Abstract: A device may configure a centralized performance indicator data store for a plurality of network function devices included in a telecommunications system. The centralized performance indicator data store may be accessible by the plurality of network function devices on a management bus of the telecommunications system via a service-based interface. The device may subscribe the centralized performance indicator data store to a message class associated with performance indicator data that is generated by the plurality of network function devices. The device may receive, from the plurality of network function devices, one or more published communications associated with the message class. The one or more published communications may include the performance indicator data. The device may store the performance indicator data in the centralized performance indicator data store.

Abstract: An information processing apparatus includes a plurality of offload devices each of which offloads and executes a relay process of a virtual switch, each of the plurality of offload devices including a memory that stores port conversion information, the port conversion information associating virtual port identifiers for identifying virtual ports before and after a virtual port to which a virtual machine executed by the information processing apparatus is connected is moved between the offload devices, and a processor coupled to the memory and that converts an input virtual port identifier for identifying an input virtual port into which a packet is input based on the port conversion information, searches an output virtual port identifier for identifying an output virtual port of the packet by using the converted input virtual port identifier, and converts the searched output virtual port identifier based on the port conversion information.

Abstract: Methods and systems for protecting a secured network are presented. For example, one or more packet security gateways may be associated with a security policy management server. At each packet security gateway, a dynamic security policy may be received from the security policy management server, packets associated with a network protected by the packet security gateway may be received, and at least one of multiple packet transformation functions specified by the dynamic security policy may be performed on the packets.

Abstract: A method for providing wireless access to one or more wireless devices using an automation system control panel is described. In one embodiment, a communication link is established between an automation system control panel and one or more automation components. Settings are applied to configure the automation system control panel for use as a wireless access point providing two-way communication with one or more electronic devices. Applying settings includes receiving input directly at a graphical user interface of the automation system control panel, the graphical user interface further providing access to control the one or more automation components. The automation system control panel is wirelessly connected to one or more electronic devices via a wireless access point interface using the settings applied at the graphical user interface.

Abstract: In various implementations, provided are techniques for verifying the accuracy of the network time maintained by a client device. In various implementations, a server can be configured to obtain network time information from a network. A particular client device can also obtain the network time information, and use the network time information to compute a network time for applications executing on the network device. The client device can periodically transmit the network time information to the mirror server. When the mirror server receives the time synchronization information from a client device, the mirror server can compare the client device's network time information to the network time information captured by the mirror server. In this way, the mirror server can verify the client device's time accuracy. The mirror server and/or the client device can subsequently perform a corrective action when the client device's time is not accurate.

Abstract: A computer-implemented method according to one embodiment includes receiving, on a first gateway node of a first cluster site, an input/output (I/O) request for a first fileset, and determining a collection of mount operations in which to add the I/O request for the first fileset. The determining includes hashing information of the first fileset against more than one collection of mount operations. The method further includes adding the I/O request for the first fileset to a first determined collection of mount operations, and outputting the first determined collection of mount operations to a first network file system (NFS) server. The first NFS server is one of a plurality of NFS servers of a second cluster site. Moreover, the first NFS server and at least one other NFS server of the plurality of NFS servers are configured to receive a collection of mount operations from the first gateway node.

Abstract: Systems, methods, and software described herein enhance connectivity between computing systems and containers. In one implementation, a method of allocating virtual network interfaces to containers on a host includes transferring, from the host, a request to at least one configuration resource to obtain an address configuration for one or more containers to be executed on the host. The method further provides for receiving an addressing configuration for the one or more containers to be executed on the host, and assigning a virtual network interface to each of the one or more containers based on the addressing configuration.

Abstract: In one embodiment, a method comprises determining, by a network device, a hop-by-hop path in a low-power and lossy network having a tree-based topology originated at a root network device, the hop-by-hop path comprising identified network devices for forwarding a data packet from a source network device to a destination device in the tree-based topology; and causing, by the network device, the destination device to initiate generation of a locally-optimized tree that bypasses the root network device and optimizes forwarding of the data packet from the source network device to the destination device, based on confined advertisements within the tree-based topology relative to the identified network devices.

Abstract: A peer configuration system provides a configuration file via peer-to-peer networking. A master device stores a peer configuration. Whenever any peer device requires configuration, the peer device assumes a slave role and queries the master device to retrieve the peer configuration. The peer configuration is thus propagated via peer-to-peer networking to the peer device. The peer device boots-up using the peer configuration retrieved from the master device.

Abstract: Described herein are systems, methods, and software to enhance the management of virtual nodes in a computing environment. In one example, a method includes identifying a transition event for a first version of a virtual node executing on a first host, identifying a second host to support a second version of the virtual node, and initiating execution of the second version of the virtual node on the second host. In some implementations, the virtual node comprises a non-persistent portion on the executing host and a persistent portion on a second storage element.

Abstract: Systems and methods for automatic discovery of a network address of a machine storing a management server application. The system includes a dynamic host configuration protocol (DHCP) server, which may perform internet protocol (IP) address leasing for DHCP clients. When the DHCP server performs IP address leasing to the machine storing the management server application, the DHCP server may configure a first IP address issued to the machine in vendor specific class information. When the DHCP server performs IP address leasing to a computing device functioning as a thin/zero client, the DHCP server may, in the IP address leasing process, send the vendor specific class information requested to the computing device. Thus, the computing device may retrieve the first network address of the machine from the vendor specific class information, and communicate with the management server application using the first network address of the machine.

Abstract: Content downloads can be managed. For example, intermediary software can receive a first request to download content from a remote server. The intermediary software can receive the first request from content requesting software. The first request can be formed according to a first protocol. The intermediary software can intercept the first request to prevent the first request from being communicated to the remote server. The intermediary software can generate a second request based on the first request and according to a second protocol that is different from the first protocol and that is usable with a peer-to-peer network. The intermediary software can then transmit the second request to the peer-to-peer network to cause the content to be downloaded from the peer-to-peer network.

Abstract: A system for providing a Domain Name System (DNS) service may include providing an agent for installation on a subscriber device. The subscriber device may be connected to the DNS service via an entry point device. The system includes receiving, from the agent, agent data indicative of a subscriber identifier and a unique identifier associated with the entry point device. The system may then determine, based on the agent data, a current Internet Protocol (IP) address associated with the entry point device and associate the unique identifier with the subscriber identifier. The system may then dynamically map the subscriber identifier to the current IP address and provide DNS service to the subscriber device based on the current IP address.

Abstract: Systems, methods, apparatus and computer-readable medium are described for improving efficiency and robustness for processing network packets at a network device, such as a customer premises equipment (CPE). The network device may include a plurality of physical network interfaces for receiving and transmitting network packets, and one or more processing entities. The one or more processing entities may provide a first router for providing routing functionality, wherein the first router is not virtualized, enable a virtual machine to execute a second router for providing routing functionality and forward a network packet using the first router or the second router from the device. The one or more processors may be configured to execute instructions associated with the first router from user space.

Abstract: Various methods and systems for implementing an autonomous configuration system for configuring a service infrastructure are provided. An autonomous configuration system implements a service infrastructure configuration manager to identify discovered configuration data. The discovered configuration data supports circumventing a routing protocol for service infrastructure communications via an edge infrastructure, such that, the service infrastructure is alternatively configured to access remote configuration data based on the discovered configuration data. The discovered configuration data is discovered based an autonomous discovery service (e.g., sniffing service or a casting service). An initial configuration state is configured in the service infrastructure, based on the discovered configuration data. The service infrastructure can communicate with a service provider infrastructure associated with the service infrastructure to access the remote configuration data.

Abstract: Techniques for providing data version comparison between trans-time zone sites. One example method includes target data and a corresponding time stamp is received from each trans-time zone site. Each of the time stamps are based on a respective time zone of a sending trans-time zone site from which the target data and the time stamp were received. Each of the received time stamps are modified based on the respective time zone of the sending trans-time zone site for the time stamp and a time zone of the central server. The received target data is compared from each of the trans-time zone sites to stored target data based on the modified corresponding time stamp. A latest version of the target data is stored by the central server having a modified corresponding time stamp that is greater than each of the other modified corresponding time stamps.

Abstract: Disclosed is a technique for providing packet filter maps with high branching factors in a system for managing network traffic in a visibility fabric. A high branching factor enables a map to branch out more than two ways. High branching factors can be realized by allowing a map to be affiliated with more than one action set. For example, each rule of the map may be affiliated with a unique action set that is executed only when the corresponding rule is satisfied.

Abstract: Examples described herein include systems and methods for providing secure access to an email server. A gateway server can receive a request for email notification information from a notification server and parse the request to identify at least one user device associated with the request. The gateway server can then determine whether the identified devices comply with any applicable compliance rules, for example by requesting a compliance status from a management server at which the identified devices are enrolled. If at least one of the identified devices is in compliance, the gateway can pass the request through to the email server. The gateway can then receive a response from the email server and provide it to the notification server.

Abstract: Technology for a virtualized network function manager (VNFM) in a mixed wireless network operable to facilitate instantiation of a virtualized network function (VNF) instance is disclosed. The VNFM can receive a request to instantiate a new VNF instance from a network manager (NM) via a network function virtualization (NFV) orchestrator (NFVO), the request including VNF instantiation information. The VNFM can send a request to a virtualized infrastructure manager (VIM) for allocating virtual resources for the new VNF instance based on the VNF instantiation information. The VNFM can receive an acknowledgement from the VIM after successful allocation of the virtualized resources for the new VNF instance. The VNFM can instantiate the new VNF instance and send an acknowledgement of the new VNF instance to the NFVO, wherein the new VNF instance is operable to ease congestion at an overloaded non-virtualized network element in the mixed wireless network.

Abstract: An anti-malware application detects and remediates malware. The anti-malware application detects an event associated with a process and determines if the event matches an entry in an exclusions list. If the event is absent from the exclusions list, the anti-malware application monitors the operation of the process, logs the event data in an event log, and sends the event to a server to determine whether the process corresponds to malware. The anti-malware application updates the exclusions list based on the logged event if the process does not correspond to malware. The anti-malware application restores a file edited by the process to the saved copy of the original file prior to the file being edited by the process if the process corresponds to malware.

Abstract: An NF information interaction method and device. The method comprises: a network function library NRF receiving a service discovery request sent by an NF requesting party, wherein the service discovery request at least comprises a service identifier requested to be provided by the NF requesting party; performing querying according to the service identifier, and determining an NF providing party of a service requested to be provided by the NF requesting party and service-related information about the NF providing party; and sending the service-related information about the NF providing party and the service-related information to the NF requesting party by means of a service discovery response.

Abstract: Methods, systems, and media for modifying firewall rules based on dynamic Internet Protocol (IP) addresses are provided. In some embodiments, the method comprises: receiving, from a database server, a request to modify a firewall rule of a firewall protecting a remote computer, wherein the request includes an IP address of a user device initiating a connection to the remote computer, and wherein the firewall rule indicates IP addresses of devices allowed to establish connections to the remote computer; determining whether the IP address of the user device is to be added to the firewall rule; and in response to determining that the IP address of the user device is to be added to the firewall rule, adding the current IP address to the firewall rule.

Abstract: In general, techniques are described for defining and executing device-independent commands on a network having a plurality of network devices. In some examples, a controller includes a graphical user interface. The controller displays, via the graphical user interface, network devices that support a device-independent command selected from one or more device-independent commands, wherein each device-independent command performs one or more operations on supported network devices. The controller receives, via the graphical user interface, user input selecting two or more of the displayed network devices and performs the one or more operations of the selected device-independent command on the selected network devices. In some examples, performing includes executing tasks associated with each network device, wherein the tasks, when executed, perform the one or more operations on each respective network device.

Abstract: Identification of unmatched registry entries may be provided by scanning a file system, discovering software, collecting first attribute values of the discovered software, and receiving a plurality of filtering rules including a method and an attribute. The attribute may comprise a software-specific condition. The method may further comprise collecting native registry entries comprising second attribute values indicated by said attributes of at least one of said rule, and comparing said first attribute values of said discovered software with related ones of said second attribute values of said collected native registry entries. Then, the native registry entries may be grouped into two groups. The first group represents matched registry entries and the second group represents unmatched registry entries. The unmatched registry entries may be identified as unequivocal entries for further software discovery.

Abstract: Systems, devices, and methods for streaming video data being recorded once an operator user equipment (110,115,120,315) is in the location specified by a requester user equipment (140,310) based on selecting the operator user equipment from a determined set of one or more user equipment (110, 115, 120) that may be based on a received acknowledgement message from the operator user equipment that the request was accepted (steps 440,660) and a set of criteria. In some embodiments, determining the set of one or more user equipment to send the request to may be based on a received request (steps 410, 710) and connectivity status. Additionally, the streaming (steps 450,580,680) may be based on a request (steps 410,719) from the requester user equipment (140,310) being sent to a computing device (145,360) for dispatching the operator user equipment (110,115,120,315).

Abstract: Disclosed herein is an apparatus and method for a key value store snapshot for a distributed memory object system.

Abstract: Disclosed is an apparatus and method for controlling operation of at least one home appliance by executing artificial intelligence (AI) algorithms and/or machine learning algorithms in a connected 5G environment for the Internet of things (IoT). The home appliance control apparatus according to an embodiment of the present disclosure includes a setting unit for setting one home appliance among a plurality of home appliances as a main home appliance and for setting at least one of the remaining home appliances as a sub-home appliance when a voice command is received from an utterer, and a communication control unit for controlling the main home appliance and the sub-home appliance to communicate with each other using a mutually agreed communication protocol other than a pre-set network communication when a predetermined condition is satisfied.

Abstract: A host machine operated for a specific purpose can have restricted access to other components in a multi-tenant environment in order to provide for the security of the host machine. The access restriction can prevent the host machine from obtaining updates to critical system-level configurations, but such information can be obtained through a signed command received to an API for the host machine. The command can be signed by a quorum of operators, and the host machine can be configured to verify the signatures and the quorum before processing the command. The host machine can store the updates to ephemeral storage as well as persistent storage, such that upon a reboot or power cycle the host machine can operate with current configuration data.

Abstract: A method and a system for monitoring a plant automation technology, comprising: a gateway, which is connected for communication with at least one field device via a first communication network, wherein the gateway is embodied to read out data from the field device; and a service device, especially a router or a switch, which is connected for communication with the gateway by means of a second communication network, wherein the service device is embodied to receive via the second communication network the data read-out by the gateway and to transmit to a management application via a third communication network the data queried by the gateway.

Abstract: Technology for installing operating configurations in nodes of configurable network computer systems, such as the storage system nodes of a hyper-converged infrastructure system is disclosed. The node is configured with network addresses for two different network protocols. An installer identifies a change in the first network address, then uses the second network address and protocol to change the first network address to a default value. Using the default value, the installer can then install an operating configuration using the first network address and protocol.

Abstract: Systems and methods for usage-based device naming and grouping are disclosed. For example, trigger events that indicate when a device should be renamed, added to a device group, and/or added to a routine may be determined. Usage data representing usage of the device may be received and utilized to determine if a trigger event occurs. When a trigger event occurs, a recommendation for renaming, grouping, etc. may be determined and sent to a user device. Upon acceptance of the recommendation, the device may be renamed, grouped, and/or added to a routine.

Abstract: One embodiment comprises a processor, a plurality of stateless containers of binaries, each of the stateless containers of binaries comprising a code memory having stored thereon processor-executable instructions configured to provide a different version of a first functional component of the content management system, a configuration container comprising a configuration memory having stored thereon configuration data for the plurality of stateless containers of binaries and a data container comprising a data memory storing input data or output data for the plurality of stateless containers of binaries. Each of the stateless containers of binaries is linked to the configuration container and each of the stateless containers of binaries is configured to execute the respective instructions to provide the respective different version of the first functional component and use the configuration data in common and the data memory in common.

Abstract: Automated configuring of system settings of a computer for a peripheral device(s) is provided. The configuring process includes determining, by the computer, that a peripheral device has been connected to the computer, and based on the determining, ascertaining profile-related data for use in configuring computer system settings for the peripheral device connected to the computer. The ascertained profile-related data is used to identify, by the computer, a settings profile for the peripheral device from saved settings profiles for one or more peripheral devices. Based on the identified settings profile, the computer system settings for the peripheral device are configured.

Abstract: Metadata indicating that a virtual traffic hub enabling connectivity between a plurality of isolated networks has been established is stored. A determination is made that a first entry of a first isolated network attached to the hub is to be represented in a second routing table of a second isolated network attached to the hub, e.g., to enable network packets originating at resources of the second isolated network to be transmitted via the hub to the first isolated network. A new entry corresponding to the first entry is included in the second routing table.

Abstract: The present invention discloses an address management method and apparatus, to help dynamically adjust an address resource and improve address resource utilization. The method includes: establishing a communication connection to a network device based on a specified routing protocol; receiving an address pool status message sent by the network device; determining, based on the address pool status message, whether an address pool of the network device is in an address insufficient state or an address abundant state; and sending a first routing message to the network device by using the communication connection if the address pool of the network device is in the address insufficient state; or sending a second routing message to the network device by using the communication connection if the address pool of the network device is in the address abundant state.

Abstract: System for converting a spreadsheet in a first format to a second format comprising: a server including a storage means adapted to store the spreadsheet in the second format and store an associated template; a data set associated with the spreadsheet in the second format, such that the data set is adapted to be associated with the template to be displayed on a client device; and wherein when data is associated with the template, changes made via the client device to the associated data is recorded in realtime in both the spreadsheet in the second format and template. A process for generating an output for a webpage, comprising: selecting a spreadsheet and a template stored by a server, the spreadsheet comprising a data set; associating the data set with an element in the template, such that when the data is associated with the template, changes made to the associated data is recorded in realtime in both the spreadsheet and template; and generating the output comprising the data associated with the template.

Abstract: A printer includes a printing mechanism, a display device, a print controller configured to control the printing mechanism to print an image on a print medium, and a display controller configured to make the display device display a preview image in which the image to be printed on the print medium and a processing position where processing is performed on the print medium after the printing are superimposed with each other.

Abstract: An apparatus connected to a network executes search processing of searching for a device connected to the network, displays a selection screen including identification information corresponding to the device connected to the network based on a search result of the search processing, and designates a device based on operation of a user using the selection screen. In response to designation of the device, based on setting information for communication stored in the apparatus and information of the designated device obtained by the search processing, the apparatus displays a screen indicating whether it is possible to communicate with the designated device using the setting information.

Abstract: Computer-implemented methods for accessing a particular element of a plurality of elements stored in an N-way linked list in a computer memory provide for adding or removing elements at locations within the list. The methods may be employed with LIFO or FIFO N-way linked lists. The methods may include traversing the N sub-lists in parallel as well as the use of single instruction multiple data operations.

Abstract: Dynamic intelligent analytics VPN instantiation and/or aggregation facilitating secured access to the cloud network device are provided herein. A system can comprise: a processor; and a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising: identifying an application for execution on a user device of user devices connected to first network devices of a first network, wherein the system is part of second devices of a second network communicatively coupled to and remote from the first network; and determining virtual private network attributes for a virtual private network for the user device, wherein the virtual private network attributes are based on the application; and generating a message notification to send to the user device, wherein the message notification comprises the virtual private network attributes to enable the user device to update the virtual private network.

Abstract: Rapid deployments of application-level deceptions (i.e., booby traps) implant cyber deceptions into running legacy applications both on production and decoy systems. Once a booby trap is tripped, the affected code is moved into a decoy sandbox for further monitoring and forensics. To this end, this disclosure provides for unprivileged, lightweight application sandboxing to facilitate monitoring and analysis of attacks as they occur, all without the overhead of current state-of-the-art approaches. Preferably, the approach transparently moves the suspicious process to an embedded decoy sandbox, with no disruption of the application workflow (i.e., no process restart or reload). Further, the action of switching execution from the original operating environment to the sandbox preferably is triggered from within the running process.

Abstract: Some embodiments provide a system for implementing a logical network that includes a set of end machines, a first logical middlebox, and a second logical middlebox connected by a set of logical forwarding elements. The system includes a set of nodes. Each of several nodes includes (i) a virtual machine for implementing an end machine of the logical network, (ii) a managed switching element for implementing the set of logical forwarding elements of the logical network, and (iii) a middlebox element for implementing the first logical middlebox of the logical network. The system includes a physical middlebox appliance for implementing the second logical middlebox.

Abstract: An offline caching method comprises: creating a cache data source module on the framework layer for downloading streaming media and a media cache module on the framework layer for writing data to a cache; downloading, by the cache data source module, a media resource from a storage, and writing the media resource into the media cache module to generate an offline cache file; storing the offline cache file; and providing the stored offline cache file to the application layer for access.

Abstract: The present disclosure involves a method including: receiving a request to access an object from a user; prompting the user to go to a target location; receiving feedback from the user with respect to the user's location; determining, electronically by a processor, whether the user has reached the target location; granting access of the object to the user in response to the determining. The present disclosure involves a system including: a storage storing an electronic item; an electronic communications interface that: detects a request to access the item from an entity and prompts the entity to go to a target location in response to the request; a computer processor that: analyzes feedback from the entity with respect to the entity's location, determines whether the entity's location is sufficiently close to the target location, and grants or denies access of the item to the entity based on the determination.

Abstract: The present subject-matter provide a controller for a low-power, wireless, software defined networking, SDN, architecture. The controller comprises a processor and a memory storing instructions for execution by the processor. The instructions, when executed by the processor cause the controller to implement: a control layer arranged to detect a communication type for processing an application over the network, and translate the communication type into a plurality of phases chosen from a pre-defined set of phases to configure the nodes of the network to respond to the application according to the communication type.

Abstract: Location-Based Addressing (LBA) is a method of controlling and commissioning networked lighting devices. The lighting devices communicate over a wireless network using radio frequency communication protocols. The lighting devices are commissioned or grouped based on their 5 respective locations in a building floor plan or a building architecture. The lighting devices are commissioned to respond to radio frequency communications that correspond to their respective locations. This imposed location-based architecture reduces the amount of transmitted data required to control the lighting devices and, thus, reduces the radio bandwidth required to control the lighting devices. In other words, controlling devices “multicast” instructions and controlled devices “listen” for instructions and act only upon instructions that correspond to their respective location. Hand shaking or two-way communication between the controlling devices and the controlled devices is not required.

Abstract: Embodiments of the present invention provide an IP address allocation system and method, which implement, if a control plane is separated from a forwarding plane, a function that enables user equipment to acquire an internet protocol (IP) address in a dynamic host configuration protocol (DHCP) manner. The method includes: receiving, by a forwarder, an address request sent by an external network element, where the address request includes a DHCP request of user equipment UE and user characteristic information of the UE; acquiring, from a DHCP service network element according to the DHCP request, an IP address allocated to the UE; and acquiring first instruction information that is delivered by a control device according to the user characteristic information of the UE and the IP address allocated to the UE, and sending the IP address to the UE according to the user characteristic information.

Abstract: Disclosed herein are embodiments of systems and methods that dynamically reconfigure a multi-tiered system of network devices and software applications in response to an ongoing and/or anticipated cyber-attack. The dynamic reconfiguration of the network devices may consist of a wide range of processes, which may include generating new network addresses for individual network devices; reconfiguring the network devices by creating firewalls, changing protocols between the network devices in a multi-tier reconfiguration solution, changing the cloud infrastructure provider of the network devices, even when the underlying network infrastructure ecosystem differs across cloud service providers (CSPs); and maintaining a secure and updated data model of a record of reconfigured network devices and their dependencies to allow legitimate users of the network devices to understand reconfiguration actions that are hidden from malicious users such as hackers and cyber-attackers.

Abstract: Techniques for configuring a network based on a Domain Name System (DNS) or network metadata policy for network control are disclosed. In some embodiments, a system, process, and/or computer program product for a DNS or network metadata policy for network control includes receiving a DNS or network metadata update at a DNS server (e.g., an authoritative or recursive DNS server) or an IP Address Management (IPAM) server, in which the DNS or network metadata update is determined to be relevant to the DNS or network metadata policy for network control; and sending the DNS or network metadata update to a network controller for a network, in which the network controller configures a plurality of network devices on the network based on the DNS or network metadata policy for network control.

Abstract: A storage system in one embodiment comprises a plurality of storage devices and a storage controller. The storage system implements a loopback replication process in which one or more source storage objects are replicated to one or more corresponding target storage objects within the storage system. The storage system obtains a pairing identifier, pairs a source storage object with a target storage object by associating respective distinct instances of the pairing identifier with the source storage object and the target storage object, and replicates the source storage object to the target storage object based at least in part on the associated instances of the pairing identifier. Each of the source and target instances of the pairing identifier comprises a collision field. The collision fields of the source and target instances of the pairing identifier have respective distinct values in order to prevent collisions between the source and target storage objects during loopback replication.