Abstract: According to embodiments herein e.g. a method performed by an orchestration agent unit for handling a service in a communications network is provided. The orchestration agent unit evaluate a number of intent types of the service based on a performance of one or more performance metrics related to intent of respective intent type when performed in the communications network including a plurality of orchestration agent units. The orchestration agent unit selects an intent type of the service based on the evaluation; and sends to at least one of the plurality of orchestration agent units, an indication indicating the selected intent type of the service.

Abstract: In one or more embodiments, an apparatus includes a set of servers configured to route calls to and from a plurality of devices over network paths. Each of the devices is respectively associated with one of a plurality of client accounts. A control circuit may be communicatively connected to the one or more servers and directs the servers to route calls for a client account according to a respective routing policy for the client account. The routing policy may indicate one or more routing algorithms for selecting paths of a network for routing each of the calls, and may also indicate a selection algorithm configured to, for each call, one of the set of routing algorithms based on a set of criteria such as date or time of the call.

Abstract: A method of measuring (100) metrics of a computer network, comprising the steps of: from a data source collecting (110) sets of data points during a sampling time period, wherein the set of data points constitute a sample, and uploading (120) each sample to a server for further processing (130), wherein from each sample, a fractile information instance is produced (131), wherein the fractile information has a type and each data source is associated (110a) with a fractile information type.

Abstract: Aspects of the present disclosure provide techniques for detecting sensitive information. Embodiments include determining a first likelihood that a record contains at least a given type of sensitive information using a first detection technique that involves providing one or more inputs to a machine learning model based on the record and receiving the first likelihood as an output from the machine learning model based on the one or more inputs. Embodiments include determining a second likelihood that the record contains at least the given type of sensitive information using a second detection technique comprising a search of the record. Embodiments include applying a policy to determine whether the record contains sensitive information based on the first likelihood and the second likelihood. Embodiments include performing one or more actions based on whether the record contains sensitive information.

Abstract: A method, an apparatus, and a computer program product for subscription-based notifications of events in enterprise systems. A plurality of notification message delivery channels for delivery of one or more notification messages to one or more user devices is identified. The notification messages are received from one or more software applications and correspond to one or more events associated with the software applications. A first notification message delivery channel is selected from the plurality of notification message delivery channels for delivery of the received notification messages based on one or more subscriptions associated with the user devices to the events. The subscriptions are configured using one or more subscription preferences received from the user devices. The received notification messages are transmitted to the user devices using the selected first notification message delivery channel.

Abstract: A redundant transmission system including two transmitters with respective data paths, the transmitters including packet creators and selectors wherein one transmitter can serve as a master and alternately as a slave while the other transmitter serves to maintain among the two transmitters one master and one slave.

Abstract: Some embodiments provide a method of load balancing data message flows across multiple secure connections. The method receives a data message having source and destination addresses formatted according to a first protocol. Based on the source and destination addresses, the method selects one of the multiple secure connections for the data message. Each of the secure connections handles a first set of connections formatted according to the first protocol and a second set of connections formatted according to a second protocol that is an alternative to the first protocol. The method securely encapsulates the data message and forwards the encapsulated data message onto a network. The encapsulation includes an identifier for the selected secure connection.

Abstract: A method performed by a first terminal is provided. The method includes determining whether a first delay related to the first terminal is necessary, transmitting, to a second terminal, a delay message including first delay information in case that the first delay is necessary, in response to the delay message, receiving, from the second terminal, an allocation message including information on one or more nodes, determining whether information on the first terminal is included in the information on one or more nodes included in the allocation message, and allocating the first delay in case that the information on the first terminal is included in the information on one or more nodes.

Abstract: A terminal obtains at least one piece of data, in which each piece of data in the at least one piece of data belongs to a different modality; obtains acquisition time information corresponding to each piece of data; and sends the at least one piece of data and at least one acquisition time information to a centralized processing unit. The centralized processing unit receives at least one piece of data and at least one piece of acquisition time information from at least one terminal, determines data corresponding to each acquisition time information in the at least one acquisition time information from the at least one piece of data, and processes the data corresponding to each acquisition time information.

Abstract: Computer-readable media, methods, and systems are disclosed for scheduling a start time and a shutdown time of one or more online resources associated with a multi-cloud resource scheduler. A request from a first user is received to access a multi-cloud resource scheduler associated with one or more online resources. Responsive to the request from the first user, credentials of the first user are validated prior to providing access to the multi-cloud resource scheduler. Based upon validating the credentials of the first user, access to the multi-cloud resource scheduler is provided. Instructions are received from the first user to schedule a start time and a shutdown time of at least one online cloud resource connected to the multi-cloud resource scheduler. An availability of the at least one online cloud resource is established for access by a second user based on the instructions.

Abstract: A method of operating a wireless routing device to control access to a voice communication service by a mobile device connected to a wireless local area network (WLAN) of the wireless routing device, the mobile device having a cellular network interface and a non-cellular wireless network interface, the method including identifying a request from the mobile device to a cellular network gateway of the cellular network for access to the voice communication service; performing a process prior to forwarding the request to the cellular network gateway comprising: calculating a quality score for a non-cellular wireless link between the mobile device and the cellular network gateway for accessing the voice communication service; requesting observed network information from the mobile device; and comparing the quality of the non-cellular wireless network link against the respective quality of at least one alternative network observed by the mobile device; and if the quality of the non-cellular wireless network link i

Abstract: Examples described herein relate to configuration of access points including Internet-of-Things (IoT) radio. An access point identifier list is received from a network administration node in a network. Each access point identifier in the access point identifier list is uniquely associated with an access point, which includes an IoT radio. A first rules list is received from the network administration node. Each rule in the first rules list indicates a constraint and access point configuration values. An objective function is used to identify access point identifiers satisfying one or more of the constraints in the rules. The access points associated with the identified access point identifiers are configured with the access point configuration values as indicated in the rules.

Abstract: Systems and methods are provided for dynamically generating intelligent alerts at a network edge based on coverage area characteristics. A central alert orchestrator within the network determines target edge locations and forwards alerts to regional alert systems at the target edge locations. The regional alert systems modify either content of the alert or the alert metadata or both based on characteristics of the alerts and the coverage area.

Abstract: Embodiments herein achieve a method for handling registration and session management in a wireless communication system. The method includes registering, by a User Equipment (UE), with a first core network entity over a 3GPP access network and a non-3GPP access network. Further, the method includes triggering, by the UE, a registration procedure to a second core network over the 3GPP access network when a periodic timer of the UE expires in an OOS state. Further, the method includes receiving, by the UE, a non-access stratum (NAS) message, over the 3GPP access network, with an indication to register for the non-3GPP access network with the second core network entity. Further, the method includes reinitiating the registration procedure to register again for the non-3GPP access with the second core network entity through the non-3GPP access network.

Abstract: Apparatuses, methods, and systems are disclosed for video codec aware RAN configuration and unequal error protection coding. An apparatus includes a processor that detects a video coded traffic stream and a video codec specification used to encode the video coded traffic stream, determines an awareness of video coded traffic application data units (“ADUs”) of the video coded traffic stream as video coded network abstraction layer (“NAL”) units of data, aligns the video coded NAL units of the video coded traffic stream to physical layer (“PHY”) transport elements and subsequent channel coding element partitions for a video coded traffic aware PHY transport, determines a channel coding rate allocation of the channel coding element partitions, and applies a forward error correction (“FEC”) coding given at least the determined channel coding rate allocation of the video coded traffic aware PHY transport to channel coding element partitions for protection against radio transmission errors.

Abstract: The present invention relates to a method for transmitting a packet in a communication system, the method comprising: generating drop information indicating at least one source packet to be dropped among source packets to be transmitted and whether or not to drop each of the other source packets except the at least one source packet; performing forward error correction (FEC) encoding on the drop information and the other source packets except the at least one source packet; generating a repair packet comprising repair data for restoring the drop information and a repair symbol for restoring the other source packets except the at least one source packet; and transmitting the other source packets except the at least one source packet and the repair packet.

Abstract: A method, a system, and a non-transitory storage medium provide for encoding a general packet radio service (GPRS)-tunnel endpoint identifier (GTP-TEID) with data identifying radio frequency (RF) bandwidths supported in a local radio environment (LRE) from which a user equipment (UE) device accesses the wireless access station; sending, via a signaling channel, the GTP-TEID to a core network device; notifying one or more core network devices of an RF bandwidth category level corresponding to the RF bandwidths; and applying at least one of a policy rule or a charging rule to a packet data unit (PDU) session for the UE device, based on the RF bandwidth category level.

Abstract: Systems and methods are described herein for handling video calls placed on hold or otherwise parked by one or more parties within the video call. The systems and methods can determine a video call has been placed on hold (or otherwise set to be parked), and transfer the video call to a call park server (CPS). The systems and methods can then access a content server, retrieve one or more content items (e.g., video clips, interactive content or advertisements, and so on), and present the content items within the on hold video call.

Abstract: A method for one or more meeting-facilitating machines to provide access to a remote meeting comprises assessing a capability metric of a meeting-participant computer device; selecting an access-option set including a combination of mutually compatible access modes, each access mode characterized by (a) an expense metric comparable to the capability metric and (b) a richness metric indicating a relative level of richness the access mode contributes to the remote meeting, the access-option set selected to maximize a net richness of the remote meeting while preventing a net expense of the access-option set from exceeding the capability metric; and providing the meeting-participant computer device access to the remote meeting using the access-option set.

Abstract: A method including receiving, at a VPN server from a user device during an established VPN connection between the VPN server and the user device, a data request for the VPN server to retrieve data of interest from a host device; utilizing, by the VPN server, a first exit IP address to transmit a query for retrieving the data of interest to the host device during the established VPN connection; determining, by the VPN server based at least in part on transmitting the query, that the first exit IP address is blocked by the host device; and utilizing, by the VPN server, a second exit IP address to retransmit the query for retrieving the data of interest to the host device during the established VPN connection is disclosed. Various other aspects are contemplated.

Abstract: This invention concerns the transmitting and receiving of digital media packets, such as audio and video channels and lighting instructions. In particular, the invention concerns the transmitting and receiving of redundant media packet streams. Samples are extracted from a first and second media packet stream. The extracted samples are written to a buffer based on the output time of each sample. Extracted samples having the same output in time are written to the same location in the buffer. Both media packet streams are simply processed all the way to the bugger without any particular knowledge that one of the packet streams is actually redundant. This simplifies the management of the redundant packet streams, such as eliminating the need for a “fail-over” switch and the concept of an “active stream”, the location is the storage space allocated to store one sample.

Abstract: Embodiments relate to progressively validating access token. In response to intercepting an initial call for a transaction for a service from a client, a token is validated for the initial call of the transaction for the service, the validating including contacting an authentication sever and locally storing a time to live received for the token. In response to intercepting at least one successive call for the transaction for the service from the client, it is determined that the token for the at least one successive call is valid based on the time to live locally saved. The at least one successive call for the transaction for the service is permitted to pass without contacting the authentication sever.

Abstract: In a system including a plurality of computing subsystems executing a set of hosted applications, each of the computing subsystems maintains a copy of a common routing matrix defining, for each hosted application, an identifier of a computing subsystem configured to host the application. A first intra-subsystem routing component of a first one of the computing subsystems receives a message; determines a target one of the hosted applications to process the message; identifies, according to the common routing matrix, a second one of the computing subsystems that executes the target hosted application; and in response to the identifying, provides the message and a routing indicator to a first inter-subsystem routing component of the first computing subsystem. The first inter-subsystem routing component the transmits the message to the second computing subsystem.

Abstract: The present disclosure is directed to a method and system for routing communications. A plurality of communications-enabled devices are coupled to a communications network. Each communications-enabled device has a device identifier. A user-programmable database associates each of a plurality of user identifiers with a device identifier. A router circuit is coupled to the communications network through a portal communication device having a portal identifier. A user designates a destination user identifier when making a communication. The router circuit switches the call, directing the call to a destination device identifier responsive to the user-programmable database association between the destination user identifier and a device identifier. According to certain aspects, communications are directed to users and are routed to associated equipment, a user identifier serving as a virtual extension number.

Abstract: Methods and architectures for improving operation of 9-1-1 and other emergency services networks. Enriched data (e.g., text messages, videos, phase II location information, etc.) may be transmitted to a PSAP via a secondary communication channel (i.e., data), wherein the primary communication channel is a voice telephony trunk. Disclosed embodiments may increase the speed with which accurate location information is made available to improve call routing accuracy and decrease dispatch time. Some embodiments may also enable continued operation of legacy emergency services systems during and after transition to next generation systems.

Abstract: The present invention relates to a method for transmitting a packet in a communication system, the method comprising: generating drop information indicating at least one source packet to be dropped among source packets to be transmitted and whether or not to drop each of the other source packets except the at least one source packet; performing forward error correction (FEC) encoding on the drop information and the other source packets except the at least one source packet; generating a repair packet comprising repair data for restoring the drop information and a repair symbol for restoring the other source packets except the at least one source packet; and transmitting the other source packets except the at least one source packet and the repair packet.

Abstract: In one embodiment, a packet processing apparatus includes interfaces, a memory to store a representation of a routing table as a binary search tree of address prefixes, and store a marker with an embedded prefix including k marker bits providing a marker for an address prefix of a node corresponding to a prefix length greater than k, and n additional bits, such that the k marker bits concatenated with the n additional bits provide another address prefix, packet processing circuitry configured upon receiving a data packet having a destination address, to traverse the binary search tree to find a longest prefix match, compare a key with the k marker bits, extract an additional n bits from the destination address, and compare the extracted n bits with the n additional bits, and process the data packet in accordance with a forwarding action indicated by the longest prefix match.

Abstract: Apparatus, systems and methods for implementing delayed decompression schemes. As a burst of packets comprising compressed packets and uncompressed packets are received over an interconnect link, they are buffered in a receive buffer without decompression. Subsequently, the packets are forwarded from the receive buffer to a consumer such as processor core, with the compressed packets being decompressed prior to reaching the processor core. Under a first delayed decompression approach, packets are decompressed when they are read from the receive buffer in conjunction with forwarding the uncompressed packet (or uncompressed data contained therein) to the consumer. Under a second delayed decompression scheme, the packets are read from the receive buffer and forwarded to a decompressor using a first datapath width matching the width of the packets, decompressed, and then forwarded to the consumer using a second datapath width matching the width of the uncompressed data.

Abstract: A method, a system, and a non-transitory storage medium provide for encoding a general packet radio service (GPRS)-tunnel endpoint identifier (GTP-TEID) with data identifying radio frequency (RF) bandwidths supported in a local radio environment (LRE) from which a user equipment (UE) device accesses the wireless access station; sending, via a signaling channel, the GTP-TEID to a core network device; notifying one or more core network devices of an RF bandwidth category level corresponding to the identified RF bandwidths; and applying at least one of a policy rule or a charging rule to a packet data unit (PDU) session for the UE device, based on the RF bandwidth category level.

Abstract: Systems and methods for facilitating communication between a Human Interface Device (HID) and a remote resource such as, for example, an application provided by a virtual desktop. Embodiments relate to using one or more Application Programming Interfaces (APIs) to translate messages over a communication (COM) port tunnel, launching a program within the same session assigned to the COM port tunnel, utilizing client-side encryption, and redirecting HID messages to an embedded browser that is accessible over a virtual desktop.

Abstract: Secure access to a corporate application with translation between an internal address and an external address. In some embodiments, a method may include receiving, at a secure access cloud point of delivery (PoD), from a client application on a client device, a request to access a corporate web application that is deployed in a corporate datacenter. The method may also include forwarding, from the secure access cloud PoD, to a connector that is also deployed in the corporate datacenter, the request to access the corporate web application. The method may further include brokering, by the connector and the secure access cloud PoD, authentication of a user, authorization of access by the user, and a secure communication session between the client application and the corporate web application by translating between an internal address of the corporate web application and an external address of the corporate web application.

Abstract: The disclosed embodiments provide a system that processes network data. During operation, the system obtains, at a remote capture agent, a first protocol classification for a first packet flow captured by the remote capture agent. Next, the system uses configuration information associated with the first protocol classification to build a first event stream from the first packet flow at the remote capture agent, wherein the first event stream comprises time-series event data generated from network packets in the first packet flow based on the first protocol classification. The system then transmits the first event stream over a network for subsequent storage and processing of the first event stream by one or more components on the network.

Abstract: Systems, methods, apparatuses, and computer program products for providing IMS level awareness of high latency device are provided. One method, when a UE attaches to EPC, receiving, at a network node, an indication that the UE is a high latency device. The method may also include assigning, to the UE, an IP address selected from a special IP address range that is designated specifically for high latency devices. When the UE performs IMS registration, the method may include determining that the UE is a high latency UE based on the UE's IP address provided with the IMS registration request and assigned during the EPC attach procedure.

Abstract: This application provides a method and device for transparently transmitting a service frequency, where the method includes: determining, by a first device, first service frequency information Xn, where the first service frequency information Xn is used to indicate an amount of n-bit first service data that is sent by the first device within first statistical duration, and a sending frequency of the first device is used as a reference for the first statistical duration; and encapsulating, by the first device, the first service frequency information Xn into a first S/T bit code block, inserting the first S/T bit code block into a data stream of the first service data, and sending the data stream of the first service data to a second device.

Abstract: A method of operating a network server, such as a mobile application gateway, connect devices on a cellular or carrier network with individual networks, such as enterprise voice and data networks or residential networks. The effects of the present invention are far reaching in terms of transferring effective call control from the cellular network into the control of the individual network, such as the enterprise, and enabling new business models for the purchase of cellular service from a public cellular carrier by an enterprise.

Abstract: Audiovisual performances, including vocal music, are captured and coordinated with those of other users in ways that create compelling user experiences. In some cases, the vocal performances of individual users are captured (together with performance synchronized video) on mobile devices, television-type display and/or set-top box equipment in the context of karaoke-style presentations of lyrics in correspondence with audible renderings of a backing track. Contributions of multiple vocalists are coordinated and mixed in a manner that selects for visually prominent presentation performance synchronized video of one or more of the contributors. Prominence of particular performance synchronized video may be based, at least in part, on computationally-defined audio features extracted from (or computed over) captured vocal audio.

Abstract: Aspects relating to data transmission are described herein. In an implementation, in a method for data transmission, a tunneling protocol header is appended to a payload to obtain an encapsulated data packet, and at least one field is modified in the tunneling protocol header to indicate at least one of an access network (108) and a core network (108) for transmitting the encapsulated data packet, and the access network (108) and the core network (110) belong to different communication networks (104). Further, based on the tunneling protocol header, the encapsulated data packet is delivered to a routing unit for transmission.

Abstract: Useful data is transmitted to a terminal existing in a transportation vehicle. A communication apparatus installed in the transportation vehicle and configured to transmit the data to the terminal existing in the transportation vehicle includes a data selection unit and an illumination unit. The data selection unit acquires location information indicating a location of the transportation vehicle in which the terminal exists and which is traveling. Based on the acquired location information, the data selection unit selects approaching-location data related to a location ahead of a current location of the transportation vehicle in a traveling direction from a plurality of pieces of data related to the location. The illumination unit transmits, as a modulated light signal, a signal comprising the approaching-location data.

Abstract: Techniques provide for identifying uplink resources that are to be used for uplink transmissions using shortened transmission time intervals (sTTIs), such as low latency or high reliability transmissions. A reference signal (RS) configuration for a three-symbol sTTI, including locations of one or more RS symbols and one or more data symbols within the sTTI may be identified. The RS configuration, along with the allocation of uplink resources, may be provided to a user equipment (UE) which may transmit uplink communications using the allocated uplink resources.

Abstract: The apparatus includes a processor configured to send, over a 3rd Generation Partnership project (3GPP) access, a notifying message regarding non-3GPP access to a user equipment, the user equipment being simultaneously registered to the communication network via the 3GPP access and via the non-3GPP access, the user equipment being in a connection management-idle state over the non-3GPP access. The method includes sending over a 3rd Generation Partnership project (3GPP) access a notifying message regarding non-3GPP access to a user equipment, the user equipment being simultaneously registered to a communication network via the 3GPP access and via the non-3GPP access, the user equipment being in a connection management-idle state over the non-3GPP access.

Abstract: Provided herein is a system including, in some embodiments, one or more servers and one or more database servers configured to receive user-specific target information from a client application for training a neural network on a neuromorphic integrated circuit. The one or more database servers are configured to merge the user-specific target information with existing target information to form merged target information in the one or more databases. The system further includes a training set builder and a trainer. The training set builder is configured to build a training set for training a software-based version of the neural network from the merged target information. The trainer is configured to train the software-based version of the neural network with the training set to determine a set of synaptic weights for the neural network on the neuromorphic integrated circuit.

Abstract: A system for identifying the calling device used to place a call in to an enterprise call center. The system also provides information about the network path through which the call was delivered. The system uses active “pinging” in the audio channel during the first few seconds of the call. The device of the invention sends a special sequence of audio tones from the callee to the caller over the audio channel. The system then records and analyses the resulting incoming audio and compares them with the original tones. The system uses that information to characterize the calling device, and possibly the network path as well. The system checks this information against previously stored information from a known valid caller to aid in verifying the identity of the caller, or to flag the call for further assessment via other methods.

Abstract: The present invention discloses a method, a system and an electronic device for configuring the electronic device. The method and system comprise steps of configuring the electronic device by a profile server. The profile server receives sensor information, determines a profile substantially based on the sensor information, retrieves a configuration based on the profile, and then configure the electronic device substantially based on the configuration. In one variant, the configuration of the electronic device may be performed by a profile management module of the electronic device.

Abstract: Device, system, and method of Voice over Internet Protocol (VoIP) communications, and particularly of Real Time Protocol (RTP) communication. In order to improve quality-of-service or quality-of-experience for a group of VoIP calls that are served by a VoIP router, each VoIP transmitter implements and adds a pseudo-random waiting-period prior to transmitting each outgoing RTP packet, or otherwise re-orders or mixes or shuffles the order of channels of RTP packets that are buffered or queued for transmission. Accordingly, no particular VoIP channel suffers from repeated drops of its RTP packets at the VoIP router. Additionally, VoIP network analyzers operate to measure the overall VoIP network overuse, or the average RTP packet loss rate of multiple VoIP channels, based on measuring RTP packet loss rate of a single VoIP channel which enforces a random pre-transmission waiting-period.

Abstract: A first device verification model is sent to a first agent on a first device providing at least a portion of the service. The first agent is able to monitor based on the first device verification model a parameter of the first device related to the service. A second device verification model is sent to a second agent on a second device providing at least a portion of the service, wherein the second agent is able to monitor based on the second device verification model a parameter of the second device related to the service. A report is received from the first agent of at least the parameter of the first device. A report is received from the second agent of at least the parameter of the second device. At least the parameter of the first device and at least the parameter of the second device are analyzed to determine whether the service is functioning as intended.

Abstract: Systems and methods for providing E911 services to a publicly-switched telephone network (PSTN) phone are described. In some embodiments, the systems and methods determine that the PSTN phone is connected to a voice over internet protocol (VoIP) adapter, identify an internet protocol (IP) address for an access point via which the adapter accesses an IP Multimedia System (IMS) network, determine a geographical location associated with the IP address, and enable E911 communications for the PSTN phone over the IMS network via the adapter based on the geographical location.

Abstract: Techniques are disclosed. The techniques include receiving, by a computing device, an answer to a query, the answer comprising a content element and a metadata element. Based on the content element and the metadata element, the techniques generate a presentable sentence of a plurality of presentable sentences. The techniques then utilize a machine learning model to determine a relevance score for the presentable sentence based on the query and the presentable sentence, the relevance score being of a set of relevance scores and corresponding to a measure of relevance with respect to the presentable sentence answering the query. The techniques then select a portion of the plurality of presentable sentences based on a ranking of the set of relevance scores and transmit the portion to a user device for presentation on a voice-based interface of the user device.

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: A non-transitory computer-readable storage medium storing a packet analysis program for causing a computer to execute a process, the process includes acquiring packets communicated between nodes, adding information of communication of ongoing couplings to an ongoing coupling list in each of predetermined time ranges belonging to start times of the couplings based on the packets, and removing information of communication of a terminated coupling from the ongoing coupling list based on the packets, and analyzing the quality of the communication of the terminated coupling in a cycle corresponding to a time range among the time ranges, and analyzing the quality of communication related to a coupling present in the ongoing coupling list even when the cycle has elapsed a predetermined number of times or more after the addition of information of the coupling to the ongoing coupling list.

Abstract: A cyber-threat detection system that maintains consistency in local configurations of one or more computing nodes forming a cluster for cyber-threat detection is described. The system features a distributed data store for storage of at least a reference configuration and a management engine deployed within each computing node, including the first computing node and configured to obtain data associated with the reference configuration from the distributed data store, From such data, the management engine is configured to detect when the shared local configuration is non-compliant with the reference configuration, and upload information associated with the non-compliant shared local configuration into the distributed data store. Upon notification, the security administrator may initiate administrative controls to allow the non-compliant shared local configuration or modify the shared local configuration to be compliant with the reference configuration.