Abstract: Disclosed is a method that includes collecting first temporal statistics for a port element in a computing environment, collecting second temporal statistics for a switch element in the computing environment, collecting third temporal statistics for the computing environment generally, computing a spatial correlation between network features and network elements comprising the port element and the switch element and computing, via a machine learning technique, a port dynamic weight for the port element and a switch dynamic weight for the switch element. The method can also include scheduling workload to consume compute resources within the compute environment based at least in part on the port dynamic weight for the port element and the switch dynamic weight for the switch element.

Abstract: A method for monitoring performance of an application system which is distributed across a plurality of network connected nodes, comprising: generating a hierarchical model for the application system, the hierarchical model having a plurality of levels, each level including components of a span specific to that level; mapping the application system onto the hierarchical model according to a network topology of the application system; monitoring network traffic between the plurality of network connected nodes of the application system to gather network traffic data; assembling the network traffic data into application messages; correlating the application messages into sets of one or more application messages that are causally associated in accordance with the hierarchical model, wherein the sets of causally associated application messages constitute transactions corresponding to a lowest level of the hierarchical model; and, generating records of individual transactions occurring within the application system

Abstract: Systems, methods, and software for providing a dedicated physical user input device to trigger collection and curation of real-time data and submission to a technical resource. Computer usage data and system diagnostic data from a computing device is monitored and collected during use by an end user. Upon detecting the press of a dedicated physical button connected to the computing device, additional information regarding the issue is collected from the end user while additional system diagnostic data about the computing device at a time of occurrence of the issue is collected. The collected information and data is then curated by the computing device in regard to the issue and transmitted to a remote server for access by a technical resource.

Abstract: An example method of user identity tracking is performed by an application server. The Application server receives first telemetry data and second telemetry data. The first telemetry data indicates at least a first usage of a first user device. The second telemetry data indicates at least a second usage of a second user device. The Application server stores the first telemetry data and the second telemetry data to one or more databases and analyzes the telemetry data. Analyzing the telemetry data includes determining one or more usage patterns clustered by identity of a user. The Application server receives a request to query the one or more usage patterns for an identity of one or more users associated with the one or more usage patterns, where the application server provides the identity of the user in response to the request.

Abstract: In a computer-implemented method for upgrading a fault tolerant hyper-converged infrastructure in an environment with no additional physical infrastructure, a workload domain having a plurality of hosts is chosen for an upgrade. One or more conflict groups are calculated for each host, and a physical host in the workload domain is selected. A number and a size of one or more nested hosts is determined and a different nested host is created in a management cluster for each of the one more conflict groups in the physical host. A communication network provides communication between a virtual machine (VM) on the different nested host and a VM in the physical host. The physical host is put into a maintenance mode, upgraded, and then returned from the maintenance mode to an operational mode.

Abstract: A gateway is provided for use with a DMZ host and a Hotspot client. The gateway includes a communication module and a processing module. The communication module receives a communication packet having a transparent Ethernet bridging generic routing encapsulation header and a payload having a destination MAC address and forwards the communication packet to one of the group consisting of the DMZ host, the Hotspot client, and both of the DMZ host and the Hotspot client. The processing module determines whether the communication packet is a Unicast communication packet or a Multicast communication packet based on the destination MAC address, and instructs the communication module to forward the communication packet to one of the group consisting of the DMZ host, the Hotspot client, and both the DMZ host and the Hotspot client based on the destination MAC address.

Abstract: Systems and methods for resource utilization management, such as resources available through one or more accessible resource facilities. Embodiments provide resource utilization management systems and methods which facilitate user-controlled reservation, access, and accounting for resource utilization. Embodiments implement an electronic user key-based infrastructure to enable access to and accounting for resources. Embodiments include optical recognition or geolocation for each resource for which resource utilization management is provided. A user device, such as a smart phone, personal digital assistant (PDA), or tablet computer, executing a resource utilization management application, may be configured to provide a resource key device which is operable to scan the resource for accessing and relinquishing that resource, whether on an ad hoc and/or reservation basis.

Abstract: System, apparatus and method of prioritizing a plurality of software applications for a migration to a cloud computing environment operated for an enterprise. For example, an application scoring module is configured to determine a default score for the software application based, at least in part, on the information received by a survey module. The weighting module is configured to receive weights assigned by the enterprise for each of a plurality of characteristics concerning the software application, respectively, the weights reflective of an understanding by the enterprise of at least one of the value to the enterprise of the software application and the complexity of migrating the software application. According to this embodiment, the application scoring module is configured to generate a customized score for the software application based on an adjustment to the default score resulting from the weights.

Abstract: The disclosed computer-implemented method may include (1) receiving, via a social networking system, a request from a user to participate in a discovery service designed to facilitate connections between users of the social networking system who share common attributes, (2) obtaining, from the user, data representative of at least one desired user attribute, possessed by the user, for new user connections, (3) identifying, within the social networking system, at least one additional user who is both a participant in the discovery service and who also possesses the desired user attribute, and (4) providing a visual indication to the user, when representing the additional user within a user interface of the social networking system, that the additional user is a participant in the discovery service and that the additional user possesses the desired user attribute. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A networked page access and addressing method to generate web pages responsive to requested client requests parses addresses of incoming requests into at least two logical segments: a first likely to represent a category and a second likely to represent a product. By generating hash values for the first segment, it can be compared against hashes in the internal directory to identify a local category corresponding to the represented in the address. If so, a local address can be generated by combining with the second segment with an identifier of that local category. Information from the data record at that local address can used to form a web page responsive to the request.

Abstract: A system and method for providing dynamically variable maps in a video game is disclosed. A map is provided that defines a playable space available to one or more game players in a video game. Gameplay is monitored in real-time for the detection of a trigger event. Upon detection of a trigger event, a map management engine dynamically modifies a configuration of the map to improve the gameplay experience based on the type of trigger event. Dynamic modification of a map may comprise altering one or more of the map boundary, and/or the location, position, size, number, state, etc. of one or more static map objects or dynamic map objects. As a result of the dynamic modification of the map, the map may transform from its initial (or first or beginning) configuration to a modified (or new or second) configuration.

Abstract: A resource management system is disclosed herein that quickly and dynamically tailors application resource provisioning to real-time application resource consumption. The resource management system may service application requests using resources selected from a pool of servers, the pool of servers including a mixture of virtual server resources and serverless instance resources. The serverless instance resource may comprise software objects programmed using a machine image reflecting one or more states of a virtual application server booted using application-specific program code. Supporting an application using serverless instances enables dynamic scaling of application resources to support real-time application servicing loads.

Abstract: A system and method for executing a sequence of functions by at least one microcontroller operable in a battery-less internet of things (IoT) device. The IoT device includes: at least one microcontroller configured to execute one or more pre-programmed sequences; a sequencer configured to retrieve, from a cloud server, at least one flow, wherein the at least one flow indicates: an order of the pre-programmed sequences to be executed, and which of the at least one microcontroller are to execute each of the pre-programmed sequences; and an energy storage.

Abstract: The disclosed computer-implemented method may include receiving, at a server, a request from a client for live data. The method may include establishing, at the server, a data transfer promise that is embedded in a live data stream. The live data stream may include the requested live data. The method may further include transferring the live data stream with the embedded data transfer promise to the client, receiving an indication that the status of the embedded data transfer promise was changed during transmission of the live data stream and providing, to the client, an indication of the current status of the live stream based on the received status indication. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Novel tools and techniques for network data plane management are provided. A system includes a host machine that includes a database, processor, and non-transitory computer readable media comprising instructions executable by the processor to obtain, via the database, a network configuration, spawn a container according to the network configuration, wherein the container is configured, based on the network configuration, to be coupled to a network overlay via a network interface, receive, via the network interface, incoming data associated with the container, the incoming data having attached one or more attached network data attributes, and identify, via the database, the attached one or more network data attributes attached to the incoming data as one or more network data attributes of the network data model.

Abstract: At design time, cross-jurisdiction workload controls may be presented by a process platform server to a user (e.g., a workload creator or process builder) who is using the process platform to create or update an application having a workload functionality with zero, one, or more applicable regulation controls. If no regulation control is selected, or if there is no exception provided, the process platform server may operate to block the user from proceeding to complete the workload creation process. The application with the workload thus created/updated is delivered to end user(s). Responsive to a user request to open the application on a client device, a server (the process platform server or an application gateway server) may operate to automatically determine whether a target location associated with the user request is permitted in accordance with a cross-jurisdiction workload control associated the workload defined in the application.

Abstract: A system is provided enabling creation of a portal to telecommunications services managed by an enterprise user on behalf of accountholders of the enterprise. The system includes a first layer providing access to at least a business support system, an operational support system, a provisioning system, a home location register, and a billing system. The system also includes a second layer providing access to a wizard interface programmed for: creating a portal by the enterprise user with an application enabled to selectively access and/or modify data and settings accessible through a security layer from the first layer; and publishing the portal. The system also includes a third layer providing access to the portal by an accountholder of the enterprise after publishing. The application is: a glanceable application showing the data or settings in a summary visual fashion; or a full application showing the data or settings in a detailed fashion.

Abstract: A method, device, and a vehicle information system are provided for persisting application context from the mobile device to the vehicle information system. An operating context is determined for at least one application executing on the mobile device. A user interface view for display by the vehicle information system is generated and provided to the vehicle information system. The user interface view comprises at least one application user interface element associated with the at least one application, and the application user interface element comprises an application entry point defined by the operating context for the at least one application.

Abstract: Techniques are disclosed relating to storage of network event information for multiple tenants. In some embodiments, one or more host computer systems are configured to maintain a plurality of containers operable to isolate network event information of a plurality of tenants from others of the plurality of tenants. The plurality of containers includes a first container that includes a first database executable to store network event information for a first of the plurality of tenants, and a second container that includes a second database executable to store network event information for a second of the plurality of tenants. In some embodiments, a management computer system is configured to receive, from the first tenant, a request to access network event information of the first tenant and route the request to a host computer system maintaining the first container to cause the first database to service the request.

Abstract: A method and system for limiting the amount of screentime available to a child device based on the activity of a user of the child device. A parent device is used to specify activity threshold(s) and associate them with an amount of screentime. An activity sensor provides activity data that is converted to a screentime value. An available screentime value is decremented as screentime is used on the child device. When the available screentime value reaches zero, access to functions or apps on the child device is disabled.

Abstract: The methods and system described herein automatically generate network router access control entities (ACEs) that are used to filter internet traffic and more specifically to block malicious traffic. The rules are generated by an ACE engine that processes incoming internet packets and examines existing ACEs and a statistical profile of the captured packets to produce one or more recommended ACEs with a quantified measure of confidence. Preferably, a recommended ACE is identified in real time of the attack, and preferably selected from a library of pre-authored ACEs. It is then deployed automatically or alternatively sent to system personnel for review and confirmation.

Abstract: Concepts and technologies are disclosed herein for providing and using a distributed forwarding service. A service request can be received at a computing device and can relate to a distributed forwarding service. The computing device can configure the distributed forwarding service by determining a number of nodes that are to provide the distributed forwarding service and configuring a shared control function to control the nodes. The computing device can trigger instantiation of the distributed forwarding service. Instantiation of the distributed forwarding service can include dedicating a shared incoming switch for the distributed forwarding service, dedicating a shared outgoing switch for the distributed forwarding service, instantiating the nodes, and instantiating the shared control function. The distributed forwarding service can include the shared incoming switch, the shared control function, the nodes, and the shared outgoing switch.

Abstract: Examples disclosed herein relate to determining whether to allow access to an IP address based on a security level and domain name access information. In one implementation, a processor intercepts a response to a Domain Name System request related to a domain name and updates a security level based on the request and/or response. The processor may determine whether to forward or block the response based on the security level and a comparison of the domain name to stored information related to previous domain name access.

Abstract: Example distributed storage systems, replication state engines, and methods manage replication state for guaranteed replication between data stores. An object data store may store data objects that have been determined for deletion and rendered inaccessible to a client application. A replication state may be queried for deleted data objects and, if the replication state indicates that replication to another object data store is incomplete, physical deletion may be delayed until the replication state indicates that replication is complete and the data object may be physically deleted.

Abstract: A method for data management comprises receiving a request from a remote computer system of a datacenter to retrieve data stored across a plurality of computer servers in a distributed manner. The data can be with respect to a state and/or attribute of the remote computer system of the datacenter. The request can be received at a first computer server dedicated to the remote computer system among the plurality of computer servers. The first computer server can generate a query to retrieve the data and direct the query to one or more other computer servers of the plurality of computer servers to retrieve the data. The data can be aggregated at the first computer server from the one or more other computer servers and transmitted to the remote computer system from the first computer server dedicated to the remote computer system.

Abstract: Technologies for attesting a deployment of a workload using a blockchain includes a compute engine that receives a request from a remote device to validate one or more parameters of a managed node composed of one or more sleds. The compute engine retrieves a blockchain associated with the managed node. The blockchain includes one or more blocks, each block including information about the parameters of the managed node. The compute engine validates the blockchain and sends an indication that the blockchain is valid to the requesting device.

Abstract: A method includes presenting a graphical user interface to a user, where the graphical user interface identifies multiple slots that are configured to be coupled to multiple input/output (I/O) modules. The method also includes receiving, from the user via the graphical user interface, information defining a slot assembly data map. The slot assembly data map identifies data offsets and data sizes associated with the I/O modules. The data offsets and the data sizes identify where data can be sent to or received from the multiple I/O modules over a single logical connection. The method further includes using the data offsets and the data sizes of the slot assembly data map to provide data to or receive data from one or more of the I/O modules over the single logical connection.

Abstract: One embodiment describes a network system. The system includes a primary enclosure including a network switch system that includes a plurality of physical interface ports. A first one of the plurality of physical interface ports is to communicatively couple to a network. The system further includes a sub-enclosure comprising a network interface card (NIC) to which a computer system is communicatively coupled and a downlink extension module (DEM) that is communicatively coupled with the NIC and a second one of the plurality of physical interface ports of the network switch system to provide network connectivity of the computer system to the network via the network switch system.

Abstract: The present disclosure involves systems, software, and computer implemented methods for providing an asynchronous transport channel for OData data using web sockets. One example method includes upgrading a HTTP connection to a web socket connection in response to an upgrade request. The web socket connection is maintained, after the upgrading, for receipt of subsequent web socket requests. An OData request is received, from a consuming application, over the web socket connection. The OData request is translated to a format used by an OData runtime environment and sent to the OData runtime environment. A response to the OData request is received from the OData runtime environment. The response is incorporated into a web socket message. The web socket message is sent to the consuming application, over the web socket connection, in response to the OData request, with the web socket connection remaining open after the web socket message is sent.

Abstract: Systems and methods are provided for facilitating a discreet connection between a user and a service. A system includes a service for a user to connect to without any detectable direct contact with the service. A first reverse proxy connection is configured to receive a connection from the user to set up the discreet connection, where an invitation indicating a mechanism for accessing the first reverse proxy connection is provided to the user. Access credentials are transmitted to the user over the first reverse proxy connection, the access credentials including an address for accessing a second reverse proxy connection, the first reverse proxy connection being deleted following delivery of the access credentials. The second reverse proxy connection facilitates the discreet connection between the user and the service without any detectable direct contact with the service.

Abstract: The present invention provides a virtual network function network element management method, apparatus, and system. A VNF resource pool management apparatus receives a VNF network element request message sent by a VNF resource pool user apparatus, where the VNF network element request message includes attribute information and a location policy of a VNF network element that is requested; the VNF resource pool management apparatus determines a first VNF network element that matches the attribute information and the location policy from the VNF resource pool; and the VNF resource pool management apparatus sends a VNF network element response message to the VNF resource pool user apparatus, where the VNF network element response message includes identification information of the first VNF network element. In this way, a risk that a functional group formed by VNF network elements cannot properly work can be avoided.

Abstract: Improved techniques and apparatus for managing data between a host device (e.g., host computer) and a client device. The data being managed can, for example, pertain to portable computer programs, such as widgets. The managing of the data thus can involve transfer of portable computer programs (e.g., widgets) between the host device and the client device. In one embodiment, the transfer of portable computer programs between a host device and a client device can be referred to as synchronization.

Abstract: A system and method for comprehensive cybersecurity threat assessment of software applications based on the totality of vulnerabilities from all levels of the software supply chain. The system and method comprising analyzing the code and/or operation of a software application to determine components comprising the software, identifying the source of such components, determining vulnerabilities associated with those components, compiling a list of such components, creating a directed graph of relationships between the components and their sources, and evaluating the overall threat associated with the software application based its software supply chain vulnerabilities.

Abstract: Techniques for distributed network connectivity monitoring of provider network edge location resources from cellular networks are described. A central service transmits test suites of commands to agents executed by test devices, which can execute the commands to test network characteristics between the test devices and target locations via one or multiple cellular communications networks. Results of the testing are sent back to the central service for processing, and the resultant metrics can be used for intelligent latency-based routing of clients, latency-based placement of resources, and/or performance monitoring of deployed resources.

Abstract: A framework for security information and event management (SIEM), the framework includes a first data store; a data router; one or more parsing mechanisms; one or more correlation machines; and one or more workflow engines, wherein said framework performs SIEM on behalf of multiple subscribers to said framework.

Abstract: Resource state validation may be performed for access management policies by an identity and access management system. An access management policy associated with an account for network-based services may be received and validated according to resource state obtained for resources associated with the account. A correction for a portion of the access management policy may be identified according to the validation and provided via an interface for the identity and access management system.

Abstract: There is provided a method, said method comprising receiving network information, using said network information to determine whether a change to a network is required, and if so, using said network information to determine at least one cause of a change to the network being required and providing, in dependence of the at least one cause, at least one option for at least one change to said network.

Abstract: An example method includes receiving a resource request for at least one compute and/or storage resource from a distributed computing system distributed among multiple data centers, determining a resource policy that is associated with the resource request, wherein the resource policy includes a rule specifying at least one metadata tag and at least one criterion associated with the at least one metadata tag, identifying at least one object included in a resource object model that complies with the rule of the resource policy, wherein the at least one object has an assigned value for the metadata tag that satisfies the at least one criterion, selecting a data center that is associated with the at least one object identified from the resource object model, and deploying, on the selected data center, the at least one compute or storage resource.

Abstract: Techniques for brokering authorization between a user-facing service and a backend service are disclosed. A proxy service, operating independently of the user-facing service and the backend service, exposes an application programming interface (API) configured to receive requests from the user-facing services to perform functions of the plurality of backend services. The proxy service stores user authorization data that authorizes a user of a particular user-facing service to use a function of a backend service. The proxy service receives, via the API, a request to perform the function for an account associated with the user. Responsive to receiving to the request, the proxy service uses the user authorization data to access the backend service to perform the function for the account associated with the user.

Abstract: A content providing apparatus for providing an audio streaming service includes a communication modem configured to communicate with a content receiving apparatus through a wired/wireless network, and a processor configured to determine target audio content, determine an audio packet generating rule, transmit the audio packet generating rule to the content receiving apparatus through the communication modem, generate an audio packet from audio data corresponding to the target audio content based on the audio packet generating rule, and transmit the audio packet to the content receiving apparatus through the communication modem.

Abstract: Embodiments of the present application disclose a data writing and apparatus, a data reading method and apparatus, and a distributed object storage cluster. The data writing method includes: receiving to-be-written data sent by a client in a distributed object storage cluster (S101), and dividing the to-be-written data into a plurality of pieces of sub-data and determining a sequence number of each piece of sub-data (S102); and writing each piece of sub-data into a corresponding network hard disk (S103); for each piece of sub-data, sends a correspondence between the sequence number of the piece of sub-data and identification information of a network hard disk into which the piece of sub-data is written to the metadata server in the distributed object storage cluster (S104). Each of pieces of sub-data into which the to-be-written data is divided is written into a corresponding network hard disk.

Abstract: A method of accessing data sent between a remote resource and a data processing device, the method comprising: caching data uploaded from the remote resource or caching data sent to the remote resource at one or more intermediate network nodes between the data processing device and the remote resource; and accessing the cached data stored at the one or more intermediate network nodes.

Abstract: Some network architectures include perimeter or edge devices which perform network address translation or otherwise modify data in a network traffic packet header, such as the source address. The modification of the source address prevents downstream devices from knowing the true or original source address from which the traffic originated. To address this issue, perimeter devices can insert the original source address in an X-Forwarded-For field of the packet header. Firewalls and related security services can be programmed to record the original source address in the XFF field in addition to the other packet information and to consider the original source address during security analysis. Using the original source address in the XFF field, services can determine additional characteristics about the traffic, such as geographic origin or associated user accounts, and use these characteristics to identify applicable rules or policies.

Abstract: A memory system includes a nonvolatile memory module and a first controller configured to control the nonvolatile memory module. The nonvolatile memory module includes a volatile memory device, a nonvolatile memory device, and a second controller configured to control the volatile memory device and the nonvolatile memory device. The first controller may be configured to transmit a read request to the second controller. When, during a read operation according to the read request, normal data is not received from the nonvolatile memory device, the first controller may perform one or more retransmits of the read request to the second controller without a limitation on a number of times that the first controller performs the one or more retransmits of the read request.

Abstract: In one example, a Network Functions Virtualization Orchestrator (NFVO) obtains a radio service descriptor defining communication parameters for a radio in a virtual Radio Access Network (vRAN). Based on the radio service descriptor, the NFVO determines whether a virtual Distributed Unit (vDU) that is configured in accordance with the communication parameters and a virtual Centralized Unit (vCU) that is configured in accordance with the communication parameters are already instantiated in the vRAN. If it is determined that the vDU or the vCU is not already instantiated, the NFVO automatically instantiates the vDU or the vCU in the vRAN.

Abstract: A system and method control or manage access to multiple target servers in a network. The system includes an access control user interface, a memory, and a management server. The access control user interface is accessible to the multiple target servers. The memory stores a database providing information to the access control user interface. The management server includes a processor implementing discovery and event trigger engines. The discovery engine discovers user rights stored at the multiple target servers and delivers the user rights over the network to the database. The event trigger engine is invoked by detection of a security event from a first target server, updates the user rights at a local cache on the first target server, and delivers the updated user rights to the database. The event trigger engine is configured to modify the discovery engine based on the detection of the security event.

Abstract: A new alert associated with a computer information technology issue to be remediated is received. Matching previous alerts similar to the new alert are determined. One or more successful remediation actions of the matching previous alerts are identified. The one or more successful remediation actions are evaluated. A performance of a selected one of the one or more successful remediation actions is initiated.

Abstract: Embodiments of the present disclosure provide methods and apparatus for path selection in a storage system. The storage system includes a plurality of storage devices, each storage device being connected to a plurality of different HBA ports of a server via a plurality of paths; the method comprises: monitoring a system-wide performance metric of the storage system to obtain dynamic performance statistics; detecting a performance-related event based on the dynamic performance statistics; and selecting, from the plurality of paths, an active path for a storage device of the plurality of storage devices based on the dynamic performance statistics and a result of the detecting. With the methods or apparatus according to the embodiments of the present disclosure, performance bottleneck can be avoided or timely eliminated, load balance can be achieved, and system resources can be utilized more effectively.

Abstract: This application provides a user equipment management method and a device, to help reduce complexity of operation and maintenance. The method includes: obtaining, by a gateway device, identifiers IDs of N user equipments and information about a first service, where the N user equipments are terminals configured to implement the first service, and N is an integer greater than or equal to 1; obtaining, by the gateway device, an ID of a logical device based on the information about the first service, where the logical device is a set of logical elements that are in the gateway device and that are configured to implement the first service; and binding, by the gateway device, the ID of the logical device and the IDs of the N user equipments.

Abstract: A Session Initiation Protocol (SIP)-based network includes at least two SIP user agents, wherein each SIP user agent is configured to act as a user agent client (UAC) for requesting a service function and as a user agent server (UAS) for responding to a request service function. The UAC is configured to initiate a registration with the UAS, wherein the registration comprises a field for indicating infinity registration capability and a field for indicating management communication capability. The UAS is configured to send to the UAC, a registration expiry timer with a value equal to infinity and a management header including a onetime unique token.