Abstract: Aspects of the disclosed technology provide solutions for displaying chargeable buttons on a RA system user interface and performing a latency check. A process of the disclosed technology can include steps for displaying a user interface (UI) on a remote assistance system, wherein the UI comprises at least one chargeable button, detecting a user engagement with the at least one chargeable button, wherein the user engagement is configured to communicate one or more commands to an autonomous vehicle (AV) that is communicatively coupled to the RA system, performing a latency check to determine a latency between the AV and the RA system, and aborting the one or more actions on the AV, if a determination is made that the latency exceeds a predetermined threshold. Systems and machine-readable media are also provided.

Abstract: Systems and methods for analyzing the usage of a set of workloads in a hyper-converged infrastructure are disclosed. A neural network model is trained based upon historical usage data of the set of workloads. The neural network model can make usage predictions of future demands on the set of workloads to minimize over-allocation or under-allocation of resources to the workloads.

Abstract: A method of performing synchronous replication from a primary storage system apparatus (PSSA) to a secondary storage system apparatus (SSSA) is provided. The method includes (a) in response to write requests received by the PSSA, (i) calculating metadata changes by the PSSA for accommodating the write requests, (ii) generating, by the PSSA, metadata journal log entries that describe the metadata changes, and (iii) mirroring the metadata journal log entries from the PSSA to the SSSA; (b) regenerating the metadata changes by the SSSA based on the metadata journal log entries mirrored from the PSSA to the SSSA; and (c) writing the regenerated metadata changes to persistent storage of the SSSA. A method performed by the SSSA is also provided. An apparatus, system, and computer program product for performing similar methods are also provided.

Abstract: Techniques for generating and monitoring service level objectives (SLOs) are disclosed. The techniques include an SLO platform performing: storing a first SLO definition of a first SLO including a first error budget for a first metric associated with a first service; storing a second SLO definition of a second SLO including a second error budget for a second metric associated with a second service; obtaining first telemetry data from a first data source associated with the first service; obtaining second telemetry data from a second data source associated with the second service; monitoring the first SLO at least by computing the first metric based on the first telemetry data and evaluating the first metric against the first error budget; and monitoring the second SLO at least by computing the second metric based on the second telemetry data and evaluating the second metric against the second error budget.

Abstract: Embodiments herein relate to transmitting specific traffic along a blocked link. A status of links between switches of a network is monitored. The status of the links is one of blocked and non-blocked. A blocked link is not used by a Spanning Tree Protocol (STP). At least one of the network switches is configured to transmit the specific traffic along the blocked link.

Abstract: A computer-implemented method for identifying a use anomaly potentially exposing sensitive data is disclosed. The method comprises receiving data comprising logs of a communication involving a computing device, where the logs comprise distinct logs of at least three communication abstraction levels. At least three anomaly classifiers are operated for logs from each of the at least three communication abstraction levels. An ensemble model is used to identify an anomaly in the communication, by processing output from each of the at least three anomaly classifiers. The various logs from a moment in time when the anomaly occurred are collated, and a graphical user interface is generated for reviewing the identified anomaly and collated logs. A human reviewer is then alerted that an anomaly has been identified.

Abstract: A method for generating samples for an anomaly detection system includes receiving events that occurred during a time series of a target metric. Each respective event includes an event attribute characterizing the respective event. The method includes generating a set of event groups for the events. Each event shares a respective attribute with one or more other events of the respective event group. For each respective event group of the set of event groups, the method includes determining an influence pattern that identifies an influence of the respective event group on the target metric. The method includes clustering the set of event groups into event clusters based on a respective influence pattern of each respective event group. Each event cluster includes one or more event groups that share a similar influence pattern. The method includes generating training samples for an anomaly detection system based on a respective event cluster.

Abstract: A data processing program causes a processing device, among a plurality of processing devices each executes predetermined processing on received data and outputs a result, to execute a process. The process includes, calculating, in a case where a notification that a resource is increased is received from a first processing device in a group of processing devices at a previous stage of the processing device among the plurality of processing devices, a ratio of an amount of data received from the first processing device to a total amount of data received from each of the group of processing devices, based on an amount of data received from each of the group of processing devices within a predetermined period, and determining whether or not to increase a resource of the processing device based on the calculated ratio and resource usage of the processing device.

Abstract: Methods and apparatuses of power control for additional SRS are disclosed. A method at abase unit comprises transmitting power control parameters for transmitting additional SRS by higher layers; and transmitting TPC command by DCI format 3B for additional SRS.

Abstract: A system and method are provided which facilitate peer-to-peer collaborative network monitoring. The system deploys a network-monitoring agent on a device and discovers peer devices on a same local network absent of receiving a cloud-orchestrated instruction. Responsive to successful direct communication with a server, the device obtains a configuration file, which indicates network metrics to be monitored and a condition associated with a network metric. Responsive to unsuccessful direct communication, the device obtains the configuration file via a peer device. The device monitors the indicated network metrics. If the condition is met, the system performs a predetermined action. Responsive to successful direct communication, the device transmits data associated with the monitored metrics and the action.

Abstract: Applications may execute using resources from multiple environments or ecosystems, such as may include virtual resources from a virtual resource environment hosted on physical resources of a cloud provider environment. An event manager in the cloud provider environment can obtain virtualization performance data from the virtual resource environment, as well as performance data from within the cloud provider environment. This data can be fed to an inference engine that can correlate information from the separate environments, and these correlations can be used to generate recommendations for performance adjustments in either the physical or virtual resource environment.

Abstract: A virtual machine provisioning method according to an embodiment includes a provisioning module that creates a virtual machine image template including only an operating system image and a system file image, a virtual machine management module that extracts the OS image of the virtual machine image template according to a virtual machine creation command from a user, to load the OS image into a memory allocated a virtual machine, and execute the OS image, and an interface module that extracts a system file image of the virtual machine image template according to the virtual machine creation command to build a root file system for the virtual machine.

Abstract: A system and method for setting alert thresholds related to cybersecurity ratings of one or more affiliate entities. An example method includes: obtaining entity data including cybersecurity event data for an affiliate entity; calculating a time-series cybersecurity rating for the affiliate entity based on the entity data; associating an alert reporting threshold with the time-series cybersecurity rating, wherein a comparison of the alert reporting threshold to the time-series cybersecurity rating determines a number of alerts reported for the affiliate entity; applying an alternative alert reporting threshold against the time-series cybersecurity rating to determine an alternative number of alerts reported for the affiliate entity; and updating the alert reporting threshold for the time-series cybersecurity rating to the alternative alert reporting threshold.

Abstract: Disclosed herein are methods, systems, and processes for detecting data exfiltration. A data exfiltration event in a network is detected. Traffic data regarding outgoing traffic of a source in the network associated with the data exfiltration event is received. A logarithmic transformation is applied to the traffic data to generate transformed data. An outlier identification technique is selected based on the transformed data and is executed on the transformed data to determine that the outgoing traffic is indicative of the data exfiltration event. An alert is generated in response to the determination that the outgoing traffic is indicative of the data exfiltration event.

Abstract: Techniques are disclosed relating to automatically determining whether an entity is malicious. In some embodiments, a server computer system generates a feature vector for an unknown website, where generating the feature vector includes preprocessing a plurality of structural features of the unknown website. In some embodiments, the system inputs the feature vector for the unknown website into a trained neural network. In some embodiments, the system applies a clustering algorithm to a signature vector for the unknown website and signature vectors for respective ones of a plurality of known websites output by the trained neural network. In some embodiments, the system determines, based on results of the clustering algorithm indicating similarities between signature vectors for the unknown website and one or more of the signature vectors for the plurality of known websites, whether the unknown website is suspicious.

Abstract: Persistent storage may contain: (i) a database table containing entries, (ii) a definition of a communication endpoint of a remote system, and (iii) outbound flow processing. One or more processors may be configured to: detect a state change associated with a local entry in the database table; read, from the database table, a set of data representing the local entry; transform, using the outbound flow processing, the set of data into a format receivable by the remote system; create, for the set of data, a correlation record that contains a local correlation identifier, wherein the correlation record specifies the local entry; transmit, to the remote system, the set of data as transformed and the local correlation identifier; receive, from the remote system and for the set of data, a remote correlation identifier; add, to the correlation record, the remote correlation identifier; and write, to a correlation table, the correlation record.

Abstract: Techniques for filtering telemetry data to allocate system resources among system components are disclosed. A system filters a data set of telemetry data prior to allocating or re-allocating system resources to system components. A filtered data set includes data points that include the highest resource-utilization values for the system components. The system compares resource-usage for each component managed by a computing machine in one time period to the resource-usage for the component in another time period. The system omits from a filtered data set any time period in which the resource-usage value for each system component is subsumed by the resource-usage values of the same system components in another time period. The system generates resource-reallocation candidate models for the computing machines in the system based on the filtered data set. The system reallocates system resources among system components using a selected resource-reallocation candidate.

Abstract: Systems, methods and computer-readable storage media for determining an outcome of a content promotional message are described. For example, a media network may be configured to transmit content to a plurality of content playback devices, such as a television or a computing device. The content may include a content promotion message configured to promote content, such as a television program or a website, available through the media network. The content promotion message and the content may be associated with network identifiers generated by the media network for tracked content. When the content is played by the content playback device, a device identifier may be generated for the content. The device identifiers may be compared with the network identifiers to determine which, if any, content tracked by the media network has been played by the plurality of content playback devices.

Abstract: Methods and systems for optimizing user interaction with a software application. One system includes an electronic processor configured to receive a collection of interaction data including a plurality of interaction sequences and data associated with each of the plurality of interaction sequences, determine a performance metric for each of the plurality of interaction sequences, and train, with the collection of interaction data and the performance metric determined for each of the plurality of interaction sequences, an artificial intelligence (“AI”) model using supervised learning. The electronic processor is also configured to receive a current interaction sequence of a user for the software application and generate, via the AI model as applied to the interaction pattern of the user, a recommendation, for display within a user interface, for a modified user interaction pattern of the user for the software application.

Abstract: Methods and apparatus to collect and process browsing history are disclosed. One disclosed method of collecting browsing history includes collecting a plurality of web requests, and for a web request in the plurality of web requests, determining a count indicating a number of other ones of the plurality of web requests that include a referrer identifying the web request. The method also includes when the count meets a threshold, indicating that the web request is a parent web request.

Abstract: An example apparatus disclosed herein includes at least one memory, instructions, and at least one processor to execute the instructions to: receive first HyperLogLog (HLL) data from a first server of a first database proprietor and second HyperLogLog (HLL) data from a second server of a second database proprietor, the first HLL data including obfuscated first user impression data and the second HLL data including obfuscated second user impression data; generate union HLL data based on the first HLL data from the first database proprietor and the second HLL data from the second database proprietor by performing a union of data sets of the obfuscated first user impression data represented in the first HLL data and the obfuscated second user impression data represented in the second HLL data; and determine a total number of deduplicated unique audience members based on the union HLL data generated by the vector analyzer.

Abstract: Techniques for detecting and remediating vulnerabilities in a network are disclosed. A system scans a network to identify network resources and relationships among the network resources. The system generates a network topology map representing the network. The system detects vulnerabilities in the network by traversing the network topology map with a set of vulnerability definitions. The system detects a vulnerability in a network node when a data describing the node corresponds to the vulnerability definition. The system identifies patterns of vulnerabilities that correspond to potential network attacks from unauthorized entities. The system determines whether combinations of vulnerability patterns amount to a potential breach. The system prioritizes remediation actions for remediating vulnerabilities based on the type and severity of vulnerability.

Abstract: Methods and apparatuses are described herein for a framework for data brokerage services in a service layer. A first apparatus may receive, from a second apparatus, a first signal comprising first information indicating a publishing intent associated with atopic indicator. The first apparatus may receive, from a third apparatus, a second signal comprising second information indicating a subscription intent associated with the topic indicator. The first apparatus may generate, based on the publishing intent and the subscription request, a topic instance. The first apparatus may send a third signal comprising an announcement message indicating the generated topic instance. The first apparatus may receive, from the third apparatus, a fourth signal comprising a subscription request for the generated topic instance. The first apparatus may send, to the third apparatus, at least one fifth signal comprising notifications and publish instances associated with the generated topic instance.

Abstract: Methods, systems, and computer-readable storage media for providing a DLS-enriched view on data stored in a database system, the DLS-enriched view including a set of annotations indicating at least one application table and at least one field of the application table, storing a staging table corresponding to the application table field and a database trigger that is configured to write data from the field to the staging table in response to a change in the at least one application table, providing at least one IR artifact based on the DLS-enriched view, generating at least one DLS-specific entity and chaincode based on the IR artifact and a configuration for a DLS, to which the chaincode is to be deployed, deploying the chaincode to the DLS, and monitoring the one or more staging tables for changes and, in response to a change, recording data of the staging table to the DLS.

Abstract: Embodiments herein provide a method for buffer status reporting. The method includes triggering a buffer status report (BSR) in a media access control (MAC) layer, based on a BSR triggering condition; transmitting, to a base station, a scheduling request (SR) for transmitting uplink data; receiving an uplink resource allocation grant (UL grant) from the base station, based on the SR; assembling a media access control protocol data unit (MAC PDU); transmitting the MAC PDU; and determining whether to cancel the triggered BSR, based on a BSR MAC control element (BSR MAC CE) included in the MAC PDU.

Abstract: There is provided a method for gathering traffic analytics data about a communication network that includes applying a heuristic that focuses on specific attributes of the communications relationships between the system assets of a network.

Abstract: A system is configured for associating a CVE with a particular device profile is disclosed. The system receives a request from a user to associate a CVE with a particular device profile. For each device profile from a plurality of device profiles stored in a memory, the system determines feature importance values for features of each device profile. The features of each device profile include at least an operating system and a CPU architecture. The feature importance value of a corresponding feature of a device profile associated with a CVE indicates a probability of the CVE to affect the device profile with respect to that feature. The system identifies a device profile that has features with a total feature importance value above a feature importance threshold value. The system identifies a particular CVE associated with the identified device profile. The system associates the particular CVE with the particular device profile.

Abstract: Techniques for generating configuration information of a storage system involve: acquiring, in response to receiving a request to generate configuration information of a storage system, attribute information of an object created in the storage system. The techniques further involve: acquiring a first ontology item corresponding to the object based on the attribute information, the first ontology item describing a relationship between the object and an operation executed for the object. The techniques further involve: acquiring a second ontology item corresponding to the operation. The techniques further involve: generating the configuration information of the storage system based at least on the first ontology item and the second ontology item. Such techniques enable users to quickly obtain the configuration information of the system, thereby increasing the query efficiency and improving the user experience.

Abstract: Various embodiments include systems and methods of implementing automated assessment scheduling. A particular automated assessment may be automatically performed based at least in part on an assessment configuration and scan engine resource(s) of an organization. Based at least in part on performance of the particular automated assessment, a scan engine utilization assessment may be performed to determine a scan engine utilization value that represents utilization of the scan engine resource(s) with respect to resource requirements that are based at least in part on the set of attributes of the assessment configuration. Based at least in part on the scan engine utilization assessment, a particular resource utilization recommendation may be generated. The particular resource utilization recommendation may correspond to a first resource utilization recommendation to allocate additional scan engine resources or a second resource utilization recommendation to allocate fewer scan engine resources.

Abstract: A data processing method, which relates to the technical field of cloud applications. The method, performed by a target edge node, includes: receiving, based on a cloud application client switching from a first type of network to a second type of network, a first connection request forwarded by a stream proxy in a transit edge node associated with the second type of network, and establishing a first communication connection between the cloud application client and the target edge node associated with the first type of network based on the first connection request, and transmitting, based on the first communication connection, application data in the cloud application between the cloud application client and the target edge node through the stream proxy.

Abstract: The server receives a response accepting a task from a device. The server assigns the task to a user of the device. The server transmits an indication that the task was assigned to the user of the device.

Abstract: Example technical solutions to determine census-level audience metrics across demographics are disclosed. Disclosed example apparatus include a distribution parameter solver to initialize distribution parameter values for a probability of an individual within a demographic being (i) included in a subscriber audience for the demographic and (ii) having a first impression duration, the subscriber audience having a first subscriber audience size. Disclosed example apparatus also include a divergence parameter solver to determine divergence parameter values between (i) the first subscriber audience size and the first impression duration and (ii) a census-level audience size and a second impression duration based on the initialized distribution parameter values.

Abstract: Various embodiments of the present disclosure provide a method for traffic detection. The method which may be performed by a first network node includes receiving a message from a second network node. The method further includes determining packet flow description information for traffic detection according to the message. The packet flow description information may indicate a combination criterion for two or more packet flow descriptions, and/or a protocol matching criterion for a domain name in a packet flow description. According to the embodiments of the present disclosure, the packet flow description definition can be extended to support more accurate traffic detection.

Abstract: Methods, apparatus, systems, and articles of manufacture are disclosed to generate audience metrics. An example apparatus includes online panel factor generator circuitry to generate an online panel adjustment factor based on television panel data and online panel data; over-the-top (OTT) factor generator circuitry to generate an OTT adjustment factor based on the television panel data and a portion of the online panel data, the portion of the online panel data corresponding to OTT panel data; independence probability factor generator circuitry to generate an independence probability adjustment factor; and a convergence circuitry to: generate an aggregated adjustment factor based on the online panel adjustment factor, the OTT adjustment factor, and the independence probability adjustment factor; and generate a deduplicated reach corresponding to a media item based on a comparison of the aggregated adjustment factor to historical data.

Abstract: In accordance with an embodiment, described herein is a system and method for use with a cloud computing environment, for estimation of performance impact upon a hypervisor provided within such environments, and the use of such estimation in placing virtual machines within the environment. A noisy-neighbor score value, generated for a particular hypervisor socket on a multi-core processor architecture, provides a predicted measure of performance drop which affected virtual machines placed on that hypervisor socket may experience at a particular point in time, due to activity of neighboring virtual machines on one or more sockets of the hypervisor. The predicted measure of performance drop can be automatically calculated by the system based on the amount and nature of compute usage on the hypervisor, and data defining a machine learning model developed from or through the operation and assessment of controlled noisy-neighbor studies over a collection of compute and memory-intensive workloads.

Abstract: A system and method for near-real time inspection of a computing environment for a cybersecurity object is presented. The method includes: continuously receiving a plurality of event records, each event record having an event type, and corresponding to an event in the computing environment; detecting in the plurality of event records, an event record of a first type; parsing the event record of the first type to detect a resource identifier, wherein the resource identifier corresponds to a resource deployed in the computing environment; initiating inspection of the resource for a cybersecurity object; and initiating a mitigation action in the computing environment, in response to detecting the cybersecurity object on the resource.

Abstract: A system to facilitate infrastructure management is described. The system includes one or more processors and a non-transitory machine-readable medium storing instructions that, when executed, cause the one or more processors to execute an infrastructure management controller to automatically balance utilization of infrastructure resources between a plurality of on-premise infrastructure controllers.

Abstract: Some embodiments of the invention provide a method of implementing an intent-based intrusion detection and prevention system in a datacenter, the datacenter including at least one host computer executing multiple machines. The method receives a filtered set of intrusion detection signatures to be enforced on the at least one host computer. The method uses a set of contextual attributes associated with a particular data message to generate an intrusion detection signature for the particular data message, the generated intrusion detection signature including a bit pattern, each bit associated with a contextual attribute in the set. The method compares the generated intrusion detection signature with the received set of intrusion detection signatures to identify a matching intrusion detection signature in the received filtered set.

Abstract: In one implementation, a gateway include one or more processors configured to obtain network data from one or more entities associated with the gateway, provide the network data to a server, and obtain a set of entity identifiers from the server. The set of entity identifiers may be generated based on at least the network data. The one or more processors may be further configured to filter communications based on the set of entity identifiers.

Abstract: Network traffic collectively associated with a set of communications made between a client device and a respective first and second resource during a usage of a program executed on the client device is monitored. At least of the monitored traffic associated with the second resource is encrypted. The encrypted traffic is categorized. A respective first and second policy to apply to the respective first and second communications is determined. The second policy is based at least in part on the categorization of the encrypted traffic.

Abstract: Methods, apparatus, systems and articles of manufacture are disclosed including means for identifying to identify a first request having a first source port number, from a device, determine whether a second request, having a second source port number, is within a threshold number of ports from the first source port number, group the first and the second requests as a first session when the second source port number is within the threshold number of ports from the first source port number, and means for classifying to generate session windows, the session windows including the threshold number of ports, wherein the session windows are applied to lowest and highest source port numbers associated with a current session.

Abstract: A technology is described for resolving device credentials for a device. An example method may include receiving device credentials for management by a service provider. The device credentials may include authentication credentials and a device policy document that specifies permissions used to authorize resource actions requested by the device. In response to receiving a message requesting that a resource perform a resource action associated with the device, the device may be authenticated using the authentication credentials, and the resource action may be authorized using the permissions specified in the device policy document.

Abstract: Identifying encountered and unencountered conditions in software applications, including: collecting, for an executing application, information describing the usage of the application, including: receiving, from one or more tracepoints inserted into the application, a first portion of the information describing a state of the application during execution; identifying, based on the information, one or more unencountered conditions that the application is configured to handle; and presenting information describing the unencountered conditions that the application is configured to handle.

Abstract: A computer-implemented method for identifying corner cases of operating scenarios of vehicles. The method includes receiving one or multiple feature(s) for characterizing an operating state of a vehicle, extracting at least one trace graph relating to the one or to the multiple feature(s) from a graph database, modifying the at least one trace graph, a modified trace graph being generated, reconstructing a first operating scenario from the trace graph, reconstructing a second operating scenario from the modified trace graph, and identifying the second operating scenario as a corner case if the second operating scenario is assessed as new and/or as unknown as compared to the first operating scenario on the basis of a predetermined criterion.

Abstract: System including at least one processor in communication with first and second port interfaces and one or more non-transitory computer-readable media. The first port interface may include a first communication port, and the second port interface may include a second communication port. The at least one processor is operative with the computer-readable program code to perform operations including setting the first and second port interfaces to passthrough mode by connecting the first port interface with the second port interface.

Abstract: Examples of the present disclosure relate to a distributed CDN comprised of CDN nodes that each have a compute engine and a data store. Compute engines may be used to execute software associated with computing functionality of the distributed CDN and may be reconfigured according to changing conditions to adapt computing functionality to current or expected demand. Nodes may communicate with one another via an overlay network. A node may determine whether it should process a request or generate a route via the overlay network to the remote node, thereby enabling the remote node to process the request. In another example, a node may receive a request for a compute resource that is not currently provided by the node. The compute engine of the node may be reconfigured to provide the compute resource, thereby enabling the node to service the request rather than redirect the request to a different node.

Abstract: A method may include receiving, via a secure deployment management (SDM) system, data associated with one or more operations of an industrial device from a secure deployment management (SDM) node associated with the industrial device. The data is received via a secure communication channel established by the SDM system with the SDM node and security protocols. The method also includes sending the data to a computerized maintenance management system (CMMS) container component may perform tasks in conjunction with a computerized maintenance management system (CMMS) process, such that the CMMS container component may communicate with the CMMS process via a first firewall through which the SDM system is incapable of communicating. The SDM system may enable the data associated with the operations to communicate with the SDM node through a second firewall between the SDM system and the SDM node, the second firewall being different from the first firewall.

Abstract: A network analytics transfer method and apparatus, and a network function entity are provided. The method includes receiving an analytics transfer request, wherein the analytics transfer request is configured to request to transfer first network analytics from a source network function entity to the target network function entity; obtaining analytics aggregation information of the first network analytics according to the analytics transfer request, wherein the analytics aggregation information includes aggregation indication information of one or more first network function sub-entities, and the first network function sub-entities are configured to provide first analytics results to the source network function entity; performing network analytics aggregation according to the analytics aggregation information to obtain an aggregated analytics result of the first network analytics.

Abstract: A method and apparatus of processing a user initiated request for information is disclosed. The method may provide receiving a user initiated request including a uniform resource locator (URL) submitted to a web browser application and receiving a response that the URL is an invalid URL that cannot be resolved to a corresponding webpage. The method may also include blocking a subsequent attempt to transmit the user initiated request as a browser modified search request that includes modifications to the user initiated request.

Abstract: The disclosure relates generally to methods, systems, and apparatuses for managing network connections. An example method includes receiving one or more messages from a plurality of computing devices connected through a network, the one or more messages indicating actual connections among the plurality of computing devices. The method also includes comparing the actual connections to a list of expected connections indicated by a connections master file that comprises connection information for the plurality of computing devices. The method also includes identifying an unexpected connection based on one of the actual connections having no matching entry in the list of expected connections and updating the connections master file by adding the unexpected connection to the list of expected connections indicated by the connections master file.