Abstract: A method to associate a set of first entities to a set of second entities, e.g., computing jobs to processors, agent teams to workspace resources within a physical location, or the like. The NG is seeded using a force directed graph (FDG), whose “seed” particles represents the agents and their relative interconnectedness. The FDG is first brought into an equilibrium state to define a solution space. A relative coordinate system of the FDG solution space is then translated to a number of vertices represented in the NG, and then an initial seeding of the seed particles in the NG (based on their relative positions in the FDG solution space) is carried out. A search is then performed. During the search, each seed vertex releases its embedded agents to adjacent vertices to enable the agents to search for and achieve a required count.

Abstract: A user device containing sensors is delivered customized services without utilizing private user data or while only using it in highly constrained ways. This is accomplished by sending one or more queries to the user device. Each query requests a binary response and each query inquires whether or not the user device has obtained one or more specified parameter values, or range of parameter values, from one or more sensors incorporated in or in communication with the user device. For each query a binary response is received, which indicates that the user device has or has not obtained the one or more specified parameter values, or the range of parameter values, about which the respective query is inquiring.

Abstract: A network device includes a memory configured to store a plurality of entries in respective locations in the memory, the plurality of entries corresponding to a trie data structure for performing a longest prefix match search. The network device also includes: a memory access engine configured to retrieve from a location in the memory, in a single memory lookup operation, i) longest prefix match information for a node corresponding to a network address in a header of a packet, and ii) pointer information that indicates a child node in the trie data structure. The network device also includes: a child node address calculator configured to use i) the longest prefix match information, and ii) the pointer information, to calculate a memory address of another location in the memory corresponding to the child node.

Abstract: A method in a client device for updating network configuration parameters, the method comprising: establishing a connection between the client device and an access point connected with a set of other client devices; detecting a connectivity event at the client device; generating a configuration verification request containing current network configuration parameters of the client device; transmitting the configuration verification request for delivery to the set of other client devices; responsive to transmitting the configuration verification request, receiving a configuration verification response from a responding one of the other client devices; and responsive to the configuration verification response indicating non-matching connectivity conditions at the responding client device, initiating a network reconfiguration process at the client device to obtain new network configuration parameters.

Abstract: Disclosed is a method performed by a network equipment for controlling handover of a User Equipment (UE) from a source network node to a target network node. The method comprises providing, for the UE and for the target network node, information comprising a representation of a UE-specific sequence, where the UE-specific sequence is to be incorporated in a signal, the signal to be transmitted by the target network node to enable the UE to initiate a radio link establishment procedure with the target network node based on a reception of a signal comprising said UE-specific sequence.

Abstract: The disclosure describes examples where a first data center includes a first gateway router, a first set of computing devices, and a second set of computing devices. The first set of computing devices is configured to execute a software defined networking (SDN) controller cluster to facilitate operation of one or more virtual networks within the first data center. The second set of computing devices is configured to execute one or more control nodes to exchange route information, between the first gateway router and a second gateway router of a second data center different than the first data center, for a virtual network between computing devices within the second data center, and to communicate control information for the second data center to the second set of computing devices, wherein the one or more control nodes form a subcluster of the SDN controller cluster.

Abstract: An apparatus for managing data in a network is provided. The apparatus includes a memory, and a processor configured to identify a first leader device and a second leader device in a swarm comprising a plurality of devices based device parameters, receive a request for downloading data, download, as the first leader device, the data from a content device in response to the request, store the downloaded data to the memory, transmit the data to the second leader device, and divide the swarm into a first sub swarm comprising the first leader device and a second sub swarm comprising the second leader device.

Abstract: A method and user equipment for receiving channel status information-reference signals (CSI-RSs) from a base station (BS) in a wireless communication system, are discussed. The method includes receiving, through a higher layer, configuration about two or more CSI-RS; and receiving, from the BS, the CSI-RSs based on the configuration, wherein, when the configuration includes an indicator related to antenna ports of the two or more CSI-RS, the CSI-RSs are received on the assumption that the antenna ports for two or more CSI-RS resources are same.

Abstract: Embodiments of the invention relate to determining a mobile communication device's location, even if the mobile communication device does not have an active data connection. Embodiments of the invention also relate to achieving connectivity between a mobile communication device not having an active data connection and to another mobile communication device, server computer, or third-party computer.

Abstract: A packet processing method and apparatus are presented. The method includes: generating, by a first node, a first packet based on first data of the first node, where the packet header of the first packet includes a service type, a final destination address, and residual times to aggregation (RTA); when the RTA of the first packet is not 0, determining, by the first node, a remaining capacity in a first cache corresponding to the service type and the final destination address; and when a data length of the first packet is not greater than the remaining capacity, aggregating, by the first node, the first packet and the second packet into a third packet, where the RTA of the third packet is a minimum value in the RTA of the second packet and a value obtained after 1 is subtracted from the RTA of the first packet.

Abstract: Disclosed are: a communication method for incorporating an IoT technique with a 5G communication system for supporting a higher data transmission rate than that of a 4G system or a subsequent system; and a system therefor. The present invention can be applied to intelligent services (for example, services related to smart homes, smart buildings, smart cities, smart cars or connected cars, health care, digital education, retail business, security, safety, and the like) on the basis of a 5G communication technique and IoT-related techniques.

Abstract: Disclosed in the present specification are a method for transmitting and receiving a signal including a physical protocol data unit (PPDU) in a wireless LAN (WLAN) system and an apparatus therefor. Specifically, disclosed in the present specification are a method for transmitting and receiving a signal and an apparatus therefor, which, in a PPDU supported by a specific wireless LAN system, can minimize an overall length error (also known as “spoofing error”) of the PPDU that is assumed to occur between a station capable of decoding all fields in the PPDU and a station capable of decoding only some fields in the PPDU.

Abstract: Ameliorating initial link setup in manage networks, self-organizing networks (SONs), systems, etc. of the type having capabilities sufficient to facilitate operations according to a common methodology is contemplated. The contemplated processes and systems may include ameliorating initial link setup when operating pursuant to the Fast Initial Link Setup (FILS) protocol defined in the Institute of Electrical and Electronics Engineers (IEEE) specification 802.11ai with use of a self-organizing network (SON) server to facilitate access point selection.

Abstract: Systems and methods are provided to allow configuration of network devices via a Bluetooth® (or other short range wireless) configuration network using a mesh network implementation. This configuration mesh network may represent a mesh network independent of any active wired or production network within an enterprise computer system. For security of a network infrastructure for the enterprise computer system, wired ports on network infrastructure devices may be disabled prior to configuration via the configuration mesh network. New devices may be physically but not communicatively connected to the production network (e.g., cables may be connected to disabled ports) and then configuration may be performed via the configuration mesh network to allow the new devices to become active (e.g., join with production devices) within the network infrastructure. Run-time configurations for production devices may also be maintained using a separate configuration mesh network.

Abstract: Methods of establishing an entry corresponding to equal-cost paths, network devices and non-transitory machine-readable storage mediums are provided. In one aspect, a network device assigns an inner label and an outer label for each of N paths configured to be equal cost with each other between the network device and a destination network device, wherein the respective inner labels corresponding to the paths are same with each other; createestablishes a FIB entry, wherein the FIB entry includes an address of the destination network device, the number of ECMP entries in an ECMP table corresponding to the paths, and the same inner label, and the number of ECMP entries in the ECMP table is equal to a preset fixed value; and assigns at least one ECMP entry for each of the paths based on the number N of the paths and the fixed value.

Abstract: One or more wireless stations operate to configure direct communication with neighboring mobile stations, e.g., direct communication between the wireless stations without utilizing an intermediate access point. A wireless station may be configured to perform a method to accelerate discovery of a peer device after an out-of-band triggering event. For example, a wireless device may detect an out-of-band triggering event and activate a wireless interface capable of peer-to-peer communications in response. The wireless device may transmit one or more discovery messages (e.g., discovery beacons, active subscribe messages, and/or unsolicited publish messages) over the wireless interface immediately after activation of the wireless interface to aid in discovery of the peer device. The one or more discovery messages may be transmitted as service discovery frames. The wireless device may perform service discovery over the wireless interface with the peer device post discovery.

Abstract: A method for enhanced use of a switching fabric within a central office point of delivery of a broadband access network of a telecommunications network includes: transporting data packets to or from a specific remote access node using a pseudo wire, wherein the pseudo wire spans at least the specific remote access node and the switching fabric. Using the pseudo wire comprises using first header label information for a data packet to be received by the specific remote access node and using second header label information for a data packet sent from the specific remote access node. Segment routing of the data packets is used involving third header label information for the data packet to be received by the specific remote access node and involving fourth header label information for the data packet sent from the specific remote access node.

Abstract: Systems and methods address automated ring owner selection for a ring topology network. A new ring owner may be selected based on failure of a current ring owner. The new ring owner may assume a ring ownership role by a) detecting a missing Ownership Select Message (OSM); b) detecting missing Continuity Check Protocol (CCP) messages; and c) determining that the current ring owner is an adjacent network module connected via an external link of a management network. A signal fail (SF) condition may also be present. Upon detection of adequate role changing conditions, a new ring owner may assume a ring ownership role, transmit an OSM and possibly select a new active uplink.

Abstract: A method for facilitating communications between client devices in geographically separated networks is described. First, message monitoring is conducted by each of a plurality of virtual appliances within a local network to detect a message of a first message type. Responsive to failing to locate a Media Access Control (MAC) address of a destination for the message within a prescribed table by a default gateway, one of the plurality of virtual appliances is selected for handling a forwarding of the message to a plurality of remote networks, and the message via the selected virtual appliance is forwarded to a plurality of gateways associated with a plurality of remote networks. Responsive to locating the MAC address of the destination within the table, the virtual appliance previously handling communications with the destination to forward the message to the destination.

Abstract: An ALUA path selection system includes a networking device in a networking fabric that couples a host device to a storage subsystem. The networking device receives a host device communication generated by the host device and retrieves a host device hop count that identifies a number of hops between the host device and the networking device. The networking device also receives a storage subsystem communication generated by the storage subsystem and retrieves a storage subsystem hop count that identifies a number of hops between the storage subsystem and the networking device. When the networking device receives a hop count request from the host device, it transmits the host device hop count and/or the storage subsystem hop count to the host device, and the host device uses the host device hop count and/or the storage subsystem hop count to select an active-optimized path to a LUN included in the storage subsystem.

Abstract: An electronic device and method are disclosed herein. The electronic device includes a communication circuit, a processor and a memory. The memory stores instructions implementing the method executable by the device, including: establishing a communication group having a first attribute with a first external electronic device by establishing wireless communication with the first external electronic device via the at least one communication circuit, changing the attribute of the communication group from the first attribute to a second attribute while the communication group is maintained, and when wireless communication with a second external electronic device via the communication group is requested, establishing wireless communication with the second external electronic device by the communication group having the second attribute.

Abstract: A method for router configuration includes: at a router, collecting DHCP server presence data of a local area network; at the router, collecting NAT server presence data of the local area network; generating a network configuration status based upon the DHCP server presence data and the NAT server presence data; and configuring DHCP server and NAT server settings of the router based on the network configuration status.

Abstract: The technologies described herein are generally directed toward establishing a domain of authority for routing table updates from a routing device. According to an embodiment, a system can comprise a processor and a memory that can enable operations facilitating performance of operations including identifying a route update that comprises information about a network. According to the embodiment, the operations can further include communicating, via the network, the route update to a second routing device for propagation of the route update to routing devices in a first authority domain with the first routing device.

Abstract: The present invention concerns a method for recording a central control unit (U) belonging to a home-automation facility (17); the method being executed by a user terminal (T) and comprising the following steps: establishing (ELRT2) a connection between the user terminal (T) and at least one central control unit (U); creating (ELRT3) a facility identifier (StID); sending (ELRT4) a discovery message (MD); receiving (ELRT5, ELRT8) at least one signalling message (MLRSU) transmitted by at least one central control unit (U, U1, U2) for the facility (17) linked with a unique identifier (UID) of said central control unit (U, U1, U2), recording (ELRT6, ELRT9) an attachment of the at least one identifier (UID) of the at least one central control unit (U, U1, U2) to the identifier of the facility (StID).

Abstract: A method for improved service creation within a telecommunications network includes the following steps: in a first step, a resource-up-message is received by a corresponding specific central access port of at least one point of delivery; in a second step, subsequent to the first step, a lookup request is transmitted to at least one central database, the lookup request comprising port identification information of a specific physical access resource and/or device identification information and/or subscriber identity module identification information and/or user identification information; and in a third step, subsequent to the second step, database response information is received by the at least one point of delivery, the database response information being related to customer identification information and/or to service attributes information of a communication service or a plurality of communication services to be configured.

Abstract: Embodiments of the invention provide systems and methods for applying a patch or a change to a set of binary modules executing on and used by resources of a computing cluster while reducing the downtime of those resources. According to one embodiment, applying a patch to a plurality of binary modules on a computing cluster can comprise identifying resources on one or more of a plurality of nodes of the cluster. Additionally, each of the plurality of binary modules on one or more of the nodes of the cluster can be identified. A graph can be generated logically representing the cluster. Groups within the binary modules and resources can be identified based on the graph. Patches can be applied to the binary modules based on the identified groups. Patching binary modules based on the identified groups can comprise patching all of the binary modules of an identified group together.

Abstract: According to some embodiments, a business intelligence data store contains semantic layer information. A business intelligence language platform may receive a business intelligence language query expression from a user. The business intelligence language platform may then access the mapping information in the business intelligence model data store to compute an output type describing a result structure entity for the query expression. According to some embodiments, the output type may be used to automatically recommend at least one visualization chart to the user. Moreover, in some embodiments the output type is annotated with meta-data information about a business object.

Abstract: A method in an embodiment includes detecting a change for a virtual machine in a virtual server of a virtual network infrastructure, determining whether a virtual security appliance is configured in the virtual server, and sending a request to create the virtual security appliance in the virtual server. The method further includes allowing the virtual machine to initiate when the virtual security appliance is created in the virtual machine. The virtual security appliance performs security inspections on network packets sent from the virtual machine. In more specific embodiments, the method further includes creating an intercept mechanism in the virtual server to intercept the network packets from the virtual machine. In further embodiments, one or more security policies identify one or more virtual security appliances to process the network packets from the virtual machine.

Abstract: Methods and systems are provided for clinicians in a medical environment to remotely assess the status of an asset without physically going to the specific place where the asset is located. By using sensors and special purpose rooms, the methods and systems provide an accurate view of what is going on with the asset. Furthermore, the methods and systems can be extrapolated to a patient's status (knowing if the patient is asleep or awake, or when the patient wakes up post anesthesia—this would imply that the patient wears a tag).

Abstract: A display method and apparatus are disclosed. The method includes: joining, by a first device, a device group, where the device group includes N devices, any two devices in the N devices can communicate with each other, and N?2; receiving, by the first device, a first selection operation entered by a user, where the first selection operation is used to trigger the first device to communicate with a second device in the device group; sending, by the first device, a first screen projection request to the second device in response to the first selection operation, where the first screen projection request is used to request to project a display interface of the second device onto a display screen of the first device; receiving display data in the display interface of the second device that is sent by the second device; and displaying based on the display data.

Abstract: Adjusting backhaul and fronthaul communication links of wireless mesh networks are described. A wireless mesh network has a topology including fronthaul communication links and backhaul communication links. In one aspect, characteristics of network data packets transmitted within a wireless mesh network can be identified. Based on those characteristics, the topology of the wireless mesh network can change.

Abstract: Application Delivery Controller (ADC), Global Server Load Balancer (GSLB), and methods for their operation in data networks are disclosed. The methods for load balancing may include receiving a query concerning a host name from a client, determining that there are two or more host servers associated with the host name, measuring various metrics associated with each of the two or more host servers and a local Doman Name Server (DNS), and based at least in part on the measurement, selecting a host server among the two or more host servers. The load balancing may also be based on a measured round trip time.

Abstract: Layer 2 refers to the Data Link layer of the commonly-referenced multilayered communication model, Open Systems Interconnection (OSI). The Data Link layer is concerned with moving data across the physical links in the network. Embodiments of the invention provide a Layer 2 and management modification to provide and maintain an accurate network map. Embodiments of the invention modify Layer 2 functionality to work with a multi-AP system without central management or with central management, and modify management frames to quickly update the network map when the client roams or when topology changes.

Abstract: A method for location aware networking in a wireless ad-hoc network having a plurality of wireless nodes in a geographic area comprising: dividing the geographic area into a plurality of grids; determining a location of a particular wireless node; determining a corresponding grid where the particular wireless node resides; determining a cluster head for the corresponding grid; connecting corresponding wireless nodes in the corresponding grid to the cluster head, wherein the cluster head of the corresponding grid periodically gather data from the corresponding wireless nodes, aggregate the data and transmits the data to a gateway; and coupling the cluster head of the corresponding grid to cluster heads of each of the plurality of grids forming a pathway to the gateway, the cluster head of the corresponding grid transmitting the data through the pathway or directly to the gateway.

Abstract: Apparatuses, methods, and systems are disclosed for beam switching. One apparatus (200) includes a transmitter (210) that transmits (402) information indicating a beam switch request, measurement results, or some combination thereof, wherein the information indicates a list of beams, and the information is based on a trigger event, the measurement results, or some combination thereof.

Abstract: An apparatus schedules communications in a wireless communication system comprising a plurality of wireless stations (103-107) operable to communicate wirelessly with each other in accordance with a time division multiple access scheme. The apparatus comprises a receiver (303) for receiving resource requests from the plurality of wireless stations (103-107). A scheduler (305) schedules air interface resource to communications between the plurality wireless stations by allocating time intervals in repeating scheduling intervals. A transmitter (301) transmits scheduling messages providing indications of the scheduling to the plurality of wireless stations (103-107). An adapter (307) adapts a duration of at least one scheduling interval of the repeating scheduling intervals in response to the resource requests from the plurality of wireless stations (103-107).

Abstract: Systems and methods for reducing the amount of messages transmitted in large-scale distributed mesh networks are disclosed. Network components include transceivers and memory storing instructions which, when executed by a processing unit, reduce transmissions made by the transceiver within the network. The instructions executed by processing unit could (1) create an expiration parameter to limit the number of times a signal is retransmitted, (2) form groups of network components from which one or a few of the group network components are designated to respond on behalf of the group, (3) keep advertising transmissions dormant by default until called upon, (4) employ a time delay parameter for a time interval in which no transmission may be made, and (5) include message IDs in control signals that are transmitted.

Abstract: Embodiments of an Evolved Node-B (eNB) and methods for transition between idle and connected modes are disclosed herein. The eNB may receive uplink data packets from a User Equipment (UE) using a lightweight Radio Resource Control (RRC) connection between the eNB and the UE. The eNB may transmit an RRC connection release message to the UE to indicate a transition of the UE to an RRC idle mode for the RRC connection. The RRC connection release message may include an indicator of whether the UE is to store context information for the RRC connection. The eNB may further receive additional uplink data packets according to the stored context information using a lightweight RRC connection.

Abstract: A network device communicates with a first terminal device by using a first communication link, the first terminal device communicates with at least one second terminal device by using at least one second communication link the network device receives a measurement report sent by the first terminal device, where the measurement report includes at least one piece of measurement data; and sends to the first terminal device, indication information of a communication link change policy determined based on the at least one piece of measurement data, where the indication information is used to instruct the first terminal device to perform change processing on a communication link based on the communication link change policy, where the communication link includes at least one of the first communication link or the second communication link.

Abstract: A link state packet transmission method and a routing node are disclosed. The method is applied to a tree topology, where the tree topology includes a leaf routing node, an intermediate routing node, and a root routing node. The method includes: receiving, by the intermediate routing node, a link state packet sent by a child routing node of the intermediate routing node; sending, by the intermediate routing node, the link state packet to the root routing node, where the root routing node is configured to aggregate received link state packets to obtain a link state packet set; receiving, by the intermediate routing node, the link state packet set sent by the root routing node; and sending, by the intermediate routing node, the link state packet set to the child routing node of the intermediate routing node.

Abstract: Methods and systems, including devices, which allow for the rapid detection of malware and other threats, such as malicious intrusions and attacks, are disclosed. These methods and systems, including devices, detect malware and other threats by detecting and analyzing lateral movement of the malware and other threats, once having entered a network, such as an enterprise network.

Abstract: A method for providing stateful proxying is disclosed, comprising: associating a first base station with a first base station identifier at a signaling protocol gateway, and with a first Internet Protocol (IP) address of the signaling protocol gateway; associating a second base station with a second base station identifier at the signaling protocol gateway, and with a second IP address of the signaling protocol gateway; establishing a first signaling protocol connection between a third base station and the first base station via the signaling protocol gateway with the first base station using the first IP address of the signaling protocol gateway; and establishing a signaling protocol connection between the third base station and the second base station with the second base station using the second IP address of the signaling protocol gateway.

Abstract: A system and method for graph-based publication/subscription are provided. A graph comprising nodes and edges is created, each node representative of a point of interest in an information domain, each edge linking a first node and a second node and representative of a relationship between a first and a second point of interest. A request to publish content on at least one selected node and/or at least one selected edge is received. A request to subscribe to a subset of nodes and/or a subset of edges is received from a subscriber. The subscription request is correlated with the publication request to determine whether the subset of nodes comprises the selected node and whether the subset of edges comprises the selected edge. The content is notified to the subscriber if the subset of nodes comprises the selected node and the subset of edges comprises the selected edge.

Abstract: A load control system may include devices for performing communications for controlling an amount of power provided to an electrical load. The devices may include load control devices that may communicate by transmitting digital messages. A user device having an adjustable wireless communication range may be used for discovering devices, configuring devices, and/or diagnosing devices in the load control system. The user device may detect whether devices are within an established wireless communication range of one another for performing communications. The user device may detect digital messages transmitted from a device and/or digital messages received at a device to determine whether the digital messages are correctly communicated in the load control system. The user device may provide an indication to a indicating whether a digital message is correctly transmitted or received by a device in the load control system.

Abstract: Aspects of the present disclosure generally relate to wireless communication. For example, aspects of the present disclosure provide techniques for determining one or more modulation orders to be used for the communication of control channels and/or data channels. An exemplary method, performed by a UE, may include receiving downlink control information (DCI) that allocates resources for a communication, the DCI may include a first field that indicates a transport block size (TBS) of the communication and a second field, different from the first field, that indicates a modulation order of the communication, wherein the communication includes a transmission or a reception, and processing the communication according to the indicated modulation order. Numerous other aspects are provided.

Abstract: Systems, methods, and other embodiments are disclosed to control a display of objects. In one embodiment, a project plan is displayed which includes multiple task nodes linked together by control nodes over a timeline. An instruction is received to generate and link a new task node between two of the task nodes in response to choosing a control node between the two task nodes. A task create window is displayed which includes input fields to input task information to specify the new task node. In response to the task information being input, the new task node is created and linked between the two task nodes. The timeline is adjusted based on the new task node to generate an updated timeline of the project plan. An updated project plan is displayed which includes the multiple task nodes and the new task node linked together over the updated timeline.

Abstract: A system and method for building a data structure for determining if multiple routing or forwarding tables yield the same or different forwarding behaviors. VeriTable uses a single tree/trie traversal to quickly check if multiple forwarding tables are forwarding equivalent, yield routing loops, or black holes. VeriTable also uses the Longest Prefix Matching rule for lookups, e.g., checking if route updates in control plane are consistent with the ones in forwarding plane. VeriTable can be applied to network-wide abnormality diagnosis of network problems, such as scalable and efficient forwarding loop detection and avoidance in the data plane of a network. In addition, VeriTable can be extended to handle incremental updates applied to the forwarding tables in a network.

Abstract: Methods are described for providing routing updates in information-centric networks (ICNs) by using a centralized ICN routing coordination unit to exchange updated routing tables with certain popular nodes in popular node segments, by using a routing coordinator that executes an NFN execution plan, or by flooding an ICN-Route-Discovery-Request over multiple ICN route segments between first and second popular nodes, the second node selecting one of the ICN route segments and responding to the ICN-Route-Discovery-Request by sending a unicast Route-Discovery-Response to the first node over the selected one of the ICN route segments. Other methods for providing context aware forwarding for dynamic ICNs such as vehicular networks, RTT estimation for ICNs, and machine learning techniques for optimizing/compressing a forwarding information based in an ICN node are also provided.

Abstract: A method of implementing unified mode Bluetooth advertisements according to one embodiment includes receiving, by a mobile device, Bluetooth Low Energy (BLE) advertisement data from an access control device, wherein the BLE advertisement data includes (i) a BLE advertisement that is compliant with a HomeKit Accessory Protocol and (ii) a BLE scan response initiated by a scan request to the BLE advertisement, the BLE scan response including data to pair the mobile device with the access control device using another security protocol different from the HomeKit Accessory Protocol, pairing the mobile device with the access control device via the HomeKit Accessory Protocol and the another security protocol using the BLE advertisement data.

Abstract: Provided is an information processing device which is capable of suppressing a deterioration in accuracy of detecting an anomaly and accuracy of analyzing the anomaly, while suppressing an increase in an amount of data to be stored. The information processing system includes anomaly detection unit that collects event data indicating a predetermined event detected in a process of a device to be monitored, determines whether a predetermined index value related to the event exceeds a preset first threshold, and instructs enhanced monitoring of the device to be monitored and the process related to the event when the index value exceeds the first threshold, and collection instruction unit that determines an additional event being an event to be additionally monitored when the enhanced monitoring is instructed, and instructs the device to be monitored, which is subjected to the enhanced monitoring, to monitor the determined additional event.