Abstract: A transceiver configured for communicating in a wireless communication network being operated so as to schedule communication in a communication channel being organized in a plurality of resources; is configured for performing long-term sensing an utilization of the channel by decoding a data traffic; for estimating a usability of resources of the channel for an own transmission based on the decoding; and for scheduling the own transmission based on the usability of the resources.

Abstract: Threats can be determined from anomalous events based on artificial intelligence (AI) models. For example, a computer system stores, based on an output of a first AI model, first information indicating that a first event cluster of the first event clusters is associated with a threat classification and that a second event cluster of the first event clusters is associated with a non-threat classification. The computer system receives a first dataset representing first events and generate a first input to the first AI model based on the first dataset. The computer system determines, based on the first input to the first AI model, second event clusters and that a third event cluster of the second event clusters has no correspondence in the first event clusters and is associated with an unknown classification. The computer system generates second information indicating that the third event cluster is associated with the unknown classification.

Abstract: A fabric control protocol is described for use within a data center in which a switch fabric provides full mesh interconnectivity such that any of the servers may communicate packet data for a given packet flow to any other of the servers using any of a number of parallel data paths within the data center switch fabric. The fabric control protocol enables spraying of individual packets for a given packet flow across some or all of the multiple parallel data paths in the data center switch fabric and, optionally, reordering of the packets for delivery to the destination. The fabric control protocol may provide end-to-end bandwidth scaling and flow fairness within a single tunnel based on endpoint-controlled requests and grants for flows. In some examples, the fabric control protocol packet structure is carried over an underlying protocol, such as the User Datagram Protocol (UDP).

Abstract: An illustrative method includes detecting a request to perform a cluster-wide snapshot of a cluster comprising one or more nodes on which one or more containerized applications are deployed, the snapshot corresponding to a point in time; preparing, based on the request, objects within the cluster for the snapshot; and generating, in response to the preparing, the cluster-wide snapshot of the cluster.

Abstract: In one aspect, the invention comprises a system and method for control of a transaction state system utilizing a distributed ledger. First, the system and method includes an application plane layer adapted to receive instructions regarding operation of the transaction state system. Preferably, the application plane layer is coupled to the application plane layer interface. Second, a control plane layer is provided, the control plane layer including an adaptive control unit, such as a cognitive computing unit, artificial intelligence unit or machine-learning unit. Third, a data plane layer includes an input interface to receive data input from one or more data sources and to provide output coupled to a decentralized distributed ledger, the data plane layer is coupled to the control plane layer. Optionally, the system and method serve to implement a smart contract on a decentralized distributed ledger.

Abstract: A computer includes a processor and a memory storing instructions executable by the processor to select a scanning rate for a first sensor of a vehicle based on at least one of data related to a current time or data related to a location of the vehicle; instruct the first sensor to run at the selected scanning rate; in response to receiving data from the first sensor indicating a newly present object, turn on a second sensor; and then record data from the second sensor. The second sensor has a higher power draw than the first sensor.

Abstract: A system, method, and computer-readable medium for performing a data center monitoring and management operation. The data center monitoring and management operation includes: receiving data center asset telemetry information; processing the data center asset telemetry information to provide a performance indicator metric; training a resource utilization machine learning model using the performance indicator metric; and, using the resource utilization machine learning model to provide a data center asset resource utilization result.

Abstract: A semiconductor device includes a first cell. The first cell includes a first functional feature, a first sensitivity region, at least one anchor node, wherein each of the at least one anchor node is different from the first functional feature, and a number of anchor nodes of the at least one anchor node linked to the first functional feature is based on a position of the first functional feature relative to the first sensitivity region. The semiconductor device further includes a second cell abutting the first cell. The second cell includes a second functional feature, wherein the second functional feature satisfies a minimum spacing requirement with respect to the first functional feature.

Abstract: An electronic apparatus includes a first communication section that performs first communication in a wireless manner based on a first communication standard, a second communication section that performs second communication in a wired manner based on a second communication standard different from the first communication standard, and a controller that controls the first communication section and the second communication section. When a connection through the second communication is performed during a connection through the first communication, the first communication is not disconnected until a predetermined packet is received through the second communication and is disconnected when the predetermined packet is received through the second communication.

Abstract: A system, method, and computer-readable medium for performing a data center management and monitoring operation. The data center management and monitoring operation includes: identifying a headless data center asset within a data center; identifying a baseboard management controller associated with a data center asset within the data center; accessing the baseboard management controller associated with the data center asset; and, programming the headless data center asset via the baseboard management controller associated with the data center asset, the programming propagating headless data center asset unique information from the baseboard management controller to the headless data center asset.

Abstract: An embodiment includes a method of vulnerability detection and mitigation in a managed network. The method includes receiving a defined state of a product on a managed endpoint of a managed network. The method includes detecting a trigger event in the managed network. The trigger event is indicative of a change to the managed device or to the product that is inconsistent with the defined state. Responsive to detection of the trigger event, the method includes automatically implementing a product modification process. The product modification process includes distribution of at least one product update to a product installed at the managed endpoint.

Abstract: A package deployment method and apparatus, a terminal device, and a storage medium are disclosed, which are applicable to the field of computer technologies. The method includes: searching, for a plurality of registered devices, for a package adapted to each of the plurality of devices, where a registration operation of the plurality of devices is completed by using a pre-constructed integrated development environment (IDE) tool; and distributing and deploying a found package to a corresponding device, where the corresponding device is a device in the plurality of devices. The constructed IDE tool each time can register with and be connected to a plurality of different devices; searches, for the plurality of registered devices, for a package adapted to each device; and then distributes and deploys a found package to each corresponding device.

Abstract: A threat management facility detects a device on an enterprise network and determines whether the device is one of a set of managed devices for the enterprise network. When the device is not one of the set of managed devices, the threat management facility may selectively direct the device to a portal that provides support to the user of the device while the device awaits admission to the enterprise network. As the user interacts with the portal, the portal may manage admission of unrecognized devices onto the enterprise network while making efficient use of network administrator resources.

Abstract: Systems and methods are disclosed herein that can detect at least one activity by parsing text from an operation of a consumer electronics device and determine that the at least one activity matches a risk scenario.

Abstract: Disclosed herein are systems and methods for updating select files in an image backup. In an exemplary aspect, a method comprises performing an image backup of a storage device comprising a plurality of files. The method comprises selecting a file of the plurality of files based on file selection rules and subsequent to the image backup, detecting that the file has exited a full consistency state. The method comprises monitoring the file to detect a return to the full consistency state. In response to detecting that the file has returned to the full consistency state, the method comprises identifying a physical address of at least one sector comprising the file on the storage device, and updating a version of the file previously captured in the image backup with a version of the file after returning to the full consistency state.

Abstract: Systems and methods for a programming language-agnostic data modeling platform that is both less resource intensive and scalable. Additionally, the programming language-agnostic data modeling platform allows for advanced analytics to be run on descriptions of the known logical data models, to generate data offerings describing underlying data, and to easily format data for compatibility with artificial intelligence systems. The systems and methods use a supplemental data structure that comprises logical data modeling metadata, in which the logical data modeling metadata describes the logical data model in a common, standardized language. For example, the logical data modeling metadata may comprise a transformer lineage of the logical data model.

Abstract: A method and system for protecting an application from unsecure network exposure. The method includes identifying an at-risk application, wherein identifying the at-risk application further comprises determining that the application is configured incorrectly; identifying at least one port through which the at-risk application is accessible when the at-risk application is determined to be configured incorrectly; and determining, based on the identified at least one port through which the at-risk application is accessible, whether an exposure vulnerability exists, wherein the exposure vulnerability is an unapproved exposure of at least one of the at least one port to external resources.

Abstract: A home user interface (UI) system for managing digital ink is provided. The home UI system includes a plurality of state sensors capable of detecting a state in a house or a change in the state, and a plurality of home-use devices that are provided in the house or that form part of the house and that each include a handwriting sensor capable of detecting handwriting made by a person. The home UI system further includes one or more notification units that are configured to notify the person of the existence of the home-use device or a detectable region of the handwriting sensor of the home-use device. The home UI system further includes a controller which, when it is determined that a notification is necessary from a detection result of one or more of the state sensors, instructs at least one of the notification units to carry out the notification.

Abstract: Systems, methods, and apparatuses for isolating information from a cloud services provider hosting an enterprise application software, using a distributed ledger. For example, according to one embodiment there is a system having at least a processor and a memory therein executing within a host organization to host an enterprise application software for an enterprise, receive information input from a customer of the enterprise at a user interface for the enterprise application software, transfer the customer-provided information to a distributed ledger accessible to the system, receive information input from the enterprise at an enterprise interface for the enterprise application software, transfer the enterprise-provided information to the distributed ledger accessible to the system, but maintain no copy of the customer-provided information nor copy of the enterprise-provided information in a permanent store accessible to the system and the host organization.

Abstract: Systems, components, and methods for use in a commercial kitchen intelligence system. A network appliance and a plurality of kitchen components are coupled to a data communication network. The network appliance establishes a VPN connection with a portal remote to the commercial kitchen. The network appliance establishes communication with a point-of-sale (POS) system for receipt of POS data. The network appliance facilitates communication among the kitchen components on the data communications network independent of different protocols by which the kitchen components are configured to communicate.

Abstract: The technology of this application relates to a communication method and apparatus, to resolve a current problem that limited bandwidth resources of a single link affect quality of service. In an example embodiment, a terminal sends a first access message to an access gateway in a second core network through a first network, and sends a second access message to the access gateway through a second network, where the first access message is encapsulated by using a first IP address. Further, the access gateway requests an AMF network element to establish two communication links for the terminal. One communication link is for the terminal to access the core network through the first network, and the other communication link is for the terminal to access the core network through the second network. Through establishment of the two communication links between the terminal and the core network, bandwidth resources can be added, and the quality of service can be improved.

Abstract: Examples described herein relate to method, resource management system, and non-transitory machine-readable medium for redeploying a computing resource. Data related to a performance parameter corresponding to a plurality of computing resources deployed on a plurality of host-computing nodes may be received. The performance parameter is associated with one or both of: communication between computing resources of the plurality of computing resources, or communication of the plurality of computing resources with a network device. Further, for a computing resource of the plurality of computing resources, a candidate host-computing node is determined from the plurality of host-computing nodes based on the data related to the performance parameter and the computing resource may be redeployed on the candidate host-computing node.

Abstract: Provided are a continuous data protection system and method for a modern application. The system includes a modern application module, a disaster recovery service module, and a data protection module. The modern application module includes a production service unit, a production service database, a production object storage gateway, a production object storage, and a production object database. The disaster recovery service module includes a disaster recovery service unit, a disaster recovery service database, a disaster recovery object storage gateway, disaster recovery object storage, and a disaster recovery object database corresponding to the production service unit, the production service database, the production object storage gateway, the production object storage, and the production object database respectively.

Abstract: The present application discloses a DIKW resource transfer method and device for purpose-oriented calculation and inference. The method includes: determining a resource to be matched by traversing a first resource system corresponding to a receiver based on an acquired target purpose, and determining a target resource based on the resource to be matched and a second resource system. The embodiments of the present disclosure can reduce the waste of the target resource, lowering transfer loss, and decrease the risk of transfer failure.

Abstract: A network device may receive topology data identifying a spine and leaf topology of network devices, and may set link metrics to a common value to generate modified topology data. The network device may remove data identifying connections from leaf network devices to any devices outside the topology from the modified topology data to generate further modified topology data, and may process the further modified topology data, with a model, to determine path data identifying paths to destinations. The network device may determine particular path data identifying shorter paths and longer paths to corresponding destinations, and may determine hop counts associated with the paths. The network device may determine whether the hop counts are all odd values, all even values, or odd and even values, and may perform actions based on whether the hop counts are all odd values, all even values, or odd and even values.

Abstract: A method for asset assessment is provided. The method includes receiving, by a scan engine, an event message from a scan assistant associated with an asset of a network system. The asset includes at least one computing resource. The event message includes an indication of one or more events associated with the asset. The method also includes responsive to receiving the event message, transmitting, by the scan engine, a request to the scan assistant for executing one or more scan operations on the asset and to determine a state of the asset based on at least one of an amount of available network resources or a schedule associated with the asset. The method further includes executing, by the scan engine, the one or more scan operations on the asset after transmitting the request.

Abstract: This disclosure describes systems, methods, and devices related to identification and assessment of security threats to a computer system using zero trust security. A method may include receiving, at a policy enforcement device of a computer network, first data from a first subsystem of the computer network; receiving, at the policy enforcement device, second data from a second subsystem of the computer network, the first subsystem different than the first subsystem; identifying, by the policy enforcement device, based on a comparison of at least one of the first data or the second data to a security policy, a security threat to the computer network; and causing, by the policy enforcement device, a threat intelligence device of the computer network to determine a risk of the security threat.

Abstract: Disclosed herein is a network management apparatus, comprising: a correlating information storage unit configured to store correlating information, about a failure that occurs, that correlates a notification notified when the failure occurs to a workaround for the failure; a notification acquisition unit configured to acquire, a plurality of notifications notified in relation to a plurality of components related to a device in which the failure has occurred, respectively; a failure determination unit configured to determine whether the failure is a known failure in which the notification is correlated to the workaround or an unknown failure, by referring to the correlating information based on the plurality of notifications; and a workaround determination unit configured to determine, when the failure is determined to be the known failure, the workaround that is correlated to a notification determined according to a predetermined ordering of the components, as the workaround to be applied.

Abstract: Message encoding and decoding methods, a processing device, and a storage medium are disclosed. The method includes generating a request message, wherein the request message includes an attribute message and a content message, the attribute message includes a message identifier, a message direction, a message timeout state, a message processing state, and a message termination state, the content message includes at least a first type of content message and a second type of content message, and the attribute message is used to process the request message; and sending at least the content message and the message direction.

Abstract: The method of some embodiments assigns a client to a particular datacenter from among multiple datacenters. The method is performed at a first datacenter, starting when it receives security data associated with a second datacenter. Then the method receives a DNS request from the client. Based on the received security data, the method sends a DNS reply assigning the client to the particular datacenter instead of the second datacenter. The receiving and sending is performed by a DNS cluster of the datacenter in some embodiments. The particular datacenter includes a set of servers implementing an application for the client in some embodiments. The datacenter to which the client gets assigned can be the first datacenter or a third datacenter.

Abstract: Described herein are technologies that provide an element of security related to file system operations. Individual nodes in a file system, such as a directory or a file, can be associated with information that describes how to handle letter case when a file name included in a file system operation request is used to locate a file in the file system. For example, a case sensitive designation associated with a directory can require a case sensitive match between a file name included in a request and a file name included in the directory, in order to perform the requested file system operation. In another example, a case preferring designation associated with a directory first checks for a case sensitive match between file names. If a case sensitive match does not exist, then a case insensitive match between the file names can be used to perform the requested file system operation.

Abstract: A method, system and non-transitory computer-readable medium for automated reconstruction of an application. The method, the system, and the non-transitory computer-readable medium cause a processor: receive a workflow that comprises a sequence of microservice operations that correspond to the application; transfer, from a current host platform that is associated with the application, to a backup memory, a copy of an active database that is associated with the application; deactivate the active database from the current host platform; rebuild an operating system of the application; remove a pre-build configuration of the application; install a recovery mode of the application on the current host platform; deploy a post-build configuration of the application; perform a quality assurance process that comprises validating the post-build configuration of the application; and transfer from the backup memory to the current host platform, the copy of the active database.

Abstract: Aspects of the disclosure relate to URL classification. A computing platform may receive, from an enterprise user device, a request to evaluate a URL. The computing platform may execute one or more feature enrichment actions on the URL to identify one or more data points corresponding to the URL, which may include crawling the URL to extract metadata for the URL. The computing platform may input, into a URL classification model, the one or more data points corresponding to the URL, which may cause the URL classification model to output a maliciousness score indicative of a degree to which the URL is malicious. The computing platform may send, to the enterprise user device, a malicious score notification and one or more commands directing the enterprise user device to display the malicious score notification, which may cause the enterprise user device to display the malicious score notification.

Abstract: Methods, systems, and computer programs for configuring a network functions virtualization orchestrator (NFVO). In one aspect, a method can include actions of generating, by one or more computers, a message that includes data representing a request to upload a virtual network function (VNF) package, encoding, by the one or more computers, the generated message that includes the VNF package for transmission to a network functions virtualization orchestrator (NFVO), and transmitting, by the one or more computers, the encoded message to the NFVO.

Abstract: A method is provided for causing a networking device to enter a power saving mode, determining whether or not a Voice over Internet Protocol (VOIP) telephony interface is in service after the causing the networking device to enter the power saving mode, the networking device including the VOIP telephony interface, the VOIP telephony interface communicatively connected to a VOIP provider, and rebooting the networking device when the VOIP telephony interface is determined not to be in service.

Abstract: A computer-implemented method includes training a machine-learning model, using a training dataset that distinguishes between critical systems and non-critical systems, to classify a particular computer system as critical or non-critical, wherein a label is applied to the particular computer system during the training that identifies the particular computer system as critical or non-critical, and wherein parameters that describe the critical systems or non-critical systems are used as features during the training. The method further includes receiving an input dataset that describes a plurality of computer systems in the enterprise environment.

Abstract: When an information processing apparatus having local connection to a first printing apparatus is moved from a first connection area to a third connection area, the information processing apparatus is caused to have wide area connection to the first printing apparatus in the third connection area, and when the information processing apparatus having wide area connection to a second printing apparatus is moved from the third connection area to the first connection area, a user is requested to select the first printing apparatus or the second printing apparatus, and the information processing apparatus is connected to the apparatus selected by the user in response to the request.

Abstract: A method, computer program product, and computing system for dividing a total IO flow rate limit between a plurality of storage nodes of a multi-node storage system. A total desired IO flow rate may be determined. Each storage node of the plurality of storage nodes may be queried for a desired IO flow rate, thus defining a plurality of desired IO flow rates. An updated IO flow rate limit may be defined, for each storage node, an updated IO flow rate limit based upon, at least in part, the total IO flow rate limit and the plurality of desired IO flow rates. One or more IO requests may be processed on the plurality of storage nodes based upon, at least in part, the updated IO flow rate limit defined for each storage node and the total desired IO flow rate.

Abstract: A method and an apparatus for actively defending against backdoor attacks under an edge computing scenario.

Abstract: A method for reducing inter-PLMN forwarding of messages relating to Nnrf service operations includes receiving, at a first NRF, a first request for an Nnrf service operation, determining that the first request identifies a PLMN different from a PLMN of the first NRF, determining that the first request cannot be processed locally at the first NRF, and, in response, forwarding the first request to a second NRF in the PLMN identified in the first request. The method further includes receiving, from the second NRF, a response to the first request, caching information from the response, receiving a second request for an Nnrf service operation, determining that the second request identifies a PLMN different from the PLMN of the first NRF, determining that the second request can be processed locally at the first NRF, and processing the second request locally at the first NRF using the cached information from the first response.

Abstract: Examples described herein relate to fetching network device topologies using a timestamp-callback map. The timestamp-callback map includes timestamps paired with references to unique callback functions that fetch topologies for network devices when executed. Examples include setting an alarm for each timestamp in the timestamp-callback map. When an alarm generates a notification, examples create worker threads of a network profiler service. Each worker thread executes a respective unique callback function to fetch a topology for a network device from a topology service. Examples describe different implementations of the timestamp-callback map that can be optimized in various embodiments.

Abstract: A data processing method and an apparatus relate to the communication field. The data processing method includes: A first network data analytics network element determines identification information of one or more submodels related to a target model. The first network data analytics network element sends the identification information of the submodel to a network element corresponding to the identification information of the submodel. The first network data analytics network element receives, from the network element, a value that reflects impact of the submodel on the target model, and performs training, to obtain the target model. The data processing method and apparatus provide functions such as accurate data collection, data analysis, and data training.

Abstract: Methods and systems are disclosed herein for using anomaly detection in timeseries data of user sentiment to detect incidents in computing systems and identify events within an enterprise. An anomaly detection system may receive social media messages that include a timestamp indicating when each message was published. The system may generate sentiment identifiers for the social media messages. The sentiment identifiers and timestamps associated with the social media messages may be used to generate a timeseries dataset for each type of sentiment identifier. The timeseries datasets may be input into an anomaly detection model to determine whether an anomaly has occurred. The system may retrieve textual data from the social media messages associated with the detected anomaly and may use the text to determine a computing system or event associated with the detected anomaly.

Abstract: Implementations are disclosed for adaptively reallocating computing resources of resource-constrained devices between tasks performed in situ by those resource-constrained devices. In various implementations, while the resource-constrained device is transported through an agricultural area, computing resource usage of the resource-constrained device ma may be monitored. Additionally, phenotypic output generated by one or more phenotypic tasks performed onboard the resource-constrained device may be monitored. Based on the monitored computing resource usage and the monitored phenotypic output, a state may be generated and processed based on a policy model to generate a probability distribution over a plurality of candidate reallocation actions.

Abstract: A computer implemented method and related system control access to data based on query intent and result semantics in a cognitive search system, the method including receiving a query from a user at a location, wherein the query is configured to identify a set of results. The method also includes, identifying the location and validating the user is authorized to access one or more indexes. The method includes, determining an intent of the query, wherein the intent predicts how the user will use the set of results. The method includes, establishing a first intent geofence, wherein the intent geofence defines a first geographic area. The method includes obtaining a plurality of results from a first index, determining the location of the user is within the first intent geofence, and returning the plurality of results to the user.

Abstract: Providing overload protection may include receiving, from a first NRF of two or more NRFs, a load metric and comparing the load metric to a threshold. Additionally, when the load metric is above the threshold, providing NRF overload protection may include sending a Network Function (NF) Discovery (NFD) message to a second NRF instead of the first NRF and sending a heartbeat signal to the first NRF.

Abstract: One or more embodiments relate to a method for refining usability testing through the systematic collection and analysis of user click paths within an online interface. By tracking and filtering these click paths based on one or both of publicly observable attributes and non-publicly observable attributes, obtained in part through user responses to screening questions, the method generates distinct, aggregated click paths. These paths are then subjected to in-depth analysis that yields insights and metrics regarding user behavior and usability. Some embodiments further extend to the presentation of an interactive representation of these paths within a testing interface that allows researchers to explore and extract actionable findings.

Abstract: Systems, methods, and computer-readable media are presented herein for providing lower level physical-layer gateway functionalities and upper-level application functionalities; a system designed with flexible configurations in order to support a wide range of connected applications. The system can include a processor that executes machine instructions to perform operations. The operations can comprise: receiving, from a first device, a first packet representing first data formatted in a first protocol language; transforming the first data to second data formatted in a second protocol language; and transmitting a second packet representing the second data to a second device.

Abstract: Network equipment is configured for use in one of multiple different core network domains of a wireless communication system. The network equipment is configured to receive a message that has been, or is to be, transmitted between the different core network domains. The network equipment is also configured to apply inter-domain security protection to, or remove inter-domain security protection from, one or more portions of the content of a field in the message according to a protection policy. The protection policy includes information indicating to which one or more portions of the content inter-domain security protection is to be applied or removed. The network equipment is also configured to forward the message, with inter-domain security protection applied or removed to the one or more portions, towards a destination of the message.

Abstract: A method for managing a control flow by a server including: receiving a control flow generation request data packet from the terminal; transmitting a control flow communication code to the terminal; and receiving the result of executing the control flow communication code from the terminal, wherein if the result of executing the control flow communication code is normal, the server generates the control flow with the terminal, and if the execution result value is abnormal, or the execution result is not received from the terminal within a predetermined time, the server blocks the generation of the control flow with the terminal.