Abstract: Concepts and technologies disclosed herein are directed to context-aware virtualized control decision support system (“DSS”) for providing quality of experience (“QoE”) assurance for Internet protocol (“IP”) streaming video services. A QoE assurance DSS can monitor QoE event and context data to be utilized for QoE assurance analytics, measure QoE performance, perform QoE assurance analytics, and determine whether the QoE assurance analytics indicate that the QoE has been degraded, and if so, construct a fault correlation information model to be utilized for root cause analysis to determine a root cause of the QoE being degraded. The QoE assurance DSS also can determine, based upon the fault correlation information model, whether the root cause of the QoE being degraded is due to a capacity reduction, and if so, the QoE assurance DSS can identify a new network resource for capacity reallocation to accommodate a virtual machine migration.

Abstract: A service impact event analyzer is used to evaluate service assurance risk in cloud SDN networks. Using data fusion, an alarm subset dataset is generated from a raw trap dataset. Service impact events are identified in the subset dataset. The service impact events are categorized into service impacted event categories, and a model is created for associating the event categories with process function classes. Time durations of the service impact events are computed using correlated secondary alarms from the alarm subset dataset. The service assurance risk is evaluated using the model and the time duration.

Abstract: Concepts and technologies disclosed herein are directed to an auto-scaling software-defined monitoring (“SDM”) platform for software-defined networking (“SDN”) service assurance. According to one aspect of the concepts and technologies disclosed herein, an SDM controller can monitor event data associated with a network event that occurred within a virtualized IP SDN network that is monitored by a virtualized SDM resources platform. The SDM controller can measure, based upon the event data, a quality of service (“QoS”) performance metric associated with the virtualized SDM resource platform. The SDN controller can determine, based upon the QoS performance metric, whether an auto-scaling operation is to be performed. The auto-scaling operation can include reconfiguring the virtualized SDM resources platform by adding virtual machine capacity for supporting event management tasks either by instantiating a new virtual machine or by migrating an existing virtual machine to a new hardware host.

Abstract: Concepts and technologies disclosed herein are directed to context-aware virtualized control decision support system (“DSS”) for providing quality of experience (“QoE”) assurance for Internet protocol (“IP”) streaming video services. A QoE assurance DSS can monitor QoE event and context data to be utilized for QoE assurance analytics, measure QoE performance, perform QoE assurance analytics, and determine whether the QoE assurance analytics indicate that the QoE has been degraded, and if so, construct a fault correlation information model to be utilized for root cause analysis to determine a root cause of the QoE being degraded. The QoE assurance DSS also can determine, based upon the fault correlation information model, whether the root cause of the QoE being degraded is due to a capacity reduction, and if so, the QoE assurance DSS can identify a new network resource for capacity reallocation to accommodate a virtual machine migration.

Abstract: An IP network topology update system may update IP network topology in near real-time and on-demand with minimum overheads. It identifies likely impact area (e.g., layer 2 or layer 3), objects (e.g., link or node such a device), and timing (e.g.

Abstract: A method and an apparatus for detecting a port scan in a network are disclosed. For example, the method extracts statistics from a message, detects the port scan for a source internet protocol address, determines whether a port scan record exists for the source internet protocol address, creates a port scan record for the source internet protocol address that is extracted when the port scan record does not exist, determines an elapsed time when the port scan record does exist, wherein the elapsed time is determined as a difference between the time stamp that is extracted and a recorded time stamp, sets the recorded time stamp to be the extracted time stamp when the elapsed time is less than an intra-scan time, and determines the port scan has ended for the source internet protocol address when the elapsed time is not less than the intra-scan time.

Abstract: Concepts and technologies disclosed herein are directed to data-driven feedback control systems for an acceptable level of real-time application transaction completion rate in virtualized networks, while maximizing virtualized server utilization. According to one aspect disclosed herein, a network virtualization platform (“NVP”) includes a plurality of hardware resources, a virtual machine (“VM”), and a virtual machine monitor (“VMM”). The VMM can track an execution state of each of a plurality of applications associated with the VM. The VMM can measure a real-time application transaction completion rate of the VM. The VMM can determine whether a trigger condition exists for priority scheduling of real-time applications based upon the real-time application transaction completion rate and a pre-set threshold value.

Abstract: A method and an apparatus for detecting a port scan in a network are disclosed. For example, the method extracts statistics from a message, detects the port scan for a source internet protocol address, determines whether a port scan record exists for the source internet protocol address, creates a port scan record for the source internet protocol address that is extracted when the port scan record does not exist, determines an elapsed time when the port scan record does exist, wherein the elapsed time is determined as a difference between the time stamp that is extracted and a recorded time stamp, sets the recorded time stamp to be the extracted time stamp when the elapsed time is less than an intra-scan time, and determines the port scan has ended for the source internet protocol address when the elapsed time is not less than the intra-scan time.

Abstract: Concepts and technologies disclosed herein are directed to data-driven feedback control systems for an acceptable level of real-time application transaction completion rate in virtualized networks, while maximizing virtualized server utilization. According to one aspect disclosed herein, a network virtualization platform (“NVP”) includes a plurality of hardware resources, a virtual machine (“VM”), and a virtual machine monitor (“VMM”). The VMM can track an execution state of each of a plurality of applications associated with the VM. The VMM can measure a real-time application transaction completion rate of the VM. The VMM can determine whether a trigger condition exists for priority scheduling of real-time applications based upon the real-time application transaction completion rate and a pre-set threshold value.

Abstract: A processor may determine a message type of a message of a message set and extract strings from the message based upon the message type, each string associated with a field type within the message type. The processor may write one of the strings to a string table, when not already stored in the string table, and add an offset position of the string in the string table to a column list for the field type associated with the string, when not already stored in the column list. There may be different column lists for different field types. The processor may populate an entry of a data table corresponding to the message and to the field type associated with the string with an index of the offset position within the column list, and store a compressed version of the message set including the string table, column lists, and data table.

Abstract: Concepts and technologies disclosed herein are directed to an auto-scaling software-defined monitoring (“SDM”) platform for software-defined networking (“SDN”) service assurance. According to one aspect of the concepts and technologies disclosed herein, an SDM controller can monitor event data associated with a network even that occurred within a virtualized IP SDN network that is monitored by a virtualized SDM resources platform. The SDM controller can measure, based upon the event data, a quality of service (“QoS”) performance metric associated with the virtualized SDM resource platform. The SDN controller can determine, based upon the QoS performance metric, whether an auto-scaling operation is to be performed. The auto-scaling operation can include reconfiguring the virtualized SDM resources platform by adding virtual machine capacity for supporting event management tasks either by instantiating a new virtual machine or by migrating an existing virtual machine to a new hardware host.

Abstract: Concepts and technologies disclosed herein are directed to context-aware virtualized control decision support system (“DSS”) for providing quality of experience (“QoE”) assurance for Internet protocol (“IP”) streaming video services. A QoE assurance DSS can monitor QoE event and context data to be utilized for QoE assurance analytics, measure QoE performance, perform QoE assurance analytics, and determine whether the QoE assurance analytics indicate that the QoE has been degraded, and if so, construct a fault correlation information model to be utilized for root cause analysis to determine a root cause of the QoE being degraded. The QoE assurance DSS also can determine, based upon the fault correlation information model, whether the root cause of the QoE being degraded is due to a capacity reduction, and if so, the QoE assurance DSS can identify a new network resource for capacity reallocation to accommodate a virtual machine migration.

Abstract: A service impact event analyzer is used to evaluate service assurance risk in cloud SDN networks. Using data fusion, an alarm subset dataset is generated from a raw trap dataset. Service impact events are identified in the subset dataset. The service impact events are categorized into service impacted event categories, and a model is created for associating the event categories with process function classes. Time durations of the service impact events are computed using correlated secondary alarms from the alarm subset dataset. The service assurance risk is evaluated using the model and the time duration.

Abstract: Concepts and technologies are disclosed herein for a realtime dynamic virtual network topology discovery engine to discover a dynamic network topology in virtualized networks in realtime. A processor that executes a network topology discovery engine can obtain network data that can describe elements of a data center and operational state of the elements. Obtaining network data can include obtaining network data from a network topology inventory database and through detecting operational state change events from virtual network components. The processor can construct a network topology model based upon the network data. The network topology model can include an object (representing an element of the data center) and an attribute representing a state of the element. The processor can update the network topology model in realtime. The network topology model and configurations can be stored for root cause analysis of fault events, resource orchestration in SDN networks, and other applications.

Abstract: Concepts and technologies disclosed herein are directed to data-driven feedback control system for an acceptable level of real-time application transaction completion rate in virtualized networks, while maximizing virtualized server utilization. According to one aspect disclosed herein, a network virtualization platform (“NVP”) includes a plurality of hardware resources, a virtual machine (“VM”), and a virtual machine monitor (“VMM”). The VMM can track an execution state of each of a plurality of applications associated with the VM. The VMM can measure a real-time application transaction completion rate of the VM. The VMM can determine whether a trigger condition exists for priority scheduling of real-time applications based upon the real-time application transaction completion rate and a pre-set threshold value.

Abstract: A method and an apparatus for detecting a port scan in a network are disclosed. For example, the method extracts statistics from a message, detects the port scan for a source internet protocol address, determines whether a port scan record exists for the source internet protocol address, creates a port scan record for the source internet protocol address that is extracted when the port scan record does not exist, determines an elapsed time when the port scan record does exist, wherein the elapsed time is determined as a difference between the time stamp that is extracted and a recorded time stamp, sets the recorded time stamp to be the extracted time stamp when the elapsed time is less than an intra-scan time, and determines the port scan has ended for the source internet protocol address when the elapsed time is not less than the intra-scan time.

Abstract: Example methods and apparatus to monitor border gateway protocol sessions are disclosed. A disclosed example method includes detecting a failure of a first BGP session, initiating a sustained-down timer and a reset-timer in response to detecting the failure, identifying a sustained-down condition in response to the sustained-down timer exceeding a first time threshold, identifying a flapping condition in response to counting a threshold number of BGP failures and corresponding BGP re-establishments during a second time threshold of the reset-timer, and identifying a continuous flapping condition in response to detecting the flapping condition consecutively for a threshold number of instances.

Abstract: A method and apparatus providing a network topology management of a wireless communication network are disclosed. The method discovers network topology data of the wireless communication network, wherein the wireless communication network comprises a self-healing capability, and identifies a difference between the network topology data that is discovered against a stored network topology data of the wireless communication network. The method updates the stored network topology data with the difference that is identified.

Abstract: A method and system of managing network alarms including associating an alarm type with a plurality of network alarms using information associated with the plurality of network alarms, the information comprising a quantity of the plurality of network alarms and a cause of the network alarms; and processing the plurality of network alarms based on the alarm type associated therewith.

Abstract: A method and apparatus for collecting and processing line performance data transmitted over cables, e.g., Y-cables, is disclosed. The present invention applies a method based on specific performance measurements, specific measurement time intervals, and compare results from different measurement time intervals to produce a “signature” that indicates deteriorating performance of a particular Y-cable. Once a “signature” is detected, the method will proactively and automatically generate a trouble ticket to trigger the dispatch maintenance staffs to service the cable, e.g., to perform the replacement of the Y-cable in question, thus completing the predictive maintenance process. A trouble ticket is a record used to report and manage the resolution of network related problems.