPN IDs. The techniques and architecture provide modifications in enterprise computing fabrics by modifying pull-based overlay protocols such as, for example, locator/identifier separation protocol (LISP), border gateway protocol ethernet virtual private network (BGP EVPN), etc. A map request carries additional information to instruct a map-server that even though mapping (destination prefix and firewall service RLOC for the destination) is known within the map-server's own virtual network/VRF for firewall service insertion, the map-server still should do a lookup across virtual networks/VRFs and discover the final destination's DGT (destination group tag) and include that in the map reply.

Abstract: Disclosed herein is a material for use in sorbent-based dialysis, the material comprising: acidic and/or neutral cation exchange particles; alkaline anion exchange particles; and one or more of an alkali metal carbonate, a water insoluble alkaline earth metal carbonate, and a water insoluble polymeric ammonium carbonate. Also disclosed herein are uses of said material and its preparation.

Abstract: Automated techniques for converting network devices from a Layer 2 (L2) network into a Layer 3 (L3) network in a hierarchical manner are described herein. The network devices may be configured to boot such that their ports are in an initialization mode in which the ports are unable to transmit locally generated DHCP packets. When a network device detects that a neighbor (or “peer”) device has acquired an IP address or has been configured by a network controller, then the port on which the neighbor device is detected can then be transitioned from the initialization mode into a forwarding mode. In the forwarding mode, the port can be used to transmit packets to obtain an IP address. Thus, the network devices are converted from an L2 device to an L3 device in a hierarchical order such that upstream devices are discovered and converted into L3 devices before downstream devices.

Abstract: Techniques and architecture are described for providing a service, e.g., a security service such as a firewall, across different virtual networks/VRFs/VPN IDs. The techniques and architecture provide modifications in enterprise computing fabrics by modifying pull-based overlay protocols such as, for example, locator/identifier separation protocol (LISP), border gateway protocol ethernet virtual private network (BGP EVPN), etc. A map request carries additional information to instruct a map-server that even though mapping (destination prefix and firewall service RLOC for the destination) is known within the map-server's own virtual network/VRF for firewall service insertion, the map-server still should do a lookup across virtual networks/VRFs and discover the final destination's DGT (destination group tag) and include that in the map reply.

Abstract: Techniques associated with security orchestration for on-premises infrastructure are disclosed. A policy definition associated with on-premises infrastructure that defines a desired state can be received. From the policy definition, a target of the on-premises infrastructure can be identified. A management service associated with the target can be determined, and a plugin for the management service can be identified. The policy definition can be communicated to the management service through the plugin, and the management service sets the state of the target to the desired state. The state of the target can be monitored. If the state differs from the desired state, a remediation workflow is initiated to set the state to the desired state specified by the policy definition.

Abstract: In one embodiment, a method by a first edge router includes receiving a request control message from a second edge router requesting a first identifier of a first group associated with a first host having a first Internet Protocol (IP) address, determining the first identifier of the first group based on the first IP address, sending a response control message to the second edge router including the first identifier of the first group, receiving a data packet destined to the first host from the second edge router, determining that a second group is a source group and the first group is a destination group of the data packet, applying one or more policies associated with a combination of the source group and the destination group to the data packet, and causing the data packet to be routed to the first host within the first site.

Abstract: A method for detecting spoofing comprises monitoring signals from GNSS and SBAS satellites with a GNSS receiver; obtaining current time and orbital parameters from the receiver, based on real-time signals from the satellites; computing orbital positions based on the current time and orbital parameters; retrieving past orbital parameters; calculating predicted orbital positions based on the orbital parameters with respect to current time and the past orbital parameters; computing current orbital positions based on current satellite signals; determining a first distance value between two or more of the satellites based on the predicted orbital positions; determining a second distance value between two or more of the satellites based on the current orbital positions; comparing the first and second distance values to obtain a discriminator value; determining whether the discriminator value is greater than a threshold level, and outputting a spoofing alert when the discriminator value is greater than the threshold

Abstract: Systems and techniques that facilitate Clifford circuit synthesis are provided. For example, one or more embodiments described herein can comprise a system, which can comprise a memory that can store computer executable components. The system can also comprise a processor, operably coupled to the memory that can execute the computer executable components stored in memory. The computer executable components can comprise a receiver component that receives a quantum circuit design comprising a Clifford circuit representation and one or more circuit restrictions, and a machine learning component that generates, using a machine learning model, a replacement circuit based on the one or more circuit restrictions and the Clifford circuit representation, and generates a modified quantum circuit design by replacing the Clifford circuit representation with the replacement circuit.

Abstract: Methods are presented for selecting a subject for treatment with a 2-arylbenzimidazole compound of Formula I, or salt, hydrate, deuterated analog, or fluorinated analog thereof, based on the inflammatory phenotype of circulating myeloid cells. Methods are also provided for treating, slowing the progression of, and delaying the onset of neurodegenerative disease in a subject who has not been diagnosed with a neurodegenerative disease but is at risk of developing a neurodegenerative disease or cognitive impairment, comprising selecting the subject for treatment based on the inflammatory phenotype of circulating myeloid cells and administering a therapeutically effective amount of compound of Formula I or salt, hydrate, deuterated analog, or fluorinated analog thereof.

Abstract: An example system for parsing and transforming input data that includes processing circuitry and memory, the memory configured to store the input data. The processing circuitry is configured to determine a first delimiter in the input data. The processing circuitry is configured to determine a plurality of second delimiter hypotheses and parse the input data according to the first delimiter and the plurality of second delimiter hypotheses to generate a plurality of tables that are each associated with a respective one of the plurality of second delimiter hypotheses. The processing circuitry is configured to determine a respective consistency score for each of the plurality of tables and select a table from among the plurality of tables based on the respective consistency score associated with the table. The processing circuitry is configured to format the input data based on the selected table to generate formatted data and output the formatted data.

Abstract: Systems, methods, and computer-readable storage media are provided for provisioning a common subnet across a number of subscribers and their respective virtual networks using dynamically generated network policies that provide isolation between the subscribers. The dynamic generation of the network policies is performed when a host (e.g. client) is detected (via a switch) as the host joins the computing network via virtual networks. This ability to configure a common subnet for all the subscriber virtual networks allows these subscribers to more easily access external shared services coming from a headquarter site while keeping the separation and segmentation of multiple subscriber virtual networks within a single subnet. This allows the Enterprise fabric to be more simple and convenient to deploy without making security compromises.

Abstract: In one embodiment, a method by an edge router configured to operate at a first site of a software-defined wide-area network includes receiving a data packet from a first host located in the first site, where the data packet is destined to a second host located in a second site, determining that an identifier of a second group to which the second host belongs is not available at the edge router, sending a request for an identifier of the second group to a network apparatus, where the request may comprise an address of the second host, receiving a response comprising the identifier of the second group from the network apparatus, determining that the second group is a destination group, applying one or more policies associated with the destination group to the data packet, and causing the data packet to be routed to the second host.

Abstract: This disclosure provides systems, methods, and devices for wireless communication that support enhanced management of recovery timers in a wireless communication system. In a first aspect, a method of wireless communication includes an apparatus determining whether a recovery timer is currently running, the apparatus being configured for multi-subscriber identity module (SIM) communications including a first subscription and a second subscription. The apparatus is further configured to tune away from the first subscription to the second subscription when the recovery timer is determined not to be currently running, and determine to forego tuning away from the first subscription to the second subscription when the recovery timer is determined to be currently running. Other aspects and features are also claimed and described.

Abstract: Techniques are described herein for service chaining in fabric networks such that hardware resources can be preserved without service nodes needing additional capabilities. The techniques may include storing a first configuration associated with a first VRF instance of a service forwarding node that is connected to a first service of a service chain sequence. The first configuration may indicate an identifier and a type associated with a second service of the service chain sequence where traffic is to be sent after the first service. Additionally, the techniques may also include storing a second configuration associated with a second VRF instance of the service forwarding node that is connected to the second service. The second configuration may indicate that the second service is a last service of the service chain sequence. When traffic is received at the service forwarding node, the service forwarding node can determine whether the traffic is pre-service traffic or post-service traffic.

Abstract: Various embodiments of the present disclosure provide machine learning techniques for transforming disparate, third-party datasets to canonical representations. The techniques include generating, using a machine learning prediction model, a canonical representation for an input dataset. The machine learning prediction model is previously trained using permutative input embeddings for a training dataset based on canonical data entity features, such that each permutative input embedding corresponds to a different sequence of the canonical data entity features. The permutative input embeddings are leveraged to generate a latent representation for the training dataset. The latent representation is combined with a canonical data map to generate an alignment vector, which is refined to generate an output vector for the input dataset. The machine learning prediction model is trained using a model loss generated based on a comparison of the output vector with a corresponding labeled vector.

Abstract: Techniques for scalable virtualization of an Input/Output (I/O) device are described. An electronic device composes a virtual device comprising one or more assignable interface (AI) instances of a plurality of AI instances of a hosting function exposed by the I/O device. The electronic device emulates device resources of the I/O device via the virtual device. The electronic device intercepts a request from the guest pertaining to the virtual device, and determines whether the request from the guest is a fast-path operation to be passed directly to one of the one or more AI instances of the I/O device or a slow-path operation that is to be at least partially serviced via software executed by the electronic device. For a slow-path operation, the electronic device services the request at least partially via the software executed by the electronic device.

Abstract: A method for artificial intelligence software to manage and optimize energy consumption across a vertical farm and a greenhouse, comprising: a grid of solar panels that provide solar power, a solar battery and sensors throughout the vertical farm; wherein the greenhouse can be heated or cooled; wherein heating and cooling is managed per type of plant and stage of growth; wherein there is a combined cycle sensor, instrumentation; wherein data from both the vertical farm and the greenhouse is fed into the combined cycle sensor and instrumentation; wherein there is an outdoor light measurement sensor that measures and estimates the conditions of solar power in the solar grid, and sends data to artificial intelligence software; wherein the artificial intelligence software determines how much light various plants in the hydroponic greenhouse needs in order for those plants to maximize the yield from those plants.

Abstract: Techniques for propagating security group tag mapping between external interconnected sites that are not capable of carrying the SGT mappings. A system is disclosed that includes operations of subscribing at a first border of a first site, by a control plane, a first SGT mapping associated with a first data packet at the first site for storing the SGT mapping of the first data packet at the control plane. Then transmitting, the first data packet from the first border of the first site to a second border of the second site without attaching the first SGT mapping with the first data packet. Further, in response to a determination by the control plane that the first data packet has lost the associated first SGT mapping at the second border, identifying the SGT mapping with the first data packet at the second border to be re-associated with the first data packet.