Abstract: Methods and systems for granular segmentation of data networks are provided herein. Exemplary methods include: receiving from a metadata source event metadata associated with a workload; identifying a workload type using the event metadata; determining a high-level declarative security policy using the workload type; launching a compiler to generate a low-level firewall rule set using the high-level declarative policy and the event metadata; and configuring by a plurality of enforcement points a respective network switch of a plurality of network switches to process packets in accordance with the low-level firewall ruleset, the network switches being collectively communicatively coupled to a plurality of workloads, such that network communications between a first group of workloads of the plurality of workloads and the workload are not permitted, and between a second group of workloads of the plurality of workloads and the workload are permitted.

Abstract: Provided is a pharmaceutical composition containing ginkgolide B and the blood platelet prostaglandin cyclooxygenase inhibitor aspirin, a method for preparation of the pharmaceutical composition and a use thereof. When used together, ginkgolide B and aspirin have a synergistic effect in resisting platelet aggregation.

Abstract: A pot furnace for calcining petroleum coke at low temperature may include a pot, and a cooling water jacket and a flame path below the pot. The flame path may include eight layers. An inlet of a first flame path layer may be in communication with a volatile channel in the front wall, and is provided with a first flame path layer flashboard. An eighth flame path layer may be in communication with a communication flue. Flue gas may be discharged out of the furnace body through a main flue. A furnace bottom cooling channel may be provided below the eighth flame path layer.

Abstract: A pot furnace low temperature calcination process may ensure that, by controlling the flame path temperature and discharge speed of the pot furnace, that the range of the temperature at which the petroleum coke is calcined in the pot is from 1150° C. to 1220° C. and that the discharge speed is 10 to 20% higher than the normal discharge speed and reaches 110˜120 kg/h, reducing the amount of desulfurization of the petroleum coke during the calcination so that the true density of the calcined coke is between 2.05 and 2.07 g/cm3.

Abstract: A semiconductor device and a fabrication method thereof are provided. The semiconductor device includes a P type well region and an N type well region formed in a substrate, a gate insulating layer having a non-uniform thickness and formed on the P type well region and the N type well region, a gate electrode formed on the gate insulating layer, a P type well pick-up region formed in the P type well region, and a field relief oxide layer formed in the N type well region between the gate electrode and the drain region.

Abstract: A method and apparatus is disclosed herein for TCP SYN flood protection. In one embodiment, a TCP SYN flood protection arrangement comprises a first device operable to process packet input and output functions, including performing sender verification with respect to a connection initiation from a sender for a first TCP connection between the sender and a destination server and a second device, separate from the first device, to perform one or more security processing operations on packets of the first TCP connection from the sender after the first device verifies the sender is legitimate.

Abstract: A few-mode fiber is described, having a graded-index core and a surrounding cladding comprising a ledge between the core and the trench, a down-doped trench abutting the ledge, and an undoped cladding region abutting the trench. The fiber's refractive index profile is configured to support 9 or more LP modes for transmission of a spatially-multiplexed optical signal. Undesired modes have respective effective indices that are close to, or less than, the cladding index so as to result in leakage of the undesired modes into the outer cladding. The index spacing between the desired mode having the lowest effective index and the leaky mode with the highest effective index is sufficiently large so as to substantially prevent coupling therebetween.

Abstract: A system of mapping a cardiac image of single heart chamber and a method thereof are disclosed. In the system and method thereof, one heart chamber (such as a left atrium, a left ventricular, a right atrium, right ventricular or aortic structure) can be selected in a 3D-based cardiac image (such as a CT or MRI image), and slices of the selected heart chamber are reconstructed and unwrapped by a 2D mapping visual display manner. The visual display and required angle alignment planes for subsequent analysis will be adjusted and achieved by operator manually, with specific global and regional architectural analysis performed by automatic algorithm.

Abstract: The present invention relates to an optical clear resin and a method for producing a liquid optical clear photo-curable adhesive.

Abstract: Acrylate-terminated urethane polybutadienes are obtained by reaction of low-monomer 1:1 monoadducts of reactive olefinic compounds and diisocyanates with hydroxy-terminated polybutadienes.

Abstract: Systems for providing scanning within distributed services are provided herein. In some embodiments, a system includes a plurality of segmented environments that each includes an enforcement point that has an active probe device, and a plurality of workloads that each implements at least one service. The system also has a data center server coupled with the plurality of segmented environments over a network. The data center server has a security controller configured to provide a security policy to each of the plurality of segmented environments and an active probe controller configured to cause the active probe device of the plurality of segmented environments to execute a scan.

Abstract: A few-mode fiber is described, having a graded-index core and a surrounding cladding comprising a ledge between the core and the trench, a down-doped trench abutting the ledge, and an undoped cladding region abutting the trench. The fiber's refractive index profile is configured to support 9 LP modes for transmission of a spatially-multiplexed optical signal and has optimized maximum differential group delay (MDGD) through a wide range of wavelengths.

Abstract: Disclosed are a method and an apparatus for face verification. The apparatus comprises a feature extracting unit configured to extract HIFs (Hidden identity Features) for different regions of faces by using differently trained ConvNets, wherein last hidden layer neuron activations of said ConvNets are considered as the HIFs. The apparatus further comprises a verification unit configured to concatenate the extracted HIFs of each of the faces to form a feature vector, and then compare two of the formed feature vectors to determine if they are from the same identity or not.

Abstract: A system and method of operation of an image processing system includes: a capture image sequence module for receiving an image sequence; a calculate iteration depth map module for calculating an iteration depth map and a zero-crossing array; a calculate median depth map module for calculating a median depth map and a depth difference map; a calculate variance depth map module for calculating a variance depth map; a calculate image depth map module for calculating an image depth map based on the iteration depth map, the zero-crossing array, the median depth map, the depth difference map, and the variance depth map; and a calculate display image module for calculating a display image based on the received images and the image depth map for displaying on a display device.

Abstract: A lighting system, which is composed of a redundant power supply and at least one luminaire with a lamp control module contained therein. The lamp control module includes at least one light source and a light control module. The light control module includes a current control unit, at least one switch unit, and a processing unit. The current control unit is to control the DC current. The switch unit is electrically connected to the light source and enables the DC current source to selectively control DC current to at least one light source. The processing unit is used to adjust value of DC current. The luminaire includes the lamp control module, housing and power lines. The redundant power supply contains at least one AC-to-DC converter module, and the redundant power supply provides constant DC power to at least one light control module of the luminaire.

Abstract: Systems for providing scanning within distributed services are provided herein. In some embodiments, a system includes a plurality of segmented environments that each includes an enforcement point that has an active probe device, and a plurality of workloads that each implements at least one service. The system also has a data center server coupled with the plurality of segmented environments over a network. The data center server has a security controller configured to provide a security policy to each of the plurality of segmented environments and an active probe controller configured to cause the active probe device of the plurality of segmented environments to execute a scan.

Abstract: Disclosed is an apparatus for face verification. The apparatus may comprise a feature extraction unit and a verification unit. In one embodiment, the feature extraction unit comprises a plurality of convolutional feature extraction systems trained with different face training set, wherein each of systems comprises: a plurality of cascaded convolutional, pooling, locally-connected, and fully-connected feature extraction units configured to extract facial features for face verification from face regions of face images; wherein an output unit of the unit cascade, which could be a fully-connected unit in one embodiment of the present application, is connected to at least one of previous convolutional, pooling, locally-connected, or fully-connected units, and is configured to extract facial features (referred to as deep identification-verification features or DeepID2) for face verification from the facial features in the connected units.

Abstract: Systems for providing scanning within distributed services are provided herein. In some embodiments, a system includes a plurality of segmented environments that each includes an enforcement point that has an active probe device, and a plurality of workloads that each implements at least one service. The system also has a data center server coupled with the plurality of segmented environments over a network. The data center server has a security controller configured to provide a security policy to each of the plurality of segmented environments and an active probe controller configured to cause the active probe device of the plurality of segmented environments to execute a scan.

Abstract: Context aware microservice networks and contextual security policies for microservice networks are provided herein. In some embodiments, a system includes a plurality of microservices, each of the plurality of microservices having a plurality of distributed microservice components. At least a portion of the distributed microservice components execute on different physical or virtual servers in a data center or a cloud. The system also includes a plurality of logical security boundaries, with each of the plurality of logical security boundaries being created by a plurality of enforcement points positioned in association with the plurality of distributed microservice components. Each of plurality of microservices is bounded by one of the plurality of logical security boundaries.

Abstract: A method of demodulating a signal packet includes steps of: determining whether a pulse width of each of pulses of one of bits of the signal packet is associated with bit 0 or bit 1; updating first counting data associated with a number of the pulses that define bit 0, and determining whether the first counting data is greater than a first threshold value; deciding that said one of the bits of the signal packet is a bit 0; updating second counting data associated with a number of the pulses that define bit 1, and determining whether the second counting data is greater than the second threshold value; deciding that said one of the bits of the signal packet is a bit 1.