Abstract: A system for providing information technology (IT) assistance packages enables a graphical user interface that can be launched from a single application icon and that can be customised on an individual user basis to provide a locally-branded system for servicing the user's IT needs.

Abstract: A virtualization management/orchestration apparatus is provided with: a Network Function Virtualization Orchestrator (NFVO) that reads a Network Service Descriptor (NSD) in which an entry defining dependency between a VNF and a prescribed element is provided, and creates the VNF and the prescribed element according to the dependency defined in the NSD; and/or a VNF manager (VNFM) that reads a Virtualized Network Function Descriptor (VNFD) provided with an entry defining dependency between a VM and a prescribed element, and creates the VM and the prescribed element according to the dependency defined in the VNFD.

Abstract: An industrial security policy configuration system generates and implements security policies for industrial automation systems based on design data for the industrial systems generated by device manufacturers, system integrators, original equipment manufacturers, or the owners of the industrial assets during the design of the industrial systems. the collected design data to a security rule set defining device-level communication privileges. The system translates the collected design data to a security rule set defining device-level communication privileges, which are then translated to a comprehensive set of security policies customized to the requirements of the industrial systems represented by the design data. By leveraging the rich set of available design data to identify or infer security requirements and generate suitable security configurations, the system can mitigate the need to manually configure security policies based on human judgments regarding normal and abnormal network traffic.

Abstract: Aspects of the subject disclosure may include, for example, a processing system including a processor and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations.

Abstract: Techniques are described related to for generating/distributing state machines that are implemented within a security zone to obtain private information from one or more resources within the security zone. In various implementations, an automated assistant client implemented by processor(s) within the security zone may receive a free form natural language query (“FFNLQ”) that is answerable using private information available from resource(s) within the security zone. Data indicative of the FFNLQ may be provided to a semantic processor outside of the security zone, and the online semantic processor may return a state machine that is implemented by processor(s) within the security zone to obtain the private information from resource(s) within the security zone. Based on the state machine and the obtained private information, natural language output may be generated and presented to convey information responsive to the FFNLQ.

Abstract: A method for communicating over a specified protocol enabling bi-directional streaming between a network manager and a network device is provided. The method includes receiving, at data processing hardware of a network device, a request from the network manager requesting data including at least one of state information or configuration information. The request includes a get request to obtain a snapshot of the requested data existing on the network device or a subscribe request to subscribe to updates for the requested data existing on the network device. The method also includes transmitting a data response from the data processing hardware to the network manager via telemetry. The data response includes the requested data having data elements defined by at least one data schema supported by the network device. The capability and data requests and the capability and data responses adhere to a protocol configured to enable bi-directional streaming between the network manager and the network device.

Abstract: A method for modelling technical systems having a plurality of technical components, including the step of assigning a component Markov chain to each component having a Markov chain for representing various states of the respective component, at least one input one failure mode for externally triggering a transition from one state of the Markov chain into another state of the Markov chain, and at least one output failure mode to each Markov chain for propagating failures to other components, is provided.

Abstract: Techniques for managing access to infrastructure components hosted in a cloud computing environment are provided. One technique includes receiving a request from a user to access a single infrastructure component of multiple infrastructure components hosted in the cloud computing environment. At least one of a current operating state of the cloud computing environment and a context of the user is determined in response to the request. A determination is made to grant the user access to the single infrastructure component, based on an analysis of at least one of the current operating state and the context of the user. In response to the determination, a credential is retrieved that is specific to the single infrastructure component and is valid for a temporary amount of time. The credential is provided to the user.

Abstract: A system for troubleshooting network problems is disclosed. A model can use demographic information, network usage information, and network membership information to determine an importance of a problem. The importance of the problem for the user who reported the problem, a number of other users affected by the problem, and the importance of the problem to the other users can be used to determine a priority for resolving the problem. Before and after a work order is executed to resolve the problem, network metrics can be gathered, including aggregate network metrics, and automatically presented in various user interfaces. The analysis of the metrics can be used to update a database of which work orders are assigned in response to which problems.

Abstract: Techniques for facilitating operations in hybrid cloud computing systems are disclosed herein. In one embodiment, a method can include receiving, at a public cloud, a plurality of applications deployable in a private cloud and informing an access service of the public cloud computing system regarding the received applications deployable in the private cloud. The method also includes receiving, from a connection service of the private cloud, a request for a list of the received applications available at the public cloud and deployable in the private cloud. The method further includes in response to the received request, selectively identifying to the private cloud the list of applications based on a service subscription associated with the connection service.

Abstract: Some embodiments provide a method for analyzing database queries performed on a database. The method receives a log that includes a set of database queries that were performed on the database. The method identifies, from the log, two or more subsets of queries that are each associated with a different connection session between the database and a set of client applications, where each subset is associated with a set of temporary session objects that are not associated with queries in the other subsets of queries. The method performs a separate query interpretation process on each subset of queries to quantify the impact of performing the queries on the database during the connection sessions, where the query interpretation processes are performed separately in order to avoid errors associated with the temporary objects.

Abstract: The disclosed embodiments provide for rules-based deployment of software installations. In some aspects, operational parameters for a computer system are monitored over time to generate a historical database of values for the operational parameters. The computer system may include multiple instances of a software installation. A portion of the multiple instances is updated with a new version of software. The operational parameters are then monitored to quantify whether the new version results in an improvement or degradation of performance of the computer system. The improvement or degradation is based on comparing values of the operational parameters after deployment to their historical values. Depending on the evaluation of the operational parameters after the installation, the installation may be rolled back if a degradation is indicated. Otherwise, the new software version may be propagated to additional installation instances.

Abstract: A method and system for serving assets is disclosed, comprising receiving an asset request to serve an asset, wherein the asset request originates at an application, and wherein the asset request comprises an advertisement of an asset to be served and a request for the network address of an asset server configured to serve the requested asset. The method further comprises causing a service discovery server to identify an asset server configured to serve the requested asset, and causing the requested asset to be served to the application.

Abstract: The various implementations disclosed herein pertain to methods and systems for detecting a state of monitored objects in a premises. In one aspect, a method is performed at a computer system that is communicably coupled to sensor devices. The computer system receives and processes information of acoustic signals against a database of stored acoustic signatures characterizing predefined acoustic signals generated by electrically non-powered passive tags in response to physical motion of respective monitored objects associated with the passive tags. It receives a first acoustic signal characterized by a first acoustic signature and generated by a first passive tag. In response to the receiving, based on the first acoustic signature and information in the database, it identifies the first monitored object associated with the first acoustic signature, determines a first state of the first monitored object, and provides a notification of the first state to an occupant of the premises.

Abstract: Systems, methods, and machine-readable media to orchestrate process-performing resources and process protocols particularized to individual resources and loads are provided. Data changes in the data streams may be detected and identified. Data items from the data streams may be aggregated. Protocols that include parameter constraints according to specifications of process performance and/or operation performance may be identified. Operation-performing resources may be modeled with metrics being a function of protocols and consolidated data portions. A composite may be created that specifies a configuration a subsystem. The composite may be transmitted, and allocation of operation-performing resources to perform the defined process in accordance with the selected protocols may be controlled.

Abstract: In a computer-implemented method for performing alert notification on streaming textual data, streaming textual data is received. A plurality of copies of the streaming textual data is generated, wherein a first copy of the streaming textual data is transmitted to an ingestion service for persistent storage at a data plane and a second copy of the streaming textual data is transmitted to an alert evaluation service for performing alert evaluation on the streaming textual data, such that the ingestion service and the alert evaluation service are performed independently. The streaming textual data is evaluated by the alert evaluation service to detect an alert. Responsive to detecting an alert at the alert evaluation service, a notification of the alert is generated.

Abstract: An in-vehicle network system includes first device and second device configured to send or receive to or from each other, and an intermediate node connected between the first device and the second device, the intermediate node being configured to output buffered messages in a sequence determined by a relative priority scheme. The first device includes a control unit configured to measure a communication delay for each of a plurality of different priority messages, set a delay representative value less than a maximum value of the plurality of communication delays, and adjust time that a time management unit manages, based on time that the first device manages, time that the second device manages, and the delay representative value.

Abstract: Systems and methods provide for provisioning a dynamic intent-based firewall. A network controller can generate a master route table for network segments reachable from edge network devices managed by the controller. The controller can receive zone definition information mapping the network segments into zones and Zone-based Firewall (ZFW) policies to apply to traffic between a source and destination zone specified by each ZFW policy. The controller can evaluate a ZFW policy to determine first edge network devices that can reach first network segments mapped to the source zone specified by the ZFW policy, second edge network devices that can reach second network segments mapped to the destination zone specified by the ZFW policy, and routing information (from the route table) between the first network segments, the first and second edge network devices, and the second network segments. The controller can transmit the routing information to the edge network devices.

Abstract: Limited duration supply for heuristic algorithms is disclosed. A supply manager receives, from a first subsystem, a first request for a first supply. The supply manager determines that the first supply is not executing. The supply manager initiates the first supply, the first supply to return supply data upon request. The supply manager provides to the first subsystem a supply reference that refers to the first supply that allows the first subsystem to request the supply data directly from the first supply. The supply manager subsequently determines that no subsystem requires the first supply and disables the first supply.

Abstract: A first time series of traffic volume and a first time series of communication quality that are observed in a first communication line in which traffic demand is equal to or greater than a line bandwidth and a second time series of traffic volume and a second time series of communication quality that are observed in a second communication line in which traffic demand is less than a line bandwidth are input to a state space model to estimate values of a parameter group of the state space model, the traffic demand is calculated based on the values of the parameter group, and the state space model is a state space model in which the first time series of traffic volume and the second time series of traffic volume are generated from a third time series indicating cyclicity of traffic common to the first communication line and the second communication line under influence of the first time series of communication quality and the second time series of communication quality on the traffic demand, thereby supporting a

Abstract: A native application on a client computing device enables secure user authentication via an identity provider (IdP) for accessing services of a web service provider. The native application forwards a redirect request generated by a main gateway of the service provider and including an IdP uniform resource locator (URL) to a system browser of the client computing device. The redirect request directs the system browser to a broker gateway of the service provider that registers an authentication response handler and redirects the system browser to the IdP URL to enable a user of the native client computing device to authenticate. After the broker gateway receives an IdP authentication response from the IdP following authentication by the user, the broker gateway provides the IdP authentication response to the native application for providing back to the main gateway. The main gateway finally processes the authentication response to complete the authentication request.

Abstract: A system for virtual machine live migration includes a management node, a source server, a destination server, a peripheral component interconnect express (PCIe) switch, and an single root input/output virtualization (SR-IOV) network adapter, where the source server includes a virtual machine (VM) before live migration; the destination server includes a VM after live migration; the management node is adapted to configure, using the PCIe switch, a connection relationship between a virtual function (VF) module used by the VM before live migration and the source server as a connection relationship between the VF module and the destination server; and the destination server, using the PCIe switch and according to the connection relationship with the VF module configured by the management node, uses the VF module to complete virtual machine live migration. By switching the connection relationships, the system ensures that a data packet receiving and sending service is not interrupted.

Abstract: In an embodiment, a distributed firewall that learns from traffic patterns to prevent attacks is configured to receive traffic comprising one or more uniform resource identifiers (URIs), where a URI of the one or more URIs includes one or more parameters and one or more corresponding values. The firewall is configured to classify the corresponding value(s) using a pre-configured classifier and obtain a statistical rule that specifies an allowable type and an allowable length for traffic containing the one or more parameters, where the statistical rule is generated based on the classification. The firewall is configured to apply the statistical rule to incoming traffic to allow or drop requests comprising the parameter(s).

Abstract: Concepts and technologies are disclosed herein for virtual probes. A processor can execute a probe orchestrator service. The processor can obtain traffic monitoring data that describes traffic associated with a logical node. The logical node can include two or more devices that can exchange information as internal traffic. The processor can analyze the traffic monitoring data to determine one of the two or more devices hosts external traffic that involves an external device that resides outside of the logical node. In response to a determination that the one of the two or more devices hosts the external traffic, the processor can trigger instantiation of a virtual probe at the device of the plurality of devices.

Abstract: Examples of the present disclosure describe systems and methods for evaluating malicious web content for associated threats using specialized web crawling techniques. In aspects, a first set of malicious and/or potentially malicious resource identifiers is identified. The first set of resource identifiers is evaluated to determine at least a second set of resource identifiers associated with the first set of resource identifiers. The second set of resource identifiers are provide to a web crawling component, which scans the second set of resource identifiers using a threat detection component. If any resource identifiers in the second set of resource identifiers are identified as malicious (or potentially malicious), those resource identifiers may be classified and recorded, provided to the web crawling component, and/or added to the first set of resource identifiers in subsequent threat detection analyses.

Abstract: Synchronizing data across databases comprising generating a synchronization event in response to a change in source data in a source database. The synchronization event is published as a message in a source database internal queue. The message is then published in a message broker. Sink data in a sink database is synchronized according to the message in the message broker to match the change in source data in the source database.

Abstract: An appliance network connectivity apparatus includes a voltage sensor that generates a signal at an output that is proportional to a voltage provided to the appliance. A current sensor generates a signal at an output that is proportional to a current flowing through the appliance. A processor determines the electrical characteristics of power consumed by the appliance and executes web server software for communicating data through a network. A relay controls power from the power source to the appliance. A memory stores the electrical characteristics. A network interface provides the electrical characteristics to the network.

Abstract: A network appliance is provided. The network appliance includes a communications sub-system for sending and receiving data packets and network interface ports for individually connecting external computing devices so that the external computing devices' data communications must traverse the network appliance before reaching any other device or destination. The network appliance further includes electronic storage and memory comprising code executable by a processor to capture data packets, extract metadata from the data packets and store the data packets and their metadata with further capabilities to parse and examine the data packets and their metadata and apply instruction sets (aka rule sets) and command where the data packets and metadata should be stored, whether they should be modified and whether they should be allowed traversal through the network appliance according to their characteristics and content.

Abstract: An approach is provided for vulnerability scanning that receives network access data from a secure network connection and stores the data in a memory. The set of network access data pertain to a set of network accessible resources. The set of network accessible resources are then accessed using the set of received network access data. A vulnerability scan is performed of the network accessible resources after which the access to the set of network accessible resources is released and the set of network access data is deleted from the memory.

Abstract: Methods and systems for providing load balancing are provided. Example embodiments provide a Application Workspace System “AWS” which enables users to access remote server-based applications using the same interface that they use to access local applications, without needing to know where the application is being accessed. In one embodiment, a load balancing message bus is provided that performs load balancing and resource discovery within the AWS. For example, the AWS may use a broadcast message-bus based load balancing to determine which servers to use to launch remote application access requests or to perform session management. This abstract is provided to comply with rules requiring an abstract, and it is submitted with the intention that it will not be used to interpret or limit the scope or meaning of the claims.

Abstract: A system for automatically discovering fabric topology includes at least one or more processing units, one or more memory devices, a security processor, and a communication fabric with an unknown topology coupled to the processing unit(s), memory device(s), and security processor. The security processor queries each component of the fabric to retrieve various attributes associated with the component. The security processor utilizes the retrieved attributes to create a network graph of the topology of the components within the fabric. The security processor generates routing tables from the network graph and programs the routing tables into the fabric components. Then, the fabric components utilize the routing tables to determine how to route incoming packets.

Abstract: Systems, methods, and computer media for implementing a process map navigation tool are provided herein. A process map provides a graphical user interface that represents a process. Icons represent process components or steps and are related using flow connectors to indicate an ordered relationship between the process components. Users can click on an icon and either initiate the corresponding process component or launch a menu of tasks relevant to the step. The icons can also include indicators to provide workflow information.

Abstract: An embodiment of the present invention is directed to enabling a mainframe system to be shutdown and restarted in an alternate region within minutes in a consistent and demonstrated manner ensuring data consistency for various components including disk, storage, coupling facility, etc. This enhances and packages together various software products from a mainframe platform in order to deliver a solution. An embodiment of the present invention is directed to an integrated automation that validates the integrity of the systems after restarting in remote regions.

Abstract: A system and method of verifying a user for participation in a block chain of a distributed network. The method includes receiving, by one or more validation devices of the distributed network, a request for participation in adding transaction records to the block chain, the request being received from a mobile communication device of the user and including behavioral data collected by the mobile communication device. In response to determining that the behavioral data satisfies a human characteristic threshold, determining that the behavioral data is not associated with another device of the distributed network. In response to both those conditions above, verifying the user and enabling the user to participate in the block chain distributed network by adding a block including transaction records to the block chain via the mobile communication device.

Abstract: A method and system for detecting and mitigating a denial of service attack against a destination server (12) and/or connected devices (14). Incoming traffic packets (26) are monitored and a first distribution of the incoming traffic packets (26) is built in accordance with Benford's Law for normal traffic behaviour. A denial of service attack is detected when it occurs. Once an attack is detected, the incoming traffic packets (26/28) are sorted in accordance with Zipf's Law and a sorted distribution is created. The sorted distribution is compared with the first distribution. The incoming traffic packets (28) in the sorted distribution that are not consistent with the first distribution are discarded. A second distribution is then built in accordance with Benford's Law using the incoming traffic packets (28) in the sorted distribution excluding the discarded incoming traffic packets.

Abstract: A method of managing components in a processing environment is provided. The method includes monitoring (i) a status of each of one or more computing devices, (ii) a status of each of one or more applications, each application hosted by at least one of the computing devices, and (iii) a status of each of one or more jobs, each job associated with at least one of the applications; determining that one of the status of one of the computing devices, the status of one of the applications, and the status of one of the jobs is indicative of a performance issue associated with the corresponding computing device, application, or job, the determination being made based on a comparison of a performance of the computing device, application, or job and at least one predetermined criterion; and enabling an action to be performed associated with the performance issue.

Abstract: Gateway apparatus and methods for providing data services (including IoT data services) which leverage existing managed network (e.g., cable network) infrastructure. The disclosed methods and apparatus enable, among other things, delivery of IoT data services in a unified manner via a common portal or IoT gateway (IoTG) which may be both remotely accessed by a user, and remotely controlled/configured by the host network operator (e.g., MSO). In one variant, the premises devices include RF-enabled receivers (enhanced consumer premises equipment, or CPEe) configured to receive (and transmit) OFDM waveforms via a coaxial cable drop to the premises, and interface with the aforementioned IoTG to enable provision of both 5G high-speed data services and lower bandwidth IoT services to the premises, all via a single coaxial cable drop in the exemplary embodiment.

Abstract: There is provided mechanisms for decoding a media stream. A method is performed by a packet receiver. The method comprises receiving packets. The packets have been transmitted by a packet transmitter. The packets define the media stream and each packet comprises encoded media. The method comprises decoding the encoded media into at least a first decoded version and a second decoded version. For the first decoded version only a subset of the packets decoded for the second decoded version are decoded. The subset includes only those of the packets that are received within a first threshold time delay from having been transmitted by the packet transmitter.

Abstract: This disclosure is directed to system to monitor and control data flow in a network. At least one device in a core network may be responsible for charging functions related to the data requests. During certain high usage scenarios (e.g., emergencies, special events, etc.), it may be possible for the charging system to be overwhelmed. For example, a policing system may be implemented in the core network to at least manage the flow of requests to the charging system. The policing system may monitor and control request flow to the charging system based on at least one policy. When a request is determined to violate a policy, the policing system may take corrective action to prevent the charging system from being overwhelmed. For example, the policing system may block the request, divert the request to another charging system that may have available capacity, etc.

Abstract: A device for accessing a distributed ledger is provided. The distributed ledger is maintained by a plurality of virtual nodes. The device has a circuitry, which is configured to access the distributed ledger through at least one virtual node of the plurality of virtual nodes.

Abstract: Disclosed are various examples for Internet of Things (IoT) device discovery and configuration. In some embodiments, a gateway receives a specified IoT protocol, and instructions for the gateway device to broadcast an IoT device discovery message. The gateway broadcasts the IoT device discovery beacon message, and IoT devices provide unique IoT device identifiers in response. A list of IoT devices is transmitted to the management service. The gateway device receives and implements a command to allow communications with the IoT devices.

Abstract: The disclosed computer-implemented method may include (1) receiving, via a social networking system, a request from a user to participate in a discovery service designed to facilitate connections between users of the social networking system who share common attributes, (2) obtaining, from the user, data representative of at least one desired user attribute, possessed by the user, for new user connections, (3) identifying, within the social networking system, at least one additional user who is both a participant in the discovery service and who also possesses the desired user attribute, and (4) providing a visual indication to the user, when representing the additional user within a user interface of the social networking system, that the additional user is a participant in the discovery service and that the additional user possesses the desired user attribute. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A monitoring apparatus holds extracted information including: extracted data from first communication between a proxy and a first network and from second communication between the proxy and a second network; and reception times of a target data, wherein the extracted data includes kinds of communication, sources and destinations of the target data in the first communication, and the sources in the second network and the destinations in the first network after the target data is relayed by the proxy in the second communication, the monitoring apparatus: for first extracted data of first kind of communication in the first communication, acquires second extracted data in the second communication whose reception time is coincidental time zone of the reception time of the first extracted data; and determines whether communication using the target data from which the acquired second extracted data is extracted is included in a series of end-to-end communication.

Abstract: The present teaching relates to method, system, and medium for cross network communications. Information related to an application running on a user device is first received, which includes a state of the application and sensor data obtained with respect to a user interacting with the application on the user device. A request is sent to an application server for an instruction of a state transition of the application. A light weight model (LWM) for an object involved in the state transition is received and is personalized based on at least one of the sensor data and one or more preferences related to the user to generate a personalized model (PM) for the object, which is then sent to the user device.

Abstract: Examples disclosed herein relate to scanning an IT component for compliance. In an example, events related to an IT component and past compliance scans performed on the IT component may be analyzed. Based on an analysis of the events related to the IT component and the past compliance scans performed on the IT component, a determination may be made whether a compliance scan is to be performed on the IT component.

Abstract: Systems, computer-implemented methods, and computer program products that can facilitate creating and querying a knowledge base of identified topics, computer code actions, and parameters, are provided. According to an embodiment, a system can comprise a memory that stores computer executable components and a processor that executes the computer executable components stored in the memory. The computer executable components can comprise a parameter component that can identify a result parameter in ones of one or more results, wherein the one or more results comprise topics and computer code actions. The computer executable components can further comprise a result component that can select a result of the one or more results based on a mapping of a query to the one or more results, the mapping being based on the result parameter identified in the result and a criterion.

Abstract: A technique includes receiving data representing an output of a security scan of an application and an audit of the security scan by a human auditor. The output represents a security issue with the application, which is identified by the security scan, and the audit represents an analysis of the security issue by the human auditor. The technique includes training a security scan classifier to learn a classification preference of the human auditor. Training the security scan classifier includes, processing the data in a processor-based machine to, based at least in part on the output of the security scan and the analysis of the security scan by the human auditor, learn the classification preference of the human auditor to the issue to build a classification model for the issue.

Abstract: The present disclosure relates to a 5G or pre-5G communication system to be provided for supporting a higher data transmission rate than a 4G communication system such as LTE. An embodiment of the present disclosure relates to a method in which a plurality of devices use a service linked to a first device, the method comprising the steps of: performing a connection to a central display device, and mirroring the service to the central display device on the basis of a playlist of services stored in the first device; receiving, from a second device, a change request for the playlist, and updating the playlist to correspond to the change request; and transmitting information related to the updated playlist to the central display device.

Abstract: Techniques for prioritized client-server communications based on server health are disclosed. In one embodiment, a system includes multiple clients, and a server communicatively coupled to the multiple clients. The server may include a quality of service (QoS) aware server agent to divide the clients into client groups, assign a priority level to each of the client groups, monitor a health of the server, and determine heartbeat status messages to be sent to the client groups based on the assigned priority level and the health of the server. Each heartbeat message may indicate a state of the server. Further, the QoS aware server agent may send the heartbeat status messages to corresponding ones of the client groups and instruct clients corresponding to one or more of the client groups to send data based on the corresponding heartbeat status messages.

Abstract: Technology for network loop detection in a hybrid mesh network is described. In one embodiment, processing logic receives a network event message indicating a change in a network topology of a mesh network and, responsive to the network event message, determines that the mesh network includes at least one network loop comprising a plurality of communication links connecting two nodes of the mesh network. The processing logic further determines that the at least one network loop includes at least one wired communication link and disables at least one of the plurality of communication links to disconnect the at least one network loop.