Abstract: Methods and systems for mitigating a spoofing-based attack include calculating a travel distance between a source Internet Protocol (IP) address and a target IP address from a received packet based on time-to-live information from the received packet. An expected travel distance between the source IP address and the target IP address is estimated based on a sparse set of known source/target distances. It is determined that the received packet has a spoofed source IP address based on a comparison between the calculated travel distance and the expected travel distance. A security action is performed responsive to the determination that the received packet has a spoofed source IP address.

Abstract: A system and method for selecting an optimal path in a multi-media multi-path network. The system for selecting an optimal path in a multi-media multi-path network includes a memory storing a program for selecting an optimal path in the multi-media multi-path network and a processor for executing the program, wherein the processor uses a network performance parameter, which serves as state information, as an input value of a reinforcement learning algorithm and selects an optimal path using a Q-table obtained by applying the reinforcement learning algorithm.

Abstract: Methods and systems for path selection involving remote access protocols and/or user behavior are described herein. A request, from a first computing device, for content hosted on a second computing device may be received. Based on network state metrics, remote access protocol metrics, and/or user experience metrics, a path of a plurality of paths between the first computing device and the second computing device may be selected. The path need not be the most direct path between the first computing device and the second computing device, and may comprise remote access to a computing device on an intermediary server. Based on user behavior analysis performed with respect to user input data, a path may be re-selected, and/or the network state metrics, remote access protocol metrics, and/or user experience metrics may be weighted.

Abstract: Provided is a communication device within a communication network including a plurality of communication nodes, including: a reception unit that receives a data packet transmitted from a terminal device or transmitted to the terminal device; a communication control unit that selects a forwarding destination node of the data packet from a plurality of forwarding destination node candidates when the terminal device is a machine-type communication (MTC) terminal; and a transmission unit that transmits the data packet to the forwarding destination node selected by the communication control unit.

Abstract: Examples relate to dynamic allocation of hash table resources. In one example, a computing device may: receive, from a particular lookup function of a plurality of lookup functions, a lookup request; identify, based on the particular lookup function, a logical hash table that corresponds to the particular lookup function, the logical hash table mapping to at least one physical hash table resource; obtain, from one of the at least one physical hash table resource, response data that is responsive to the lookup request; and provide the response data to the particular lookup function.

Abstract: A distributed seismic system, “MyShake”, which collectively harnesses sensor data from smartphones to determine earthquake onset, and generate warnings through the self-same phone network. The system can record magnitude 2.5 or larger earthquakes, and provides on-phone detection capability to separate earthquake shake data from other every-day shakes of the phone. The earthquake data is collected at a central site where a network detection algorithm confirms that an earthquake is underway and estimates the location and magnitude in real-time. This information is used to issue an alert of forthcoming ground shaking, such as through the network of phones for an early earthquake warning system.

Abstract: ISP-free methods, systems and products may include requesting, by a requester, the information from a source, and then passing, such as pushing or pulling, the information from the requester to a controller comprising a director and an optimizer. Further, the method may include receiving instructions from at least one directory, wherein each of the at least one directory is associated with at least one router in a plurality of routers. Further still, the method may include creating, by the optimizer in communication with the at least one directory, a routing plan for routing the information over at least a portion of the plurality of routers. And, yet further, the method may include directing, based on the creating and by the director in communication with the optimizer, placement of the information on one or more of the plurality of routers. Thereafter, routing may commence without connectivity from an ISP.

Abstract: Provided are a system and a method for providing navigation service for disabled people. The present invention crawls information necessary for free movement for a wheelchair on a road or a sidewalk, generates a database in which relevant road information is reflected, and provides navigation service based on the generated database, thereby enabling a disabled person to safely move to a destination.

Abstract: A method implemented by a network device for multicasting packets in a network. The method reduces an overall number of hops that copies of a packet traverse in the network to serve a set of multicast destination nodes. The method includes receiving a packet, determining a first subset of multicast destination nodes that is a subset of the set of multicast destination nodes that is reachable on a shortest path through a first outgoing interface, determining a second subset of multicast destination nodes that is a subset of the set of multicast destination nodes that is reachable on a shortest path through a second outgoing interface, determining whether the first subset of multicast destination nodes is a proper subset of the second subset of multicast destination nodes, and removing the first outgoing interface from consideration in response to determining that the first subset is a proper subset of the second subset.

Abstract: In one aspect, an example method includes (i) accessing, by a computing device, a first Internet Protocol (IP) address that encodes first attributes of a first profile; (ii) accessing, by the computing device, a second IP address that encodes second attributes of a second profile; (iii) comparing, by the computing device, the first IP address and the second IP address using a network layer communication function; (iv) determining, by the computing device, that a result of the comparing satisfies a threshold condition; and (v) based on the result of the comparing satisfying the threshold condition, providing, by the computing device to another device, an indication of a match between the first profile and the second profile.

Abstract: A high speed intelligent network recorder for recording a plurality of flows of network data packets into and out of a computer network over a relevant data time window is disclosed. The high speed intelligent network recorder includes a printed circuit board; a high speed network switching device mounted to the printed circuit board; and an X column by Y row array of a plurality of intelligent hard drives with micro-computers mounted to the printed circuit board and coupled in parallel with the high speed network switching device.

Abstract: An apparatus includes a first communication interface configured to be communicatively coupled, via an optical line, to a network device that is disposed in an optical network using wavelength division multiplexing (WDM). The apparatus also includes a second communication interface configured to be communicatively coupled to a router via an Ethernet connection. The apparatus also includes a signal generator operatively coupled to the first communication interface and the second communication interface. The signal generator is configured to generate an Ethernet signal representing at least one attribute of the optical line between the first communication interface and the network device. The second communication interface is configured to transmit the Ethernet signal to the router.

Abstract: A method includes identifying one or more elephant flows operated by a plurality of user equipment (UE) terminals located in a first coverage area, comparing the one or more elephant flows to threshold characteristics, determining whether the coverage area is congested, causing handover of the plurality of UE terminals from the first coverage area when the one or more elephant flows exceed the threshold characteristics and the first coverage area is congested.

Abstract: Methods and systems for admitting new streaming sessions while preventing latency variations of existing sessions from exceeding their respective limits, including the steps of: receiving a request to establish a new streaming session over a new path, in presence of an existing streaming session that is established over an existing path. Estimating, before the new streaming session is established, an estimated end-to-end latency variation of the existing streaming session, supposing the new streaming session is established over the new path. Determining, by comparing the estimated end-to-end latency variation with the limit, a determination that the estimated end-to-end latency variation exceeds the limit. And rejecting the request, based on the determination.

Abstract: A system and method for a sensor-based monitoring that includes a computer system, smart nodes, and an RFID reader device. The system collects data to measure health condition of a plurality of people at an event. The computer system determines candidate cluster heads with above average battery level. The smart nodes determine a subset of the candidate cluster heads that are within communication range, retrieve battery level of the determined subset of cluster heads, and select a cluster head having the highest battery level. The selected cluster head announces selection as the selected cluster head, receives requests to join a cluster, reads sensor data of the body sensor in each joined smart sensor as collective sensor data for the cluster, and sends the collective sensor data to the computer system via the RFID reader. Information is collected from smart nodes in an efficient manner for large-scale monitoring systems.

Abstract: A method is described and in one embodiment includes receiving a packet of a traffic flow at an ingress node of a communications network; routing the packet to an egress node of the communications network via a first path comprising a tunnel if the packet was received from a node external to the communications network; and routing the packet to the egress node of the communications network via a second path that does not traverse the tunnel if the packet was received from a node internal to the communications network. The first path is identified by a first Forwarding Information Base (“FIB”) entry corresponding to the flow and the second path is identified by a second FIB entry corresponding to the flow.

Abstract: A method including receiving, at a first router of a plurality of routers, a first message from the plurality of routers. The first message includes a designated router priority and a weight for each respective router. Based on the designated router priorities, a designated router is elected and a one or more eligible group designated routers are determined. The method determines whether the first router is the designated router or the at least one eligible group designated router. If the first router is the designated router, the first router provides a second message to the remaining routers indicating the eligible group designated routers and their weights.

Abstract: Techniques to dynamically configure target bitrate for streaming network connections are described.

Abstract: A method includes generating an active route (AR) between a first network element (NE) and a second NE, the AR includes a first route between an active core device (ACD) and the first NE and a second route between the ACD and the second NE, transmitting data between the first NE and the second NE through the AR sending an identity and a state of a first gateway interface that is connected to the first NE and is included in the ACD to a standby core device (SCD), the SCD generates a standby route (SR) between the first NE and the second NE, the SR includes a third route between the SCD and the first NE and a fourth route between the SCD and the second NE; and when a fault occurs on the first route, transmitting the data between the first NE and the second NE through the SR.

Abstract: Some examples herein disclose a load balancer to identify a service function among multiple service functions based on an available capacity. The load balancer modifies a switch address in the packet and distributes the packet to the identified service function based on the modified switch address.

Abstract: The invention relates to a Communications system, in particular, a software defined networking communications system, comprising at least one network device comprising at least one data forwarding unit configured to forward at least one data packet, wherein the network device comprises at least one first peer-to-peer module, wherein the first peer-to-peer module is configured to communicate with at least one peer-to-peer application of at least one peer-to-peer network, wherein the peer-to-peer application comprises at least one controlling means configured to manage at least the network device.

Abstract: An SFC-based communications method and system, and an apparatus are provided. The SFC includes a CF node, an SFF node, and an SF node, and the SFF node is connected to the SF node. The method includes: receiving, by the CF node, a first message from the SFF node; obtaining, by the CF node, network topology information of the SFC based on the first message; obtaining, by the CF node, an SFC forwarding table, where the SFC forwarding table is determined based on the network topology information of the SFC; and sending, by the CF node to the SFF node, a second message used to indicate the SFC forwarding table. In this way, a network topology of the SFC can be flexibly and efficiently discovered.

Abstract: Methods and systems for indicating vulnerability of streaming sessions to additional latency variations, including the steps of: determining a threshold, based on a limit associated with an allowable end-to-end latency variation of a first session. Estimating the end-to-end latency variation of the first streaming session. Determining that the estimated end-to-end latency variation is higher than the threshold. Setting a first vulnerability indicator of the first streaming session at the first output port to a first level. Setting a second vulnerability indicator of a second existing streaming session at a second output port of a second switch to a second level, based on first level of the first vulnerability indicator. Receiving requests to establish new streaming sessions over first and second new paths passing through the first and second output ports. And rejecting the requests based on the first and second vulnerability indicators.

Abstract: Disclosed are various embodiments for managing which location-based service zones to monitor within a geographic region. An active zone defining a geographic region and location-based service zones within the geographic region is provided by another computing device. The selection of a subset of the location-based service zones to monitor within an active zone can be based on an estimated current device location and/or other parameters.

Abstract: Systems and methods may be used to map and collect data from a mesh network at a gateway device connecting a plurality of devices (e.g., edge devices, IoT devices, sensors, or the like) to a network. A method may include determining a shortest path tree (SPT) map of the plurality of devices, the shortest path tree map may define the mesh network for the plurality of devices connected to the gateway. The method may include sampling data throughout the mesh network based on a compressive sensing (CS) sampling schedule. The sampled data may be output, such as to a remote device via the network. The sampled data may be saved at the gateway.

Abstract: A system and method for modifying services provided by one or more network devices. A processor of a first network device identifies defined events in each of a plurality of applications, including a first defined event associated with a first application. The processor assigns a signal-route to each defined event. The processor then executes the first application and, when the processor detects occurrence of the first defined event during execution of the first application, the processor modifies services provided by a second network device by adding the first signal-route to or removing the first signal-route from a routing information base (RIB) on the first network device and advertising, to the second network device, the change in the RIB.

Abstract: Methods and systems for establishing new streaming sessions based on capabilities of their destinations, including the steps of: receiving a request to establish a new streaming session over a new path, in presence of an existing streaming session. Receiving capabilities of a destination of the new streaming session. Allocating for the new streaming session a limit for an allowable end-to-end latency variation thereof, based on the capabilities. Estimating, before the new streaming session is established, an estimated end-to-end latency variation of the new streaming session, supposing it is established over the first path. Determining, based on comparing the estimated end-to-end latency variation with the limit, that the estimated end-to-end latency variation exceeds the limit. And rejecting the request, based on the determination.

Abstract: Methods and apparatus optimize settings of a wireless communication network via an abstractor. The abstractor receives an event sent by the wireless communication network. The abstractor receives one or more proposed settings from one or more optimizers of the wireless communication network. The abstractor transmits one or more predicted values to the one or more optimizers. The predicted values predict the effect that the one or more proposed settings will have on the wireless communication network.

Abstract: An expedited preflight readiness system for aircraft includes a power source having one or more battery modules for storing electrical power. An integrated controller is electrically and communicatively coupled with the power source for monitoring and controlling the power source to provide electrical power to aircraft subsystems. A mobile device is communicatively coupled with the integrated controller for communicating instructions to the integrated controller for initiating preflight readiness of the aircraft and for monitoring preflight readiness. A method for preconditioning an aircraft includes determining a state-of-charge of an APU and activating an environmental control subsystem for preconditioning the aircraft by adjusting a current temperature according to a preconditioning profile based on one or more of a target temperature, a target time, the current temperature, an outside air temperature, an amount of energy, and a state-of-charge of the APU.

Abstract: A system includes a wireless communication device that joins a wireless communication network. Specifically, the wireless communication device measures a quality metric of the wireless communication network in response to a trigger to join the wireless communication network. The wireless communication device determines whether the quality metric indicates a high quality environment or a low quality environment for communicating signals. In response to the quality metric indicating the high quality environment, the wireless communication device selects a first pathway with an optimum transmission time between the wireless communication device and a central controller of the wireless communication network. In response to the quality metric indicating a low quality environment, the wireless communication device selects a second pathway comprising an optimum quality link between the wireless communication device and another wireless communication device in the wireless communication network.

Abstract: A plurality of SYN packets is sent from a first system, each of the plurality of SYN packets traverses a different path in a first set of paths between the first system and a second system in a multipath data communication network and includes a unique source identifier. From a plurality of SYN-ACK packets, a SYN-ACK packet is selected that is first to arrive at the first system. Each SYN-ACK packet includes a unique source identifier of a selected SYN packet. A path is configured corresponding to the selected SYN packet, as an outbound path from the first system. A path corresponding to the selected SYN-ACK packet is configured as an inbound path to the first system. A session between the first and the second systems is established using the outbound and inbound paths.

Abstract: Methods, apparatus and articles of manufacture (e.g., physical storage media) to perform service specific route selection in communication networks are disclosed.

Abstract: Embodiments of systems and methods for network modelling include determining a device representation of each device on a network. A normalized device representation associated with a device representation of each device is determined using a library of device representation parser functions. A static network map of the network is generated based on each normalized device representation. A routing protocol peering session is established between each device and a routing protocol server using a routing protocol. A status of each device and each link is determined based on updates from each routing protocol peering session. A live map of the network is generated based on the status of each device. Configuration errors and network errors are determined based at least in part on the static network map and the live map, and routing errors are determined based at least in part on a comparison between protocol prefixes and predetermined network invariants.

Abstract: Embodiments of the present invention provide a streaming media play mode determination method and apparatus. The method includes: acquiring a streaming media play status in a current play mode, where the current play mode corresponds to a set of parameters for reflecting software and hardware states corresponding to a current play environment; calculating a candidate play mode according to the current play mode, if the streaming media play status satisfies a preset condition; and judging whether the current play mode is the same as the candidate play mode, and determining a play mode for streaming media to be played according to a result of the judgment. The embodiments of the present application provide a mechanism for intelligently selecting the streaming media play mode, make it possible to intelligently calculate the matching degrees of various types of algorithms in the current environment, enabling a best play mode to be preferentially selected.

Abstract: A device receives network data associated with a network that includes a peer network with network devices interconnected by links, and receives constraints associated with determining traffic assignments for the network. The device determines traffic and costs associated with the network based on the network data, and determines traffic assignments based on the traffic and the costs associated with the network, the constraints, and a model for the constraints. The device determines tunnel use based on the traffic assignments, and determines peer link use based on the tunnel use. The device determines costs associated with the traffic assignments, the tunnel use, and the peer link use for the network, and generates traffic plans based on the traffic assignments, the tunnel use, the peer link use, and the costs. The device causes one of the traffic plans to be implemented in the network by the network devices and the links.

Abstract: A method of selecting an egress interface for a source process running on an electronic device is provided. The device implements a TCP/IP stack utilized by a plurality of applications for sending network packets. The method receives a packet from a particular application in the plurality of applications to send to a network destination over a socket tagged with an identifier of the particular application. The method compares the socket tag with a set of network egress interface tags. Each network egress interface tag is associated with a network egress interface in a plurality of network egress interfaces. Each network egress interface tag includes the identifier of an application that utilizes the network egress interface. The method selects a network egress interface with a tag that matches the socket tag. The method sends the packet to the network destination through the selected network egress interface.

Abstract: Connectivity between data centers in a hybrid cloud system having a first data center managed by a first organization and a second data center managed by a second organization, the first organization being a tenant in the second data center, is optimized. According to the described technique, a path-optimized connection is established through a wide area network (WAN) between a first gateway of a first data center and a second gateway of a second data center for an application executing in the first data center based on performance of paths across a set of Internet Protocol (IP) flows. Application packets received from the application at the first gateway are forwarded to a WAN optimization appliance in the first data center. WAN optimized application packets received from the WAN optimization appliance at the first gateway are then sent to the second gateway over the path-optimized connection.

Abstract: Machine instructions, referred to herein as a long Convert from Zoned instruction (CDZT) and extended Convert from Zoned instruction (CXZT), are provided that read EBCDIC or ASCII data from memory, convert it to the appropriate decimal floating point format, and write it to a target floating point register or floating point register pair. Further, machine instructions, referred to herein as a long Convert to Zoned instruction (CZDT) and extended Convert to Zoned instruction (CZXT), are provided that convert a decimal floating point (DFP) operand in a source floating point register or floating point register pair to EBCDIC or ASCII data and store it to a target memory location.

Abstract: A hybrid routing-application network fabric apparatus is presented where a fabric apparatus has multiple apparatus components or resources that can be dedicated to one or more application topologies. The apparatus can receive a topology image definition file describing an application topology and the apparatus can dedicate its local components for use with the application topology. The apparatus can dedicate general purpose processing cores, dedicated routing cores, data channels, networking ports, memory or other local resources to the application topology. Contemplated application topologies include routing topologies, computation topologies, database topologies, storage topologies, or other types of application topologies. Furthermore, application topologies can be optimized by modeling or simulating the topologies on a network fabric.

Abstract: An example method of optimizing connectivity between data centers in a hybrid cloud system having a first data center managed by a first organization and a second data center managed by a second organization, the first organization being a tenant in the second data center. The method includes probing a wide area network (WAN) with test packets by varying an internet protocol (IP) flow tuple of the test packets across a set of IP flows. The method includes identifying a plurality of paths between a gateway of the first data center and another gateway of the second data center associated with the set of IP flows. The method further includes selecting an IP flow from the set of IP flows for an application executing in the first data center. The method further includes establishing a path-optimized connection between the gateway and the other gateway through the WAN having the selected IP flow for use by the application.

Abstract: A method of handling multipath connections in a Public Land Mobile Network (PLMN). The method comprising the steps of determining within the PLMN that a path, established across the PLMN, is a backup path of a multipath connection and providing an explicit indication to one or more nodes within the PLMN that the path is a backup path using a protocol layer that is otherwise unaware of the multipath connection. The method further comprises the step of, at the or each notified node, applying a handling to the path that is differentiated from the handling of non-backup paths.

Abstract: A network discovery service provides pattern-based techniques to discover relationships between hosts in a network employing address translation. Agents are deployed to hosts of the network. To configure an agent, the discovery service obtains outbound transmission data from the agent, which indicates outbound network transmissions that were established by the host. One or more unique outbound transmission patterns are provided to the agent, based on analysis of the outbound transmission data. Inbound transmission data is then received from the agents. The inbound transmission data indicates transmission events at the host devices, as well as the source for each of the open and close events. The inbound transmission data is analyzed to identify occurrences of the outbound transmission patterns. Based on the analysis, communication relationships between the host devices is determined. In some cases, communication relationships between individual processes on different hosts may be determined.

Abstract: A T-SDN controller including a T-LSP manager, a temporal path element, a T-TED, a T-LDB, a T-LSPDB, and a network interface. The T-LSP receives a path request including time intervals and a set of constraints. The temporal path element obtains traffic engineering information and computes a path satisfying time intervals and a set of constraints. The T-TED reserves bandwidth corresponding to the path during the time intervals upon request by the T-LSP manager. The T-LDB reserves labels for the links during the time intervals upon request by the T-LSP manager. The T-LSPDB stores the time intervals, the set of constraints, the labels, and the bandwidth. The network interface permits the T-LSP manager to communicate with the nodes in the network to establish a temporal LSP along the path as computed.

Abstract: A device for recording user operation data for a remotely controlled vehicle includes a memory off-board the remotely controlled vehicle and a housing receiving the memory. The memory is configured to record user operation data comprising outgoing operation commands that affect operation of the remotely controlled vehicle. The outgoing operation commands are received via a remote controller of the remotely controlled vehicle and transmitted to the remotely controlled vehicle. The housing is removable from the remote controller and more resistant to destruction than the rest of the remote controller.

Abstract: One or more techniques and/or systems are provided for automatically forming a wireless sensor network, implementing power management for the wireless sensor network, and/or self-healing within the wireless sensor network. For example, hub devices, configured to forward messages through the wireless sensor network to a gateway device having access to a network, may automatically join and configure into the wireless sensor network by locating and connecting to master devices using signal frequencies representing numbers of hops to the gateway device. A hub device may be configured to transition between a low power sleep state for power conservation and an awakened normal operational state for transmitting timing signals according to a duty cycle, and thus the hub device may be capable of operating from a battery. If a hub device determines that a master device has become inoperable, the hub device may automatically search for a new master device.

Abstract: A multicast method for Segment Routing includes, in a Segment Routing network with a plurality of nodes, wherein Segment Routing utilizes globally significant labels as node identifiers such that path state installation is only required at an ingress node of a Segment Routing domain, advertising a multicast flow by a source node; determining roles in the multicast flow for the plurality of nodes; and installing appropriate forwarding behavior for the multicast flow at the plurality of nodes based on the determined roles. The advertising can utilize Interior Gateway Protocol (IGP). For the multicast flow, source node segments are used to construct source routed trees rather than destination-based paths, wherein the source routed trees define broadcast paths, versus destination-based paths which are used in Segment Routing to define a node segment.

Abstract: A wireless connection device for establishing a connection path between a parent device and a child device through one more relay devices includes one or more processors that determines whether the signal strength between the child device and each of the relay devices is greater than or equal to a first threshold value; when the signal strength is determined to be greater than or equal to the first threshold value, selects, from among a plurality of possible communication paths for which the signal strength has been determined to be greater than or equal to the first threshold value, a communication path that minimizes a hop count; and, when the signal strength is less than the first threshold value for all of the plurality of possible communication paths, selects, from among the plurality of possible communication paths, a communication path that has the largest signal strength.

Abstract: A network device operates as a node in a wireless mesh communication network. The device includes a wireless communication interface to couple the device to adjacent nodes via respective direct communication links. The device stores routing data indicating, for each of multiple destination devices, via which of the adjacent nodes packets can be routed to the corresponding destination device along a respective routing path. In a first instance, the network device receives a packet from an adjacent node, determines that the packet includes data for a destination device referenced by the routing data, and sends the packet to the destination device, in accordance with the routing data. In a second instance, the network device determines that a packet includes an update related to one of the routing paths, updates the routing data in accordance with the update, and sends the packet to one or more of the adjacent nodes.

Abstract: In a Shortest Path Bridge (SPB) network comprising a plurality of backbone edge bridges (BEBs), a gateway controller of the SPB network, establishes a link using Multicast Source Discovery Protocol (MSDP) with an external network domain; discovers via the link a source of a multicast stream originating outside of the SPB network; and determines a subset of the plurality of BEBs that are able to receive the multicast stream from the source. Once that occurs, the gateway controller selects a one of the subset of the plurality of BEBs to be a sole gateway BEB for the multicast stream; and then transmits to each of the subset of the plurality of BEBs an indication of the sole gateway BEB selected for the multicast stream.

Abstract: Managing connectivity to synchronously replicated storage systems, including: identifying a plurality of storage systems across which a dataset is synchronously replicated; identifying a host that can issue I/O operations directed to the dataset; identifying a plurality of data communications paths between the host and the plurality of storage systems across which a dataset is synchronously replicated; identifying, from amongst the plurality of data communications paths between the host and the plurality of storage systems across which a dataset is synchronously replicated, one or more optimal paths; and issuing, to the host, an identification of the one or more optimal paths.