Abstract: Techniques include analyzing risk data for a plurality of network-based identities and generating interactive graphical user interfaces to allow for visualization of the risk data. Operations may include identifying a plurality of network-based identities that have been deployed in a network environment; identifying a scope of permissions associated with the plurality of network-based identities; determining a scope of activity of at least one of: use of the permissions, non-use of the permissions, or activity associated with the permissions for the plurality of network-based identities; developing risk statuses for the plurality of network-based identities; and generating a graphical user interface representing the risk statuses, the graphical user interface comprising a first graphical element having a size and a color, the size and the color being determined based on the risk statuses associated with a first platform within the network environment.

Abstract: System and method of assigning admin partition membership based on switch connectivity in a high performance computing environment. An exemplary embodiment can provide an admin partition for use in a subnet of a network fabric. The admin partition can be defined by a P_Key, and the P_Key can be stored in an admin partition registry. A subnet manager that executes from a node within the subnet can be provided. The subnet manager can obtain information that a subnet switch is associated with the admin partition. The subnet manager can also receive a list of identifiers (IDs), each identifier corresponding to a host channel adapter that is directly connected to the subnet switch. Each of the IDs from the list can be added to the admin partition registry and a relationship between each of the added IDs and the P_Key can be created in the registry.

Abstract: A graphical user interface to a software development environment is provided. A user input is received defining an element to be searched with context and information is extracted from the software development environment relating to the software development environment and/or relating to the element. A search string is created comprising the element and the extracted information and the created search string is supplied to a search interface. A search result is received for the created search string, and the search result is outputted for the created search string.

Abstract: The current document is directed to methods and systems that establish secure, verifiable chains of control for computational entities within a distributed computing system. When a computational entity is first instantiated or introduced into the distributed computing system, public and private identities are generated for the computational entity and secure control is established over the computational entity by an initial controlling entity. Subsequently, control of the computational entity may be transferred from the initial controlling entity to a different controlling entity using a secure, three-party transaction that records the transfer of control in a distributed public ledger. As control of the computational entity is subsequently transferred to different controlling entities by secure three-party transactions, a chain of control from one controlling entity to another is established and recorded in the distributed public ledger.

Abstract: An apparatus for data loading includes a memory and a processor coupled to the memory and the processor configured to, execute first acquisition of first data corresponding to a first column from a data group stored in a first storage, a data structure of the data group including columns and rows, store the first data into a second storage, and generate a first index based on the first data for searching the data group to be stored in the second storage in response to the first acquisition before completion of storing the data group into the second storage.

Abstract: An image processing apparatus acquires user identification information about a user who is currently logged in to the image processing apparatus and performs control such that a job stored in association with the user indicated by the user identification information acquired is suspended and a job stored in association with a user different from the user indicated by the user identification information acquired is not suspended.

Abstract: A computerized method for providing a service is described. The method may instantiate an instance of a process object. The process object may be configured to manage two or more business process objects of one or more backend systems to provide the service. The service may be performed utilizing the process object.

Abstract: An example cloud resource provisioning method comprises: receiving a cloud resource usage data identifying a first cloud resource consumed, a first usage level associated with the first cloud resource, a second cloud resource consumed, and a second usage level associated with the second cloud resource; identifying a preference for the first cloud resource over the second cloud resource; and causing, in view of the analyzing, the first cloud resource to be provisioned at least at the first usage level and the second cloud resource to be provisioned at a reduced usage level below the second usage level.

Abstract: A customer of a policy management service may use an interface to access a graphical composer and generate one or more graphical representations of policies that may be applicable to the customer's one or more resources. Once the customer has created a graphical representation of a policy, the policy management service may generate a permission model based at least on the graphical representation of the policy to perform one or more simulations and determine whether the requested policy includes any errors or conflicts. If the one or more simulations result in the requested policy including no errors or conflicts, the policy management service may serialize the permission model to create a representation of the policy in a policy language. This representation of the policy may then be used to control access to the customer's one or more resources in accordance with the policy.

Abstract: A system for transcription is controlled and optimized by computer software which implements a competitive market for jobs is presented. Jobs are characterized by type, deadline, domain, difficulty, pay rate, customer and other factors. Editors are given credentials to perform jobs based on a complex of editor and job characteristics, and all editors qualified for a given job may then perform actions to preview and to claim the job. Job characteristics are adjusted dynamically to ensure that they are completed accurately and according to schedule.

Abstract: Disclosed herein are methods, systems, and apparatus, including computer programs encoded on computer storage media, for managing blockchain-based centralized ledger systems. One of the methods includes transmitting a timestamp request for a to-be-timestamped block of a blockchain at a time point to a trust time server by a ledger server in a blockchain-based centralized ledger system that stores data in the blockchain, the trust time server being associated with a trust time authority and independent from the blockchain-based centralized ledger system, the blockchain including a plurality of blocks storing transaction data, and disregarding the timestamp request in response to determining that a predetermined time period has lapsed after the time point and that there has been no reply to the timestamp request from the trust time server.

Abstract: In one embodiment, a device in a network generates a machine learning-based traffic model using data indicative of a particular node in the network attempting to retrieve content from a particular resource in the network. The device predicts, using the traffic model, a time at which the particular node is expected to attempt retrieving future content from the particular resource. The device causes the future content from the particular resource to be prefetched in the network prior to the predicted time. The device makes a security assessment of the prefetched content. The device causes performance of a mitigation action in the network based on the security assessment of the prefetched content and in response to the particular node attempting to retrieve the future content from the particular resource.

Abstract: A command is received in a cloud-computing environment from an integrated development environment (IDE), where the command is to update runtime software application content in an application container associated with the runtime software application content, and where the command contains new software application content. Without terminating the application container, a connection is opened to the application container using the application container name as an identifier, and at least some of the runtime software application content in the application container is modified using the new software application content.

Abstract: Embodiments of the present invention provide a system for rerouting electronic data transmissions based on generated solution data models. The system is typically configured for generating one or more solution data models comprising a plurality of asset systems and a plurality of users and storing the one or more solution data models in a model database, determine occurrence of an event associated with at least a first asset of the plurality of asset systems, extracting a first solution model associated with the first asset from the model database, determining one or more asset systems connected with the first asset based on the one or more relationships, identifying electronic data transfer jobs associated with the first asset and the one or more asset systems, and cancelling the electronic data transfer jobs associated with the first asset and the one or more asset systems.

Abstract: Techniques for processing composite commands in a file system are disclosed. A file system receives a composite command that includes an argument. The file system parses the argument and encounters a particular flag indicating that the argument includes an additional command. The file system executes the additional command using an application programming interface (API).

Abstract: A method includes receiving Resource Description Framework (RDF) data to be stored; obtaining triplet information including at least a resource name of the resource, attribute of the resource, and attribute value of the resource represented by the RDF data; obtaining from the RDF data a first namespace usable in a resource name of the resource; searching for a resource identification corresponding to a resource name and first namespace of the resource; obtaining from the RDF data a second namespace usable by the attribute of the resource; searching for the attribute identification corresponding to the attribute of the resource and the second namespace; and storing the triplet information, the resource name of a specific resource being represented by a resource identification and the attribute of the specific resource being represented by an attribute identification. Using an embodiment, it is possible to reduce the storage of redundant data, thereby saving storage space.

Abstract: Maintaining layer 7 state as a client device roams between network devices during a session. Data packets used in executing a layer 7 application are received at a first network device that a client device is coupled to during a session. Data packets received by the first network device are stored in a layer 7 application buffer that is sent to a second network device that a client device roams to during a session. A layer 7 application buffer is used to classify a layer 7 application that is the subject of a session in order to maintain layer 7 state as a client device roams to a second network device during a session.

Abstract: Embodiments are described for performing a storage tier-specific file system operation in a file system that comprises a namespace that spans multiple tiers of storage. A file system command can be a tier-specific deletion of files in a multi-tier file system, or a move data operation from a first tier of storage to a second tier of storage, affecting both the first and second tier of storage. The file system command can generate a copy of the namespace for the first tier of storage and a snapshot of the data of the first tier of storage referenced in the file system operation. Functionality may be performed using one or more storage appliances, each of which can have its open processing system, memory and storage device(s). Storage tiers can include active tier, cloud tier, and remote or archive storage tier.

Abstract: A computer-implemented method of retrieving data in a data management system is disclosed. The data management system is adapted to enable system users to submit and share content items. Content items are stored in a database, each content item associated with an item creator. Activity data relating to user interactions with content items is also recorded. The activity data is analysed, the analysis comprising, for each of a plurality of users: analysing activity data relating to content items submitted by the user; and assigning a user classification to the user in dependence on the analysis of the activity data. Search requests are then processed by sorting retrieved content items in accordance with a sort order determined in dependence on user classifications assigned to the item creators of the retrieved content items.

Abstract: The technology disclosed relates to operating a motion-capture system responsive to available computational resources. In particular, it relates to assessing a level of image acquisition and image-analysis resources available using benchmarking of system components. In response, one or more image acquisition parameters and/or image-analysis parameters are adjusted. Acquisition and/or analysis of image data are then made compliant with the adjusted image acquisition parameters and/or image-analysis parameters. In some implementations, image acquisition parameters include frame resolution and frame capture rate and image-analysis parameters include analysis algorithm and analysis density.

Abstract: Various examples described herein provide for causing operation of a cooling system of a computing device to be adjusted (e.g., reduced or disabled) during at least a portion of a backup operation, where data is copied from volatile memory of the computing device to non-volatile memory of the computing device. Some examples can be implemented with respect to a type 10 (T10) non-volatile dynamic inline memory module (NVDIMM) configuration.

Abstract: According to one or more embodiments, a computer implemented method includes receiving, by an operating system of a computer server, a request to execute an instance of a computer application. The method further includes, based on a determination that the computer application is a non-native application for the operating system, deploying, by the operating system, a virtual container for the instance of the computer application, the virtual container is allocated a dynamic virtual internet protocol address (DVIPA). The method further includes instantiating, by the operating system, an application instance of the computer application in the virtual container. The method further includes setting, by the operating system, a VC-attribute of the DVIPA of the virtual container to a first state, the first state of the VC-attribute indicative that the virtual container is hosting the application instance of the non-native application.

Abstract: In some embodiments, systems, methods, and devices disclosed herein enable trusted sharing of private data and/or transactions via a distributed ledger, while maintaining data consistency properties. Some embodiments provide and utilize one or more independent and/or dependent channels. In particular, in some embodiments, one or more independent and/or dependent channels can exist on a single distributed ledger, wherein participants or nodes that are members of a particular channel can view and access the information in a given network transaction. To other participants or nodes not on the particular channel, however, only an encrypted or redacted version of the information can be viewable, thereby not disclosing the transaction information to such participants or nodes. In some embodiments, consistency properties may be preserved even in the presence of selective sharing of transaction information with proofs of validity.

Abstract: A log manager causing events to be written to the primary and the secondary computing systems for high availability, and returning threads quickly. Rather than cause every event write to be immediately written to the secondary computing system, the log management component is triggered to write to the secondary computing system upon detecting event write requests of event writes of a particular event type. In response to detecting such an event write, the log management component gathers a group of event writes corresponding to that particular event write, and dispatches the event writes as a group. The particular thread that initiated the particular event write of the particular event type is returned after dispatching the event write group, but before or without confirmation of the particular event write group has been written to the secondary computing system.

Abstract: The disclosed technology relates to a context service system configured to receive, from a subscriber, a shared customer lookup request that includes a first customer data identifier and identify, in a shared data partition, a second customer data identifier associated with the first customer data identifier. The context service system is further configured to determine that the second customer data identifier is associated with customer information in a subscriber data partition and transmit, to the subscriber system, the customer information from the subscriber data partition.

Abstract: Creating an object is disclosed. An instance of a sharable type is created. An instance of a lightweight type is created. The sharable type is designated as a parent of the lightweight type. The instance of the sharable type is designated as a parent of the instance of the lightweight type. One or more instances of the lightweight type share the instance of the sharable type.

Abstract: Some embodiments provide a method for a managed forwarding element (MFE). At the MFE, the method receives a first packet from a particular tunnel endpoint. The first packet originates from a particular data compute node associated with multiple tunnel endpoints including the particular tunnel endpoint. Based on the first packet, the method stores an association of the particular tunnel endpoint with the particular data compute node. The method uses the stored association to encapsulate subsequent packets received at the MFE and having the particular data compute node as a destination address with the particular tunnel endpoint as a destination tunnel endpoint.

Abstract: A control system for managing operation of a plurality of thermostats includes a server comprising a processor, a memory, and a communication interface. The memory device stores instructions that when executed by the processor cause the processor to display, on a display device of a computing device, a visual representation for each thermostat of the plurality of thermostats and one or more groups into which each of the plurality of thermostats is grouped, and further to assign an operating schedule to a group, apply the assigned operating schedule to each thermostat of the plurality of thermostats located in the group, and move one thermostat of the plurality of thermostats from a first group to a second group in response to a user dragging and dropping a visual representation of the thermostat on the display device from the first group to the second group.

Abstract: A method for associating a communicating object with at least one user. A remote server receives a signal requesting an association between an user identifier and an object identifier. The server verifies an authorization for the association between the object identifier and the user identifier, including verification of whether or not there is pre-existing association of the object identifier with at least one other user identifier. If association is authorized, the object identifier is associated with the user identifier in a database which can be accessed by the remote server. The database includes at least one user identifier list and one object identifier list.

Abstract: Described embodiments provide systems and methods for initiating establishment of a connection. The system may include a device intermediary between a client and a server. The device may determine at least one server name indicator (SNI) for an application executing on the client and having a secure session established with the server. The device may determine, for each domain name corresponding to the at least one SNI, a session timeout value for the corresponding domain name. The device may send a message to the client according to each session timeout value, to cause the client to initiate establishment of a connection for the corresponding domain name using the secure session.

Abstract: Methods and devices for managing first-in first-out (FIFO) queues in graphics processing are described. A write operation can be executed by multiple write threads on a graphics processing unit (GPU) to write data to memory locations in the multiple pages of memory. Similarly, and/or simultaneously, a read operation can be executed by multiple read threads to read data from the memory locations. The write and read operations include updating a pointer or multiple pointers indicating the point at which all preceding data has been fully written, or fully read. The read and write operations can also include maintaining and advancing one or more allocation pointers, and performing comparisons with the read and write done pointers, and/or various methods of synchronization, to handle overflow and underflow scenarios, to ensure read operations only read valid data, and write operations do not attempt to write to locations which are already in use.

Abstract: Systems and methods provide automatic discovery of cluster membership based on transaction processing. An example method includes, at a source node of a first tier of nodes, generating a service identifier for a transaction that requests a service hosted by a second tier, the service identifier being based on a logical identifier for the second tier. The method also includes sending the transaction, including the service identifier, from the source node to the service hosted by the second tier. The method includes, at a destination node in the second tier, obtaining the service identifier from the transaction and reporting the service identifier with a destination node identifier to a visibility server as cluster information. The method also includes, at the visibility server, receiving cluster information from a plurality of destination nodes and assigning each of the plurality of destination nodes to a cluster based on the service identifiers.

Abstract: A distributed storage and replication system includes a MDC module, multiple IO routing modules, and multiple OSD nodes. The MDC module is adapted to configure at least two partition, the IO routing module is adapted to route an IO request to an OSD node, and the OSD node is adapted to execute storage of data corresponding to the IO request. The MDC is configured to determine a faulty OSD node, update a partition view of a partition group that includes a partition on the faulty OSD node, and send an updating notification to a primary OSD node in the updated partition view. The primary OSD node is adapted to process replication of the data corresponding to the IO request. According to embodiments of the present disclosure, processing performance, fault tolerance, and availability of consistency replication are improved.

Abstract: Methods, systems, and devices for wireless communication are described for transmitting a first signal corresponding to a symbol so as to cover a geographic sector with via analog beamforming, transmitting, using analog beamforming and a second port, a second signal corresponding to the symbol, wherein aspects of the symbol are phase modulated with respect to the first signal such that corresponding aspects of a combined signal are beam-formed in one or more directions that at least partially overlap the geographic sector, a receiver receives the combined signal and from it determines a preferred refined beam for subsequent transmissions and transmits an indicator that includes the preferred refined beam, and the transmitter receives an indication from a receiver identifying one or more aspects of the combined signal, and determining a refined beam for subsequent transmissions based at least in part on the indication.

Abstract: The present technology relates to an information transmission device, an information transmission method, and an information transmission system that smoothes the power consumption of an entire system. The information transmission device includes a detection unit that detects occurrence of a specific event based on the surrounding information acquired, a generation unit that generates transmission data from the surrounding information, a management unit that manages profile information at least including a remaining battery level, a decision unit that decides, based on the profile information, a destination of the transmission data generated, and a transmission unit that transmits the transmission data to the destination decided. The present technology is applicable to a monitoring system, for example.

Abstract: Apparatus and methods are described herein for multiple single level security (MSLS) domains including, but not limited to, a secure kernel hypervisor (SKH). The SKH configures a single multi-tenant cloud to host the MSLS domains. A cloud orchestration system (COS) configures the single multi-tenant cloud to set up a plurality of separate virtual work packages (VWPs) for the MSLS domains. A key management system (KMS) is configured to manage security objects associated with the MSLS domains.

Abstract: This disclosure relates to sharing confidential data between a first data provider and a second data provider. A processor determines a correspondence between one of multiple first data records from the first data provider and one of multiple second data records from the second data provider. The multiple first data records are stored on a first data store accessible by the first data provider and protected by encryption from the second data provider. The multiple second data records are stored on a second data store accessible by the second data provider and protected by encryption from the first data provider. The processor creates a first reference to the one of the multiple first data records and a second reference to the one of the multiple second data records. The first reference is accessible by the second data provider and the second reference is accessible by the first data provider.

Abstract: A computing environment containing a mesh network that is adapted to provide a reliable transport mechanism over which services may be delivered. Nodes of the mesh can automatically select routable addresses without conflicts, which allows nodes of the mesh to be accessed, even as the mesh changes through the addition or deletion of nodes. Also, nodes communicate with a protocol that supports service advertisements. These advertisements can identify mesh nodes that supply services, such as file or print servers, for which devices that have not yet connected to the network may be searching. Advertisements can also identify services to be used by nodes in the network, allowing, for example, a node to select a gateway providing a reliable connection to an external network. The mesh network can be used as a transport for communication using protocols, such as TCP/IP, that generally exhibit poor performance when using unreliable transports.

Abstract: Systems and methods for mitigation of time-delay based network attacks are provided. According to one embodiment, an email directed to a user of an enterprise and containing a potentially malicious link is received by a mail server of the enterprise. At a first time, a file to which the potentially malicious link points is evaluated within a sandbox environment and a first hash value is generated based on contents of the file. At a second time, evaluating, by the sandbox environment, a second file to which the potentially malicious link points, including downloading the second file to which the potentially malicious link points to at the second time and generating a second hash value based on contents of the second file. When the two hash values differ, then the second file is treated as a suspicious or high risk file or is evaluated within the sandbox environment.

Abstract: A method, system, apparatus, and computer-readable memory containing instructions include receiving, at an agent operating on a client device, a (domain name system) DNS resolution request for a domain name. The DNS resolution request is transmitted to a first DNS server including a firewall service and a second DNS server within a local network to the client device. Responses to the DNS resolution request from the first and second DNS server are received. The agent determines how to resolve the DNS resolution request based on one or more of the received responses.

Abstract: A method, computer system, and a computer program product for a monitor security process is provided. The present invention may include configuring monitors in a chain configuration where sensors communicate with the monitors. The present invention may include receiving a first set of information from the sensor to a primary and backup monitor based on an event. The present invention may include broadcasting the information from the primary and backup monitor to a plurality of monitors and logging the information. The present invention may include receiving a second set of information from within the chain of monitors. The present invention may include determining that the sets of information conflict. The present invention may include marking at least one temporary log within the plurality of temporary logs as conflicting. The present invention may include determining that a conflicting threshold has been exceeded and then generate an audit and recovery plan.

Abstract: Various arrangements for detecting items in home are presented. Imaging devices may capture images of a user's home. The images may be analyzed and compared against a user approved list of item definitions. Using the definitions, items, brands, trademarks, and the like may be identified in the images. The items identified in the images may be used to determine preferences of a user and provide targeted marketing content using the television receiver. In some cases, analysis of items in a home may be used to determine the effectiveness of marketing content by determining causality or correlations between marketing content viewed by a user and items in the home.

Abstract: According to one aspect, a web optimized user device is provided. The web optimized device reduces complexity and facilitates interaction with web-based services and content. The web optimized device can be configured without a hard drive, facilitating integration of web-based services into a computing experience. The web optimized device presents a user interface that integrates video functionality into every aspect of the computer content accessed. In particular, a display manager manages the user interface presented and integrates video displays and features into the content displays in a content and/or context aware manner. These displays permit a user to intuitively interact with the video content and features while the user changes content, for example, web-based services, web-based applications, and other media content, without interruption of or interference from the video content.

Abstract: A method for performing access barring includes receiving barring parameters, modifying a subset of the barring parameters associated with an access class barring type, and forwarding the modified subset of the barring parameters to a remote device.

Abstract: Methods and systems for identifying and connecting to field devices in an industrial plant. In an example embodiment, steps or operations can be implemented for providing credentials associated with a user through Li-Fi wireless communications, detecting a light pattern associated with the Li-Fi Wireless communications with a light sensor attached to a field device, transmitting a signal from the light sensor to a controller, which decodes the credentials associated with the user, and if the credentials are authorized, allowing the user to obtain device data associated with the field device wherein said data includes a location of said field device within said industrial plant. Such data can be obtained from a control room and/or a server through a wireless data communications network (e.g., wireless bidirectional communications).

Abstract: Disclosed herein are methods, systems, and software for modifying a communication path based on content delivery performance data. In one example, a method of operating a content server that hosts content to be provided to a plurality of end user devices includes identifying latency data for a plurality of end user devices communicating with the content server, and identifying that the one or more end user devices in the plurality of end user devices exceed a latency threshold based on the latency data. The method further includes, in response to identifying that the one or more end user devices in the plurality of end user devices exceed the latency threshold, modifying the communication path between the content server and the one or more end user devices by modifying a domain name system (DNS) configuration for the content server.

Abstract: A system and method for delivering text, media, and inline interactive data (called message content) encapsulated in a message-based conversation has been devised. Content of multiple types are rendered and manipulated using interactive program code objects, downloaded when first needed from a repository, present on the message device. Inline interactive data can be shared and manipulated by participants in a message conversation as part of and in context with the ongoing conversation. Sharing and data integrity of the inline interactive data as well as conversation participant authentication, privileges and conversation security is managed by a central message server.

Abstract: One embodiment of the invention relates to a system for operating a plurality of streetlights in response to motion from a vehicle. The system includes a sensor associated with at least one of the streetlights and configured to detect the presence of a moving vehicle and to provide a signal representative of the moving vehicle. The system further includes a radio frequency transceiver associated with each of the streetlights. The system yet further includes processing electronics configured to receive the signal representative of the moving vehicle from the sensor and to cause the radio frequency transceiver to transmit a command to one or more of the plurality of the streetlights to change lighting states along a pathway for the vehicle.

Abstract: A fog network includes a first fog network node configured to execute an application program, and a second fog network node configured to host a container. The first fog network node is configured to determine a need to offload at least a portion of the application program for execution in the second fog network node, access a registry to identify and locate a container image created from executable code of the application program stored in the fog network, and load the identified container image in the second fog network node. The second fog network node is configured to start the container in response to the container image being loaded, execute the executable code of the application program, and return a result from executing the executable code of the application program to the first fog network node.

Abstract: Generally described, one or more aspects of the present application correspond to an artificial intelligence (AI) system that helps developers build failure-resilient microservices. The AI system can analyze the code of a microservice to identify other, similar microservices, and then use historical data about performance of those similar microservices to build a failure model for the microservice. The AI system can also automatically run failure tests based on the failure model, and can suggest code changes (based on analyzing historical code changes and test performance data) that can help a microservice become resilient to a particular failure.