Abstract: Some embodiments provide a method for a public cloud manager that interacts with a management system of a public datacenter. The method receives a notification from a network controller that a second data compute node is compromised. The second data compute node operates on a host machine in the public datacenter and executes a forwarding element managed by network controller. The method interacts with application programming interfaces (APIs) of the public datacenter to quarantine the data compute node.

Abstract: Automated nuclei area/number estimation utilizes a two-stage estimation framework-area estimation first followed by number estimation. After determining area information, each local patch's shape features are able to be extracted to define a local voting rule. The resulting voting score determines the strength of each local voting peak. The number of voting peaks is exactly the number of nuclei.

Abstract: Some embodiments provide a method for a network controller that manages a logical network implemented in a datacenter having forwarding elements to which the network controller does not have access. The method identifies a data compute node (DCN) operating on a host machine in the datacenter, to attach to the logical network. The DCN has a network interface with an address provided by a datacenter management system. A workload application executes in a first namespace of the DCN. The method distributes configuration data for configuring a managed forwarding element (MFE) executing in a second namespace of the DCN to receive data packets sent from the application via an interface pairing between the first and second namespaces. The data packets sent by the application have the provided address as a source address when received by the MFE and are encapsulated by the MFE using the provided address as a source address.

Abstract: Provided are a human body posture data acquisition method and system, and a data processing device. The method comprises: obtaining feature data between pre-calibrated human body feature points; obtaining a rotational angle of the human body feature points; and obtaining human body posture data according to the rotational angle of the human body feature points and the feature data between the human body feature points. In the method, head rotation data is obtained by directly providing a head wearing device on the head. Accordingly, body rotation data is obtained by providing a body wearing device on the human chest, and then human body posture data is obtained via the head rotation data and the body rotation data, thereby alleviating the problem that an error in sensed data is caused with the existing human body posture identification methods due to a poor mobility, sensitivity to environmental impacts and susceptibility to disturbances.

Abstract: An image analysis method and an image processing apparatus are disclosed. The image analysis method comprises receiving a retinal image and identifying at least one candidate object from a plurality of objects within the retinal image. Singular spectrum analysis SSA is performed on the at least one candidate object, to obtain an intensity profile along at least one cross-sectional line through the candidate object. At least one feature from the intensity profile is extracted for classification of the at least one candidate object.

Abstract: The present disclosure generally relates to deploying a proxy control plane and/or north-south data plane in a control virtual private cloud of a logical network implemented on a software-defined datacenter. The control virtual private cloud is shared by a plurality of compute virtual private clouds of the network. In some embodiments, a proxy control plane is deployed on the control virtual private cloud and disseminates policies directly to endpoints of the logical network. In some embodiments, a north-south data plane is deployed on the control virtual private cloud and directly manages north-south network traffic from endpoints of the logical network. In some embodiments, a proxy control plane and a north-south network data plane are deployed on the control virtual private cloud.

Abstract: Some embodiments provide a method for a first network controller that manages a logical network implemented in a datacenter including forwarding elements to which the first network controller does not have access. The method identifies a first data compute node (DCN) in the datacenter configured to execute a second network controller. The method distributes configuration data defining the logical network to the first DCN. The second network controller distributes sets of the configuration data to local agents executing on additional DCNs in the datacenter that send and receive messages through the logical network. Both managed forwarding elements and the local agents execute on each of the additional DCNs. Each local agent on a particular DCN is for receiving a set of configuration data from the second network controller and configuring the managed forwarding element on the particular DCN to implement the logical network according to the set of configuration data.

Abstract: Some embodiments provide a method for a public cloud manager that interacts with a management system of a public datacenter. The method receives a notification from a network controller that a second data compute node is compromised. The second data compute node operates on a host machine in the public datacenter and executes a forwarding element managed by network controller. The method interacts with application programming interfaces (APIs) of the public datacenter to quarantine the data compute node.

Abstract: Some embodiments of the invention provide a novel method for interfacing between a first tuple-based controller and a second controller using a message-based protocol. The method of some embodiments identifies a set of changed tuples stored in a set of output tables, generates a set of messages based on the changed tuples, and sends the generated set of messages to a second controller. In some embodiments, the first and second controllers are parts of a network control system that manages forwarding elements to implement a logical network.

Abstract: Provided are a human body posture data acquisition method and system, and a data processing device. The method comprises: obtaining feature data between pre-calibrated human body feature points; obtaining a rotational angle of the human body feature points; and obtaining human body posture data according to the rotational angle of the human body feature points and the feature data between the human body feature points. In the method, head rotation data is obtained by directly providing a head wearing device on the head. Accordingly, body rotation data is obtained by providing a body wearing device on the human chest, and then human body posture data is obtained via the head rotation data and the body rotation data, thereby alleviating the problem that an error in sensed data is caused with the existing human body posture identification methods due to a poor mobility, sensitivity to environmental impacts and susceptibility to disturbances.

Abstract: According to one example for segmenting image data, image data comprising color pixel data, IR data, and depth data is received from a sensor. The image data is segmented into a first list of objects based on at least one computed feature of the image data. At least one object type is determined for at least one object in the first list of objects. The segmentation of the first list of objects is refined into a second list of objects based on the at least one object type. In an example, the second list of objects is output.

Abstract: Some embodiments of the invention provide a novel method for interfacing between a first tuple-based controller and a second controller using a message-based protocol. The method of some embodiments identifies a set of changed tuples stored in a set of output tables, generates a set of messages based on the changed tuples, and sends the generated set of messages to a second controller. In some embodiments, the first and second controllers are parts of a network control system that manages forwarding elements to implement a logical network.

Abstract: A manifold-aware ranking kernel (MARK) for information retrieval is described herein. The MARK is implemented by using supervised and unsupervised learning. MARK is ranking-oriented such that the relative comparison formulation directly targets on the ranking problem, making the approach optimal for information retrieval. MARK is also manifold-aware such that the algorithm is able to exploit information from ample unlabeled data, which helps to improve generalization performance, particularly when there are limited number of labeled constraints. MARK is nonlinear: as a kernel-based approach, the algorithm is able to lead to a highly non-linear metric which is able to model complicated data distribution.

Abstract: Some embodiments provide a method for a network controller that manages a logical network implemented in a datacenter having forwarding elements to which the network controller does not have access. The method identifies a data compute node (DCN), that operates on a host machine in the datacenter, to attach to the logical network. The DCN has a network interface with a network address provided by a management system of the datacenter. The DCN executes (i) a workload application and (ii) a managed forwarding element (MFE). The method distributes configuration data for configuring the MFE to receive data packets sent from the workload application on the DCN and perform network security processing on the data packets without performing logical forwarding operations. The data packets sent by the workload application have the provided network address as a source address when received by the MFE and are not encapsulated by the MFE.

Abstract: A method of diagnosing a software-defined network is provided. The method determines an observed plurality of network control events from a set of network control event messages. Each network control event message includes a unique identifier and is used for configuring a network configuration entity on a network component. The method, from a description of an expected configuration of the network, determines an expected plurality of network control events. The method backtraces the observed control events from the current configuration of the network to determine whether the expected network control events have occurred. The method identifies a network component as the source of fault when the network component receives an input set of network control events that matches a set of expected network events but does not produce a set of output network control events that match a set of network control events.

Abstract: Some embodiments provide a method for a first data compute node (DCN) configured to execute a gateway forwarding element (FE) for a logical network within a datacenter. The method receives a packet from a second FE configured by an administrator of the datacenter. The packet is received from a source external to the datacenter by the second FE, and the second FE performs a first set of operations on the packet before sending the packet to a host machine on which the first data compute node operates. The method performs a second set of operations on the packet according to a configuration for the first gateway FE, and sends the packet to a third FE executing on a second DCN in the datacenter. The third FE performs a third set of operations on the packet and delivers the packet to an application executing on the second DCN.

Abstract: One example provides a system. The system receives an infrared image and processes the infrared image to detect lines in the infrared image. The system receives a color image corresponding to the infrared image and processes the color image to detect lines in the color image. The detected lines in the infrared image and the detected lines in the color image are combined. A document region is detected from the combined detected lines.

Abstract: Some embodiments provide a network control system with techniques for handling failover of network controllers with minimal churn in the network state distributed to the forwarding elements of the network. Specifically, in some embodiments, the local controller designates a waiting period before computing output network state data entries based on the new version of the input network state data entries. Alternatively, or conjunctively, the local controller of some embodiments calculates the changes between the new version of input state data entries and its stored existing version of the input state data entries, and only generates new output network state data entries based on the calculated changes, in order to minimize unnecessary recalculations of the output network state data entries. The new output network state data entries may then be used by the local controller to provision its managed forwarding element.

Abstract: Automated nuclei area/number estimation utilizes a two-stage estimation framework-area estimation first followed by number estimation. After determining area information, each local patch's shape features are able to be extracted to define a local voting rule. The resulting voting score determines the strength of each local voting peak. The number of voting peaks is exactly the number of nuclei.

Abstract: Some embodiments provide a network control system with techniques for handling failover of network controllers with minimal churn in the network state distributed to the forwarding elements of the network. Specifically, in some embodiments, the local controller designates a waiting period before computing output network state data entries based on the new version of the input network state data entries. Alternatively, or conjunctively, the local controller of some embodiments calculates the changes between the new version of input state data entries and its stored existing version of the input state data entries, and only generates new output network state data entries based on the calculated changes, in order to minimize unnecessary recalculations of the output network state data entries. The new output network state data entries may then be used by the local controller to provision its managed forwarding element.