Abstract: A wireless communications system comprises wireless local area network (WLAN), WLAN controller coupled to the WLAN, a core network, a RADIUS based interface, and an interface between the WLAN controller and the PCRF. The WLAN controller is configured to transmit, via the RADIUS based interface, to the AAA, a request to authenticate a user equipment (UE) currently accessing the core network, wherein the first message comprises an identifier identifying the UE. The PCRF is configured to transmit, via the interface between the WLAN controller and the PCRF, a policy associated with the UE, wherein the policy indicates a quality of service (QoS) subscribed for by a user of the UE in the core network. The WLAN controller is further configured to manage resources within the WLAN, based on the policy, to establish a session between the UE and the WLAN.

Abstract: A maintenance support system includes a network interface, a memory, and a processor configured to, upon receipt of first information indicating a status of a first apparatus via the network interface, store the first information in the memory, upon receipt of second information indicating a status of a second apparatus via the network interface, store the second information in the memory, and determine a priority of on-site maintenance between the first and second apparatuses based on the first and second information stored in the memory.

Abstract: A method, an apparatus, a system, and a computer program product for radio synchronous status messaging between communications units in wireless communications systems. A change of status event by one or more first communications devices is detected. A message indicative of the detected change of status event is generated. The generated message is transmitted to one or more second communications devices.

Abstract: This application provides a method, including: receiving, sent by a third-party server, a registration request which includes first information, second information, and third information, the first information is used to indicate a public key address of the third-party server, the public key address includes a first domain name, the second information is used to indicate a delivery address of event information, the delivery address includes a second domain name, the third information is used to indicate a target DNS record which includes a digital signature of the third-party server; when the first domain name is the same as the second domain name, obtaining a public key of the third-party server, and obtaining the target DNS record; performing signature authentication on the digital signature based on the public key, to obtain a signature authentication result; determining, based on the signature authentication result, whether to allow the third-party server to perform registration.

Abstract: An integrated Circuit (IC) for use in a network device includes a receiver and a Link Quality Estimation Circuit (LQEC). The receiver is configured to receive a signal over a link and to process the received signal. The LQEC is configured to predict a link quality measure indicative of communication quality over the link in the future, by analyzing at least one or more settings of circuitry of the receiver, and to initiate a responsive action depending on the predicted link quality measure.

Abstract: Methods, systems, and computer-readable media are disclosed herein combine randomization functionalities with the machine-learning prioritization of workflows for performance testing. In aspects, a primary workflow having a sequence of user interface steps is input. Testing workflows are generated that represent each variable position of unlocked steps in the sequence of the primary workflow while maintaining the sequential position of any locked steps. These testing workflows are then ingested to a machine learning model that identifies as subset of the testing workflows to prioritize over other. Specifically, testing workflows are prioritized that at least partially match sequence patterns in historical workflow data that is associated with vulnerable computer code. The subset is output and tested by testing engine to generate a report of any vulnerable computer code.

Abstract: Systems and methods are provided for improving web-based document retrieval and object manipulation. In an implementation, objects within web documents (e.g., a web page) are manipulated when the objects are visible through a viewport of a user's web browser. According to a method, an object selected from a web document is manipulated when that selected object is displayed within the viewport of the user's browser. The manipulation may include downloading content associated with the stored object and additionally, or alternatively, executing a script associated with the stored object. Additionally, or independently, methods may be provided for blocking the download of an object in a retrieved web document until that object is displayed or visible in the user's browser viewport.

Abstract: Techniques are described that enable users to configure the mirroring of network traffic sent to or received by computing resources associated with a virtual network of computing resources at a service provider network. The mirrored network traffic can be used for many different purposes including, for example, network traffic content inspection, forensic and threat analysis, network troubleshooting, data loss prevention, and the like. Users can configure such network traffic mirroring without the need to manually install and manage network capture agents or other such processes on each computing resource for which network traffic mirroring is desired. Users can cause mirrored network traffic to be stored at a storage service in the form of packet capture (or “pcap”) files, which can be used by any number of available out-of-band security and monitoring appliances including other user-specific monitoring tools and/or other services of the service provider network.

Abstract: Systems and methods for processing a DNS query to identify and implement pre-processing information by a DNS server component in anticipation of a corresponding content request from a client computing device are provided. The pre-processing information can correspond to identification of content to be preloaded or other actions to be implemented by one or more computing devices in association with an anticipated client content request. Based on identification of the content or future actions, a DNS server component can provide the pre-processing information to one or more computing devices, such as computing devices of a CDN service provider and/or an original content provider, in advance of a corresponding request for content from the client computing device in order to improve performance associated with responding to the client request.

Abstract: Methods and systems for improving data back-up, recovery, and search across different cloud-based applications, services, and platforms are described. A data management and storage system may direct compute and storage resources within a customer's cloud-based data storage account to back-up and restore data while the customer retains full control of their data. The data management and storage system may direct the compute and storage resources within the customer's cloud-based data storage account to generate and store secondary layers that are used for generating search indexes, to generate and store shared space layers and user specific layers to facilitate the deduplication of email attachments and text blocks, to perform a controlled restoration of email snapshots such that sensitive information (e.g., restricted keywords) located within stored snapshots remains protected, and to detect and preserve emails that were received or transmitted and then deleted between two consecutive snapshots.

Abstract: Methods, systems and computer storage media are disclosed for providing resources to a platform issue. Embodiments describe associating educational resources and an event resource to resolve the platform issue.

Abstract: A data structure called a product version map is introduced. The product version map contains a catalog of available application versions to be used by the application orchestration services. It can describe the available versions. For each version, there is an image, such as a Docker® container image, that can be used to instantiate the application instance. Furthermore, in some example embodiments, an expiration date can be given, which could be used to enforce upgrades of application instances when their used version expires.

Abstract: The disclosure relates to decentralized management of edge nodes operating outside an enterprise network using blockchain technology. A management node may operate within a firewall of the enterprise to manage the edge nodes operating outside the firewall using blockchain technology. The management node may coordinate management by writing change requests to a decentralized ledger. The edge nodes may read the change requests from its local copy of the distributed ledger and implement the change requests. Upon implementation, an edge node may broadcast its status to the blockchain network. The management node may mine the transactions from the edge nodes into the distributed ledger, thereby creating a secure and scalable way to coordinate management and record the current and historical system state. The system also provides the edge nodes with a cryptographically secured, machine-to-machine maintained, single version of truth, enabling them to take globally valid decision based on local data.

Abstract: A method and system for providing textual insights on objects deployed in a cloud environment are provided. The method includes collecting object data on objects deployed in the cloud environment, wherein objects are deployed and operable at different layers of the cloud environment; identifying objects deployed in the cloud environment; constructing a visual representation of the cloud environment, including the identified objects and their relationships; and generating textual insights on the identified objects and their relationships using natural language processing.

Abstract: A method and system for modeling a cloud environment as a security graph are provided. The method includes identifying security objects in the cloud environment; collecting object data of the identified security objects; constructing security graph based on collected object data of the identified security objects; determining relationships among the identified security objects, wherein the relationships are determined based on the collected object data of the identified security objects and using a static analysis process; updating the constructed security graph with the determined relationships among the identified security objects; and storing the constructed security graph in a graph database.

Abstract: A system for analyzing a computing system for potential breach points, the system comprising a memory device having executable instructions stored therein, and a processing device, in response to the executable instructions, configured to parse a breach scenario file, the breach scenario file comprising a graph including action component nodes connected by edges, determine a root node from the action component nodes, execute the root node with breach point data, generate a root node return value based on the execution of the root node, the root node return value including a modified copy of the breach point data, determine children nodes from the action component nodes connected to the root node, execute the children nodes wherein each execution of the children nodes produces children node return values for a subsequent one of the children nodes, and return a final return value from the execution of the children nodes.

Abstract: The present invention enables a network operator to select a gateway that provides desirable operational parameters to access a network node function in a network node requested by a client. A network service provider detects what service a client device is requesting or using and selects a gateway (e.g. PDN-GW) to deliver the service. The client device is signaled to make a new connection to the network using the selected gateway, e.g. by connecting to the APN associated with the PDN-GW that delivers the service.

Abstract: According to a method for processing virtual machine migration, in a case where idle resources on each single one of multiple physical hosts in a system do not meet a resource requirement from a virtualized network function (VNF) but total idle resources on the multiple physical hosts meet the resource requirement from the VNF, a virtual machine migration strategy is determined according to resource information about resources currently occupied on each of the multiple physical hosts and corresponding service information, and live migration may be performed on virtual machines.

Abstract: Systems and methods for the selection of a network interface/CDN pair from among multiple network interface/CDN pairs are provided. In an embodiment, a method includes retrieving information about sets of CDNs accessible via different network interfaces of a device. A plurality of network interface/CDN pairs are then identified, and performance metrics for each pair are measured. A best pair is selected, and is used to retrieve the next segments of a requested content item.

Abstract: A vehicle diagnostic device includes: a communication unit that communicates with a vehicle which drives autonomously; and a diagnostic unit that performs, via the communication unit, diagnosis as to whether the vehicle is being hacked. The diagnostic unit performs the diagnosis by checking resilience of software which runs a travel system provided in the vehicle.

Abstract: An aspect of the present disclosure discloses a method for diagnosing a network performance in an apparatus for diagnosing network performance connected to a switching device provided between a first entity and a second entity. The method may include: obtaining at least one mirrored packet for at least one packet transmitted between the first entity and the second entity based on mirroring from the switching device, calculating performance related indicator representing performance of a network service associated with the first entity and the second entity based on at least a part of information included in the at least one mirrored packet, and storing the calculated performance related indicators.

Abstract: Systems and methods may generally provide resource management based on a predictive alert. An example method may include receiving a set of social media messages referencing an entity, and comparing an indicator from the set of social media messages to a baseline model. Based on the comparison, a need for an increase in a resource may be identified. The method may include outputting an alert indicating the need for the increase in the resource.

Abstract: There is provided a computer-implemented method of provisioning resources in a distributed compute network comprising one or more routing nodes and one or more compute nodes configured to host one or more virtual application instances of an application thereon, the method being performed by at least one hardware processor and comprising: a) receiving, by a system manager, routing operational parameter data from one or more routing nodes and compute operational parameter data from one or more compute nodes for a current state of the distributed compute network; b) generating a proposed new state of the distributed compute network by utilizing the routing operational parameter data and compute operational parameter data in a computational model to simulate provisioning and/or deprovisioning of virtual application instances associated with one or more compute nodes; c) implementing the proposed new state on the distributed compute network by provisioning and/or deprovisioning one or more virtual application inst

Abstract: A device may cause a Media Access Control Security (MACsec) session to be established on a first link of a link aggregation group (LAG) that includes a plurality of links with a different device. The device may cause a data structure to be updated to identify the first link as a MACsec enabled LAG link and may send traffic via the first link. The device may cause a MACsec session to be established on at least one additional link of the LAG and may cause the data structure to be updated to identify the at least one additional link as a MACsec enabled LAG link. The device may send, after causing the data structure to be updated to identify the at least one additional link as a MACsec enabled LAG link, additional traffic via the first link and the at least one additional link.

Abstract: The present invention relates to a cloud software service resource allocation method based on QoS model self-correction, the method comprising: step S1: performing online self-learning to obtain a QoS prediction model; step S2: collecting runtime data under a certain workload, and improving the accuracy of the QoS prediction model under a current workload through self-correction control; step S3: constructing a fitness function in combination with the quality of service (QoS) and the cloud resource cost (Cost), and searching for a target resource allocation scheme by using an improved particle swarm optimization algorithm; step S4: comparing the current resource allocation situation with the searched target resource allocation scheme to obtain a difference therebetween, and then adjusting resources according to a certain proportion; and step S5: repeating steps S2 to S4 until the current resource allocation situation is the same as the target resource allocation scheme which means that resource adjustment is

Abstract: Systems and methods are provided for generating personalized messages. One example method includes identifying a media item at a first computing device and identifying a group of one or more recipients to send the media item and a personalized message to. An association between a user of the computing device and a recipient from the group is identified. A personalized message is generated based at least in part on the association between the user and the recipient. The media item and personalized message are sent to the recipient from the first computing device.

Abstract: A map of IP addresses of a distributed cloud computing network to one or more groupings is stored. The IP addresses are anycast IP addresses for which compute servers of the distributed cloud computing network share. These IP addresses are to be used as source IP addresses when transmitting traffic to destinations external to the cloud computing network. The map is made available to external destinations. Traffic is received at the distributed cloud computing network that is destined to an external destination. An IP address is selected based on the characteristic(s) applicable for the traffic and the map. The distributed cloud computing network transmits the traffic to the external destination using the selected IP address.

Abstract: The proposed systems and methods provide a fixed set of intelligent, general APIs to manage access to enterprise data stored in a cloud-based data lake. These systems and methods allow a fixed set of APIs to respond to all queries regarding the stored enterprise data by using a cached reference table that locates the container and document in which the requested data is held. The proposed systems and methods provide a framework for a minimal API service code with the capacity for responding to dynamic queries while maintaining stringent privacy control protections.

Abstract: Techniques are described for a behavioral analysis of metadata associated with source code to identify malicious source code. For example, this disclosure describes a computing system configured to obtain metadata associated with source code of a software package. The computing system is also configured to determine, based on the metadata associated with source code, whether there are any anomalies associated with the source code. The computing system is further configured to, in response to determining that there is at least one anomaly associated with the source code, compute a score for the software package. The computing system is also configured to perform an action based on the score for the software package.

Abstract: Methods and apparatus for identifying multiple resources of a storage network for data retrieval are disclosed. In various embodiments, a determination is made to retrieve an encoded data slice from the storage network. Based on configuration information for the storage network, one or more configurations are identified, including a current configuration. For the identified configurations, ranked scoring information relating to the encoded data slice is determined for a plurality of resources associated with the identified configurations. Based on the ranked scoring information, a resource is selected for each of the identified configurations. In addition, a retrieval likelihood level for the data slice is determined for each of the selected resources. Based on the likelihood levels for the selected resources, one or more of the selected resources are identified for encoded data slice retrieval and read slice requests are issued to the one or more selected resources.

Abstract: Some implementations relate to methods, systems, and computer-readable media for detection and monitoring of available uptime which measures both how accessible a computer system is and how well it is functioning. In some implementations, a computer-implemented method includes determining a number of health check ping responses to a health check ping that are received from a computer system during an allotted timeframe, determining a number of non-error responses measured by the computer system during the allotted timeframe, aggregating the number of health check ping responses and the number of non-error responses to determine a number of partially to fully functioning periods associated with the computer system over a larger time interval, and outputting a system health metric based upon overall functionality of the system over the larger time interval.

Abstract: The present disclosure provides storage nodes, integrated circuits, and methods for storage node management. A method for storage node management includes performing one or more network tasks by one or more first processing cores in a network engine of an integrated circuit; and performing one or more storage tasks by one or more second processing cores in a storage engine of the integrated circuit.

Abstract: Provided is a way of evaluating rules/conditions that span different domain entities against a set of disparate events from multiple sources that have occurred within a specific window or interval of time from the current time back to a specific time in the past. Events are stored in dedicated storage to enable an extended window of time to be used for multiple event evaluation. Only relevant event/rule pairs are evaluated. The system will record when an event relevant to a rule happens. When a second event that is relevant to the rule happens, the system checks the records to see if a previous relevant event had happened in the past that would cause the rule to trigger an alert. A mechanism is also provided for evaluating static state in combination with changed properties.

Abstract: The present teaching relates to method, system, medium, and implementations for increasing content insertion opportunities. A prediction input is received that characterizes utilization of content stream utilization channels (CSUCs). Schedule parameters are automatically predicted for the prediction input using prediction models obtained via machine learning based on grouped historic data related to CSUCs, where grouping is based on an operational mode in which the prediction models operate. Using the predicted schedule parameters, insertion opportunity may be identified with respect to CSUCs and insertion schedules are generated specifying insertions of content streams into identified CSUCs at respective insertion times.

Abstract: Cybersecurity reconnaissance, analysis, and scoring uses distributed, cloud or edge-based pools of computing services to provide sufficient scalability for analysis of IT/OT networks using only publicly available characterizations. An in-memory associative array manages a queue of configuration and vulnerability search tasks through at least one public-facing proxy network which uses configurable search nodes to approach the target network with search tools in a desired manner to control certain aspects of the search in order to obtain the desired results, especially when target network behavior adjusts based on counterparty characteristics. A data packet modifier reveals IP addresses of threat actors behind port scans and subsequently block the threat actors.

Abstract: One example method includes creating an image definition file, using the image definition file to create an image that is deployable to an edge device, copying an agent into the image, stripping any user passwords out of the image, and removing any unnecessary packages from the image, and after the stripping and the removing, the image becomes an immutable image. The immutable image may then be deployed to a group of edge devices, and one or more layers of the immutable image may be updated by the agent.

Abstract: A system and methods are disclosed for linking video-game activation on gaming consoles to connected television (“CTV”) or over-the-top (“OTT”) advertisement delivery. This system and method are implemented in a tracking and linking platform that is configured to trigger a “postback” call or signal when a gaming application is activated via a console to solicit advertising. In some embodiments, a “postback” call or signal trigger when different events occur, for example, observing different levels of achievement attained by gamers, in-game purchases or the like.

Abstract: Systems, methods, and related technologies for a risk driven planning and simulation tool for a computer network are described. A security risk is determined for each of a plurality of devices on a network. A network traffic map is presented to a display. The network traffic map shows network traffic between the plurality of devices and the security risk for each of the plurality of devices. Segmentation of one or more of the plurality of devices on the network is simulated and presented to the display with updates to the network traffic or updates to the security risk of some of the devices on the network.

Abstract: Systems and method for SaaS/PaaS resource usage and allocation in an analytic applications environment. An exemplary method can provide an analytic applications environment, a control plane comprising a server, the control plane further comprises a provisioning component and a console interface, a data warehouse, and a monitoring agent. The method can provision an instance of the data warehouse in the context of a tenant, the provisioned instance of the data warehouse having an initial size. Upon the provisioning the instance of the data warehouse, the method can add adding an entry to a metrics repository of the monitoring agent, the added entry indicative of the initial size of the provisioned instance of the data warehouse, the added entry being tagged, the tag being indicative of the tenant. The method can monitor, by the monitoring agent, an amount of data stored at the provisioned instance of the data warehouse.

Abstract: A management device, a control method thereof, and a storage medium storing a program manage network devices. Map information is managed by assigning attribute information thereto, information for a network device (management target) is managed by assigning attribute information thereto, and user information is managed by assigning attribute information thereto. When the map information becomes a placement target for a placement operation for a network device corresponding to a map selected, map information that has been assigned attribute information that does not corresponding to the attribute information for the network device is prevented from being selected. Information for a network device is displayed on a display device displaying a map based on the results of the placement operation using user selected map information.

Abstract: A network traffic correlation engine monitors inbound and/or outbound connection information received from on each host computer system on a network. Each host device on the network store data logs corresponding to information corresponding to communications sent by the device and received by the device. The network traffic correlation engine correlates connections between different hosts throughout the network. If the network traffic correlation engine identified unmatched outbound and inbound connections, the network traffic correlation engine generates an alert to initiate further investigation and may also provide a mapping of the communications showing a possible start device for the connection and/or a type of access that the connections may now be providing.

Abstract: A method, apparatus and computer program product receive a traffic redundancy indication from a user equipment in a communication network or from a policy controller. The method, apparatus and computer program product determine whether traffic redundancy is needed for the radio access network and the user plane function based on the traffic redundancy indication. The method, apparatus and computer program product request the radio access network to not establish redundancy mechanisms in a circumstance where traffic redundancy is not needed for the radio access network. The method, apparatus and computer program product request the user plane function to not establish redundancy mechanisms in a circumstance where traffic redundancy is not needed for the user plane function.

Abstract: An artificial intelligence (AI) switch chip includes a first AI interface, a first network interface, and a controller. The first AI interface is used by the AI switch chip to couple to a first AI chip in a first server. The first network interface is used by the AI switch chip to couple to a second server. The controller receives, through the first AI interface, data from the first AI chip, and then sends the data to the second server through the first network interface. By using the AI switch chip, when a server needs to send data in an AI chip to another server, an AI interface may be used to directly receive the data from the AI chip, and then the data is sent to the other server through one or more network interfaces coupled to the controller.

Abstract: Various methods for a 3GPP defined Charging and Collection Function are employed that may use a microservices approach. The microservice approach may decompose the function of the network elements into component level functions that may be deployed as separate functional elements.

Abstract: Certain example embodiments detect and correct errors in services defining an integration of disparate computing components in an integration platform-as-a-service environment. The services are iterated through to identify reference mappings therein. For each identified reference mapping in each of the services, a determination is made regarding whether a reference corresponding to the respective mapping is valid. For each reference determined to be not valid, an error type associated with the respective reference is identified, and an aspect of the reference is automatically replaced if the respective error type is a reference-related error. A user may be prompted to create an element of the integration if the error type determined for the respective reference is an asset-related error involving a missing integration element. Configuration-related errors also are detectable.

Abstract: Aspects of the present disclosure relate to computer system security. A machine accesses a set of records corresponding to a set of users having access to a computer system. The machine stores, for each user in the set of users, a baseline profile representing baseline activity of the user with respect to a set of data sources of the computer system. The machine monitors activity of the set of users with respect to the set of data sources. The machine determines, based on monitoring the activity of the set of users, that a user action of a specified user, with respect to one or more data sources from the set of data sources, is anomalous relative to the baseline profile of the specified user. The machine provides a digital transmission representing the anomalous user action.

Abstract: This application relates to the field of cloud computing, and specifically, to a method for providing an edge service for a terminal by using a resource of an edge resource cluster in a cloud computing system. The cloud computing system includes a central resource cluster and at least one edge resource cluster. The method includes: a management node deployed in the central resource cluster determines a target execution node based on an edge service application range that is specified by a tenant or that is determined by the management node based on information about a tenant; the target execution node determines, according to an edge service policy sent by the management node, a target edge node from at least one edge node deployed in the at least one edge resource cluster; and the target execution node further forwards an edge service request to the target edge node.

Abstract: A primary internet connection via a gateway or router located at a premises may be used to route internet traffic from devices located at the premises. A change in the primary internet connection, such as a loss or a degradation of the connection, may occur. Based on the change in the primary internet connection, metrics of alternative internet connections, such as cellular or hotspot connections, may be used to select one of the alternative internet connections. Internet traffic may be routed via the selected alternative internet connection until the primary internet connection is reestablished or improves.

Abstract: Systems and method than generate an effective recipe file by selecting at least one of a functionality, a feature and a configuration option from a master recipe database, the selecting based on a business objective; and generating a customized resource by applying the effective recipe file to a first working copy of a resource selected from a master copy of resources.

Abstract: A method of operating a user equipment configured for use with a communications network is provided. The method comprises measuring a network performance characteristic associated with a measurement period, and identifying, using historical data, an application on the UE responsible for transmitting data to, and/or receiving data from, the communication network in the measurement period. The identity of the identified application is then associated with the network performance characteristic.