Abstract: A method and apparatus for using a dynamic security certificate. The method analyzes a browser to access browser information and generates a dynamic security certificate based on the browser information. The method modifies a configuration file for the browser to cause the browser to trust the dynamic security certificate and inserts the dynamic security certificate into the browser to enable a client application to access encrypted data available to the browser. The method may be performed solely upon a user device or have portions thereof performed by a user device and a server.

Abstract: The present disclosure relates to computer-implemented methods, software, and systems for data processing to monitor and trigger alerts based on identified technical issues at instances running in a cloud platform environment. Availability data for the cloud platform can be collected. Based on evaluation of the availability data, a determination that at least a portion of a set of services are experiencing issues can be made. A detailed check is triggered to collect data logs, metrics, and dependencies data for at least the portion of the set of services. An overall status of performance of the cloud platform based on obtained service status data from the detailed check can be determined. Based on analysis of the overall status of performance of the cloud platform, execution of causal engine logic to identify an issue at the cloud platform can be performed, and a notification for the issue can be provided.

Abstract: A network cloud software is provided which is configured to enable operation of multiple hardware network elements as a single routing or switching entity. The network cloud software is used in a distributed manner and provides layers of synchronization and management to allow creation of a network cloud cluster that can start with a single white-box that acts as a stand-alone network device and then scale it to a cluster of tens of hardware elements that would still appear to the external user as a single entity. The network cloud software may also implement mediation layer (HAL) that allows the use of a multi-vendor hardware types by the same network cloud software that is capable of running on a number of different hardware types, while to the external user they will all be seen as devices that have the same functionality and the same network behavior.

Abstract: A system for testing Ethernet paths or links without adversely impacting non-test traffic. The system includes a test traffic generator that includes a scheduler that determines when a new test packet is generated. The test traffic generator includes a packet creator that builds a test packet and a transmitter for transmitting the test packet via the Ethernet path or link. The packet creator sends the test packet to the transmitter. The traffic generator includes a transmit credit block coupled to the transmitter or to the scheduler. The transmit credit block stores an amount of credits representing a number of bytes that are available to transmit and decrements the amount each time a non-test packet is communicated via the Ethernet path or link.

Abstract: Providing Quality of Service (QoS) for replicating datasets including: receiving, by a target data repository from a source data repository, a checkpoint describing one or more updates to one or more datasets stored in the source data repository and the target data repository; adding, by the target data repository, the checkpoint to a first queue for checkpoints directed to one or more volumes in the target data repository, wherein the first queue is included in a plurality of queues for the target data repository; selecting, by the target data repository, one or more queues from the plurality of queues; and servicing an operation from each of the selected one or more queues.

Abstract: A query gateway service for servicing API requests of software services, the query gateway service configured to monitor for, and execute, client-defined field resolvers so that client applications can define, at least in part, how data served to that client application in response to an API request is formatted, validated, mutated, or otherwise presented.

Abstract: Provided are methods and systems for preventing malicious behavior of an end point. An example method commences with monitoring a stream of events associated with the end point. The method further includes processing the stream to record a set of events to a memory. Processing an event of the stream includes determining that the event satisfies at least one rule in a sequence of rules and, in response to the determination, adding the event to the set of events in the memory. The method further includes determining that the set of events includes a sequence of events. Each state in the sequence of events corresponds to at least one rule in the sequence of rules. The method continues with executing at least one action on the end point in response to the determination that the set of events includes the sequence of events.

Abstract: In some examples, the designated set of resources are subsequently monitored for session activities of multiple users that are not of the first group. For each of the multiple users, the computer system utilizes one or more predictive models to determine a likelihood of the user performing a desired type of activity based on one or more session activities detected for that user.

Abstract: The continued usage of manual & static configurations as the number of network-connected devices has increased has resulted in administrative difficulties for operators and/or administrators of computer networks. To provide more automated configurations, methods, systems, and electronic devices are described that include identifying, based on received network traffic from an end electronic device, a device type of the end electronic device; and applying a network policy to subsequent network traffic between the end electronic device and network equipment (such as a switch) based on the identified device type of the end electronic device.

Abstract: This application relates to a slot negotiation method and a device. The method includes: A transmitter sends a first FlexE overhead frame to a receiver, to request active/standby calendar switching. When the receiver is in a restart state, the receiver does not respond to the received first FlexE overhead frame. In addition, the RX sends a routine update second FlexE overhead frame to the transmitter. Determining that the second FlexE overhead frame is not a response to the first FlexE overhead frame, the transmitter sends a third FlexE overhead frame to request active/standby calendar switching again. According to the method in this application, incorrect calendar switching on the transmitter side caused by a mistaken response of the receiver can be avoided. This reduces the likelihood of a service interruption caused by the existing slot negotiation mechanism.

Abstract: Systems and methods are described for a media guidance application (e.g., implemented on a user device) that aggregates related media content, associated with media content selected by a user, by comparing keywords.

Abstract: A method of mitigating risks in a service level agreement (SLA), including: identifying relationships between an infrastructure and an application associated with the SLA; identifying changes to a technological environment of the SLA based on collected data associated with the SLA and the identified relationships, the collected data including the infrastructure and the application; establishing a baseline for a service level objective (SLO) of the SLA by analyzing the collected data of the infrastructure and the application; determining risk impact to the SLA based on an assessment of requirements to the SLO and the changes to the technological environment of the SLA; generating a solution option for the SLA by applying an explainable artificial intelligence (XAI) model based on processing the risk impact with the baseline in the XAI model; and updating the SLA based on the solution option.

Abstract: Systems, methods, and computer-readable media are provided for protecting a network from network discovery by an unknown or unauthenticated device. A network element, according to one implementation, is arranged in a communication network and includes an interface device configured to enable communication with an unknown network device. The network element also includes a memory system configured to store first and second sets of network information. The first set of network information includes fake information about the network and is configured to deceive the unknown network device before a procedure is performed for analyzing the authentication of the unknown network device. The second set of network information includes real information about the network. In some cases, the first set of network information may be provided to the unknown network device via the interface device before performing the procedure for analyzing the authentication of the unknown network device.

Abstract: Example network devices, systems, and methods are disclosed. In an example, a network device includes memory configured to store information associated with one or more service level agreements (SLAs) for applications in a software-defined wide area network (SD-WAN) and an application-based multipath routing (AMR) module including processing circuitry. The AMR module is configured to identify, based on criteria, one or more of the applications for AMR, wherein each criterion of the criteria is associated with a corresponding property of an application. The AMR module is configured to determine a breach of one of the SLAs on each WAN link associated with a first application of the identified one or more applications. The AMR module is configured to apply, in response to determining the breach, AMR for the first application.

Abstract: Techniques are disclosed relating to storing location information about storage nodes in cookies. A cloud-based service may send location requests to an orchestration service that instantiated storage nodes included in a storage cluster of the cloud-based service. The cloud-based service may receive location information that identifies in which computer zone that a given storage node is located. The cloud-based service may store the location information in cookies at a metadata store that is shared among the storage nodes. The cloud-based service may receive, from a client node, a search request to identify ones of the storage nodes that store particular data. The cloud-based service may return a set of cookies corresponding to identified storage nodes. The set of cookies may enable the client node to determine whether there is a storage node that stores the particular data and is within the same computer zone as the client node.

Abstract: Systems, apparatuses, and methods are provided herein for network incident management. A method for network incident management comprises aggregating network metrics associated with a monitored network in a historical network data database, identifying incidents based on the network metrics, generating a training data set based on the network metrics and the incidents, wherein the training data set comprises time series of network metrics as training input and incidents as labels, training an incident model using the training data set, receiving real-time network metrics from the network via the network interface, determining an incident prediction based on the incident model using the real-time network metrics as input, and causing a user interface device to provide an alert to a user based on the incident prediction.

Abstract: Example apparatus disclosed herein to perform a cybersecurity investigation are to generate an information graph based on a set of information seeker tools in response to detection of a threat alert in a monitored network, and search the information graph for a reference pattern associated with a cybersecurity threat. Disclosed example apparatus are also to, in response to detection of a portion of the reference pattern in the information graph, (i) select a first one of information seeker tools associated with a first input-output relationship capable of expanding the portion of the reference pattern to complete the reference pattern, and (ii) execute the first one of information seeker tools to complete the reference pattern associated with the cybersecurity threat.

Abstract: Introduced here are security management platforms configured to identify, assess, and monitor organizational vulnerability to security threats. By monitoring netflow data regarding the traffic traversing the Internet, a security management platform can identify security threats that would otherwise go undetected. Such action can be performed instead of, or in addition to, monitoring netflow data regarding the traffic traversing a local network (also referred to as an “internal network”) associated with an organization under examination. Thus, rather than monitor the traffic leaving public-facing Internet Protocol (IP) addresses residing on the local network, the security management platform can instead monitor traffic traversing the Internet and then filter the traffic to identify flows originating from the local network, flows destined for the local network, or any combination thereof.

Abstract: An identification device includes processing circuitry configured to collect response information of a device by performing network scanning on a target network address group, accumulate the response information collected, compare pieces of response information having different scanning times with each other among pieces of the response information accumulated and calculate a degree of similarity between contents of responses, and identify that devices that transmit most similar pieces of response information are identical, based on the degree of similarity calculated.

Abstract: A method includes receiving, using a first graphical user interface, information associated with a request for proposal, quote, bid, or information (RFX) to be generated and provided to a supplier. The method also includes identifying one of multiple acquisition scenarios associated with the RFX to be generated based on the received information. The method further includes generating the RFX based on the received information and the identified acquisition scenario. The method also includes receiving, using a second graphical user interface, an RFX response from the supplier. The method further includes identifying multiple requirements associated with the RFX response based on the identified acquisition scenario and comparing contents of the RFX response to the identified requirements. In addition, the method includes automatically informing the supplier of one or more identified requirements for which the RFX response is non-compliant.

Abstract: A system (1) includes a module (30) for calculating a design of experiment comprising a plurality of software tasks to be performed in order to solve a predetermined physical problem. The software tasks of the design of experiment have a first priority level. The system also includes a module (4) for scheduling the execution of software tasks by the computing system, configured to check for the presence of at least one software task with a second priority level higher than the first priority level waiting to be executed; in case of the presence of at least one such software task, obtaining freed-up computational resources for executing said at least one software task of a second priority level; in the absence of at least one such software task, allocate at least some of the software tasks of the first priority level to the available computational resources.

Abstract: Methods, systems, apparatuses, and computer program products are described. A system, such as a multi-tenant database system, may store tenant-specific observability data for multiple tenants of the system. The system may detect an inefficiency related to a performance metric for a tenant of the multiple tenants based on a subset of the data associated with the tenant and corresponding to a threshold time window. In some examples, the system may analyze the subset of the data for the threshold time window to determine an insight indicating a cause of the inefficiency. The system may determine a suggested action for the tenant based on the insight indicating the cause of the inefficiency, and the system may send, for display at a user interface of a user device, an indication of the insight and the suggested action, the user device operated by a user associated with the tenant.

Abstract: Disclosed are a messaging system, apparatuses circuits and methods of operation thereof. A messaging client device is adapted to receive an impermanent message and to manage the received message in accordance with a message management policy associated with the message. An impermanent messaging server is adapted to validate said messaging client device as complying with message management policies prior to authorizing transmission of the message to said messaging client device.

Abstract: In an embodiment, a set of labeled training data that includes indicators of webpages is received. Each indicated webpage is labeled with one or more categories that were determined for the webpage by a human reviewer. Features, such as text and scripts, are extracted from each indicated webpage, and are used along with the labels to train a classifier to predict one or more categories for a webpage based on the features of the webpage. The trained classifier may be used to associate one or more categories with each domain of a plurality of domains given the categories predicted for some or all of the webpages associated with the domain. A list of domains and associated categories may be used for a variety of purposes including search engine optimization and content filtering.

Abstract: Methods, apparatus, systems and articles of manufacture to monitor media are disclosed. An example apparatus includes at least one memory, first instructions in the apparatus, and processor circuitry to execute the first instructions. The first instructions, when executed, are to: instruct a media provider to include second instructions in an application to create an instrumented application and receive data from a media device based on the media device executing the second instructions.

Abstract: An embodiment of the present invention is directed to a consolidated contributions data bridge. The innovative data bridge tool takes internally generated market data and reference data from an Internal data distribution platform. (IPP) and publishes the data externally. An embodiment of the present invention may be directed in a messaging system that monitors a real-time system, to provide various benefits of in-band management: of contribution platforms and similar systems.

Abstract: Various embodiments concern mechanisms for facilitating communication between network-accessible platforms for developing, hosting, or running hybrid applications that utilize resources hosted across multiple platforms. Hybrid applications cause messages or “calls” to be passed between the platforms that must be authenticated. For example, when a call is placed by a Heroku platform to a Force.com platform, the call must be authenticated for security purposes. If Heroku has not already been authenticated when the call is submitted, an authentication process is invoked. An event listener can be used to register details regarding the initial callout task, and then register or “fire” an event when the authentication process is successfully completed. Registration of the initial callout task completely separates the authentication process from the resource being invoked. Requests can be completed without requiring further user input using at least some of the details registered by the event listener.

Abstract: A broadcast adapter in a network-on-chip (NoC) is used for broadcasting transactions in the form of packets from an initiator to multiple targets and for receiving responses from the targets that are combined and sent to the initiator. The transactions originate from an initiator and are send, using the NoC, to broadcast adapters using a special range of addresses. The broadcast adapters receive the transactions from the initiator. The broadcast adapters duplicate the transactions and send the duplicated transaction to multiple targets. The targets send a response, which is transported back by the NoC to the corresponding initiator.

Abstract: Systems and methods include obtaining measured data from a plurality of network elements in a network, wherein the measured data is associated with Operations, Administration, and Maintenance (OAM) functions for each of the plurality of network elements, analyzing the measured data to statistically determine thresholds for any of the OAM functions, and configuring the plurality of network elements with the determined thresholds, wherein the plurality of network element utilize the determined thresholds to compare ongoing measured data for threshold crossings for any of alarms and actions.

Abstract: A system and methods for automated Internet-scale vulnerability scanning and enhanced security profiling. The system utilizes a scheduler that directs web crawlers to scan domains retrieved from a database, interact with the contents of any retrieved web pages using fuzz testing, index and store the results of the scan, and provide the indexed results via an API for inclusion in cybersecurity scoring.

Abstract: Systems and methods to enable administrators to incentivize one or both of particular in-game user behaviors and particular in-game user activities via group agreements that govern user groups within an online game are disclosed.

Abstract: The present invention relates to a device and a method for performing channel selection in a wireless AV system. Such present specification discloses a wireless data transmission device for performing channel selection, the device comprising: a communication unit for performing the steps of selecting an initial channel in a non-connection state on the basis of first channel monitoring, transmitting a periodic beacon onto the initial channel in a standby mode after switching to a connection state, and selecting a new channel in the standby mode on the basis of second channel monitoring in an interval in which beacon transmission does not occur; and a processor connected to the communication unit so as to control the operation of the communication unit. Fast and economic channel selection appropriate for the wireless AV system is possible.

Abstract: Novel tools and techniques are provided for implementing name-based routing through networks. In various embodiments, a broker manager in each of a plurality of networks may receive a subscription request for a network device from a client device, each device being locally accessible or disposed in an upstream or downstream network. The broker manager uses its client broker to communicate with a locally accessible client device, and uses its mediator broker (and, sometimes, an intermediate device(s)) to communicate with a locally accessible network device. The broker manager otherwise uses its messaging brokers to communicate with control channels of one or more networks. Once subscription with the network device has been established, any commands and responses between the client device and the network device may be routed over pub/sub channels via the broker managers and their brokers using name-based routing, without routing based on IP address of the network device.

Abstract: Methods and apparatus are disclosed, including in one example a method for scheduling resources, associated with a plurality of components of a communication network, for providing a network service to a user equipment (UE). The method comprises receiving a service request for providing the network service, wherein the service request includes one or more service constraints. The method also comprises, for each of the plurality of network components, determining component resources that are needed to fulfill the service request according to the service constraints, sending, to a manager function associated with the particular component, a resource request that includes identification of the determined component resources and information related to the service constraints, and receiving, from the manager function, service information associated with the particular component.

Abstract: The invention enables digital music content to be downloaded to and used on a portable wireless computing device. An application running on the wireless device has been automatically adapted to parameters associated with the wireless device without end-user input (e.g. the application has been configured in dependence on the device OS and firmware, related bugs, screen size, pixel number, security models, connection handling, memory etc. This application enables an end-user to browse and search music content on a remote server using a wireless network; to download music content from that remote server using the wireless network and to playback and manage that downloaded music content. The application also includes a digital rights management system that enables unlimited legal downloads of different music tracks to the device and also enables any of those tracks stored on the device to be played so long as a subscription service has not terminated.

Abstract: This disclosure describes dynamically monitoring the flow of traffic along a path that can include points across different cloud service provider networks/regions and/or different private networks. Flow monitoring may be started in response to different triggering events. For instance, flow monitoring of network traffic along one or more network paths may be started in response to performance metrics associate with an application within the multi-cloud environment, current/projected network conditions associated with one or more networks within the multi-cloud environment, and the like. In other examples, a user may specify when to perform flow monitoring for one or more network paths.

Abstract: Disclosed herein are systems and method for preventing zero-day attacks. A method may include receiving a first report including information about an execution of a first script of an application that modifies a file on a first computing device, and receiving a second report including an indication that the file includes malicious code. In response to determining that an identifier of the file is present in both the first report and the second report, the method may include generating and transmitting, to the first computing device, a first rule that prevents execution of any script that shares at least one operation of the first script. The method may include, in response to determining that a vulnerability detected by the first rule is not present in a vulnerability database, generating an entry in the vulnerability database for the vulnerability as a zero-day vulnerability and transmitting an alert to the application developer.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a storage device, are disclosed. A system performs operations including receiving sensor data from a sensor of a property monitored by a monitoring system, and based on the sensor data, determining a first event and a second event that have occurred at the property. The operations include determining that the monitoring system is not able to communicate with an outside network, and classifying the first event as a high priority event and the second event as a low priority event. The operations include determining that a mobile device is able to receive data from the monitoring system; and providing, to the mobile device, data indicating the first event and an instruction to transmit the data indicating the first event to a server upon the mobile device being able to communicate with the outside network.

Abstract: Data processing/GUIs for NFT block chain data to “tell the story” of ownership or highlight “cool” aspects of a computer game-related NFT in simplified way. Machine learning (ML) may be used to boil down the complexity of data to what people need or want to understand. The displayed timeline of ownership as presented in a GUI can be interactive. Types of metadata to encapsulate in the NFT are discussed.

Abstract: A method for determining a container to be migrated is implemented by a first node executing a plurality of containers. The method includes determining a first container included in the plurality of the containers as the container to be migrated to a second node, and migrating the first container from the first node to the second node via a network. The plurality of containers in which a response time increases in a time zone in which a usage rate of a resource used by the first node increases, includes the first container and a second container each having an increase amount of a usage amount of the resource in the time zone and an increase amount of a data processing amount in the time zone that affects the increase in the response time.

Abstract: Systems and methods for processing a DNS query to identify and implement pre-processing information by a DNS server component in anticipation of a corresponding content request from a client computing device are provided. The pre-processing information can correspond to identification of content to be preloaded or other actions to be implemented by one or more computing devices in association with an anticipated client content request. Based on identification of the content or future actions, a DNS server component can provide the pre-processing information to one or more computing devices, such as computing devices of a CDN service provider and/or an original content provider, in advance of a corresponding request for content from the client computing device in order to improve performance associated with responding to the client request.

Abstract: A wireless communication device including a network device, a wireless base station, and a server device includes: a plurality of surfaces that is a plurality of logical network sections; and a control device connected to the network device. The network device has: a plurality of first NW-IFs connected to the server device; and a second NW-IF connected to at least one of a network and wireless base station and connected to any one of the plurality of first NW-IFs. The server device has: a plurality of applications; a plurality of network settings; and a plurality of SV-IFs connected to the plurality of first NW-IFs. Each of the plurality of surfaces includes an application, network setting, SV-IF, and first NW-IF. The control device selects a surface conforming to conditions, and causes the network device to execute surface switching for connecting the second NW-IF to the first NW-IF in the selected surface.

Abstract: Embodiments of the invention include systems and methods for transmitting messages related to certain information while maintaining the confidentiality of that information. A potential recipient may register one or more devices for receipt of such messages while specifying rules regarding when different messages may be delivered to the various devices. To keep sensitive information confidential, the messages may include only a link to such sensitive information, but exclude the sensitive information itself. An authorized recipient may then use the link to access the sensitive information via a password-protected Web site.

Abstract: One or more computing devices, systems, and/or methods are provided. In an example, a sequence of actions performed using a first interface on a first client device may be identified. A first negative signal probability may be determined based upon the sequence of actions. The first negative signal probability may correspond to a probability of receiving a negative signal associated with a first content item from the first client device responsive to presenting the first content item via the first interface on the first client device. The first interface on the first client device may be controlled based upon the first negative signal probability.

Abstract: Various embodiments set forth a computer-readable media storing program instructions that, when executed by one or more processors, cause the processors to perform steps of establishing, by a first node of a first cluster, a respective first connection with each of a plurality of second nodes in a second cluster; and establishing, by third node of the first cluster, a second connection with the first node. The third node is prevented from establishing a connection with any of the second nodes. The steps further include sending, by the third node, a message to the second cluster by sending the message to the first node via the second connection, where the first node is configured to forward the message to one of the second nodes via a corresponding one of the respective first connections.

Abstract: Systems, methods, and devices for managing privacy policies are disclosed. In one embodiment, a method for management of a user's privacy preferences may include: identifying a computer application installed on a user electronic device, or a website accessed using a browser executed by the user electronic device; retrieving a privacy policy document analysis for a privacy policy document associated with the computer application or the website, the privacy policy document analysis comprising a valuation of a plurality of privacy policy segments within the privacy policy document; receiving a privacy preference analysis for the user, the privacy preference analysis comprising a valuation of a plurality of privacy preferences for the user; identifying a recommended action in response to the valuation of one of the privacy policy segments being outside the scope of the valuation of one of the plurality of privacy preferences; and executing the recommended action.

Abstract: A system measures, by executing a monitoring process, first metric data associated with trade data at a first time point after the trade data is output by a first process of an application and before the trade data is input to a second process of the application, identifies the trade data at a second time point after the trade data is output by the second process and before the trade data is output by the application, measures second metric data associated with the trade data identified at the second time point, and sends, in response to a latency value obtained based on the first metric data or the second metric data exceeding a latency threshold, a latency alert to a user computing device associated with the application. The monitoring process is not a process of the application and is not linked with the first process or the second process.

Abstract: Systems, devices, and methods are disclosed for selectively decrypting SSL/TLS communications. Contents of the decrypted communications that may result in some action; for example, to terminate the communications, or to log and store the plaintext packets of the communications for subsequent content inspection and analysis. A SSL/TLS proxy may examine the information contained in the TLS handshake protocol and/or examine other information associated with the connection. Based on the examination, a proxy may determine whether or not to decrypt the encrypted communications. The proxy may take additional actions based on content inspection.

Abstract: Driver safety, vehicle safety, and environment safety may be scored based on a variety of input data concerning a driver, a vehicle, or an environment in which the vehicle drives. An overall safety score may be generated based on at least some of these three scores. These scores may be compared to thresholds to trigger or initiate actions such as providing notifications to drivers, raising or reducing vehicle insurance rates, providing coupons and promotions to drivers, or limiting vehicle speed in a manner that is personalized to the driver and/or vehicle and/or environment.

Abstract: A communication method, a communication apparatus, and system are disclosed. The method includes a data analytics network element (NWDAF) sends a first request to a storage function network element. The first request includes delay information and/or indication information. The indication information indicates that the NWDAF supports analyzing data within a specified delay. The first request is used to store the delay information and/or the indication information into the storage function network element. The data analytics network element receives a first response from the storage function network element. The first response indicates, to the data analytics network element, that the delay information and/or the indication information are/is successfully stored.