Abstract: A system and a method for providing trustworthy access enforcement to one or more microservice container images on one or more orchestration platforms is disclosed. The system generates the one or more microservice container images along with pre-defined hardcoded elements. The system creates a pre-defined hash data and store in one or more key management databases to analyze authenticity and integrity of the one or more orchestration platforms. The system executes the one or more microservice container images on the one or more orchestration platforms for obtaining metadata associated with the one or more orchestration platforms at a time of execution of the one or more microservice container images. The system generates entitlement signature secret (ESS) data of the one or more orchestration platforms to compare with the pre-defined hash data for trustworthy access enforcement of the one or more microservice container images on the one or more orchestration platforms.

Abstract: A system and a method for providing peer-to-peer virtual private network (VPN) connections in multi-gateway enterprise networks are disclosed. The system comprises a cloud interaction subsystem, a profile generation subsystem, a network traffic framework subsystem, and a tunnel proxy subsystem. The cloud interaction subsystem obtains at least one of: routing data and one or more encryption keys from the multi-gateway enterprise networks to store in one or more databases. The profile generation subsystem generates a VPN profile for each user of one or more users to connect with an associated enterprise network within the multi-gateway enterprise networks. The network traffic framework subsystem encapsulates and decapsulates outgoing network traffic data and incoming network traffic data respectively.

Abstract: A system and a method for providing cybersecurity services in dual-stack traffic processing within one or more communication networks are disclosed. The system comprises one or more carrier edge nodes to transmit traffic data packets between one or more communication devices and one or more network services within the one or more communication networks by translating Internet Protocol version 6 (IPv6) addresses to Internet Protocol version 4 (IPv4) addresses. The one or more carrier edge nodes configured to assign one or more virtual local area network (VLAN) tags to at least one of: outbound communication device-originated data, and inbound communication device-originated data for identifying the traffic data packets. The one or more carrier edge nodes segments at least one of: the outbound and the inbound communication device-originated data into one or more categories for dynamically enforcing one or more security policies to provide the cybersecurity services.

Abstract: A system and method for detecting unauthorized relocation of endpoint devices are disclosed. The system comprises one or more network security appliances and one or more servers. The one or more network security appliances is configured to collect network environment data associated with each endpoint device of the one or more endpoint devices. The one or more servers is configured to obtain the network environment data from the one or more network security appliances for generating one or more hash values for the network environment data of each endpoint device of the one or more endpoint devices. The system performs a comparative analysis between the one or more hash values to generate a Paranoia-Diff-Score (PDS) for each endpoint device of the one or more endpoint devices to detect the unauthorized relocation of the one or more endpoint devices.

Abstract: An artificial intelligence (AI)-based system for detecting malware in endpoint devices using a multi-source data fusion and method thereof are disclosed. The AI-based system collects at least one of: endpoint visibility data, publicly available information, and sandbox analysis data using the multi-source data fusion. By using the collected data, the AI-based system generates one or more numerical embeddings for at least one of: one or more files and one or more applications of each endpoint device using one or more AI models. The AI-based system is configured with the one or more AI models to generate one or more dynamic directed graphs based on the generated one or more numerical embeddings to compute a maliciousness risk score. The maliciousness risk score of at least one of the: one or more files and one or more applications is used for detecting the malware in the one or more endpoint devices.

Abstract: A system for detecting anomalous network patterns based on analyzing network traffic data and method thereof are disclosed. The system comprises a flow aggregator subsystem, a flow feature generation subsystem, an anomaly detection subsystem, a dynamic score subsystem, and a calibration subsystem. The system is configured to receive the network traffic data from one or more network endpoints for aggregating the network traffic data into network flow data. The system is configured to generate one or more flow features for each packet associated with the aggregated network traffic data based on a rolling window-based analysis of the one or more attributes. The system is configured to analyze the one or more flow features by utilizing one or more deep-learning models to detect the one or more anomalous network patterns.

Abstract: A method may include identifying a service discovery manager associated with a first data center and registering with the service discovery manager. The method may also include, transmitting, by the service discovery manager, information identifying first services that are available at the first data center and information identifying a second data center in which one or more of the first services are available. The method may further include receiving the information identifying the first services that are available and the information identifying the second data center and updating a database based on the information identifying the first services that are available.

Abstract: A method may include identifying a service discovery manager associated with a first data center and registering with the service discovery manager. The method may also include, transmitting, by the service discovery manager, information identifying first services that are available at the first data center and information identifying a second data center in which one or more of the first services are available. The method may further include receiving the information identifying the first services that are available and the information identifying the second data center and updating a database based on the information identifying the first services that are available.

Abstract: Methods and apparatuses, including computer program products, are described for synchronization of shared initial filter criteria in an IP Multimedia Subsystem (IMS) network. A first computing device in the IMS network transmits a registration request to a second computing device in the IMS network. The first computing device receives a response to the registration request from the second computing device, including an identifier associated with a shared initial filter criteria set stored at the first computing device. The first computing device determines whether the shared initial filter criteria set corresponding to the identifier is stored at the first computing device and transmits a retrieval request to the second computing device if the shared initial filter criteria set corresponding to the identifier is not stored. The first computing device receives the shared initial filter criteria set from the second computing device, and stores the shared initial filter criteria set.

Abstract: Methods and apparatuses, including computer program products, are described for synchronization of shared initial filter criteria in an IP Multimedia Subsystem (IMS) network. A first computing device in the IMS network transmits a registration request to a second computing device in the IMS network. The first computing device receives a response to the registration request from the second computing device, including an identifier associated with a shared initial filter criteria set stored at the first computing device. The first computing device determines whether the shared initial filter criteria set corresponding to the identifier is stored at the first computing device and transmits a retrieval request to the second computing device if the shared initial filter criteria set corresponding to the identifier is not stored. The first computing device receives the shared initial filter criteria set from the second computing device, and stores the shared initial filter criteria set.

Abstract: Methods and apparatuses, including computer program products, are described for synchronization of shared initial filter criteria in an IP Multimedia Subsystem (IMS) network. A first computing device in the IMS network transmits a registration request to a second computing device in the IMS network. The first computing device receives a response to the registration request from the second computing device, including an identifier associated with a shared initial filter criteria set stored at the first computing device. The first computing device determines whether the shared initial filter criteria set corresponding to the identifier is stored at the first computing device and transmits a retrieval request to the second computing device if the shared initial filter criteria set corresponding to the identifier is not stored. The first computing device receives the shared initial filter criteria set from the second computing device, and stores the shared initial filter criteria set.

Abstract: Methods and apparatuses, including computer program products, are described for synchronization of shared initial filter criteria in an IP Multimedia Subsystem (IMS) network. A first computing device in the IMS network transmits a registration request to a second computing device in the IMS network. The first computing device receives a response to the registration request from the second computing device, including an identifier associated with a shared initial filter criteria set stored at the first computing device. The first computing device determines whether the shared initial filter criteria set corresponding to the identifier is stored at the first computing device and transmits a retrieval request to the second computing device if the shared initial filter criteria set corresponding to the identifier is not stored. The first computing device receives the shared initial filter criteria set from the second computing device, and stores the shared initial filter criteria set.

Abstract: A system and method for call origination by an application server in an internet protocol multimedia core network subsystem includes a first step of providing a public user identity for a user. A next step includes storing a service parameter in a service profile of the user, the service parameter indicating whether to allow/disallow the application server to initiate call requests on behalf of the public user identity. If the service parameter allows the application server to initiate call requests, the system unblocks calls originated by the application server on behalf of the user. If the service parameter disallows the application server to initiate call requests, the system blocks calls originated by the application server on behalf of the user.