Abstract: A computing system for learning a device type and message formats used by a device is provided. The computing system includes an interface and a processor. The interface is receptive of documents describing identification information and communication and application protocols of devices. The processor is coupled with the interface to obtain rules of network packet analysis using document analytics and identify identification information and communication and application protocols of network messages from devices using the rules.

Abstract: Embodiments of the present disclosure include a method, computer program product, and system for determining to push a data packet to a device. A processor may receive a first data packet. The processor may execute the first data packet in a secure environment. The secure environment may simulate a first state of a device. The device may include a firewall. The processor may determine, from the execution of the first data packet, that the first state changed to a second state. The processor may identify that the second state is a predetermined secure state. The processor may push the data packet to the device in response to identifying that the second state is the predetermined secure state.

Abstract: A method is provided of using a set of servers to provide deferential services that have a pre-negotiated time for notice to release the servers. The method includes defining a virtual checkpoint frame interval that is constrained to a duration of up to half of the pre-negotiated time for notice to release the servers. The method includes, responsive to an end of the interval, (i) writing, to a shared state database, a state of processing of the packets and transactions occurring during the interval that are processed by a current one of the servers, and (ii) releasing the packets and transactions occurring during the interval. The method includes copying the packets and transactions occurring during the interval, and the state, from the current server to another server for subsequent processing, responsive to an indication of an instance loss on the current server.

Abstract: A computer program product is provided for fault diagnostics and recovery of network service chains. The product includes a computer readable storage medium having program instructions embodied therewith. The program instructions are executable by a computer to cause the computer to perform a method. The method includes identifying intersecting ones of components of the network service chains in a network graph indicative of a commonality therebetween. The method further includes selectively repairing one or more of the components of at least one of the network service chains up to an entirety thereof based on a component repair sequence that maintains service continuity of the network service chains and that is determined and selectively reordered based on the commonality. The network graph includes a plurality of graphs, each (i) including one or more Virtualized Network Functions, and (ii) corresponding to a respective one of the network service chains.

Abstract: A computer-implemented method is provided for fault diagnostics and recovery of network service chains. The method includes identifying, by a processor, intersecting ones of components of the network service chains in a network graph indicative of a commonality therebetween. The network graph represents the components of the network service chains. The method further includes selectively repairing, by the processor, one or more of the components of at least one of the network service chains up to an entirety thereof based on a component repair sequence that maintains service continuity of the network service chains and that is determined and selectively reordered based on the commonality. The network graph includes a plurality of graphs, each (i) including one or more Virtualized Network Functions, and (ii) corresponding to a respective one of the network service chains.

Abstract: A method includes configuring worker services to operate in a stateless manner and providing support services that enable the worker services to operate in the stateless manner. The support services include (i) a management service for providing notifications of server removal and addition, (ii) a state maintenance service for maintaining state information in a central location, and (iii) a load balancer service for distributing requests among worker services. The method includes altering a number of servers allocated to at least one worker service, responsive to a notification from the management service. A private protocol is used between the worker services and load balancer service (a) to send, from the worker services to the load balancer service, a respective pointer to the state information associated with the requests, and (b) to include the respective pointer in the requests when any of the requests are forwarded to any worker service.

Abstract: A method includes configuring worker services to operate in a stateless manner and providing support services that enable the worker services to operate in the stateless manner. The support services include (i) a management service for providing notifications of server removal and addition, (ii) a state maintenance service for maintaining state information in a central location, and (iii) a load balancer service for distributing requests among worker services. The method includes altering a number of servers allocated to at least one worker service, responsive to a notification from the management service. A private protocol is used between the worker services and load balancer service (a) to send, from the worker services to the load balancer service, a respective pointer to the state information associated with the requests, and (b) to include the respective pointer in the requests when any of the requests are forwarded to any worker service.

Abstract: A method is provided of using a set of servers to provide deferential services that have a pre-negotiated time for notice to release the servers. The method includes defining a virtual checkpoint frame interval that is constrained to a duration of up to half of the pre-negotiated time for notice to release the servers. The method includes collecting packets and transactions occurring during the interval that are processed by a current server. The method includes, responsive to an end of the interval, (i) writing, to a shared state database, a state of processing of the packets and transactions occurring during the interval, and (ii) releasing the packets and transactions occurring during the interval. The method includes copying the packets and transactions occurring during the interval, and the state, from the current server to another server for subsequent processing, responsive to an indication of an instance loss on the current server.

Abstract: A computing system for learning a device type and message formats used by a device is provided. The computing system includes an interface and a processor. The interface is receptive of documents describing identification information and communication and application protocols of devices. The processor is coupled with the interface to obtain rules of network packet analysis using document analytics and identify identification information and communication and application protocols of network messages from devices using the rules.

Abstract: A computer program product is provided for fault diagnostics and recovery of network service chains. The product includes a computer readable storage medium having program instructions embodied therewith. The program instructions are executable by a computer to cause the computer to perform a method. The method includes identifying intersecting ones of components of the network service chains in a network graph indicative of a commonality therebetween. The method further includes selectively repairing one or more of the components of at least one of the network service chains up to an entirety thereof based on a component repair sequence that maintains service continuity of the network service chains and that is determined and selectively reordered based on the commonality. The network graph includes a plurality of graphs, each (i) including one or more Virtualized Network Functions, and (ii) corresponding to a respective one of the network service chains.

Abstract: A computer-implemented method is provided for fault diagnostics and recovery of network service chains. The method includes identifying, by a processor, intersecting ones of components of the network service chains in a network graph indicative of a commonality therebetween. The network graph represents the components of the network service chains. The method further includes selectively repairing, by the processor, one or more of the components of at least one of the network service chains up to an entirety thereof based on a component repair sequence that maintains service continuity of the network service chains and that is determined and selectively reordered based on the commonality. The network graph includes a plurality of graphs, each (i) including one or more Virtualized Network Functions, and (ii) corresponding to a respective one of the network service chains.

Abstract: A computer-implemented method is provided for fault diagnostics and recovery of network service chains. The method includes discovering, by a processor, a network graph representative of components of the network service chains. The method further includes identifying, by the processor, intersecting ones of the components of the network service chains in the network graph. The method also includes repairing, by the processor, one or more of the components of at least one of the network service chains based on a component repair sequence that maintains service continuity of the network service chains and that is determined based on a commonality.

Abstract: A computer-implemented method is provided for fault diagnostics and recovery of network service chains. The method includes discovering, by a processor, a network graph representative of components of the network service chains. The method further includes identifying, by the processor, intersecting ones of the components of the network service chains in the network graph. The method also includes repairing, by the processor, one or more of the components of at least one of the network service chains based on a component repair sequence that maintains service continuity of the network service chains and that is determined based on a commonality.

Abstract: A method is provided of using a set of servers to provide deferential services that have a pre-negotiated time for notice to release the servers. The method includes defining a virtual checkpoint frame interval that is constrained to a duration of up to half of the pre-negotiated time for notice to release the servers. The method includes, responsive to an end of the interval, (i) writing, to a shared state database, a state of processing of the packets and transactions occurring during the interval that are processed by a current one of the servers, and (ii) releasing the packets and transactions occurring during the interval. The method includes copying the packets and transactions occurring during the interval, and the state, from the current server to another server for subsequent processing, responsive to an indication of an instance loss on the current server.

Abstract: A method is provided of using a set of servers to provide deferential services that have a pre-negotiated time for notice to release the servers. The method includes defining a virtual checkpoint frame interval that is constrained to a duration of up to half of the pre-negotiated time for notice to release the servers. The method includes collecting packets and transactions occurring during the interval that are processed by a current server. The method includes, responsive to an end of the interval, (i) writing, to a shared state database, a state of processing of the packets and transactions occurring during the interval, and (ii) releasing the packets and transactions occurring during the interval. The method includes copying the packets and transactions occurring during the interval, and the state, from the current server to another server for subsequent processing, responsive to an indication of an instance loss on the current server.

Abstract: Techniques for adaptive query targeting in a dynamic distributed computing environment are provided. In one aspect, a method for adaptive query targeting in a distributed computing system having two or more cooperating nodes is provided. The method includes the steps of: using a peer selection criteria to select one or more of the nodes as target peers for a query from a querying node; leasing the query to the target peers for a given length of time via a lease having a given lifetime; periodically refreshing the query during the lifetime of the lease by re-evaluating the peer selection criteria such that the query persists on one or more of the target peers for the lifetime of the lease; and having the query removed from the target peers when the lease expires.

Abstract: Embodiments of the present disclosure include a method, computer program product, and system for determining to push a data packet to a device. A processor may receive a first data packet. The processor may execute the first data packet in a secure environment. The secure environment may simulate a first state of a device. The device may include a firewall. The processor may determine, from the execution of the first data packet, that the first state changed to a second state. The processor may identify that the second state is a predetermined secure state. The processor may push the data packet to the device in response to identifying that the second state is the predetermined secure state.

Abstract: Embodiments of the present invention may involve a method, system, and computer program product for controlling privacy in a face recognition application. A computer may receive an input including a face recognition query and a digital image of a face. The computer may identify a target user associated with a facial signature in a first database based at least in part on a statistical correlation between a detected facial signature and one or more facial signatures in the first database. The computer may extract a profile of the target user from a second database. The profile of the target user may include one or more privacy preferences. The computer may generate a customized profile of the target user. The customized profile may omit one or more elements of the profile of the target user based on the one or more privacy preferences and/or a current context.

Abstract: A middlebox includes a network monitor module configured to determine a quality-affective factor in a connection between a client and a server in a network. A processor is configured to compare the quality-affective factor to a threshold to determine whether the connection would benefit from a network processing function. A network control module is configured to configure a router to exclude the middlebox from the connection if the connection would not benefit from the network processing function and if the middlebox is already present in the connection to cease operation of the middlebox on the connection. Router configuration is delayed until the connection is idle.

Abstract: A computer-implemented method is provided for fault diagnostics and recovery of network service chains. The method includes discovering, by a processor, a network graph representative of components of the network service chains. The method further includes identifying, by the processor, intersecting ones of the components of the network service chains in the network graph. The method also includes repairing, by the processor, one or more of the components of at least one of the network service chains based on a component repair sequence that maintains service continuity of the network service chains and that is determined based on a commonality.