Abstract: An embodiment of the invention relates to a communication node (CN, N1-N4) capable of communicating with other nodes in a communication system (10) according to a given communication sequence (S). The communication node comprises an analysis unit (110) configured to determine the optimal position of its communication node inside the communication sequence (S) as well as the corresponding optimal predecessor node.

Abstract: A wireless IO-link communication network has a main master and at least one device which have a bidirectional wireless communication between the main master and the at least one device, as well as a backup master which is connected to the main master and the at least one device and is configured to control the at least one device. In a method for operating the IOLW communication network with such a backup master, the backup master controls the at least one device instead of the main master.

Abstract: The present disclosure provides systems and methods for determining location point quality. In one example, a computer-implemented method is provided which includes obtaining, by one or more computing devices, obtaining, by one or more computing devices, one or more location point reports for a location point. The method further includes generating, by the one or more computing devices, location point score modifier for the location point based on one or more location point reports. The method further includes providing, by the one or more computing devices, the location point score modifier for use in determining candidate location points for generation of location-based application content.

Abstract: Described herein are techniques for delegating access using an offline token. The techniques including a method comprising receiving, at a server and from a delegate user device, a delegate login package comprising an offline token and delegate credentials. The offline token is generated at an offline user device and transmitted to the delegate user device for enabling the delegate user device to access access-controlled content associated with the offline user device. The techniques further include validating, by the server, the delegate login package by comparing the delegate credentials with delegate information stored in the offline token. The techniques further including establishing a delegated session between the delegate user device and the access-controlled content stored on the server in response to validating the delegate login package. Furthermore, the delegated session is established according to an access policy, delegation rights, and an expiration parameter stored in the offline token.

Abstract: Methods for synthetic transaction monitoring are disclosed. In one embodiment, in an information processing apparatus comprising at least one computer processor, a method for synthetic system monitoring may include: (1) generating a synthetic transaction having a nominal value; (2) at a test interface, initiating the synthetic transaction into a transaction processing flow comprising a plurality of transaction elements; (3) the test interface receiving, from a first transaction element of the plurality of transaction elements, a first transaction state for the transaction; (4) the test interface comparing the first transaction state to a first expected transaction state for the first transaction element; and (5) the test interface generating an output based on the comparison.

Abstract: Systems and methods for identifying conversion eligible legacy user profiles for conversion from a legacy production environment to a production operating environment are discussed herein. The system can include an eligibility engine configured to determine the conversion eligible legacy profiles within the legacy operating environment, a conversion coordinator configured to monitor the conversion process and provide information during the conversion process, and a data injection system that creates the production user profiles within the production operating environment while the production operating environment is live. The system can identify the conversion eligible legacy user profiles, replicate the legacy user profiles within a conversion environment, resolve eligibility issues associated with the legacy user profiles, and map information from the legacy user profiles to a production user profile.

Abstract: System generating real-time gathering partner credentials. Processor provides network-based access to user interface registering and maintaining first and second users' accounts. Processor communicates with first and second mobile communication devices in possession of users. Processor executes processor commands of users. Data repository is coupled with processor for storing first and second account data of user accounts. Account data include URIs to be accessed for dynamic collection of real-time first and second user credentials information. Account data are associated with first and second unique usernames of users. Processor includes geolocation facility determining indication of real-time geolocation proximity between mobile communication devices. Processor includes account data-collection facility responsive in real-time to processor command of first user dynamically collecting real-time second user credentials information.

Abstract: Systems and methods for implementing guest-initiated announcement of virtual machine migration. An example method may comprise: receiving, by an origin hypervisor running on an origin computer system, a migration announcement of a virtual machine; copying at least a part of a state of the virtual machine to a destination computer system; and responsive to stopping the virtual machine on the origin computer system, causing a destination hypervisor running on the destination computer system to broadcast the migration announcement over a network associated with the destination computer system.

Abstract: Systems, methods, and computer-readable media for generating higher level summary tablature based on lower level tablature are disclosed. The systems and methods may involve at least one processor configured to: receive a selection of at least one item contained on both a first board and a second board; detect a first type of information; detect a second type of information; detect a third type of information; detect a fourth type of information; analyze characteristics to ascertain that the first type of information is aggregable with the third type of information, and that the second type of information is aggregable with the fourth type of information; present the at least one item on a third board; and aggregate on the third board, the first type of information with the third type of information, and the second type of information with the fourth type of information.

Abstract: In a computer-implemented method for using a nested host manager in a hyper converged infrastructure to streamline the upgrade process for one or more hosts in a workload domain, a first workload domain having one or more hosts is chosen, and at least one host of the one or more hosts is designated for an upgrade. The resource allotment of the at least one host is evaluated and a nested host having a comparable resource allotment is selected and provided in a second workload domain. Communication is redirected from the at least one host to the nested host. The at least one host is placed in a maintenance mode, updated, and returned to an operational mode.

Abstract: Disclosed are various embodiments for distributing the load of a plurality of virtual machines across a plurality of hosts. A potential new host for a virtual machine executing on a current host is identified. A gain rate associated with migration of the virtual machine from the current host to the potential new host is calculated. A gain duration associated with migration of the virtual machine from the current host to the potential new host is also calculated. A migration cost for migration of the virtual machine from the current host to the potential new host, the migration cost being based on the gain rate and the gain duration is determined. It is then determined whether the migration cost is below a predefined threshold cost. Migration of the virtual machine from the current host to the optimal host is initiated in response to a determination that the migration cost is below the predefined threshold.

Abstract: A method of detecting latency in message delivery in a communication network is disclosed. One or more data centers receives messages that are to be published via the communication network. The system receives queries from subscribers, processes the queries and transmits messages to the subscribers in response to the queries. The subscribers acknowledge the messages. The system uses its own processing time and the acknowledgement time to assess latency in message delivery. The system also may use the information to determine which data center or geographic location is experiencing relatively higher latency than other data centers or locations.

Abstract: The disclosure provides an approach for service provisioning. Embodiments include receiving first configuration data related to a first network endpoint and second configuration data related to a second network endpoint. Embodiments include generating a service map based on the first configuration data and the second configuration data. Embodiments include receiving a request to provision a service between the first network endpoint and the second network endpoint. Embodiments include determining in response to the request and based on the service map, first service configuration data for the first network endpoint and second service configuration data for the second network endpoint. Embodiments include provisioning the service between the first network endpoint and the second network endpoint by pushing the first service configuration data to the first network endpoint and pushing the second service configuration data to the second network endpoint.

Abstract: A client terminal, an information processing system, and a group change method. The client terminal receives screen data from one or more information processing apparatuses, displays on a display in a selectable manner based on the received screen data one or more output devices each belonging to a particular group in an old organization, and one or more groups in a new organization as a candidate for transfer destination of the one or more output devices, receives selection of the one or more output devices belonging to the particular group in the old organization and selection of the one or more groups in the new organization, creates association information that associates the selected output device with the selected group in the new organization, and transmits the association information to the one or more information processing apparatuses.

Abstract: A system and method for the real-user capable monitoring of the rendering process of dynamically updated web pages is presented. The proposed approach deploys a browser agent to content loaded and displayed by a web browser which monitors resource load activities caused by the processing of the content by the browser and in-place content modifications caused by the executions of scripts and XHR communication by the browser. Those resource load and content modification activities affecting the visible area of the browser are identified and a point in time is calculated at which the visualization of the content for the visible area is complete. Further performance monitoring data describing the performance of the rendering process depending on the percentage of finished portions of the visible area over time is calculated. In addition, data describing the rendering process in detail may be captured by the browser agent which may be used for a later playback of the rendering process.

Abstract: Techniques for optimizing updates to a distributed data processing application are provided. A runtime engine compares a first version of a distributed application to a second, new version of the distributed application. The runtime engine identifies change(s) to the first version. The runtime engine generates compiler hint(s) for the change(s). The second version of the distributed application and compiler hint(s) are sent to a compiler. The runtime engine receives, from the compiler, a compiled second version of the distributed application and compiler-scheduler hint(s) describing respective optimizations the compiler made to the compiled second version of the distributed application based on the change(s) made to the first version of the distributed application and the compiler hint(s).

Abstract: Determining, by a machine learning model in an isolated operating environment, whether a file is safe for processing by a primary operating environment. The file is provided, when the determining indicates the file is safe for processing, to the primary operating environment for processing by the primary operating environment. When the determining indicates the file is unsafe for processing, the file is prevented from being processed by the primary operating environment. The isolated operating environment can be maintained on an isolated computing system remote from a primary computing system maintaining the primary operating system. The isolating computing system and the primary operating system can communicate over a cloud network.

Abstract: A resource allocation method includes splitting requirements into split requirements for each subsection of a physical network. The subsections of the physical network each have one of a plurality of policies applied to them. The method includes calculating a resource allocation for each of the subsections based on the split requirements, integrates a result of the allocations to determine a plurality of solutions candidates for resource allocations based on the split requirements, evaluates, for each solution candidate, compliance with the one of the plurality of policies, and selects one of the solution candidates based on the evaluation.

Abstract: A processor retrieves alarm data associated with an operation support system. A processor filters the alarm data. A processor groups the filtered alarm data. A processor extracts cross-domain node and port information for the grouped alarm data. A processor generates a cross-domain topology of the operation support system based on the extracted cross-domain node and port information.

Abstract: Systems, methods, and computer-readable media for static network policy analysis for a network. In one example, a system obtains a logical model based on configuration data stored in a controller on a software-defined network, the logical model including a declarative representation of respective configurations of objects in the software-defined network, the objects including one or more endpoint groups, bridge domains, contexts, or tenants. The system defines rules representing respective conditions of the objects according to a specification corresponding to the software-defined network, and determines whether the respective configuration of each of the objects in the logical model violates one or more of the rules associated with that object. When the respective configuration of an object in the logical model violates one or more of the rules, the system detects an error in the respective configuration associated with that object.

Abstract: A method and apparatus of a device that automates a task over a network that includes a plurality of data centers is described. In an exemplary embodiment, the device receives state change information from a plurality of devices in the plurality of data centers. In addition, the device generates an overall state for the network. The device further receives a task to be performed over the plurality of data centers. The device additionally schedules the task to be performed using the overall network state.

Abstract: Embodiments of the present communications systems and methods may provide the capability for fast and reliable transitioning between the different versions of the service of the multi-node service deployed in the utility computing system. For example, in an embodiment, a computer-implemented method for data traffic distribution may comprise allocating a plurality of data traffic service network addresses to a load balancer service, wherein each data traffic service network address is associated with a different version of the load balancer service, receiving a plurality of data traffic flows, and distributing each data traffic flow to a version of the load balancer service based on a data traffic service network address of each data traffic flow.

Abstract: Systems, apparatuses, and/or methods may manage a fault condition in a computer system. An apparatus may dynamically publish a message over a publisher-subscriber system and dynamically subscribe to a message over the publisher-subscriber system, wherein at least one message may be used to address a fault condition in the computing system. The apparatus may predict a fault condition in a high performance computing (HPC) system, communicate fault information to a user, monitor health of the HPC system, respond to the fault condition in the HPC system, recover from the fault condition in the HPC system, maintain a rule for a fault management component, and/or communicate the fault information over the publisher-subscriber system in real-time. Messages may also be aggregated to minimize fault information traffic. The publisher-subscriber system may facilitate dynamic and/or real-time coordinated, integrated (e.g., system-wide), and/or scalable fault management.

Abstract: A resilient network call management framework that automatically detects slow Application Programming Interfaces (APIs) at downstream dependent applications based on constantly measuring and monitoring the response time coming from such applications. Once a slow API has been identified, the framework provides the capability to temporarily shut down (otherwise referred to herein as, “short-circuit”) the network call path associated therewith until the monitoring determines that the response time is back to an acceptable level (i.e., returns to a healthy status). Implemented in conjunction with a shared services server hosting different service applications, processing by the framework may be limited to only those service applications or network calls deemed non-critical, such that, critical service applications or network calls are not subjected to being shut down regardless of response time.

Abstract: A network-adaptive function control method is provided for a dual-mode mobile terminal. The network-adaptive function control method for a dual-mode mobile terminal supports communication via first and second-type networks includes registering at least one function as a network-adaptive; determining, when a function is requested to be activated, whether the requested function is the network-adaptive function. If it is determined that the requested function is the network-adaptive function, it if determined whether the mobile terminal is in the first-type network; and activating, if the mobile terminal is in the first-type network, the requested function in association with the first-type network.

Abstract: A medical device data back-association system, apparatuses, and methods are disclosed. In an example embodiment, a server receives first medical device data from a medical device including a device identifier and stores the first medical device data to an unassociated record in a database after determining that there is no association between the device identifier and any patient identifier or medication order identifier. While the medical device is administering the medication to a patient, the server receives an identifier message including at least two of the device identifier, the patient identifier, and the medication order identifier. The server creates an identifier association between a medical record of the patient and the medical device using the identifier message. The server uses the identifier association to store subsequent medical device data from the medical device to the medical record of the patient.

Abstract: Provided is a network function virtualization system. The system includes a single-domain virtualized network function manager (VNFM), a single-domain virtualized network function (VNF) entity, and a virtualized infrastructure manager (VIM); one or more network function virtualized single-domain orchestrators (NFV-DO), which are in one-to-one correspondence with single-domains. The NFV-DO includes a virtualized network function orchestrator (VNFO), which is configured to manage one or more of the following functions in the single-domain where the VNFO is located: a network service instance, a network service life cycle, VNFM instantiation, VNF instantiation and a VNF life cycle. The above solution can meet requirements for phased evolution implemented by a current NFV system and requirements for cross-border, cross-regional, multi-vendor service provision and multi-layer management.

Abstract: Systems, methods, and storage media for location information processing are disclosed. An example of a method comprises: obtaining transaction information from user terminals of a plurality of users using a service provided by a service provider, the transaction information comprising a plurality of pieces of location information of the user terminals; clustering, using an algorithm, the plurality of pieces of location information into a plurality of areas; determining a transaction attribute corresponding to each area in the plurality of areas, the transaction attribute comprising a number of users in a corresponding area and a number of transactions of users using the service in the corresponding area; determining, according to information entropy values of the transaction attributes, a dispersity of the service provided by the service provider according to a number of areas in the plurality of areas and a plurality of transaction attributes corresponding to the plurality of areas.

Abstract: An method of a storage device configured to communicate with an external device through an interface channel includes: storing a throttling predefined table (PDT) including a relationship between target performances and workload characteristics; detecting that a first workload characteristic has changed; determining whether to update the PDT; when it is determined to update the PDT, monitoring a performance of the storage device; updating the PDT to include at least one new value for the workload characteristics and an additional target throttling performance value, based on a calculated monitored performance and the changed value of the first workload characteristic; controlling an operation parameter based on the updated PDT such that the interface channel has a first throttling performance corresponding to the additional target throttling performance value; receiving a first request through the interface channel from the external device; and processing the first I/O request through the interface channel.

Abstract: The technology disclosed describes a system. The system comprises a network security system interposed between clients and cloud applications. The network security system is configured to receive from a client an incoming request to access a cloud application in an application session. The network security system is further configured to analyze the incoming request and detect absence of at least some metadata required to enforce a security policy on the incoming request. The network security system is further configured to hold the incoming request, generate a synthetic request, and inject the synthetic request into the application session to transmit the synthetic request to the cloud application. The synthetic request is configured to retrieve otherwise absent metadata from the cloud application. The network security system is further configured to receive a response to the synthetic request from the cloud application. The response supplies the otherwise absent metadata.

Abstract: Method and apparatus for determining feature unavailability are disclosed. In the method and apparatus a user device attempts to communicate with a second server over a second network path whereby the communication may be blocked. The user device receives data from a first server over a first network path whereby the data indicates that communication using the second network path may be blocked.

Abstract: Systems and methods of providing 5G access for a UE are generally described. The UE is simultaneously connected via dual radio operation to a legacy and 5G access system. The UE mobility management states for the access systems are independent of each other. The EPC and 5G CN share an HSS and may share a IP anchor. When handover occurs between access systems, the IP address is retained and the IP anchor used when the UE transmits an Attach Request having a Handover Attach Request Type and otherwise a new IP address is provided and the HSS but not the IP anchor is common between the access systems. The 5G eNB to which the UE is connected is standalone and connected to the 5G CN or dual mode and connected with an EPC via an LTE anchor in addition to the 5G CN.

Abstract: Systems and methods for supporting SMA level abstractions at router ports for inter-subnet exchange of management information in a high performance computing environment. In accordance with an embodiment, a subnet manager in a local subnet is responsible for establishing and configuring a remote attribute a switch having a switch port configured as a router port. This remote attribute can comprise certain information about the local subnet, including connectivity information and port status information. On receiving a query from a remote subnet manager, via a SMP (or a vendor specific SMP), information contained in the remote attribute can be communicated back to the remote subnet manager.

Abstract: A service implemented at a first isolated virtual network of a provider network is added to a database of privately-accessible services. Configuration changes that enable network packets to flow between the first isolated virtual network and a second isolated virtual network without utilizing a network address accessible from the public Internet are implemented. Service requests originating at the second isolated virtual network are transmitted to the first isolated virtual network via private pathways of the provider network. Metrics corresponding to service requests directed from the second isolated network to the service are collected and provided to the respective owners of one or both isolated virtual networks.

Abstract: The present disclosure relates to a communication technique for converging IoT technology with 5G communication systems for supporting higher data transmission rates than 4G systems and to a system thereof. The present disclosure can be applied to intelligent services (e.g., smart home, smart building, smart city, smart car or connected car, health care, digital education, retail business, security- and safety-related services, etc.) on the basis of 5G communication technology and IoT-related technologies. The method for operating a policy and charging function (PCF) according to one embodiment of the present invention comprises the steps of: receiving a message which is generated by an application function (AF) and requests a change in the traffic route of terminal; checking priority information of the terminal, regarding services provided by the AF, included in the message; and changing the protocol data unit (PDU) session connection of the terminal on the basis of the priority information.

Abstract: Specialized, service optimized virtual machines are assigned to handle specific types of Internet of Things (IoT) devices. An IoT context mapping policy engine within the context of a virtualized network function manages IoT context mapping policy functions in load balancers. The IoT context mapping policy functions select service optimized virtual machines based on IoT device IDs, and assign those virtual machines to handle the devices. The IoT context mapping policy functions provide load data to the IoT context mapping policy engine. Based on the load data, the IoT context mapping policy engine maintains appropriate scaling by creating or tearing down instances of the virtual machines.

Abstract: In one embodiment, a network assurance service that monitors a network detects, using a machine learning-based anomaly detector, network anomalies associated with source nodes in the monitored network. The network assurance service identifies, for each of the detected anomalies, a set of network paths between the source nodes associated with the anomaly and one or more potential destinations of traffic for that source node. The network assurance service correlates networking devices along the network paths in the identified sets of network paths with the detected network anomalies. The network assurance service adjusts the machine learning-based anomaly detector to use a performance measurement for a particular one of the networking devices as an input feature, based on the correlation between the particular networking device and the detected network anomalies.

Abstract: A system is provided for clustering events. A first engine is configured to receive message data from managed infrastructure that includes managed infrastructure physical hardware that supports the flow and processing of information. A second engine determines common characteristics of events and produces dusters of events relating to the failure of errors in the managed infrastructure. Membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in the physical hardware managed infrastructure directed to supporting the flow and processing of information. One or more situations is created that is a collection of one or more events or alerts representative of the actionable problem in the managed infrastructure. In response to the production of the clusters one or more physical changes is made to at least a portion of the managed infrastructure hardware.

Abstract: Systems and method may provide unmanned aerial system communication. A method, performed by at least one processor that implements a first server, includes obtaining a group identifier of a pair of an unmanned aerial vehicle (UAV) and a controller of the UAV, or a respective group identifier for each of the pair, based on requesting a second server to create one or more groups for the pair; provisioning Quality of Service (QoS) for communication of the pair, using the group identifier of the pair or the respective group identifier for each of the pair; and triggering, based on determining that a condition of the communication does not satisfy a pre-defined QoS requirement, a third server to perform adaptation of the QoS for the pair.

Abstract: A wearable form factor wireless camera may include an image sensor for capturing video, the image sensor powered by a battery internal to the wearable form factor wireless camera. The camera may be ruggedized and attached attach to clothing worn on a user. Further, the camera may include a burst transmission unit to transmit video via a cellular network, and include video analytics software executed by an internal processor, coupled to a buffering memory and powered by the battery. The camera may also include an internal storage device powered by the battery and configured to store video information at a first fidelity, the stored video information capable of being transmitted to a base station at the first fidelity and at a second fidelity. Also, the first fidelity may provide higher video quality than the second fidelity. The camera may switch the second fidelity to the first fidelity upon a trigger.

Abstract: An electronic device can be synchronized with a broadcast of a live sporting event to obtain supplemental sports data over a data network from a server storing data associated with the live sporting event. Supplemental sports data is obtained from the server for display on the electronic device following a triggering activity associated with the broadcast of the live sporting event. Supplemental sports data can be transmitted for rendering on a display associated with the electronic device. Supplemental sports data can include display of an instant replay video of a sports athlete combined with audio of a pre-recorded statement by the sports athlete associated with the instant replay video, an announcement of a score change for a sporting event monitored by the electronic device, and a display of a football widget providing updates on football game status (e.g., possession, ball location, current score) monitored by the electronic device.

Abstract: A system method and computer media for detection of potential cyber security vulnerabilities in a computer network are described; the system includes an interface configured for receiving a log file of a target computer system, an analyzing module, a mapping module configured to map a plurality of potential entrance points, a code generator for generating a computer code for exterior intrusion and a testing server configured for transmitting the computer code to the target system and collecting at least one response member, transmitted in response to the computer code.

Abstract: The present disclosure is directed towards systems and methods of detecting a cause of anomalous load balancing among a plurality of servers. A device intermediary to a plurality of clients and a plurality of servers collects values of a plurality of counters. The device identifies a server of the plurality of servers that is an outlier. The device can identify a counter of the plurality of counters that is an outlier based on at least a comparison of values of each of the plurality of counters for each of the plurality of servers. The device can provide, responsive to the determination, an indication that a value of the counter is a factor causing the server to have uneven load balancing during the time interval.

Abstract: Systems, methods, and computer-readable media for communicating policy changes in a Locator/ID Separation Protocol (LISP) based network deployment include receiving, at a first routing device, a first notification from a map server, the first notification indicating a change in a policy for LISP based communication between at least a first endpoint device and at least a second endpoint device, the first endpoint device being connected to a network fabric through the first routing device and the second endpoint device being connected to the network fabric through a second routing device. The first routing device forwards a second notification to the second routing device if one or more entries of a first map cache implemented by the first routing device are affected by the policy change, the second notification indicating a set of one or more endpoints connected to the second routing device that are affected by the policy change.

Abstract: The present application provides a method for routing traffic from a user equipment (UE) to a service available on a network. In the method, a virtual router entity that services a virtual network available on the network receives a packet from the UE, the received packet including at least a destination ID and payload. The virtual router then forwards a location resolution request including the received destination ID to an associated connectivity manager operating on the network. The virtual router receives a location resolution response from the connectivity manager including at least a destination network node ID. The virtual router may then forward the packet to the destination network node ID.

Abstract: The present invention concerns a method for securing data transmitted by a data source (2) of a connected object (1) against attacks affecting a control circuit (4) of the connected object (1), the connected object (1) also comprising an electronic signature circuit (6) and a communication bus (8) connected to the control circuit (4), connected to the electronic signature circuit (6) and connected to the source (2), wherein the method comprises the following steps implemented by the electronic signature circuit (6): detecting (602) a first datum (M) transmitted by the source (2) on the communication bus (8); detecting (606) a second datum (M?) to be signed, on the communication bus, the second datum having been transmitted (404) by the control circuit (4) on the communication bus (8) after detection of the first datum (M) by the control device (4); verifying (608) coherence between the detected data (M, M?), signalling (610) an error (E), if any, as a function of a result of the verification.

Abstract: A method and apparatus for secure transfer and playback of multimedia content enables the secure transfer of multimedia content from a digital video recorder (DVR) to a personal computer (PC) and further to a handheld device. A DVR determines which devices on a Local Area Network (LAN) are authorized to share and/or retrieve content from the DVR. The DVR receives a connection request from a PC on the LAN, authorizes the connection request and establishes a secure connection between the DVR and the PC. Once the secure connection is established, the DVR receives a request for multimedia content from the PC, prepares the multimedia content for transfer and transfers the multimedia content to the PC.

Abstract: A gateway device for implementing data security is described herein. The gateway device is coupled between a client device and a server device, and generates a mapping between portions of data received from a client device and interface fields or data elements of the client device. Upon receiving subsequent data from the client device, the gateway device can access the generated mapping to identify portions of the subsequent data corresponding to particular interface fields or data elements of the client device using the mapping, and can encode the identified portions of the subsequent data, for instance based on data protection techniques defined by a security policy. The encoded data can then be outputted by the gateway device to the server device.

Abstract: A natural language processing method and system utilizes a combination of rules-based processes, vector-based processes, and machine learning-based processes to identify the meaning of terms extracted from data management system related text. Once the meaning of the terms has been identified, the method and system can automatically incorporate new forms and text into a data management system.

Abstract: There are disclosed devices, system and methods for mapping relationships between macro-clusters of a network object topology of a computer communication network. A remote network object of the network is selected that has a relationship with one macro-cluster that has a relationship with another macro-cluster. Flow log data, metric data and configuration data are gathered from at least the selected network object. Configuration data and time data are generated for the sets network objects of the two macro-clusters using the gathered flow log data, metric data and configuration data. Network topology information is created using the configuration data and time data. The network topology information includes topology information for the relationship between the macro-clusters, for each macro-cluster and for the sets of network objects of the macro-clusters. The topology information can be stored and used to determine whether performance issues occur in the macro-clusters or relationship over time.