Abstract: A method performed by a device that has a current first network connection to a first network. The device determining one or more current conditions associated with the device, determining whether a disconnect of the first network connection is imminent based on the one or more current conditions and responsive to determining that the disconnect is imminent, performing a pre-fetch operation to request data over the first network connection for at least one application resident on the device.

Abstract: Network capacity planning based on application performance can include detecting a data session occurring on a network, identifying an application being used for the data session, where the application can include a video application, determining if a performance model for the video application exists, the performance model describing performance metrics and quality of service events associated with the video application, determining, based on the performance model, a capacity planning trigger for the video application, where the capacity planning trigger can include increasing network capacity based on the needs and a quality of service associated with the video application during the data session, and generating a command that, when executed by a network entity, causes the network entity to implement the capacity planning trigger on the network.

Abstract: A method for providing prediction based healthcare recommendations is performed by a healthcare prediction server. The method includes receiving an emergency room services request from a patient. The method also includes receiving a first portion of the plurality of historical claims data. The first portion includes associated historical outcome data. The method further includes applying a geospatial prevalence engine to the first portion of the plurality of historical claims data and the requestor location to identify at least one locally prevalent disease. The method additionally includes applying a claims processing engine to the first portion of the plurality of historical claims data and the requestor identifier to determine whether the patient is associated with at least one prior avoidable emergency room claim. The method includes predicting that the emergency room services request is associated with an avoidable visit. The method further includes transmitting an alternative services request.

Abstract: This disclosure describes using a dynamic proxy for securing communications between a source within a cloud environment and an application container. The techniques include intercepting traffic directed to an application container, analyzing the traffic and traffic patterns, and allowing or preventing the traffic from being delivered to the application container based on the analysis. A traffic analysis engine may determine whether the traffic is considered safe and is to be allowed to be delivered to the application container, or whether the traffic is considered unsafe and is to be prevented from being delivered to the application container, According to some configurations, the address(es) to the network interfaces (e.g., WIFI or Eth0) are abstracted to help ensure security of the application containers.

Abstract: Disclosed is a virtual wireless base station that can dynamically scale its capacity to meet changes in demand for connectivity. The virtual wireless base station includes a plurality of virtual baseband modules, a plurality of interface/router modules, an orchestrator module and a fabric mapper module. Each of the plurality of virtual baseband modules is coupled to the interface/router modules by a low latency switch fabric. The orchestrator determines current and near future demand for connectivity within the virtual wireless base station and either instantiates and connects new virtual baseband processors to meet a rise in demand, or shuts down underutilized virtual baseband processors in case of insufficient demand.

Abstract: Systems and methods for cross-domain tracking of users are disclosed. Embodiments provide mechanism for a unique identifier generated for a first domain (also referred to as a cross domain identifier) and stored at the user device to be made available to a second domain via a cross domain identifier system (XID system) such that the second domain can also use the same unique identifier for the user. This way, a user is identified at multiple domains of the organization using a single unique identifier. Further, in case a user identifier cannot be provided from the first domain to the second, the unique identifier can be created based on a fingerprint of the user's browser.

Abstract: A method performed by a computing system, includes executing an application, using a data call to an Application Programming Interface, the data call requesting access to a file stored on a storage system associated with the computing system, with a context extraction module, determining contextual information associated with the data call, through use of a library, causing a kernel to access the file according to the data call, storing the contextual information on the storage system, and performing an analysis on the contextual information, the analysis including determining an average size of a call stack when the data was accessed.

Abstract: A system includes a processor and machine readable storage media having instructions stored therein. The instructions, when executed by the processor, cause the processor to receive input indicating whether a customer of a financial institution has a mobile device, to receive an indication from the customer via the mobile device acknowledging that the customer has been given access to disclosure documents, and to provide the customer with a financial product based on the indication.

Abstract: Systems and methods disclosed herein may operate to adjust display orientation of a user device based on facial landmark information. In various embodiments, information identifying and describing a facial landmark of a user may be received via a user device corresponding to the user. Head orientation of the user may be determined based at least in part on the information identifying and describing the facial landmark. A display unit of the user device may be automatically signaled to align display orientation of contents being presented with the head orientation as determined based at least in part on the information identifying and describing the facial landmark.

Abstract: A device may provision two or more servers, each of the servers including a network interface. In addition, the device may enable the network interface in each of the provisioned servers, create a shared volume, assign the shared volume to each of the provisioned servers, and enable a clustering application on each of the provisioned servers to form a cluster comprising the provisioned servers, the cluster having a heartbeat via the network interfaces.

Abstract: A system and method for triggering on platform usage can include at a platform, receiving and storing a trigger configuration of an account; operating a platform comprising internally executing a process on behalf of an account and publishing at least one event when executing the process; at the platform, incrementing a counter in response to the at least one event and if the stored trigger configuration species a usage key associated with a category of counted events of the at least one event; monitoring counters in a context of an associated trigger; and processing the trigger upon the counter satisfying condition of an associated trigger.

Abstract: Embodiments are generally directed apparatuses, methods, techniques and so forth to select two or more processing units of the plurality of processing units to process a workload, and configure a circuit switch to link the two or more processing units to process the workload, the two or more processing units each linked to each other via paths of communication and the circuit switch.

Abstract: Disclosed herein are system, method, and computer program product embodiments for determining monitoring compliance for an enterprise application deployed on an application delivery platform. Existing resources, monitors and alerts are discovered with gaps in monitoring being calculated based on a comparison of monitoring objectives and the existing monitors and alerts. Gaps in monitoring are reported in a GUI reflecting effectiveness of existing monitors.

Abstract: Disclosed herein are embodiments of systems, methods, and apparatus that execute classification techniques to enable high-quality analysis of ingest data by interpreting and categorizing disparate data points of the ingest data. The execution of the classification techniques leads to isolation of intrinsic properties of each data point to represent the essence of what the overall ingest data indicates. The classification techniques further enables classification of the ingest data, which is unencumbered by any ingest data format changes, such as ordering of data components, encoding, or properties associated with the ingest data that are likely to change without altering meaning conveyed by the ingest data.

Abstract: A service data transmission method and apparatus are provided. The method includes: obtaining, by an information control center, first information from a service server, where the first information includes service information and/or application information; obtaining, by the information control center, second information from user equipment, where the second information includes at least one of service information, mobility information, behavior information, and status information of the user equipment; and controlling, by the information control center, transmission of service data of the user equipment based on the first information and/or the second information. In the embodiments of the present disclosure, transmission of the service data can be controlled based on specific information that is about the service data and that is obtained by the information control center, and different transmission quality is provided for different types of service data.

Abstract: A small form factor pluggable (“SFP”) transceiver for use in a communications network includes a transmitter adapted to be coupled to the network for supplying signals to the network, a receiver adapted to be coupled to the network for receiving signals from the network, and a programmable signal processing module coupled to the transmitter and the receiver and adapted to be programmed from a remote station coupled to the network. The module can be programmed to perform at least one service or management function on the network.

Abstract: The present application describes a system and method for determining a latency between a client device and various servers of a networking system.

Abstract: Disclosed are a method and system for monitoring streaming. The method for streaming monitoring includes registering a streaming channel of a user as monitoring target information, performing monitoring on broadcast streaming using the streaming channel based on configuration information of the user, and providing monitoring information for the broadcast streaming.

Abstract: Methods and apparatus to measure exposure to streaming media are disclosed. An example apparatus includes an event listener to listen for an event notification based on a playback position of a first media segment of a multi-segment media. The example apparatus includes a metadata handler to update a multi-file counter with an offset based on a duration of the first media segment, detect that a second media segment is a segment of the multi-segment media, determine a playback time within the second media segment, add the playback time to the multi-file counter to determine a corresponding playback time of the multi-segment media, and attempt to perform a lookup of a metadata tag in a table based on the playback time of the multi-segment media. The example apparatus includes and a transmitter to transmit the metadata tag corresponding to the playback time of the multi-segment media to an audience measurement entity.

Abstract: Method and system for correlating multiple device entries within a domain is disclosed. The method may include receiving a first correlation key comprising a set of device properties associated with a first device from a first plugin. The method may further include comparing the first correlation key with each of a plurality of second correlation keys stored in a device database. The method may further include determining whether a second correlation key from the plurality of second correlation keys in the device database corresponds to the first device, based on the comparing. The method may further include selectively correlating the first device with a second device from the plurality of second devices mapped to the second correlation key in the device database, based on the determining.

Abstract: A data store system may include a storage device configured to store a plurality of data store tables. The data store may further include a plurality of processing units. At least one processing unit from the plurality of processing units may receive an analytic function call. The at least one processing unit may further identify, in the analytic function call, at least one column of a data store table on which to execute an analytic function in the analytic function call and may further identify, in the analytic function call, an identifier column of the data store table. Each row of the at least one column may be associated with a common row value of the identifier column. The at least one processing unit may further identify, in the analytic function call, at least one index column of the data store table. Each value in each at the least one index column may identify an index value on which to index each value of the at least one column with respect to each value of the identifier column.

Abstract: Systems and methods for managing access to computing services include an access manager that receives a request to modify a configuration of a computing service to a new configuration. The access manager stores a previous configuration of the computing service, updates the configuration of the computing service from the previous configuration to the new configuration based on information representing the new configuration, and starts a service request timer for the computing service. The access manager receives a subsequent request. When the subsequent request is a reconnect request, the access manager deletes the stored previous configuration. When the subsequent request is not a reconnect request or a new request the access manager returns an error when the service request timer has not expired, or sets the configuration of the computing service to the previous configuration of the computing service when the timer has expired.

Abstract: Methods, apparatus, and systems for data plane interface network Quality of Service (QoS) in multi-tenant data centers. Data plane operations including packet generation and encapsulation are performed in software running in virtual machines (VMs) or containers hosted by a compute platform. Control plane operations, including QoS traffic classification, are implemented in hardware by a network controller. Work submission and work completion queues are implemented in software for each VM or container. Work elements (WEs) defining work to be completed by the network controller are generated by software and processed by the network controller to classify packets associated with the WEs into QoS traffic classes, wherein packets belonging to a give traffic flow are classified to the same QoS traffic class.

Abstract: Disclosed systems relate to automatically instrumenting a web application for tracing. In an example, a method includes providing a web page application to a web browser on a client device. The web page application includes a tracer application. The method further includes detecting a start of the web page application and instantiating tracer application. The tracer application is configured to log tracing data for the web page application. The method further includes detecting an event initiated by interaction with the web page application. The method further includes automatically logging a start of a span based on the detection, the logging associating the span with the tracer application. The method further includes executing operations corresponding to the event. The method further includes automatically logging an end of the span based upon a completion of the operations corresponding to the event.

Abstract: A computing device receives one or more network communication anomaly conditions that indicate abnormal network communication traffic for a class of devices associated with the computing device; monitors network communication data of the computing device; determines whether the network communication data of the computing device satisfies the one or more network communication anomaly conditions; and responsive to determining that the network communication data of the computing device satisfies the one or more network communication anomaly conditions, performs an anomaly detection operation for the computing device.

Abstract: Methods and systems for improving data back-up, recovery, and search across different cloud-based applications, services, and platforms are described. A data management and storage system may direct compute and storage resources within a customer's cloud-based data storage account to back-up and restore data while the customer retains full control of their data. The data management and storage system may direct the compute and storage resources within the customer's cloud-based data storage account to generate and store secondary layers that are used for generating search indexes, to generate and store shared space layers and user specific layers to facilitate the deduplication of email attachments and text blocks, to perform a controlled restoration of email snapshots such that sensitive information (e.g., restricted keywords) located within stored snapshots remains protected, and to detect and preserve emails that were received or transmitted and then deleted between two consecutive snapshots.

Abstract: This application provides a cache decision method and apparatus. The method includes: receiving, by a policy control function PCF, first cache information sent by at least one local analytic function LAF. The first cache information includes a base station identifier, identifiers of first N1 pieces of application information that are accessed for a maximum quantity of times, and content corresponding to the identifiers of the N1 pieces of application information, where N1 is a positive integer. The method further includes determining, by the PCF, local cache content based on the first cache information and a capacity of a local cache. In this way, the cache hit rate can be effectively improved, transmission bandwidth and data transmission overheads can be greatly reduced, and users' experience improved.

Abstract: Systems and methods include receiving network topology information of a network including a plurality of routers; receiving link measurements defining bandwidth on links in the network; determining routes in the network based on the network topology information; and utilizing the routes and the link measurements to determine an estimate of an initial traffic matrix that includes the bandwidth between origin routers and destination routers.

Abstract: Systems and methods are disclosed to infer, using a machine learned model, a service protocol of a server based on the banner data produced by the server. In embodiments, the machine learned model is implemented by a network scanner configured to receive banner data from open ports on servers. A received banner is parsed into a set of features, such as the counts or presence of particular characters or strings in the banner. In embodiments, certain types of banner content such as network addresses, hostnames, dates, and times, are replaced with special characters. The machine learned model is applied to the features to infer a most likely protocol of the server port that produced the banner. Advantageously, the model can be trained to perform the inference task with high accuracy and without using human-specified rules, which can be brittle for unconventional banner data and carry undesired biases.

Abstract: The disclosed computer-implemented method includes applying transport protocol heuristics to selective acknowledgement (SACK) messages received at a network adapter from a network node. The transport protocol heuristics identify threshold values for operational functions that are performed when processing the SACK messages. The method further includes determining, by applying the transport protocol heuristics to the SACK messages received from the network node, that the threshold values for the transport protocol heuristics have been reached. In response to determining that the threshold values have been reached, the method includes identifying the network node as a security threat and taking remedial actions to mitigate the security threat. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: The invention proposes a method of encoding data packet by encoding type information and size information of said data packet into the same field. The invention also proposes a method of processing data packets received. The data packet comprises a header part and a message part. The header part comprises at least one bit for indicating the type of said data packet, said method comprising a step 101 of obtaining the size information of said data packet based on said at least one bit.

Abstract: A client application of a device receives presence information and other interaction information from other devices synchronized to a set of content items. The interaction information indicates interactions of at least one other device with respect to a synchronized content item. The client application displays a browser depicting the synchronized content items and permitting navigation among organizational elements. The browser also displays the interaction information associated with the content items received from the other devices. The browser displays the interaction information with respect to particular content items or for an organizational element. The browser may also include an activity feed displaying interaction information specific to a content item or relating to a synchronized folder or organizational element. This permits a user to view, at a browser, activity and interactions of other users with respect to content items using native applications on another device.

Abstract: A method of optimizing network processing in a system comprising a physical host and a set of physical network interface controllers (PNICs) is provided. The physical host includes a forwarding element. The method includes determining that a set of conditions is satisfied to bypass the forwarding element for exchanging packets between a particular data compute node (DCN) and a particular PNIC. The set of conditions includes the particular DCN being the only DCN connected to the forwarding element and the particular PNIC being the only PNIC connected to the forwarding element. The method exchanges packets between the particular DCN and the particular PNIC bypassing the forwarding element. The method determines that at least one condition in said set of conditions is not satisfied. The method utilizes the forwarding element to exchange packets between the particular DCN and the particular PNIC.

Abstract: A method and system for the post-adjustment (i.e., offline) of event timestamps to implement virtual time synchronization amongst detection node clocks. In existing methodologies with the goal of clock synchronization, clocks (and timestamps generated therefrom) are disciplined or adjusted at the recordation time of the events on a detection node (e.g., a switch/router, an Internet-of-Things (IoT) device, a wireless sensor, etc.). However, there is no particular reason for these clocks or timestamps to be accurate during the recordation time, but rather, should be accurate at their use or interpretation time. Further, through these recordation time adjustments, clock drifts and timing errors may be gradually introduced, leading to runaway inaccuracies. The disclosed method and system intentionally avoids the disciplining of clocks at event recordation times on the detection node and, instead, adjusts timestamps during interpretation times, to overcome the aforementioned issues.

Abstract: Provided is a method and system for collecting sensor data using a data channel and a control channel. The method and system construct an appropriate and efficient communication environment when there are several sensors corresponding to one gateway in order to collect measured data from the sensors, by using a separate control channel for general control communication and a data channel for data communication to transmit data after confirming whether the data channel is available through the control channel in the communication between a gateway and sensors.

Abstract: Example implementations include a method, apparatus and computer-readable medium for managing security events via a graphical user interface (GUI), comprising receiving an indication of a first security event occurring in an environment, determining a priority value of the first security event, and creating a first identifier of the first security event, wherein the first identifier is a visual icon of a given shape. The implementations further include assigning a size and color to the first identifier of the first security event based on the priority value and generating, for display on the GUI, the first identifier of the first security event, wherein the GUI is configured to display identifiers of one or more security events in a selectable layout of a plurality of selectable layouts, wherein selection of the first identifier generates a panel of selectable actions that can be executed to address the first security event.

Abstract: Embodiments can provide a computer implemented method for simulating transaction data using a reinforcement learning model, the method including: generating an artificial customer profile by combining randomly selected information from a set of real customer profile data; providing standard customer transaction data representing a group of real customers having similar transaction characteristics as a goal; conducting, by the intelligent agent, an action including a plurality of simulated transactions; comparing, by the environment, the action with the goal; providing, by the environment, a feedback associated with the action based on a degree of similarity relative to the goal; adjusting, by the policy engine, a policy based on the feedback; the step of conducting an action to the step of adjusting a policy are repeated until the degree of similarity is higher than a first predefined threshold; and combing the artificial customer profile with the action to form simulated customer data.

Abstract: Aspects of the present disclosure describe a method of placement of sensors for DFOS systems, methods, and structures that advantageously employ concurrent sensing. In sharp contrast to the prior art, our inventive method—a heuristic method based on the Explore-and-Pick (EnP) algorithm, which we call a modified EnP (mEnP) method—includes two procedures. The first procedure of our mEnP method explores all possible sensing fiber routes (both linear and star-like routes) for each node in the given network. The second procedure applies a modified greedy algorithm for minimum set cover to select the minimum set of DFOS assignment to fully cover all the links in the given network.

Abstract: A system can include a network analysis platform that applies performance models to determine if a coverage degradation exists at a network cell, such as at a base station. The performance models are pre-trained based on network telemetry data. For a session at a cell, an expected quality of service (“QoS”) metric can be compared to an actual QoS metric to determine whether the session is impacted by coverage degradation. Throughput is an example QoS metric. If the number of impacted sessions exceeds a threshold, the base station can be highlighted on a GUI. Additionally, the network analysis platform can perform root cause analysis of a victim cell.

Abstract: In some examples, a system monitors a network that includes a collection of interconnected virtual network functions (VNFs), the monitoring comprising receiving control information from a VNF of the VNFs, the control information specifying an action to take to address an issue detected by the VNF. Responsive to the monitoring, the system modifies an allocation of resources to the VNF.

Abstract: The present invention entails a highly available system comprising at least one host with at least one monitoring agent fit to send data, a cloud based proxy fit to receive the data, wherein said proxy comprises: an adapter, a master monitoring agent fit to command the at least one monitoring agent, and a failover server. The highly available system is further made up of at least one secondary cloud based proxy capable of communicating with the cloud based proxy, wherein the secondary cloud based proxy also comprises: a second adapter, a second master monitoring agent fit to command at least one monitoring agent, and a second failover server fit to communicate with the failover server. Finally, the highly available system also includes a node, wherein the node communicates with at least the cloud based proxy and the secondary cloud based proxy.

Abstract: Systems, methods, and related technologies for segmentation management are described. In certain aspects, an entity communicatively coupled to a network is selected and one or more characteristics of the entity may be determined. A segmentation policy may be selected based on the one or more characteristics of the entity and one or more tags to be assigned to the entity based on the segmentation policy may be determined. A zone for the entity based on the one or more tags may be determined and one or more enforcement points associated with the zone for the entity may be determined. One or more enforcement actions may then be assigned to the one or more enforcement points based on the zone associated with the entity.

Abstract: A computer-implemented method of deep packet inspection (DPI) in a network is provided. The method comprises collecting data packets comprising a number of traffic flows from a number of devices via a number of traffic taps and classifying each traffic flow according to data about network protocol layers of the packets comprising the traffic flow. Application layer metadata is extracted from the packets. Traffic flow classification data and the extracted metadata are ingested into a data cluster and normalized. The normalized classification data and extracted metadata is then correlated to other data sets.

Abstract: A process detects anomalies on a controller area network (CAN) bus. An arbitration field in a message on the CAN bus is analyzed, and a data field in the message on the CAN bus is inspected. The process further monitors a frequency of message identifiers that are transmitted across the CAN bus, and determines that an overall bus load crosses a threshold. The process then transmits an alert when the analyzing the arbitration field, the inspecting the data field, the monitoring the frequency, and the determining the overall bus load indicate that an anomaly has occurred on the CAN bus.

Abstract: A hand-held device having a touch sensitive surface uses a relative distance from an origin location to each of a plurality of touch zones of the touch sensitive surface activated by a user to select a one of the plurality of touch zones as being intended for activation by the user.

Abstract: A computer-implemented method and a transport manager system operate to reduce network congestion by detecting one or more data flows in a network, determining, using a candidate flow detection threshold, whether a data flow of the one or more data flows is a candidate flow, the candidate flow detection threshold being based on one or more characteristics of the one or more data flows, and in response to determining that the data flow is the candidate flow, managing the data flow. A consumption rate, a duration, a number of bytes communicated, a throughput, or aggregated characteristics of the one or more data flows may be used to determine the candidate flow detection threshold.

Abstract: A device may receive application information of an application to be deployed in a cloud computing environment. The application information may include requirement information including information defining a compute requirement of the application, a storage requirement of the application, and a network connectivity requirement of the application, and first capability information identifying requested capabilities of the first set of devices. The device may receive second capability information identifying actual capabilities of the second set of devices. The device may compare the first capability information and the second capability information to determine a measure of similarity between the first capability information and the second capability information. The device may generate deployment information for deploying the application on a device, of the second set of devices, based on the measure of similarity.

Abstract: Technologies are presented directed to smart attachment of cloud-based files to communications such as email. A communication service may determine and select automatically between local and cloud versions of synchronized files allowing the recipient of the message to receive a version of the file regardless of whether the sender is offline or online when the attachment was made and in a user-friendly manner to the sender through a single representation.

Abstract: A system, method, and computer-readable medium are disclosed for performing a data center monitoring and management operation. The data center monitoring and management operation includes: identifying a plurality of assets within a data center; monitoring usage of the plurality of assets within the data center; generating data center asset profile data based upon the monitoring; identifying a plurality of asset configurations related to the asset profile data; ranking the plurality of asset configurations based upon the data center asset profile data; and, generating a recommended asset configuration recommendation based upon the ranking.

Abstract: Methods, apparatus, and processor-readable storage media for determining migrations between geographically distributed data centers are provided herein. An example computer-implemented method includes obtaining information associated with data centers that are geographically distributed relative to one another, wherein the information includes: information related to migration factors specific to the respective geographic location of each of the data centers and information related to a respective set of processes of each of the data centers; automatically generating a migration schedule based at least in part on the obtained information, wherein the migration schedule comprises one or more times for migrating at least one of the processes of a first one of the data centers to a second one of the data centers; and automatically triggering at least one migration of the at least one process between the data centers based at least in part on the migration schedule.