Abstract: A native cloud-based VM in a cloud computing environment of choice is live-mounted without requiring nesting techniques. All operating system data needed to live-mount the VM is accessed over ISCSI. The disclosed technology: supports both Windows and Unix-like (e.g., Linux) operating systems; handles any number of partitions of the root file system without repeated mounting, exporting, and unmounting; and uses only internet protocols (e.g., HTTP, (SCSI) to live-mount the VM. The live-mounted VM gains access to a variety of secondary copies, e.g., made with file-level techniques or with block-level techniques, made within or outside the public cloud computing environment, made from other VMs having the same or a different hypervisor than the public cloud computing environment, and/or made from non-virtualized sources. Access to snapshots as a data source for the live-mounted VM is also disclosed. Thus, a streamlined and source-agnostic technology is disclosed for live-mounting VMs in a public cloud.

Abstract: An integrated circuit (IC) includes one or more active transistors and multiple series-coupled dummy transistors. The dummy transistors are coupled between two active transistors and/or at the ends of each active transistor. When the dummy transistors are coupled between two active transistors, apart from two conductive regions that are coupled to two active transistors, each remaining conductive region of the dummy transistors is maintained in a floating state to control a leakage current between the two active transistors. Similarly, when the dummy transistors are coupled at an end of one active transistor, apart from one conductive region that is coupled to the active transistor, each remaining conductive region of the dummy transistors is maintained in the floating state to control a leakage current between the active transistor and the dummy transistors.

Abstract: A method including collating data from a plurality of data sources into a first data repository; identifying, using a machine-learning model, class clusters and relationship clusters of the collated data in the first data repository; generating a domain-specific semantic model as a graph-structured data model based on the identified class clusters and relationship clusters; generating a data object model using the domain-specific semantic model and the collated data in the first data repository; creating a first domain-specific knowledge graph by associating the data object model with the domain-specific semantic model; creating a cross-domain analytics knowledge graph for deriving insights involving cross-domain analytics by merging the first domain-specific knowledge graph with a second domain-specific knowledge graph created from a second data repository; and deriving insights corresponding to performance of one or more of an asset or a process in a facility based on utilization of the cross-domain analyti

Abstract: A thermal management system for a gas turbine engine includes an oil tank, a pump in fluid communication with the oil tank configured to generate a flow of oil from the oil tank, at least one heat exchanger downstream of the oil tank, and one or more thermal loads downstream of the at least one heat exchanger. The oil tank is formed from a solid-solid phase change material.

Abstract: This technology enables directed broadcasts in network fabrics. A control plane node is configured to resolve directed broadcast addresses by mapping the directed broadcast address to a subnet address. A fabric border node receives a directed broadcast, extracts a destination address, and transmits a request to the control plane node to resolve the destination address. The control plane node retrieves the stored mapping and generates a map reply with a multicast destination. The fabric border node encapsulates and forwards the directed broadcast to fabric edge nodes, which decapsulate the directed broadcast and deliver a data set from the directed broadcast to appropriate end point devices. Each fabric edge node may be enabled to determine if the fabric edge node may be connected to a silent host and, based on that determination, request the fabric border node to be added to the multicast destination to receive the directed broadcast.

Abstract: Live and legitimate user traffic is used with in depth knowledge of the business logic for an API specification to perform security testing on a set of APIs. The present system intercepts and analyzes application program interface (API) traffic, identifies user session data, and identifies traffic suitable to duplicate. The identified traffic is duplicated and modified by addition of malicious code. The modified code is then sent to its intended API destination, where it is processed as normal. The resulting response and other traffic as well as the API system and optionally other systems, such as datastore systems, are analyzed to determine if the malicious code resulted in a valid attack. Results from the modified code attack attempts are reported to a user.

Abstract: A system for configuring network access in a control and user plane separation architecture includes at least one processor and at least one memory storing instructions that, when executed by the processor, cause the system to send, by a session management function (SMF) to a first user plane function (UPF), a first packet forwarding control protocol (PFCP) message including an indication of a first tunnel internet protocol (IP) address and a designated state for the first UPF and send, by the SMF to a second UPF, a second PFCP message including the indication of the first tunnel IP address and a designated state for the second UPF, the designated state for the second UPF being standby and the designated state for the first UPF being active.

Abstract: A system and method for regulatory compliance management are disclosed. The method includes receiving, by the at least one processor, at least one regulatory document from at least one regulatory source. Further, the method includes analyzing, by the at least one processor using a trained model, the at least one regulatory document. Further, the method includes drafting, by the at least one processor, an obligation for at least one entity based on the analysis of the at least one regulatory document. Further, the method includes mapping, by the at least one processor, an information in the obligation to at least one of a set of internal procedures and policies of the at least one entity. Further, the method includes updating, by the at least one processor, the internal procedures and policies of the at least one entity to maintain a legal compliance with the obligation.

Abstract: Enhancing data replication performance by preserving fastcopy-overwrite optimization for backups cloned across namespace subdivisions in a deduplication filesystem. A process keeps a key value pair for each of the files that are being cloned from the original namespace to a subcopy namespace. The key is the file handle of the file being cloned in the original namespace and the value is the handle of the cloned file in the subcopy namespace. When a subsequent generation backup of the same asset is cloned the basefile target file relationship is transferred as is to the new file in the subcopy namespace. This maintains the basefile to target file relationship after cloning to realize fastcopy-overwrite optimization benefits for the backup to the subcopy namespace.

Abstract: Basic Service Set (BSS) resource reservation may be provided. BSS resource reservation may include determining a time window for a to accommodate a transmission of a target Station (STA) in a BSS, wherein the BSS further comprises one or more other STAs. An AP may then transmit a reservation scheduling frame, to claim access of a channel, inform the target STA of the time window, and reserve the channel for a duration defined by the time window.

Abstract: A method for providing access to objects associated with a particular client in a cloud storage system is disclosed. The method includes the steps of establishing a connection with a user, providing a client namespace associated with the client to the user, where the client namespace represents objects stored on the cloud storage system and objects stored on a private storage system apart from the cloud storage system, receiving a request from the user to access an object stored on the private storage system, and providing information to the user to facilitate access to the object stored on the private storage system by said user. Other systems and methods are also disclosed. Important advantages of the present invention are facilitated by separating the logic for user access (control plane) from the actual storage (Storage plane). Private file system access can still be managed from the cloud, while keeping the client data private.

Abstract: Various embodiments provide block failure protection for a memory sub-system that supports zones, such a memory sub-system that uses a RAIN (redundant array of independent NAND-type flash memory devices) technique for data error-correction. For some embodiments, non-parity zones of a memory sub-system that are filling up at a similar rate are matched together, a parity is generated for stored data from across the matching zones, and the generated parity is stored in a parity zone of the memory device.

Abstract: Various mounting systems for mounting heat sink apparatus to bare die processors are disclosed. The mounting systems include an upper plate, which may include a heat transfer portion, positioned in proximity to the upper surface of bare die processors to provide heat conduction away from the processors. The disclosed mounting systems secure the upper plate to the processors with balanced and centralized forces to inhibit tilting of the upper plate and reduce the risk of damaging the processors.

Abstract: A time-division multiplexed (TDM) communication system has a dynamic bandwidth allocation (DBA) controller that is configured to reduce demand overestimation so that more optimal bandwidth allocation is achieved. Upon receiving load information from a transceiver, the DBA controller is configured to estimate an amount of change to the transceiver's reported load based on previous allocations of bandwidth to the transceiver for frames that occur during a reporting delay (e.g., the delay from the time that the load information is transmitted until it is received and processed). That is, the estimated load is reduced in an effort to account for transmissions made by the transceiver during the reporting delay, thereby preventing or reducing the amount of demand overestimation that would otherwise occur. Thus, the transceiver may be allocated less bandwidth according to a desired DBA algorithm so that more network bandwidth is available for other transceivers.

Abstract: A canister which has a substantially cylindrical form and comprises an innermost compartment located around an imaginary center axis of the cylindrical form and extending longitudinally in axial direction of the canister. The canister comprises cleaner cones, which have a substantially cone-like form with a hollow inside and which cleaner cones are removably mounted to the canister and located in the canister such, that narrow ends of cone form of the cleaner cones extend to the innermost compartment and wide ends of the cone form of the cleaner cones extend to the cylindrical circumference of the canister. The cleaner cones comprise covers and the cleaner cones are mounted such that cover of the cleaner cone is outside the canister. The canister further comprises an inspection light source configured to provide a visible indication of status of a cleaner cone of the canister in view of possible plug in the cleaner cone, when the light source is in operation.

Abstract: In some examples, a data management system processes snapshots of a distributed file system, the distributed file system having files, each file comprising multiple data chunks. The data management system performs operations including storing file-to-chunk mapping in file system metadata; creating, for each chunk, a chunk generation ID by associating each chunk with a file system generation ID; in a next-generation snapshot of the distributed file system, incrementing, for all chunks in the next-generation snapshot, the respective chunk generation IDs; and taking a snapshot of the file system metadata and storing an updated file-to-chunk mapping associated with the next-generation snapshot.

Abstract: A clot retrieval device is described herein. The clot retrieval device includes a capturing basket that is deployable to the side of a clot in a blood vessel. The capturing basket is configured to allow for the clot to ingress into the capturing basket and surround at least a portion of the clot.

Abstract: An electrical connector system includes an electrical connector, a cooling module and fixing means. The electrical connector includes a first terminal, a second terminal, and a mounting assembly to which the first and second terminals are fixed. In an assembled state, the cooling module can transfer heat from the electrical connector to a liquid, and includes a passage for conveying the liquid and one or more thermally conductive bodies for conducting heat from the first and second terminals to the passage. The fixing means is for fixing the cooling module to the electrical connector in the assembled state. In a disassembled state, the cooling module is physically independent of the electrical connector.

Abstract: The present disclosure provides methods, systems and storage media for conducting a security review of a system. Certain examples relate to the use of trained generative AI to generating a root security query using a machine learning (ML) generator, based on a system description. A security requirement associated with the root security query is extracted, and an indication of the root security query is output at a user interface. A user input is received in response, and the ML generator generates a follow-up request that is output via the user interface. A second user input is received in response to the follow-up request, and the ML generator then determines that the security requirement is not satisfied by the target system.

Abstract: The present invention features a filter canister device for filtering clot material from whole blood. The device includes an upper filter chamber and a lower filter chamber coupled to the upper filter chamber. The device further includes a coarse filter mesh disposed within the upper filter chamber, configured to capture the clot material from whole blood directed into the upper filter chamber, and a fine filter mesh disposed within the lower filter chamber, configured to filter the whole blood into filtered whole blood. The device further includes an inlet port fluidly coupled to the upper filter chamber, configured to accept the whole blood into the upper filter chamber. The device further includes an outlet port fluidly coupled to the lower filter chamber, configured to accept the filtered whole blood from the lower filter chamber and direct it to an external source.