Abstract: Example of secure monitoring of modular applications and associated edge devices are described herein. In an example, an accreditation request is initiated to accredit at least one of a modular application and an edge device hosting the modular application. The edge device may a device coupling an IoT device to a cloud server. Based on initiating, accreditation information corresponding to at least one of the modular application and the edge device may be received. The accreditation information are generated by a hardware encryption device associated with the edge device. Further, an accreditation status of the modular application may be monitored during execution of the modular application to ascertain whether the modular application and the edge device have been tampered. In case tampering is detected, a remedial action to address the tampering may be performed.

Abstract: Systems and methods for providing security to an integrated circuit/processor and the processor cores in an endpoint device using a dynamic security architecture environment (DSAE) are disclosed.

Abstract: A malware detection method for detecting client participation in malware activity, in respect of a target subjected to a given attack by a client system, which is operable to run a given host application is disclosed a given security service provider is configured, which is operably coupled to the client system, to make accessible given attack information that is reported by a given attack target. An attack status query is transmitted to the security service provider from an agent that is operably coupled to the client system. In response to receiving the attack status query, the security service provider is configured to send attack information reported in respect of a given attack target to the agent, and configuring the agent to diagnose whether its corresponding client system potentially comprises an attack source of the given attack subjected on the attack target, on a basis of the received attack information.

Abstract: A technology is provided for mitigating an attack against a host service. Receive a connection from a client using a first cipher suite to authenticate the client. Identify that a distributed denial-of-service (DDoS) attack is occurring from a plurality of clients. Change the first cipher suite to a second cipher suite wherein the second cipher suite is more computationally intensive than the first cipher suite. Disconnect with the client and causing the client to reconnect using the second cipher suite.

Abstract: Example methods, apparatus, systems and articles of manufacture to implement cooperative mitigation of distributed denial of service attacks originating in local networks are disclosed. An example local network router disclosed herein includes a mitigator to mitigate a distributed denial of service attack detected by an Internet service provider, the distributed denial of service attack associated with network traffic originating from a first device connected to a local network. The example local network router also includes a threat signaling server to identify the first device based on first information received from a threat signaling client of the Internet service provider, the first information describing the distributed denial of service attack. The example threat signaling server is also to transmit second information to notify the threat signaling client of the Internet service provider when the network traffic associated with the distributed denial of service attack has been mitigated.

Abstract: An analyzer module (AM) within a same protected network and on-premise with a server detects and distinguishes between types of Denial-of-Service (DoS) attacks. The AM tracks whether test messages, which include test request messages that a signal generation module (SGM) is configured to transmit to the server according to a predefined time schedule to allow the AM to detect and distinguish between types of DoS attacks, are timely received. The AM is aware of the predefined time schedule according to which the SGM is configured to transmit the test request messages to the server. The AM detects an occurrence of a DoS attack and identifies the type of the DoS attack based upon the result of the tracking indicating that a number of the test messages have not been timely received.

Abstract: Systems and methods are provided for adaptively configuring and deploying honeypots in user compute resources. The methods select, based at least in part on a profile associated with a user account, a virtual machine image having a type and associated with a countermeasure. Cause a virtual machine to be launched in connection with a virtual network associated with the user account.

Abstract: Presented herein is a Security Edge Protection Proxy (SEPP) fully defined as a 5G network function (NF) that registers and is discoverable by consumer NFs. Inter-Public Land Mobile Network (PLMN) roaming connectivity polices enable the SEPP in the visiting PLMN to select the SEPP per producer NF-Type in the home PLMN, and to select a direct route between PLMNs or an indirect route via one or more an Internetwork Packet Exchange (IPX) providers.

Abstract: Techniques for location based security in service provider networks (e.g., service provider networks for mobile subscribers) are disclosed. A system/process/computer program product for location based security in service provider networks includes monitoring network traffic on a service provider network at a security platform to identify a location for a new session; associating the location with the new session at the security platform; and determining a security policy to apply at the security platform to the new session based on the location.

Abstract: A compliance checker to verify that a device complies with a policy is described. In one embodiment, the compliance checker comprises a compliance checker agent, to initiate the compliance check, in response to receiving the request, and an encryption checker to obtain an original data and a data stored on the storage. The system further comprising a comparator to determine whether known data read from the upper driver is identical to known data read from the lower driver. The compliance checker plug-in in one embodiment verifies the compliance status of the device, based on the data from the comparator.

Abstract: Disclosed are various examples that relate to adjusting a stringency of offline policy restrictions based on a situational context of a computing device. In one example, a system can receive an offline restriction policy for an application. The offline restriction policy comprises one or more rules that are associated with one or more actions. The system can cause the one or more actions to be performed during an offline period of time in an instance in which one of the rules is satisfied. The offline period of time representing time periods when the system does not have a network connection with a management system. The system can cause a first authentication action to be performed in an instance in which a first condition of the system satisfies a first rule. The system can also cause a second authentication action to be performed in an instance in which a second condition of the system satisfies a second rule.

Abstract: A method performed by an endpoint connected to a network. The method includes computing a security score for the endpoint and providing the security score and a requested domain name to a domain name service (DNS) resolver using a DNS request. The endpoint obtains a DNS response including an Internet Protocol (IP) address resolved by the DNS resolver based on the security score and the requested domain name. The endpoint then accesses the IP address obtained from the DNS resolver.

Abstract: Conventional email filtering services are not suitable for recognizing sophisticated malicious emails, and therefore may allow sophisticated malicious emails to reach inboxes by mistake. Introduced here are threat detection platforms designed to take an integrative approach to detecting security threats. For example, after receiving input indicative of an approval from an individual to access past email received by employees of an enterprise, a threat detection platform can download past emails to build a machine learning (ML) model that understands the norms of communication with internal contacts (e.g., other employees) and/or external contacts (e.g., vendors). By applying the ML model to incoming email, the threat detection platform can identify security threats in real time in a targeted manner.

Abstract: Methods, apparatus, and processor-readable storage media for generating security policies for end-user devices using group rankings and partial policy determinations are provided herein. An example computer-implemented method includes ranking end-user device groups within an enterprise, wherein each of the groups is associated with one or more security-related policy settings; assigning a given end-user device to two or more of the groups based on device parameters attributed to the given end-user device; generating a policy for the given end-user device by performing partial policy determinations across the two or more groups to which the given end-user device is assigned, wherein performing the partial policy determinations comprises defining, in an order based at least in part on the ranking of the groups, security-related settings from the two or more groups, until all security-related settings required by the policy are defined; and outputting the policy to the given end-user device.

Abstract: Embodiments herein provide a method for handling IMDN message in a RCS system. The method includes sending, by a first electronic device 100a, an IMDN restore message to restore a content deleted by the first electronic device 100a to at least one second electronic device 100b-100n. The IMDN restore message comprises an IMDN type with an original IMDN identifier of the deleted content. Further, the method includes receiving, by the at least one second electronic device 100b-100n, the IMDN message from the first electronic device 100a. Further, the method includes determining, by the at least one second electronic device 100b-100n, the deleted content based on the IMDN identifier. Further, the method includes sending, by the at least one second electronic device 100b-100n, the deleted content to the first electronic device 100a.

Abstract: A method for discovering an interface session within a wireless communication network is discussed herein. The method includes establishing an Internet Protocol (IP) packet-switched network registration between a first node of a plurality of nodes within the wireless communication network and a second node of the plurality of nodes. The method further includes, requesting, by a third node of the plurality of nodes from a fourth node of the plurality of nodes, service for a call of a mobile device within the wireless communication network. Based upon not having an appropriate interface session established between the first node and the fourth node, the method also includes performing, by the fourth node, an interface session discovery. Based at least in part on the interface session discovery, a dedicated bearer is established at the second node for the call.

Abstract: Systems and methods of the present disclosure are directed to providing remote control capabilities in information technology infrastructure. In particular, systems and methods of the present disclosure can provide remotely control capabilities to facilitate the management, configuration, or maintenance of information technology infrastructure.

Abstract: An example method of blockchain-enabled peer-to-peer communications is provided. The method is implemented in a communications system employing a peer-to-peer call network to provide communications capabilities between endpoints (nodes) of the call network. The system supports a distributed ledger system which enables the propagation of signaling data to initiate communications between nodes and for recording call data to provide an open, tamper-resistant log of activity on the network. Further, the system supports decentralized applications executable at nodes of the call network to customize call handling based on user preferences. In particular, the system may further support a distributed file system associated with the call network to store internal state data of the decentralized applications. The decentralized applications may thus be executed on individual, relevant nodes of the call network (i.e. relevant to the communications channel).

Abstract: A method for registering a User Equipment, UE, with low access priority in an Internet Protocol based Multimedia Subsystem, IMS, network said method comprising the steps of receiving, by a Proxy-Call Serving Control Function, P-CSCF node comprised by said IMS network, a Session Initiation Protocol, SIP, Register message for registering said UE in said IMS network, determining, by said P-CSCF node, that said SIP Register message comprises an indication that said UE is using a low access priority, wherein said low access priority indicates at least a reduced priority for said UE for accessing network resources, and establishing, by said P-CSCF node, said registration of said UE with said determined low access priority indication. Complementary methods and devices for performing a method according to the invention are also presented herein.

Abstract: Systems and methods for allocating quality of service (QoS) to real-time communication sessions between user equipment via a communication network are provided. Such systems and methods include identifying an encoding scheme to be used for the communication session, determining a QoS requirement for the communication session based upon the encoding scheme, and determining whether a general communication channel (e.g., a non-GBR channel) of the network meets the QoS requirement. When the general communication channel meets the QoS requirement, a corresponding bearer is used for the communication session. When the general communication channel does not meet the QoS requirement, a bearer associated with a dedicated communication channel (e.g., a GBR channel) is used. Thus, communication sessions using higher quality encoding schemes may be established through general communication channels, reducing congestion in dedicated communication channels.

Abstract: During a call session between a first user equipment (UE) and a second UE managed by a call application server, the first UE can send a request to a conference application server to upgrade the call session to a meeting session. The conference application server can set up the meeting session. Once the first UE and the second UE have joined the meeting session with the conference application server, the first UE and the second UE can end their legs of the original call session with the call application server. The first UE and the second UE can transition their user interfaces from a call mode to a meeting mode upon joining the meeting session, such that users are seamlessly transitioned from a call to a meeting.

Abstract: System and methods for running conference applications before, during, and after a network conference. In an embodiment, a method is provided for running a conference application before joining a network conference. The method includes activating a client application, selecting a conference application from a plurality of conference applications, running the conference application from the client application before joining a network conference, and joining the network conference using the client application.

Abstract: Methods and systems are provided for collaborating in the discovery of Head-Mounted Devices (HMDs) configured for hosting a co-located virtual, augmented, or mixed reality (xR) session. An HMD issues a request to join a co-located xR session. Participating in a co-located xR session requires a joining HMD to obtain authorization from a host HMD. A joining HMD may be located such that direct communications between the joining HMD and the host HMD are either unreliable, or beyond the capabilities of two HMDs. The joining HMD may collaborate with neighboring HMDs to obtain authorization from a host HMD. The host HMD aggregates information from joining HMDs to determine the authorized HMDs and to determine the most reliable forms of direct communication between each pair of HMDs participating in the xR session.

Abstract: Embodiments of the present disclosure provide methods, systems, apparatuses, and computer program products for servicing a group-based communication workspace add request within a group-based communication system.

Abstract: A method for controlling a stream buffer in a media playback device includes: receiving a data stream from a download buffer of the media playback device at a processing rate; buffering the data stream in the stream buffer at a buffering rate; performing a pre-parsing operation on the data stream buffered in the stream buffer to obtain a pre-parsed result; and selectively adjusting at least one of the processing rate and the buffering rate according to the pre-parsed result.

Abstract: A user device receives a first media item that is associated with a second media item. The device determines that a playback state for the device indicates that the device is paired with an alternative playback device. The device sends the playback state in a request for the second media item, receives the second media item in a first format for playback on the user device and in a second format for playback on the alternative playback device. The device determines whether the playback state of the device is the same. The device displays a first graphical representation of the second media item in the first format on the user device if the user device is no longer paired with the alternative playback device and displays a second graphical representation of the second media item in the second format on the user device if the user device is still paired with the alternative playback device.

Abstract: An AI platform is fully integrated with existing VoIP/AVoIP telephony infrastructure. In the course of providing VoIP/AVoIP audiovisual calls, a VoIP/AVoIP media stream of audiovisual content is processed, and transferred between endpoints. AI processing is applied to each frame of the transferred audiovisual content, in real-time while the audiovisual call is occurring. For example, automated speech recognition can be performed on the content, in which the speech of the audiovisual content is converted to text. The audiovisual call can further be automatically transcribed to a text file in real-time. Another example is the automatic detection of the occurrence of specific triggers during calls. Additional enhanced functionality is automatically provided as a result of applying the AI processing to the transferred audiovisual content. For example, in response to detecting the occurrence of a specific trigger, a corresponding directive can be automatically output on a screen of a calling device.

Abstract: A receiver driven approach for playback of remote content is described. One embodiment includes obtaining information concerning the content of the media file from the remote server, identifying a starting location within the media sequence, identifying byte ranges of the media file corresponding to media required to play the media sequence from the starting location, requesting the byte ranges required to play the media sequence from the starting location, buffering received bytes of information pending commencement of playback, playing back the buffered bytes of information, receiving a user instruction, identifying byte ranges of the media file corresponding to media required to play the media sequence in accordance with the user instruction, flushing previous byte range requests, and requesting the byte ranges required to play the media in accordance with the user instruction.

Abstract: Systems and methods for dynamically weighting media segments and paths in a structured media presentation are disclosed. The structured media presentation can be, for example, a video tree representing a branching video presentation and defining multiple branches, each defining a path of one or more video content segments. Different portions of the video tree are associated with weights, and during playback of the branching video presentation, a video content segment is automatically selected for presentation based on one or more of the associated weights.

Abstract: The present disclosure relates to a communication technique for converging IoT technology with a 5G communication system for supporting a higher data transmission rate than a 4G system, and a system therefor. The present disclosure may be applied to intelligent services based on 5G communication technology and IoT-related technology (e.g. smart homes, smart buildings, smart cities, etc.). A method for receiving image data for a virtual-reality streaming service by an electronic device according to an embodiment of the present invention comprises: a step in which the electronic device determines whether to execute an adaptive virtual-reality streaming service on the basis of a bandwidth state; and a step in which, if it is determined to execute the adaptive virtual-reality streaming service, the electronic device requests and receives, from a server, the image data for the adaptive virtual-reality streaming service on the basis of head-tracking information and bandwidth information collected in advance.

Abstract: Systems, methods, and computer-readable storage media for streaming content, and specifically browser content, across devices in a mesh network. This occurs by receiving, at a first mobile device in mesh network, instructions from a second mobile device in the mesh network, the instructions directing the first mobile device to load content from a website, where the instructions are sent based on the second mobile device loading the content from the website. The first mobile device receives the content from the website, loads/processes the website content, and displays the content. When the first mobile device receives a patch directed to modifications to a Document Object Model (DOM) in the content which occurred on the second mobile device, the first mobile device modifies the content on the first mobile device based on the patch.

Abstract: A method of allowing a remote client to control a garden plot is described. The garden plot may be provided with electronically controlled watering devices for remote watering of the garden plot and a 360 degree zoom camera for remote viewing of the gardening plot. The method may include an application server for receiving client instructions, one or more modules for optimizing a planting layout, handling watering instructions, handling camera instructions, handling harvesting instructions, and conducting a virtual and/or local farmer's market to maximize use of the harvest.

Abstract: Systems, apparatuses, methods, and computer-readable media, are provided for offloading computationally intensive tasks from one computer device to another computer device taking into account, inter alia, energy consumption and latency budgets for both computation and communication. Embodiments may also exploit multiple radio access technologies (RATs) in order to find opportunities to offload computational tasks by taking into account, for example, network/RAT functionalities, processing, offloading coding/encoding mechanisms, and/or differentiating traffic between different RATs. Other embodiments may be described and/or claimed.

Abstract: Embodiments of the present disclosure provide a method, a device and a vehicle for message deduplication. The method includes: determining a node relationship with each publishing node by a subscribing node based on property information of the publishing node under the same topic as the subscribing node; determining a communication mode with each publishing node according to the node relationship; registering management modules corresponding to different communication modes according to the communication modes, so that after receiving a service message from the publishing node, a management module determines which subscribing nodes the service message is transmitted to based on a registration content and a unique identification of the publishing node carried in the service message. The service message may be transmitted to the corresponding subscribing node based on the registration content specifying the publishing node from which the service message is received under a certain communication mode.

Abstract: A method for provisioning resources to a user during a meeting with another user, each user having an associated computing device is provided. The method may include detecting a meeting of a first user with a second user, each of the first and second users having an associated computing device. The method may further include obtaining historical data relating to previous activity of at least one of the first and second users during one or more earlier meetings between the first and second users. The method may further include provisioning one or more resources to at least one of the first and second users based on the obtained historical data associated with the one or more earlier meetings.

Abstract: An apparatus and a method for reducing power consumption of an Application Processor (AP) in an electronic device are provided. The electronic device includes a first processor for supporting a first Internet Protocol (IP) Multimedia Subsystem (IMS) protocol stack, and a second processor for supporting a second IMS protocol stack. The first processor includes an AP for processing a multimedia service, and the second processor includes at least one of a Communication Processor (CP), a Modem Processor (MP), and a Baseband Processor (BP) for processing a communication service.

Abstract: A control device may transmit electrical signals to a wireless hub to control of a display device, in a first zone, registered to the wireless hub. The control device may receive, from the wireless hub based on a user initiated source change, a control signal to assign buttons for control of the display device. The control device may transmit to the wireless hub a first signal, based on a voice command, to control content and a second signal, based on a gesture command, for a source change on the display device.

Abstract: Techniques for coordinating an action between devices are described. According to one or more implementations, a first device is designated as a reporter of an action type, and a second device is designated as a subscriber to the action type. In at least one implementation, the action type represents an action that can occur at an end user device. The first device and the second device include a platform agnostic code module that enable the devices to exchange communications, such as via an intermediate coordinator. When the first device detects that an instance of the action type occurs, the first device reports the action via the platform agnostic code module, and the second device is notified of the action via the platform agnostic code module.

Abstract: Methods and systems for load balancing are described. A network node may replicate content. A lag time may be determined. A data structure may be generated that comprises the lag time.

Abstract: In some example implementations, there is provided a method. The method may include receiving, at a broker interfacing a system, a request to identify whether an executable component is available at one or more cloud service providers; querying a repository at the broker to determine whether the executable component is available at the one or more cloud service providers, the querying of the repository performed based on a hash code identifying the executable component; obtaining, based on a result of the querying, the executable component to the system, when the repository querying indicates that the executable component is available at the one or more cloud service providers; and providing to the system at least one of the obtained executable component or an indication that the executable component is not available at the one or more cloud service providers. Related systems, methods, and articles of manufacture are also provided.

Abstract: The computer implemented invention provides a method, corresponding systems and arrangement within a network for detecting changes in the topology, ordering those changes by occurrence and constructing a new topology reflecting the changes. The invention addresses problems with keeping the knowledge of the network topology at each network node current, particularly when the network topology is dynamic, i.e. when links fail and recover at arbitrary times. The topology updating is event driven, as it is activated when some change in the network, particularly with nodes and links occurs. Events cause topology changes to be reported to other nodes in the network. Timestamping of messages allows the messages to be correctly applied as the most recent update or discarded. An algorithm is provided that allows each merchant node to maintain a correct view of the network topology despite link and node failures.

Abstract: An example operation may include one or more of receiving, by a lead peer, a new block from an orderer node over a blockchain network that includes a plurality of peers, acquiring, by the lead peer, a shared memory handler for a channel of the blockchain network from an anchor peer, appending, by the lead peer, the new block to a shared memory buffer based on the handler, and notifying the plurality of the peers that the new block is available on the shared memory buffer.

Abstract: A method, an apparatus, and a system for playing a scene animation are provided. The method includes: obtaining, by a server, scene data corresponding to a plurality of first accounts. The scene data is data generated by a plurality of first clients, each first client being logged in with one of the plurality of first accounts. The method also includes: determining, by the server according to the scene data, whether a predetermined trigger condition of playing a target scene animation is met; and sending a control message to each of the plurality of first accounts when the predetermined trigger condition of playing the target scene animation is met. The control message is used to instruct each of the plurality of first clients to synchronously play the target scene animation.

Abstract: A storage controller of a network controlled content recording system that uses a combination of network and local storage determines to record content for a user. The storage controller performs an evaluation to determine whether to store the content in network or local storage. The evaluation may include evaluating a set of rules and/or characteristics of the user, characteristics of the content, characteristics of a request to record the content, and so on. The storage controller then arranges for the content to be recorded accordingly. Subsequently, the storage controller may reevaluate storage locations and direct transfer accordingly. This reevaluation may include determining that various characteristics related to the user, the content, and so on have changed and that transfer is appropriate due to that change.

Abstract: An apparatus comprises a first host device that is configured to communicate over a network with a storage system. The first host device is configured to obtain information on a bandwidth usage by a second host device of one or more ports of the storage system and to determine a bandwidth limit of the one or more ports of the storage system. The first host device is further configured to submit data to the one or more ports at a given bandwidth that is determined based at least in part on the obtained information and the determined bandwidth limit of the one or more ports of the storage system.

Abstract: Systems, methods, and techniques to access and decode vehicle information are provided. The method includes generating a request for a manufacturer server to transmit an option code to a central server based at least on a vehicle identification number received from a client device. The method further includes decoding, at a decoding module operating at the central server, the option code to generate an option that is present on a vehicle referenced by the vehicle identification number. The decoding includes mapping, by the decoding module and based on a conversion mapping, the option code to the option accessed at an option code database in communication with the central server and the decoding module. The decoding further includes generating option data including the option. The method further includes transmitting the option data to the client device for display at the client device.

Abstract: A process of identifying suspicious object movements in an incident location. An electronic computing device obtains incident information identifying a time of occurrence and a location of an incident. The electronic computing device identifies internet-of-things (IoT) devices deployed in the incident location and accesses received signal strength indication (RSSI) information associated with a selected IoT device. The RSSI information includes historical RSSI values that were captured at the IoT device during the time of occurrence of the incident. The electronic computing device generates a suspicious object movement pattern corresponding to the at least one IoT device based on variations within the historical RSSI values that were captured at the at least one IoT device during the first time period. A display or audio output device provides a corresponding visual or audio output indicating the suspicious object movement pattern corresponding to the IoT device.

Abstract: An electronic apparatus and method of controlling the electronic apparatus are provided.

Abstract: The disclosure relates to sharing of information regarding a conditional action in an electronic device. The device includes a communication module for processing a signal for communication with other devices, and a processor. Herein, the at least one processor receives a ruleset including information regarding at least one conditional action from another electronic device via the communication module, and executes the ruleset. The ruleset may include at least one ruleset of which a permission for at least one of reading, modification, and deletion is limited.

Abstract: Monitoring and control of power or drive couplings in mechanical drive systems is performed using sensors at an interface of the coupling and an overload disengagement component at the coupling. A local sensor and actuation module having a wireless communication port receives signals from the sensors and uses the signals to monitoring a load on the drive coupling. An overload disengagement circuit responsive to the monitored load and provides a disconnect signal responsive to a sensed overload condition, and communicates with the local sensor and actuation module using an Internet of Things (IoT) link, using a blockchain enablement protocol. The local sensor and actuation module provide an override capability in the event of a communication failure of the IoT link.