Abstract: An example method of identification of related event groups for a service monitoring system includes: receiving a sample set of events from a service monitoring system; choosing, based the sample set of events, a set of fieldnames for defining factors; generating a plurality of event group definitions, wherein each event group definition of the plurality of event group definitions comprises a plurality of factors, wherein each factor of the plurality of factors is represented by a respective fieldname-value pair of an event of the sample set of events, wherein a fieldname of the respective fieldname-value pair is selected from the set of fieldnames; and determining, based on the plurality of event group definitions, one or more event groups for a plurality of events.

Abstract: Systems and methods include transmission of a first request for a first connection to a first service, usage of a first reverse proxy process to manage a first connection based on a first service configuration, change, in response to the first request, the first service configuration to a second service configuration, instantiate, in response to the change to the second service configuration, a second reverse proxy process based on the second service configuration, transmit, in response to the change to the second service configuration, a second request for a second connection to the first service an use of the second reverse proxy process to manage the second connection in response to the second request, wherein the first reverse proxy process and the second reverse proxy process execute simultaneously.

Abstract: A system and a method are disclosed for detecting a malicious website. In an embodiment, a mobile device detects a URL referencing an unknown website. Responsive to detecting the URL, the mobile device retrieves a representative image of the unknown website. The mobile device determines whether the representative image matches an image of a known legitimate website. Responsive to determining that the representative image matches the image of the known legitimate website, the mobile device determines if the unknown website is malicious. The mobile device performs a security action responsive to determining that the website is malicious.

Abstract: A method for testing a network that comprises multiple devices includes sending, by a first device that is a regular participant of the network, on a path through the network, a test data flow to a second device that is another regular participant of the network; sending, by the second device, the received test data flow, and/or at least one diagnostic metric derived from this received test data flow, to a diagnostic entity; and determining, by the diagnostic entity, based at least in part on the test data flow, and/or on the diagnostic metric, received from the second device, whether the path through the network is performing according to at least one predetermined criterion.

Abstract: The disclosure provides a delay statistical method and apparatus thereof. In the delay statistical method, a first packet and a second packet that belong to a measurement period are obtained, where the first packet includes a first in-situ flow information measurement (iFIT) header with first flow detection information, and the second packet includes a second iFIT header with second flow detection information; a first delay parameter is obtained based on the first flow detection information and sent to a statistical apparatus; and a second delay parameter is obtained based on the second flow detection information and sent.

Abstract: Monitoring and troubleshooting tools provide the capability to visualize different levels of a client's application that is deployed as a suite of independent but cooperating services (e.g., an application that includes a monolithic application and a microservices-based application), collect values of monitored or tracked metrics at those different levels, and visualize values of the metrics at those levels. For example, metrics values can be generated for components of the monolithic application and/or for components of a microservice of the microservice-based application.

Abstract: Disclosed are various embodiments for performing user account migration between platforms. In one embodiment, a client device is configured to obtain an update to a first application. The update causes the client device to obtain a second application. A first user account on a first platform associated with the first application is migrated to a second user account on a second platform associated with the second application. The client device launches the second application for access to the second user account after the first application is launched.

Abstract: One or more processing devices cause display of a user interface that identifies a service definition representing a service, receive input identifying an entity, where the service is performed at least in part by the entity, and store the service definition representing the service in association with an entity definition representing the entity. The entity definition comprises information identifying data pertaining to the entity in a datastore of machine data that reflects activity in an information technology environment produced by a plurality of components of the information technology environment. The one or more processing devices receive input pertaining to a search definition representing a search producing a measure of the service, and store the search definition representing the search, where the search produces the measure of the service using at least a portion of the data pertaining to the entity.

Abstract: Cloud migration may be performed by identifying applications that are currently operating in the enterprise and performing certain determinations as to whether those applications are proper candidates for the migration to the cloud. One example method of operation may provide identifying at least one application operating on an enterprise network, retrieving current usage data of the at least one application, comparing the current usage data of the at least one application to a threshold amount of usage data to determine whether the application has exceeded the threshold amount of usage data. Next, the creation of an instance process may be performed on an entity operating outside the enterprise network and the application may be operated via the instance process and otherwise terminated in the enterprise network to alleviate resources.

Abstract: A content management system comprising one or more processing devices, a network interface, and a memory system configured to store programmatic instructions configured to cause the one or more processing devices to perform the following operations is described. An electronic document may be generated and rendered, where the content management system may configure the electronic document as a mesh document, with both forward links and backlinks to other electronic resources. The forward links and/or backlinks may be to local electronic resources or remote electronic resources. The mesh document may be transmitted to client device over an encrypted channel, and the client device may render the electronic document. In response to an activation of a forward or backlink, the corresponding resource may be accessed from a data store, transmitted via the encrypted channel to the client device, and the client device may render such resource.

Abstract: Systems, methods, and computer program products include smart capacity workload routing with workload modeling. One example involves storing a workload model in memory regarding a set of different factors associated with user communications, with each factor is associated with a measurement of workload. A received request including information regarding one or more of the factors is processed and used in identifying a workload measurement for the requested user communication based on comparing the received request information to the stored workload model. An agent with capacity that is available to handle the requested user communication is identified. A communication slot for the identified agent is activated and defined by the identified workload measurement, and the request is routed to the identified agent and updating available workload capacity in the system.

Abstract: Automatic preparation of data related to session initiation protocol (SIP) based traffic flows in a lawful interception (LI) scenario is disclosed. The dataset that is obtained may, e.g., be used for machine learning-based (ML) and artificial intelligence (AI) tools that can identify lawfully intercepted SIP-based traffic cases. Such preparation of data reduces the 5 risk of misunderstandings between a communications service provider (CSP) and a law enforcement agency (LEA), which reduces the time dedicated by both parties in understanding the correctness of LI data provided by the CSP to the LEA.

Abstract: A universally-designed control circuit for communicating with multiple types of sensors is disclosed. For example, a control circuit may communicate with either ring oscillator-based sensors or BJT-based sensors based on programming implemented in the control circuit. The control circuit may include programmable communication protocol circuits for communicating with the sensors and conversion circuits that convert a particular type of sensor data packet into a generic format. The generic format sensor data may then be utilized by a power management unit or other device to control operation of an integrated circuit.

Abstract: A clustered application infrastructure troubleshooting system performs a set of queries on a database of infrastructure data to retrieve a set of metrics for each of a plurality of issues. For each issue, the system analyzes a corresponding set of metrics based on detection criteria associated with the issue to detect one or more issues. The system identifies a set of remediation steps for resolving each issue and infrastructure objects affected by each of the one or more detected issues. The system performs queries on the database of infrastructure data to retrieve a set of data associated with the affected infrastructure objects. The system generates a GUI with advisories corresponding to the detected issues. Responsive to the user selecting an advisory, the system causes the GUI to present the remediation steps and the set of data associated with the one or more affected infrastructure objects corresponding to the selected advisory.

Abstract: An apparatus and method for determining a recommended cyber-attack security action are provided. The apparatus includes a processor and a memory communicatively coupled to the at least a processor. The memory contains instructions configuring the at least a processor to receive a cyber profile associated with a digital environment. The processor is further configured to receive a risk profile associated with the cyber profile and determine at least one security action based on the risk profile. In addition, the processor is configured to generating a user interface data structure configured to display the determined at least one security action.

Abstract: An electronic device includes a memory and a processor. The processor receives a platform management profile that includes information defining one or more platform management policies, a given platform management policy among the one or more platform management policies including a provided input from a specified hardware or software sensor and/or a provided output action. The processor uses the given platform management policy for controlling operating states of elements in the electronic device.

Abstract: Methods, systems, and computer readable media can be operable to facilitate dynamic port forwarding. A CPE device may be configured to dynamically modify one or more port forwarding rules based upon a detection of changes at the CPE device, one or more client devices, and/or a local network that is supported by the CPE device. In response to a steering of a client device to a network extender, the CPE device may amend port forwarding rules to forward traffic from the CPE device to the network extender for delivery to the client device. In response to a detection of a low quality parameter value for a first client device, the CPE device may amend port forwarding rules to forward traffic associated with the first client device to a second client device, wherein the second client device is identified as a device supporting interchangeable services with the first client device.

Abstract: A schema is generated to establish a connection between user devices and one or more patient record servers. Generating a schema can include receiving configuration information associated with a patient record gateway, wherein the patient record gateway is associated with one or more patient record servers configured for storing electronic health records for a plurality of patients. Generating a schema can include defining, based at least in part on the configuration information, a schema configured to enable user devices to retrieve, via the patient record gateway, electronic health records from the one or more patient record servers. A schema can be requested by a user device. The schema can be sent to a user device to establish a connection with the one or more patient record servers.

Abstract: An emergency alarm system peripheral, such as a hazard detector, intrusion detector, or a notification appliance, includes a base that is permanently installed on a wall or ceiling, and a head which mounts to the base. Various embodiments and methods are provided to easily and efficiently assign addresses to the peripherals in the system.

Abstract: Systems and methods for combining personal networks in a Multi-Dwelling Unit (MDU).

Abstract: An anomaly detection method executed by a computer, the anomaly detection method includes identifying, for each of target periods, a prediction value to be a reference for determining whether an anomaly occurs in the target period; identifying a corrected prediction value acquired by correcting the prediction value of a first target period based on the prediction value and a measured values of a second target period before the first target period; setting one of the prediction value and the corrected prediction value corresponding to the first target period as an upper limit value and the other as a lower limit value; and determining whether the anomaly occurs in the first target period by using a reference defined by the upper limit value and the lower limit value.

Abstract: Techniques are disclosed for deploying a computing resource (e.g., a service) in response to user input. A computer-implemented method can include operations of receiving (e.g., by a gateway computer of a cloud-computing environment) a request comprising an identifier for a computing component of the cloud-computing environment. The computing device receiving the request may determine whether the identifier exists in a routing table that is accessible to the computing device. If so, the request may be forwarded to the computing component. If not, the device may transmit an error code (e.g., to the user device that initiated the request) indicating the computing component is unavailable and a bootstrap request to a deployment orchestrator that is configured to deploy the requested computing component. Once deployed, the computing component may be added to a routing table such that subsequent requests can be properly routed to and processed by the computing component.

Abstract: Embodiments of this application provide for establishment of a wireless connection. A method comprises: generating connection authentication information according to related information of a wired connection between a first device and a second device; and sending, in case of disconnection of, a wireless connection establishing request in such a manner that the request can be received by the second device, where the request comprises the connection authentication information. In the methods and apparatuses of embodiments of this application, by using related information of a wired connection as authentication information of establishing a wireless connection, the wireless connection can be established rapidly and securely, and/or device power consumption can also be considered.

Abstract: Techniques for using trace with tunnels and cloud-based systems for determining measures of network performance are presented. In an embodiment, a method includes determining a client application is being executed; determining an endpoint associated with the client application, based on any of monitoring application logs associated with the client application and network flows associated with the client application; and causing one or more probes to the determined endpoint and deriving metrics based on the one or more probes for determining performance of the client application.

Abstract: Systems, methods, and apparatuses can detect whether an impairment is present within a service provider network. The impairment can cause a service provided by the service provider network to not perform as expected. These systems, methods, and apparatuses can develop multiple network records to record the performance of the service provider network at various instances in time. These systems, methods, and apparatuses can compare these network records among each other to detect for the presence of the impairment within the service provider network. These systems, methods, and apparatuses can thereafter diagnose and/or remedy the impairment when present within the service provider network.

Abstract: An electronic device according to various embodiments of the present invention may include a memory, and at least one processor, wherein the at least one processor may be configured to obtain a sentence based on a user input, based on obtaining the sentence, determine at least one persona, convert the sentence to at least one sentence having a style corresponding to the at least one persona, using a neural network, and provide the converted at least one sentence.

Abstract: A distributed cloud computing system is disclosed that includes a controller configured to manage a plurality of constructs, wherein a first subset are deployed in a first cloud computing network and a second subset are deployed in a second cloud computing network, and logic. The logic, upon execution by a processor, causes operations including receiving, from the controller, metadata pertaining to the plurality of constructs, receiving, from one or more gateways, network data associated with the one or more gateways, receiving network data, wherein the metadata and the network data identify each of the plurality of constructs, the communication paths between each construct, and in which cloud computing network each construct is deployed, deriving network traffic metrics from the metadata and the network data, generating a visualization illustrating the network traffic metrics, and causing rendering of the visualization on a display screen of a network device.

Abstract: This disclosure relates to generating telecommunication network measurements. In one aspect, a method includes presenting, by a client device, a digital component that, when interacted with, initiates a call by the client device to a phone number specified by the digital component. A trusted program stores, in a presentation event data structure, a presentation event data element specifying the phone number and resource locator for a reporting system to which reports for the digital component are sent. The trusted program detects a phone call by the client device to a given phone number. The given phone number is compared to one or more presentation event data elements stored in the presentation event data structure. A determination is made that the given phone number matches the phone number specified by the digital component. In response, an event report is transmitted to the reporting system.

Abstract: This application discloses a method, apparatus and storage medium for application identification. A network device performs flow behavior feature analysis according to a flow table to obtain a plurality of services. Each service includes one IP address and one port identifier, and one application may usually include a group of services. Therefore, the network device clusters the plurality of services according to the flow table and a domain name table, to obtain a plurality of application types. Each application type includes a plurality of services. Each application type corresponds to one application. Further, the network device may determine a label corresponding to each of the plurality of application types, the label identifying an application to which a data flow belongs.

Abstract: Techniques and systems for beacon triggered device to device content transfer are disclosed. A described technique includes presenting, at an interactive beacon device, content including an interactive store catalog; receiving, at the interactive beacon device, user input responsive to the content; generating, at the interactive beacon device, a beacon message that can include transaction information based on the user input and the content, the transaction information including a service or product identifier corresponding to a product or service selected from the interactive store catalog; and transmitting, from the interactive beacon device, the beacon message over a short-range communication link to a mobile device. The beacon message can be configured to cause an application on the mobile device to advance a transaction associated with the transaction information.

Abstract: Systems, methods, and computer-readable media for on-demand security provisioning using whitelist and blacklist rules. In some examples, a system in a network including a plurality of pods can configure security policies for a first endpoint group (EPG) in a first pod, the security policies including blacklist and whitelist rules defining traffic security enforcement rules for communications between the first EPG and a second EPG in a second pods in the network. The system can assign respective implicit priorities to the one or more security policies based on a respective specificity of each policy, wherein more specific policies are assigned higher priorities than less specific policies. The system can respond to a detected move of a virtual machine associated with the first EPG to a second pod in the network by dynamically provisioning security policies for the first EPG in the second pod and removing security policies from the first pod.

Abstract: Examples described herein generally relate to receiving a query context for service events occurring on one or more networks, determining, based on the query context, a set of service events occurring on the one or more networks, querying multiple layers of a multiple-layer relational graph to determine one or more other service events having a defined relationship with the set of service events at one or more of the multiple layers, where the multiple layers include a configuration layer, an observation layer, and learned layer, defining relationships between services or service events, and indicating, via a user interface and in response to the query context, the one or more other service events.

Abstract: A method, system, and computer program product for analyzing financial risk of a financial security. A video is displayed by the computer system on a mobile display system. Object detection is performed on the video to identify a fixed asset in the video. The computer system identifies a financial security supported by the fixed asset identified in the video. An overlay of financial data about the financial security is displayed in association with the fixed asset in the video. The financial data includes a financial model of the financial security and an assumption of the financial model. The assumption of the financial model is updated based on a status of the fixed asset in the video. The financial risk of the financial security is analyzed based on the financial model and the assumption that was updated.

Abstract: One or more computing devices, systems, and/or methods for mailbox-based coupon display are provided. For example, a plurality of email messages stored in a mailbox of a first email account of a first user may be identified, and may be evaluated to identify a plurality of coupons. The plurality of coupons may be analyzed to determine one or more coupon features. User data and/or activity data associated with the first user may be analyzed to determine one or more user features. A predictive model may be tuned based upon the one or more coupon features and/or the one or more user features. A set of scores may be generated for the plurality of coupons based upon the predictive model. A graphical user interface may be controlled based upon the set of scores to display one or more coupons.

Abstract: A resource allocation device includes: a course estimation unit that estimates a course of each mobile terminal based on a location of a mobile terminal acquired from a network device, and estimates a probability that each mobile terminal is located in each area at time of prediction; a determination unit that calculates, for each area, the number of mobile terminals in the area using the probability and determines whether the maximum value of an overcommit ratio for each area exceeds an upper limit; and an execution unit that executes the allocation or release of resources to an MEC server group located in each area when the maximum value of the overcommit ratio is equal to or less than the upper limit, and refrains from executing the allocation or release of the resources to the MEC server group when the maximum value of the overcommit ratio exceeds the upper limit.

Abstract: The invention provides a method for automatically analyzing and filtering redundant alarms in radio transceiver systems consisting of the following steps: step 1: the operator shall define the relationship between the alarms, defining rules to filter redundant alarms at the FRDU block; step 2: the FSU block will detect the alarm and send it to the FAFU block; step 3: FAFU block will receive alarms from FSU, based on the rules defined in FRDU block will analyze and filter out redundant alarms; Step 4: The FSMU block will receive the alarms after being filtered, stored in the database and also send these alarms to the EMS system.

Abstract: A method for cloud service includes receiving, by processing circuitry that operates for a cloud service, a request including a first reporting descriptor object including (i) a first variables descriptor object associated with variables, (ii) a first events descriptor object associated with events, and (iii) a reporting interval. The method also includes generating, by the processing circuitry, at a time within the reporting interval, a message including a second reporting descriptor object with (i) a second variables descriptor object having updated values for the variables and (ii) a second events descriptor object associated with a subset of the events. The method also includes sending, by the processing circuitry, the message to a recipient.

Abstract: A system and method for agentless discovery and inspection of applications and services in a compute environment includes establishing a connection with a first workload in a first compute environment. The first compute environment includes a plurality of workloads. The system causes installation of a collector on the first workload, wherein the collector, when executed, is configured to collect data from the first workload. Collected data is received from the collector, and the collector is configured to remove the executable code of the collector upon completing data collection. Access is provided to the collected data for an asset monitoring system, wherein the asset monitoring system is configured to discover from the collected data at least an application executed on the first workload.

Abstract: Examples for device-driven auto-recovery using multiple recovery sources are disclosed herein. At least one storage device or storage disk includes instructions that, when executed, cause at least one processor to at least detect a flaw in a first configuration of a program to be installed on a programmable device, the first configuration recorded on a first chain of a distributed ledger of a blockchain; correct the flaw in the first configuration to generate a corrected configuration; commit the corrected configuration to the distributed ledger, the corrected configuration to create a second chain of the distributed ledger; detect an update of the first configuration to a first updated configuration and an update to the corrected configuration to an updated corrected configuration; and prevent the first updated configuration from being installed on the programmable device by replacing the first updated configuration with the updated corrected configuration on the second chain.

Abstract: Systems and methods for providing spotlight cards within a chat channel are provided. In an aspect, a method includes establishing, by a video conference provider, a first chat channel for exchanging chat messages between a plurality of client devices and receiving, by the video conference provider, an indication to generate a first spotlight card within the first chat channel, wherein the indication identifies spotlight content from a first resource external to the first chat channel. The method also includes generating, by the video conference provider, the first spotlight card identifying the spotlight content and transmitting, by the video conference provider to one or more of the client devices connected to the first chat channel, the first spotlight card for display within a spotlight panel within the first chat channel, the spotlight panel positioned proximate to a chat messaging panel including chat messages posted to the chat channel.

Abstract: A system for generating a statistical model for fault diagnosis comprising at least one hardware processor, adapted to: extract a plurality of structured values, each associated with at least one of a plurality of semantic entities of a semantic model or at least one of a plurality of semantic relationships of the semantic model, from structured historical information organized in an identified structure and related to at least some of a plurality of historical events, the semantic model represents an ontology of an identified diagnosis domain, each of the plurality of semantic entities relates to at least one of a plurality of domain entities existing in the identified diagnosis domain, and each of the plurality of semantic relationships connects two of the plurality of semantic entities and represents a parent-child relationship therebetween; extract a plurality of unstructured values, each associated with at least one of the plurality of semantic entities.

Abstract: A Cyber Vulnerability Assessment Tool (CVAST) and CVAST Threat Assessment Heuristic (CVAST THRASH) capable of automated modeling of cyber physical systems, assessment of the nature of cyber risks thereto, and output of such cyber risk assessments are provided.

Abstract: Apparatuses, methods, and systems are disclosed for security capabilities in an encryption key request. One method includes transmitting an encryption key request comprising security capabilities of a user equipment, wherein the encryption key request is for an application layer key. The method includes, in response to transmitting the encryption key request, receiving an encryption key response comprising a group encryption key.

Abstract: In a method for determining a location of an electronic device, a plurality of beacon signals are received from a plurality of beacon devices at the electronic device, wherein each beacon signal of the plurality of beacon signals includes an identity of a beacon device transmitting a respective beacon signal, and each beacon device of the plurality of beacon devices has a known location. A received signal strength for each beacon signal of the plurality of beacon signals is measured. A distance of the electronic device from each beacon device for which the plurality of beacon signals is received is determined, wherein the distance of the electronic device from a beacon device is based at least in part on the received signal strength of the beacon signal transmitted by the beacon device. A location of the electronic device is determined based at least on part on the distance of the electronic device from each beacon device for which the plurality of beacon signals is received.

Abstract: An edge device using broadcasting is disclosed herein. The edge device may include one or more memories and one or more processors communicatively coupled to the one or more memories. In some implementations, the edge device may receive individual sets of data from a plurality of sensors and compile the individual sets of data into a single dataset to be processed by a backend device. The edge device may generate a plurality of advertisements to include a corresponding plurality of portions of the dataset and a corresponding plurality of sequence identifiers. The edge device may broadcast each advertisement, without receiving an acknowledgement of each preceding advertisement. The edge device may receive, from the backend device, an indication of one or more sequence identifiers that were not received. Accordingly, the edge device may retransmit, based on the indication of the sequence identifier(s), a portion of the plurality of advertisements.

Abstract: A CI/CD assist device accepts a test template in which some of fields of test content is set to a variable field in which a value is variable. An NOS sets a value compatible with a first environment in the variable field of the test template to generate test data compatible with the first environment. A test device conducts a test on a network service in the first environment by using the test data compatible with the first environment. An NOS sets a value compatible with a second environment in the variable field of the test template to generate test data compatible with the second environment. A test device conducts a test on the network service in the second environment by using the test data compatible with the second environment.

Abstract: Embodiments of this application disclose an application function implementation method, so as to resolve a problem of low use efficiency of an electronic device. A first electronic device establishes a first wireless link through a first wireless communications protocol, displays a screen that includes a first control, receives an operation performed on the first control, displays a shortcut menu that includes a second control, receives an operation performed on the second control, displays a list that includes a first identifier of a second electronic device, receives an operation performed on the first identifier, establishes a second wireless link to the second electronic device through a second wireless communications protocol, where the first electronic device and the second electronic device are associated with each other, and sends first information that includes to-be-shared data and a second identifier to the second electronic device through the second wireless link.

Abstract: A method, system, and processor-readable storage medium are directed towards generating a report derived from data, such as event data, stored on a plurality of distributed nodes. In one embodiment the analysis is generated using a “divide and conquer” algorithm, such that each distributed node analyzes locally stored event data while an aggregating node combines these analysis results to generate the report. In one embodiment, each distributed node also transmits a list of event data references associated with the analysis result to the aggregating node. The aggregating node may then generate a global ordered list of data references based on the list of event data references received from each distributed node. Subsequently, in response to a user selection of a range of global event data, the report may dynamically retrieve event data from one or more distributed nodes for display according to the global order.

Abstract: Implementations for selecting hosting server(s) in a particular availability zone for a network service involving a plurality of participants is described. A request for a network service involving a plurality of nodes is received from a computing device associated with an organizer. Geographic locations of the plurality of nodes involved in the network service, the type of the network service, performance of a plurality of servers, and operational constraints of the plurality of servers are evaluated. At least two of the plurality of servers are located in different geographical locations. One or more of the plurality of servers to host the network service are selected based on the evaluation.

Abstract: In an in-hand apparatus being operated by a user, a display device of the in-hand apparatus displays a list of image forming apparatuses that can access a cloud server, an input device of the in-hand apparatus designates an image forming apparatus selected out of the list according to a selection input, as remote apparatus. When the display device of the in-hand apparatus displays a user box stored in a storage device of the remote apparatus, and the input device of the in-hand apparatus receives an input for selecting a file out of the user box, the remote apparatus transmits the selected file to the cloud server, and the cloud server stores the file and a file name to which information proper to the remote apparatus is added, and the in-hand apparatus receives the file and the file name from the cloud server.