Abstract: The techniques disclosed herein prevent data spillage in multi-tenant services via request and response containerization with provenance checks. When a web request is received on behalf of a tenant, a request container is created and initialized with identifying information extracted from the request. Derived identifiers that can be verified as being associated with the tenant may be added to the request container. A response container for accumulating data obtained while processing the request is then created. The request and response containers are passed throughout the call path that processes the request. Identifying information passed to data access operations is obtained from the request container, while results of data access operations are stored in the response container. Before generating a web response using data from the response container, the response container is verified to contain data associated with the appropriate request.

Abstract: Described are examples for providing management of a virtual wide area network (vWAN) based on operator policies. A network orchestrator presents, to a network operator, a representation of the vWAN including virtual network entities associated with respective geographic locations and virtual connections between the virtual network entities. The network orchestrator receives a policy for the virtual wide area network from the network operator via the representation, the policy to be implemented at one or more of the virtual connections. The network orchestrator translates the policy for the virtual wide area network into a configuration of an underlying wide area network (WAN). The underlying WAN a plurality of geographically distributed physical computing resources in geographic regions corresponding to the virtual network entities and connections there between.

Abstract: A system for resolving interference on a cluster computing system includes a processor. The processor is configured to determine whether a second worker system has resources available to run the first or second task; in response to determining that the second worker system has the resources available to run the second task, move the second task from the first to the second worker system; in response to determining that the second worker system has the resources available to run the first task and does not have resources available to run the second task, move the first task from the first to the second worker system; and in response to determining that the second worker system does not have the resources available to run the first or second task, limit a resource allocation of the first or second task.

Abstract: Implementations generally relate to software testing system and method for automatically generating, deploying, and monitoring software tests employed to test software applications and/or software process flows. In implementations, a system generates software application tests and varies such tests used based on several criteria including monitoring a software application processing defined inputs and outputs to determine which parts of the application are being tested, which parts of the software application are not being tested, user interactions, metadata, type of software application, use computing environment, etc. The system may be configured to adapt testing, either pre or post production, to allow, user interactions of one or more running software applications to be used to provide feedback on which additional tests to add and/or subtract automatically to testing sequences.

Abstract: A robot alert system includes a robot server that receives contextualized sensor data from one or more mobile robots and generates alerts to one or more individuals according to a set of configured alert rules. The contextualized sensor data includes location data indicating a location of the mobile robot and sensor data obtained by the mobile robot representing sensed conditions of an environment associated with the location. The robot server accesses staff member data associated with each of a plurality of staff members from a staff member database and accesses a set of stored alert rules specifying alert criteria for triggering the alert. Responsive to determining that the contextualized sensor data meets the alert criteria for s target staff member, the robot server generates and transmits an alert to a client device associated with the target staff member.

Abstract: In one embodiment, a system is provided. The system includes a first client. The system also includes an analysis server coupled to the first client. The system further includes a first customer database of information coupled to the analysis server. The first customer database is to embody forecast data and to receive essentially real-time updates to the forecast data. The first customer database supports an OLAP cube associated with the analysis server.

Abstract: Method for controlling a wearable user device, which is a sensor and/or information device including establishment of a wireless communication link between the user device and a gateway, transmission of a connection event message to the process control system, wherein the connection event message contains an identifier of the user device, an identifier of the gateway and information on the successful establishment of the communication link, transmission of sensor data from the user device to the process control system, generation of at least one control instruction by the process control system in response to the received sensor data, wherein the control instruction is generated depending on the identifier of the gateway and depending on the received sensor data, and transmission of the at least one control instruction to the user device. Furthermore, a wearable user device as well as a control system are disclosed.

Abstract: This document relates to a process for autopilot re-enrollment of managed devices in a network following a reset of the managed devices. Upon determining that the managed devices lack a hardware authenticator, a one-time password can be issued to the managed devices that may be stored in a persistent memory, and upon reset of the managed devices, the one-time password can be returned for validation and the managed devices can be automatically re-enrolled in the network upon validation of the one-time password.

Abstract: Systems and methods are disclosed herein that can detect use of a consumer electronics device and that can generate and offer insurance or protection plans that measure, account, and adjust for the use of the consumer electronics device and consumer tendencies while using the consumer electronics device.

Abstract: The described technology relates to a software application architecture allowing for creation of a web application that has multiple Single Page Applications (SPAs) within the application. The software application architecture includes components that are common to each page of the web application while also having components that are dynamically loaded to cater to specific respective pages within the application. The dynamically loadable components can be identified based on an identifier in a path being browsed using a web browser application. The described application architecture may be used in the context of AngularJS, as well as other SPA technologies and non-SPA technologies.

Abstract: Systems and methods for use in facilitating application interface (API) interactions are disclosed. One exemplary method includes receiving, by a computing device, a primary API request from a client. The primary API request includes a plurality of parameters in association with a plurality of values. The computing device identifies relationships between the parameters and a plurality of interfaces, and generates a plurality of secondary requests based on the primary API request and the identified relationships. The computing device further transmits each of the plurality of secondary requests to the plurality of interfaces and receives a plurality of secondary responses from the plurality of interfaces. The computing device then generates a primary response based on the secondary responses and transmits the primary response to the client.

Abstract: A list of one or more archives available to be restored is provided to an authenticated user. The list of one or more archives available to be restored is based in part on a credential provided by the authenticated user. The credential provided by the user is linked to a subset of a plurality of snapshot archives associated with an enterprise. A selection of one of the one or more archives and an external target for the selected archive is received. A cloud instantiation of a secondary storage system is utilized to reconstitute a tree data structure based on serialized data included in the selected archive. A request to restore data associated with the selected archive to the external target is received. The requested data associated with the archive is provided to the external target.

Abstract: A method and system for controlling uplink air-interface communication over an air interface from a given user equipment device (UE) to the access node, where the uplink air-interface communication normally operates with a modulation order corresponding with a most recently determined channel quality of the given UE. An example method includes (i) detecting at least a threshold high rate of uplink voice muting on the air interface, and (ii) responsive to at least the detecting of the threshold high rate of uplink voice muting on the air interface, suppressing the modulation order used for the uplink air-interface communication from the given UE to the access node over the air interface.

Abstract: An MDM management system to manage files outside the scope of MDM for macOS, the management system. The system has an MDM platform for managing a plurality of mobile devices each with a macOS operating system, the MDM manager allowing for creation of configuration profiles for an array of files outside of the scope of MDM for macOS and the configuration profiles having defined content settings. The MDM manager manages a plurality of managed mobile devices having a file manager agent to receive the array of configuration profiles from the MDM manager, the mobile devices each having a module to detect a change in the file outside the scope of MDM for macOS and when the change occurs to check a content change against the defined content settings, and if the change deviates from one of the defined content settings, returning the file to the defined content settings of the configuration profile.

Abstract: Examples described herein include systems and methods managing firmware versions of user devices that are enrolled in an enterprise mobility management system. The system can include a management server that sends profiles to enrolled devices, causing those devices to restrict further firmware updates and register with a firmware server. The management server can retrieve available firmware versions and display those in a console. An administrator can select target firmware versions in the console. The management server can the cause the enrolled devices to update to the target firmware versions. This can include sending a call from the management server to the firmware server, causing an automatic update. It can also include sending a command from the management server to an enrolled device, causing the enrolled device to prompt a user prior to requesting a firmware update.

Abstract: In an approach for generating differentiated workload telemetry data, a processor corresponds one or more services with a workload related telemetry generating an event emitter. A processor performs a correlation analysis of corresponding relationship and connection among connected resources and current traffic into and out of the one or more services. A processor labels domain context for each telemetry event. A processor communicates each telemetry event to a global event handler. A processor performs a cross-correlation in real-time of telemetry data with the global event handler. A processor updates a real-time differentiated workload report.

Abstract: Disclosed are systems, apparatuses, methods, and computer-readable media for managing networks. According to at least one example, a method is provided for connecting to a network controller across different regions. The method includes identifying a first connection with a network orchestrator during establishment of a second connection with the network orchestrator from a network controller; establishing a sibling session that links the second connection and the first connection at a control plane; inserting a sibling data message that identifies the sibling session into control messages sent; receiving a message from the network orchestrator over the second connection, the message including an address of the network controller associated with the second connection; and transmitting the second address of the network controller over the first connection to the network orchestrator.

Abstract: A system and method are provided for automatically proofing the patent specification of a granted patent issued on a patent application. The method comprises the steps of scanning amendments made to the patent application during prosecution; assembling the most recent claims, based on the scanned amendments, to create a test claim set of the claims; comparing the test claim set to the claims of the issued patent as published; and identifying any differences between the compared sets of claims and communicating the differences to a user.

Abstract: A method of data acquisition includes activating a local server proxy in a preset application program; acquiring a preset connection function, and replacing a destination address in the preset connection function with a target address corresponding to a local server proxy, to establish a connection between the preset application program and the local server proxy; establishing a connection between the local server proxy and a real server corresponding to the target address based on connection information received from the preset application program via the local server proxy; acquiring data during a procedure of data forwarding between the real server and the preset application program via the local server proxy.

Abstract: An anomaly detection service of a provider network may be used to efficiently monitor for metric anomalies across a large number of IoT devices using mandatory and optional values for metrics. A client may configure any number of mandatory and optional values for a metric to be collected from IoT devices of a fleet. The client may also configure one or more criteria to by used for evaluating the mandatory values (e.g., a threshold percentage such as 99%). When the service receives metric values for the metric, the service determines whether the values satisfy the criteria for the mandatory value. If not, then the service indicates an anomaly. The service may also determine if any values other than the mandatory and optional values are present. If not, then the service indicates an anomaly.

Abstract: The disclosed embodiments provide for rules-based deployment of software installations. In some aspects, operational parameters for a computer system are monitored over time to generate a historical database of values for the operational parameters. The computer system may include multiple instances of a software installation. A portion of the multiple instances is updated with a new version of software. The operational parameters are then monitored to quantify whether the new version results in an improvement or degradation of performance of the computer system. The improvement or degradation is based on comparing values of the operational parameters after deployment to their historical values. Depending on the evaluation of the operational parameters after the installation, the installation may be rolled back if a degradation is indicated. Otherwise, the new software version may be propagated to additional installation instances.

Abstract: A control apparatus includes an execution controller configured to, when information related to an instruction for causing an information processing apparatus to execute a specific process is posted by a user in a talk room in which each of plural participating users is capable of posting and viewing information, control one information processing apparatus among information processing apparatuses associated with other users, among the users participating in the talk room, than the user who posts the information, to execute the specific process.

Abstract: Methods, apparatus, and processor-readable storage media for automated configuration determinations for data center devices using artificial intelligence are provided herein. An example computer-implemented method includes obtaining input information pertaining to one or more device-related changes to a data center; obtaining telemetry data attributed to one or more devices in the data center; determining one or more device configurations for implementation in at least one device in the data center in connection with the one or more device-related changes by processing the input information and the obtained telemetry data using one or more artificial intelligence techniques; and performing at least one automated action based at least in part on the one or more determined device configurations.

Abstract: A method for providing an end-to-end asset hierarchy by using at least one model is disclosed. The method includes identifying asset data in a networked environment, the asset data including dependency data corresponding to an asset; compiling the identified asset data; mapping, by using a model, the asset with a corresponding dependent asset and a corresponding dependent service based on the asset data; generating an asset hierarchy based on a result of the mapping; and storing the generated asset hierarchy in a repository.

Abstract: Some embodiments provide a method for distributing a group definition for a group of machines. The method receives the group definition, which includes (i) a span of the group that specifies a set of sites at which the group is to be used and (ii) a set of criteria for machines to be included in the group. The set of criteria includes at least a location criteria specifying one or more sites. The method distributes the group definition to each site in the set of sites. At each site in the set of sites, a local network control system of the site determines a set of machines in the group based on the set of criteria. Only machines in the one or more sites specified by the location criteria are determined to be in the group.

Abstract: A method of tracking at least one emergency service provider is disclosed. An electronic history is compiled that includes at least one identifier of a service provider, at least one identifier of an event to which the service provider responded, and GPS data identifying the geographic location of the service provider at each time interval within the duration of the event. A user interface within which is displayed a first identifier of a first event is generated to a display device. A selection of the event identifier is received from a user. In response to the selection of the identifier, an aerial view of a geographic region within which the first event took place is generated. At least one icon is displayed in the aerial view representing the service provider at the geographic location corresponding to at least one time interval during the event.

Abstract: A simulation of a planned future environment can be presented, including social aspects, along with a simulation of other aspects of the environment, such as sounds and other environment conditions. For example, a user can plan a travel route from point A to point B and view a preview of the journey prior to beginning the journey to envision what to expect and possibly alter their plans as a result. In order for a simulated preview of the journey to be created, a set of data can be collected that can represent the location of connected or non-connected objects at a point in time and predict their location at later points in time. The prediction can be validated or confirmed by other connected devices long the route.

Abstract: System and method for efficiently implementing scalable, highly efficient decentralized proxy services through proxy infrastructures situated in different geo-locations. In one aspect, the systems and methods enable users from any geographical location to send requests to the geographically closest proxy infrastructure. One exemplary method described allows proxy infrastructures to gather, classify, and store metadata of exit nodes in its internal database. In another aspect, systems and methods described herein enable proxy infrastructures to select metadata of exit nodes from its internal database and forward requests from a user device to respective proxy servers or proxy supernodes to which the selected exit nodes are connected.

Abstract: Systems and methods for stabilizing power levels from excessive oscillations in an optical line system of a communications network are provided. A method, according to one implementation, includes the step of detecting a perturbation of an optical power level in an optical line system having a plurality of cascaded optical power controllers. The method also includes the step of determining an estimated location to which a power controller of the plurality of cascaded optical power controllers is positioned downstream of the perturbation with respect to other power controllers of the plurality of cascaded optical power controllers. Based on the estimated location to which the power controller is positioned downstream of the perturbation, the method also includes the step of providing feedback in a control loop to reduce the effects of the perturbation.

Abstract: Various methods, apparatuses/systems, and media for detecting a target behavior are disclosed. A processor implements a machine learning cadence model that implements an algorithm to obtain, on a per session basis, cadence data that indicates average time between each call and a standard deviation of times across each call across all active sessions of a desired target. The processor compares the cadence data to predefined background cadence data to identify whether the desired target is a new threat target or a background traffic; generates an internet protocol (IP) address of the new threat target; inputs the IP address of the new threat target into a machine learning behavior model that implements an algorithm to generate a fingerprint of all known places that the new threat target is operating; and applies a mitigation algorithm to all active sessions of the new threat target.

Abstract: Provided is an IoT GW (10), including a learning unit (131) configured to create, for each IoT device connected to the IoT GW (10), a normal communication model (122) that has learned a normal communication pattern of the IoT device; and a determination unit (132) configured to: determine, for learning by the learning unit (131), whether to interrupt, finish, continue, and resume learning based on a load of a learning environment; and control learning processing by the learning unit (131) based on a result of determination.

Abstract: A network switch includes a plurality of ports each connected to a network or a terminal. The network switch performs routing between the plurality of ports. A control device is apart from the network switch. The control device controls the network switch. The network switch includes a command storage unit. The command storage unit stores a plurality of commands acquired from the control device for physical devices.

Abstract: In one embodiment, a method executed by at least one processor includes receiving first historical location information identifying a first location area at which a first user was present at a first time and receiving second location information identifying a second location area at which a second user was present at a second time. The method includes determining that the first historical location information and the second location information each correspond to a particular location area and determining that a characteristic related to the first user corresponds to a preference related to the second user. In response to these determinations, the method includes causing information related to the first user to be presented to the second user. The information related to the first user includes the first location area of the first user relative to the second location area of the second user.

Abstract: The technology disclosed describes a system. The system comprises a network security system interposed between clients and cloud applications. The network security system is configured to generate a synthetic request, and inject the synthetic request into an application session to transmit the synthetic request to a cloud application and receive a response to the synthetic request from the cloud application.

Abstract: A hardware system for simulating a network physical layer for communication channels. The hardware system includes a plurality of hardware processors configurable to model a physical layer and communication channels. The hardware system includes a first interface coupled to the plurality of hardware processors. The first interface is configured to be coupled to a software simulator comprising a physics model configured to provide model parameters based on modeled communication hardware and a temporal modeling scenario. A second interface is coupled to the plurality of hardware processors. The second interface is configured to be coupled to simulated or real nodes for sending and receiving network data to and from the nodes. The hardware processors are configured to model effects of the physical layer and communication channels on the network data.

Abstract: Disclosed embodiments are directed at systems, methods, and architecture for operating a control plan of a microservices application. The control plane corresponds with data plane proxies associated with each of a plurality of APIs that make up the microservices application. The communication between the data plane proxies and the control plane enables automatic detection of service groups of APIs and automatic repair of application performance in real-time in response to degrading service node conditions.

Abstract: Methods and systems for configuring nodes in a cloud computing network are described. One example method includes receiving a request from a user to create and configure a node in the cloud computing network, the request including attributes associated with the node; verifying that user is authorized to create and configure the node; in response to verifying that the user is authorized, creating the node; receiving a configuration request from the node identifying configuration actions to perform on the node based on the attributes; in response to receiving the configuration request, sending, to the node, a configuration command corresponding to one or more of the identified configuration actions, wherein the node executes the configuration command upon receipt to perform the identified configuration actions; receiving, from the node, reporting information related; and determining that the configuration command was executed successfully based on the reporting information.

Abstract: An apparatus comprises a processing device configured to identify a set of asynchronous data replication sessions currently running on a storage system each associated with a corresponding recovery point objective, and responsive to determining that at least one of the asynchronous data replication sessions has a current synchronization time that exceeds its corresponding recovery point objective for a first iteration of a given time window, to compute a session weight for each of the asynchronous data replication sessions. The processing device is also configured to select, for a second iteration of the given time window, data for transmission from the asynchronous data replication sessions based at least in part on the computed session weights. The processing device is further configured to transmit, during the second iteration of the given time window, the selected data.

Abstract: There are provided systems, methods, devices, and the like for application release and orchestration. In one embodiment, a system is introduced that can communicate with a centralized automation server via an autonomous program. The system may centrally test and validate the code and application release using an iterative data deployment process.

Abstract: A logical grouping of subgroups of server clusters forms a failover super-cluster. A logical grouping of groups of servers provides high availability by, upon failure of an entire group (site), failing over an entire subgroup to a different subgroup. Yet within each subgroup local failovers continue to maintain application high availability during instances in which the site remains operational.

Abstract: There is provided a method of securely processing data in a third-party cloud environment, and a secure portion of a third-party cloud environment configured to perform the method.

Abstract: In one example aspect, a method performed by a network node for configuring a network slice is provided, the method comprising, in response to a request to configure a network slice, configuring network resources for providing the network slice, and configuring a state of the network slice to a first state, wherein in the first state the network slice is disabled.

Abstract: Implementations are described herein for commissioning a distributed control node (DCN) to a process automation network. In various implementations, one or more messages transmitted on the process automation network by the DCN announcing that the DCN has joined the process automation network may be detected. Based on the one or more messages, one or more operational technology (OT) capabilities of the DCN may be determined. Based on the one or more OT capabilities, the DCN may be commissioned to the process automation network, e.g., by configuring the DCN to cooperate with one or more other process automation nodes on the process automation network to implement an at least partially automated process.

Abstract: Methods, systems, and apparatuses are described for variably selecting and managing a quality of service framework within a network. A network data store may be accessed to obtain information indicating current network conditions, network policies, and/or device scripts. This information may be used to determine whether and when to allocate network resources, such as bandwidth, for particular services within the network to implement quality of service based on current network/link conditions.

Abstract: A method and system for repairing a corrupted video file, includes creating, with a processor, a helper file in a storage device; storing, with the processor, static video and audio parameters in the helper file at a beginning of the recording of a video; storing audio sample sizes in the video file during the recording of the video; and prior to playing back the video, reconstructing, with the processor, an index of the corrupted video file using the static video and audio parameters stored in the helper file, video parameters stored in video file and the audio sample sizes stored in the video file; and appending the reconstructed index to the video file.

Abstract: An application programming interface (API) gateway cluster control method includes determining, by an API gateway cluster, that a quantity of API requests received per unit of time exceeds a traffic control parameter, obtaining a load parameter of the API gateway cluster and a load parameter of a service cluster, determining, based on the load parameter of the API gateway cluster, that the API gateway cluster is congested, determining, based on the load parameter of the service cluster, that the service cluster is not congested, and scaling out the API gateway cluster.

Abstract: A BIOS may include a plurality of protocol drivers and a protocol notification manager configured to receive a protocol notification registration from a consumer driver of the plurality of protocol drivers, receive a unique key associated with the consumer driver, receive a pre-authorized list from a producer driver of the plurality of protocol drivers, the pre-authorized list comprising one or more signed consumer identifiers, each of the one or more signed consumer identifiers identifying a respective one of the plurality of protocol drivers authorized to receive a protocol notification from the producer driver, determine if the unique key successfully decrypts a signed consumer identifier associated with the consumer driver, and perform access control of protocol notification from the producer driver to the consumer driver based on whether the unique key successfully decrypts the signed consumer identifier associated with the consumer driver.

Abstract: Systems, methods, and computer-readable media for locally applying endpoint-specific policies to an endpoint in a network environment. A network device local to one or more endpoints in a network environment can receive from a centralized network controller one or more network-wide endpoint policies. A first endpoint of the one or more endpoints can be configured to inject policy metadata into first data traffic. Policy metadata injected into the first traffic data can be received from the first endpoint. The network device can determine one or more first endpoint-specific polices for the first endpoint by evaluation the first policy metadata with respect to the one or more network-wide endpoint policies. As follows, the one or more first endpoint-specific policies can be applied to control data traffic associated with the first endpoint.

Abstract: In accordance with an embodiment, described herein are systems and methods for providing a remote data gateway that supports peer routing for use with an analytics environment. In accordance with an embodiment, a data analytics remote data gateway server connects to on-premise data clients, via remote data gateway agents. If a remote data gateway server cannot reach a particular data client at its remote data gateway agent, then it can determine which other clients it can get requests from. To address this, the system can use a process of inverse proxy peer-to-peer routing—if a client has a request to be processed, but the server has not yet called into that client, then the client can hand off the request to a peer remote data gateway server, and the server can retrieve/process that request from that server operating as a proxy.

Abstract: A computing device (e.g., a policy management server) obtains a segmentation policy that includes a set of rules for controlling network traffic between workloads. The computing device also receives infrastructure feedback regarding configuration of third-party network infrastructure. The computing device uses the infrastructure feedback to identify a discrepancy between the segmentation policy and the configuration of the third-party network infrastructure and triggers a corrective action in response. The corrective action may include providing a notification or suggestive remedy for the discrepancy to the user or automatically remedying the discrepancy.