Abstract: A method and a system for generating synthetic time series data that is subject to various types of constraints are provided. The method includes: receiving first information that relates to a sample of a historical time series and second information that relates to constraints; obtaining a set of synthetic time series based on the first information and the second information; calculating a set of distances of respective differences between the historical time series and each of the set of synthetic time series; and selecting, from among the set, a first synthetic time series for which a corresponding distance is a maximum. The set of synthetic time series may be obtained by using a Sequential Least Squares Programming algorithm or by using a diffusion model that is trained according to a defined protocol.

Abstract: A load control system may comprise load control devices for controlling respective electrical loads, and a system controller operable to transmit digital messages including different commands to the load control devices in response to a selection of a preset. The different commands may include a preset command configured to identify preset data in a device database stored at the load control device and/or a multi-output command configured to define the preset data for being stored in the device database. The system controller may decide which of the commands to transmit to the load control devices in response to the selection of the preset.

Abstract: Example methods and systems for policy configuration using a data-plane approach are described. In one example, a first computer system may detect first data- plane packet(s) for establishing a connection between (a) a first virtualized computing instance and (b) a second computer system from which a resource is accessible. The first computer system may extract, from the first data-plane packet(s), parameter information associated with the connection; and configure a policy that is applicable for access control of the resource based on the parameter information. In response to detecting second data-plane packet(s) to access the resource, the computer system may apply the policy to allow or block forwarding of the second data-plane packet towards the second computer system. The second data-plane packet may originate from (a) the first virtualized computing instance or (b) a second virtualized computing instance supported by the first computer system.

Abstract: A system for updating a database comprises an input interface and a processor. The input interface is configured to receive image data. The processor is configured to determine from the image data one or more attributes of a database entry for real estate property and update the database entry for the real estate property.

Abstract: A load control system may comprise load control devices for controlling respective electrical loads, and a system controller operable to transmit digital messages including different commands to the load control devices in response to a selection of a preset. The different commands may include a preset command configured to identify preset data in a device database stored at the load control device and/or a multi-output command configured to define the preset data for being stored in the device database. The system controller may decide which of the commands to transmit to the load control devices in response to the selection of the preset.

Abstract: A method for assignment and prioritization of tasks for satisfying deadlines in decentralized execution of tasks is provided. The method includes: receiving inputs that relate to a set of tasks, a set of agents, a set of goals, a set of priority levels that are assignable to each task, and a partial order plan that relates to ordering dependencies for performing and completing the tasks; determining a qualification function that relates to whether a particular task is performable by a particular agent; determining an availability function that relates to a respective availability of each agent during a particular time interval; and analyzing the partial order plan, the qualification function, and the availability function in order to obtain an assignment function that relates to a proposed set of assignments of tasks to agents and a prioritization function that relates to a proposed set of assignments of tasks to priority levels.

Abstract: The disclosure provides an approach for firewall policy management. Embodiments include receiving, at a firewall from a first virtual computing instance (VCI), a registration request comprising a first identifier of the first VCI and a second identifier of a second VCI. Embodiments include determining, at the firewall, based on the second identifier included in the registration request, that the second VCI is associated with a network security policy at the firewall. Embodiments include applying, at the firewall, based on the first identifier included in the registration request, the network policy associated with the second VCI to the first VCI. Additionally, embodiments include allowing or disallowing network activity for the first VCI based on the applied network security policy.

Abstract: A system for updating a database comprises an input interface and a processor. The input interface is configured to receive image data. The processor is configured to determine from the image data one or more attributes of a database entry for real estate property and update the database entry for the real estate property.

Abstract: Some embodiments of the invention provide a method of performing services on a host computer on which a machine executes. The method sends, to a file inspector, a first set of data associated with an event detected on the machine that is associated with a file stored on the machine. The method receives, from the file inspector, indication that the file stores confidential information. The method sends, to a context engine executing on the host computer separately from the machine, a second set of data associated with the file, the context engine storing the second set of data for subsequent access by a service engine that executes on the host computer separately from the machine, the service engine using the second set of data to perform a service operation on data messages associated with the machine.

Abstract: Example methods are provided for flow-based forwarding element configuration in a network environment. An example method may comprise obtaining a set of security policies associated with the group of workloads; and based on the set of security policies, identifying an allowed forwarding path between a destination and a first workload. The method may also comprise configuring a whitelist set of flow entries and sending configuration information to the flow-based forwarding element to cause the flow-based forwarding element to apply the whitelist set. The whitelist set may include a first flow entry specifying match fields and a first action to allow communication over the allowed forwarding path, but excludes a second flow entry specifying a second action to block communication over a forbidden forwarding path between the destination and the second workload. The match fields may include transport layer information and network layer information.

Abstract: A method for opening unknown files in a malware detection system, is provided. The method generally includes receiving a request to open a file classified as an unknown file, opening the file in a container, collecting at least one of a log of events carried out by the file or observed behavior traces of the file while open in the container, transmitting, to a file analyzer, at least one of the file, the log of events, or the behavior traces for static analysis, determining, a final verdict for the file, based on at least one of the file, the log of events, or the behavior traces, wherein the final verdict for the file is based on the static analysis or dynamic analysis of the file, and taking one or more actions based on a policy configured for the first endpoint and the final verdict.

Abstract: A method for locating malware in a malware detection system, is provided. The method generally includes storing, at a first endpoint, a mapping of a first file hash and a first file path for a first file classified as an unknown file, opening, at the first endpoint, the first file prior to determining whether the first file is benign or malicious, determining, at the first endpoint, a first verdict for the first file, the first verdict indicating the first file is benign or malicious, locating the first file using the mapping of the first file hash and the first file path, and taking one or more actions based on a policy configured for the first endpoint and the first verdict indicating the first file is benign or malicious.

Abstract: A load control system may comprise load control devices for controlling respective electrical loads, and a system controller operable to transmit digital messages including different commands to the load control devices in response to a selection of a preset. The different commands may include a preset command configured to identify preset data in a device database stored at the load control device and/or a multi-output command configured to define the preset data for being stored in the device database. The system controller may decide which of the commands to transmit to the load control devices in response to the selection of the preset.

Abstract: Some embodiments of the invention provide a method of performing services on a host computer on which a machine executes. The method sends, to a file inspector, a first set of data associated with an event detected on the machine that is associated with a file stored on the machine. The method receives, from the file inspector, indication that the file stores confidential information. The method sends, to a context engine executing on the host computer separately from the machine, a second set of data associated with the file, the context engine storing the second set of data for subsequent access by a service engine that executes on the host computer separately from the machine, the service engine using the second set of data to perform a service operation on data messages associated with the machine.

Abstract: Some embodiments of the invention provide a method of performing services on a host computer on which a machine executes. At a service engine executing on the host computer separately than the machine, the method receives a data message from the machine. The method determines that the data message is associated with a file (1) that is stored on the machine and (2) that stores confidential information. The method performs a service operation on the data message based on said determination.

Abstract: A load control system may comprise load control devices for controlling respective electrical loads, and a system controller operable to transmit digital messages including different commands to the load control devices in response to a selection of a preset. The different commands may include a preset command configured to identify preset data in a device database stored at the load control device and/or a multi-output command configured to define the preset data for being stored in the device database. The system controller may decide which of the commands to transmit to the load control devices in response to the selection of the preset.

Abstract: A system for updating a database comprises an input interface and a processor. The input interface is configured to receive image data. The processor is configured to determine from the image data one or more attributes of a database entry for real estate property and update the database entry for the real estate property.

Abstract: Example methods and systems for score-based dynamic firewall rule enforcement in a software-defined networking (SDN) environment. One example method may comprise in response to detecting a first request to access a first resource, identifying a first score associated with the user, and a firewall rule that is applicable to the user based on information associated with the user. The firewall rule may be applied to allow access to the first resource. The method may further comprise adjusting the first score to a second score that represents a more restrictive access level compared to the first score. In response to detecting a second request to access the first resource, applying the firewall rule to block the second request based on the second score.

Abstract: A load control system may control an electrical load in a space of a building occupied by an occupant. The load control system may include a controller configured to determine the location of the occupant, and a load control device configured to automatically control the electrical load in response to the location of the occupant. The load control system may also include a mobile device adapted to be located on or immediately adjacent the occupant and configured to transmit and receive wireless signals. The load control device may be configured to automatically control the electrical load when the mobile device is located in the space. The load control system may further comprise an occupancy sensor and the load control device may automatically control the electrical load when the occupancy sensor indicates that the space is occupied and the mobile device is located in the space.

Abstract: A load control system may comprise load control devices for controlling respective electrical loads, and a system controller operable to transmit digital messages including different commands to the load control devices in response to a selection of a preset. The different commands may include a preset command configured to identify preset data in a device database stored at the load control device and/or a multi-output command configured to define the preset data for being stored in the device database. The system controller may decide which of the commands to transmit to the load control devices in response to the selection of the preset.