Abstract: A system of mitigating code weaknesses in a target code by adding micro functionality fixes. The system includes a mitigation module installed a memory chip of a device and a server for identifying a plurality of code weaknesses in a target code installed in a memory chip of a device and sending configuration instructions to the mitigation module, the configuration instructions comprising: a plurality of micro functionality fixes, and a plurality of code weakness locations each associated with one of the plurality of code weaknesses and one of the plurality of micro functionality fixes. The execution of the mitigation module by at least one processor of the device induces an installment of the plurality of micro functionality fixes in the plurality of code weakness locations.

Abstract: A method for video calling comprises, at a server computing system, receiving a plurality of segmented participant video streams from a plurality of client computing devices, each segmented participant video stream depicting a different human participant participating in a video call. One or more priority parameters for each of the plurality of human participants are recognized. One or more human participants are ranked based on a cumulative participant priority for each of the plurality of human participants. The plurality of segmented participant video streams are composited into a virtual conference view that displays each of the ranked one or more human participants at a virtual position based on their cumulative participant priority, such that human participants having higher cumulative participant priorities are displayed more prominently than human participants having lower cumulative participant priorities. The virtual conference view is sent to the plurality of client computing devices.

Abstract: Various example implementations are directed to circuits, apparatuses, and methods for providing virtual computing services. According to an example embodiment, an apparatus includes a computing server configured to provide a respective group of virtual servers for each of a plurality of accounts. Each of the accounts has a respective set of domain names and a respective settings file. The apparatus also includes a domain name server (DNS). The DNS is to dynamically map a respective set of domain names for each account to network addresses of the respective group of virtual servers, provided for the account. The DNS performs the mapping according to a mapping function indicated in the respective settings file of the account. The respective settings file of a first account accounts includes a mapping function that is different from a mapping function included in the respective settings file of a second account.

Abstract: A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory and configured to recognize a user input field of a web site displayable in a browser, the website identified as a security risk based on a whitelist of website addresses; determine that a sequence of characters within the user input field matches one or more entries in a list of partial passwords in response to the web site being identified as a security risk; and prevent the user from entering additional characters into the user input field in response to the determination, to block receipt of the password by the web site. The determination may be performed in response to a count of characters in the sequence of characters exceeding a threshold.

Abstract: Some aspects include a schedule development method for a robotic floor-cleaning device that recognizes patterns in user input to automatically devise a work schedule.

Abstract: Security credentials associated with a first account maintained by a database system are authenticated. Based on authenticating the security credentials, a user interface element is provided to enable sharing of customer data associated with the first account with an application. A request to share customer data with the application is received. Based on the request, third-party data that is accessible by the first account is identified. The third-party data corresponds to a second account maintained by the database system. The second account corresponds to a third-party data provider. The application is enabled to access cloud data associated with the first account based on the request. The cloud data comprises the customer data and the third-party data.

Abstract: One or more non-transitory machine-readable storage mediums storing program instructions for operating a first cluster of servers. The program instructions are configured to be executable by one or more processors of the first cluster of servers to perform various operations. The operations may include storing a user interface of a cloud service consumer and receiving, from a user, a request to access services of the cloud service consumer. The operations may further include retrieving, from a second cluster of servers maintained by the cloud service consumer, user data required in response to the request and providing the user interface and the user data to the user.

Abstract: A messaging system comprises a conversation database comprising a plurality of conversations, a plurality of attribute databases comprising attributes associated with the plurality of conversations, and at least one computing device in communication with the conversation database and the plurality of attribute databases. Each of the plurality of attribute databases comprise a plurality of thread identifications corresponding to the plurality of conversations for identifying one or more attributes associated with each of the plurality of conversations. The at least one computing device is configured to perform operations comprising receiving input in a conversation, determining that the input comprises at least one attribute associated with the conversation, storing information in at least one of the plurality of attribute databases based on a determination of a type of the at least one attribute, and storing an association between the at least one attribute and the conversation.

Abstract: Systems and methods for dynamic, hyper context-based microsegmentation are described. In one aspect, span traffic associated with a computing device on a network is processed. Meta data associated with the span traffic is transmitted to a hyper context cloud server. It is determined whether the span traffic meta data matches a policy condition. Responsive to the span traffic meta data matching a policy condition, a policy is triggered. It is determined whether an action associated with the triggered policy is segment. Responsive to determining that the action is segment, a MAC address of the computing device is added to a segment name provided in the policy. The segment name is pushed to one or more enforcement points associated with the network.

Abstract: In some embodiments, during the SIP registration, the UE indicates in the REGISTER requests its support for ANBR as defined by ANBR attribute in the SDP and the P-CSCF indicates its support for the ANBR attribute in the SDP in the response for registration. In some embodiments, the P-CSCF serving a PLMN passes through the ANBR attribute in the SDP when the P-CSCF recognizes that the PLMN supports ANBR functionality. In some embodiments, the UE can include ANBR attribute in the SDP offer and answers when the P-CSCF indicates its support for the ANBR attribute in the SDP.

Abstract: A system to facilitate infrastructure management is described. The system includes one or more processors and a non-transitory machine-readable medium storing instructions that, when executed, cause the one or more processors to execute an infrastructure management controller to receive first monitoring data indicating a first infrastructure condition occurring at an on-premise infrastructure controller, determine a first load state of the on-premise infrastructure controller based on the first infrastructure condition and adjust a consistency level of the on-premise infrastructure controller to a first level of the consistency based on the first state.

Abstract: Style instructions, which may be coded in a style language and not include application logic, can be used to both control presentation of content of a web page by a web browser and control monitoring of interactions with the web page. Selectors in the style instructions, for example, can be used to identify elements of the web page and define styles for the elements. As a result of implementing such style instructions, individuals tasked with design of a web page can more easily and quickly configure monitoring of interactions with the web page.

Abstract: Network connectivity disruptions impacting users of a network, can be detected based on patterns in user network traffic and network topology data, e.g., by a monitoring server computer. Logged network traffic data can be filtered to identify anomalous data flows. The anomalous data flows can be data flows indicating connection timeouts such as failed Secure Sockets Layer/Transport Layer Security (SSL/TLS) handshakes. Sources and destinations of the anomalous data flows can be mapped to corresponding physical locations using the network topology data, and the anomalous data flows can be grouped by source and destination, in order to determine an impact or scope of a network connectivity disruption. Users of the network can be notified regarding the network connectivity disruption, and optionally, actions can be taken to reduce the impact of the network connectivity disruption.

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: A system and method are provided of minimizing network bandwidth used from an external network by client peers in a local network. The method can include the operation of organizing a plurality of clients each having media streamlets and a client parent in a structure within the local network. Mapping information propagates through the structure. The mapping information represents local streamlet locations as stored by the plurality of clients. Another operation is retrieving a local streamlet from a client identified in the mapping information as having the local streamlet for the requesting client.

Abstract: A method for a proxyless protocol includes intercepting, from a client, a first Transmission Control Protocol (TCP) connection request requesting to establish a TCP connection between the client and a proxy for routing data to a destination server. The request includes client information and a first sequence number. The method also includes transmitting, to the destination server, a second TCP connection request to establish a TCP connection between the client and the destination server. The second request includes a second sequence number less than the first sequence number. The method also includes intercepting, from the destination server, an acknowledgment message indicating acknowledgment of the second TCP connection request. The method also includes transmitting, to the destination server, a proxy protocol header message with the client information.

Abstract: The present disclosure relates to systems, non-transitory computer-readable media, and methods for consistently providing accurate versions of digital data within a distributed server network utilizing session-level user tokens. For example, in one or more embodiments, the disclosed systems generate a session-level user token that is specific to a client computing device participating in a session and in response to receiving a write request from the client computing device. As the client computing device initiates additional requests to read and write digital data from the distributed server network during the session, the disclosed systems maintain current version information within the session-level user token, and utilize this version information to verify that data provided to the client computing device from the distributed server network is accurate at the session-level.

Abstract: In one aspect, a computerized method includes the step of providing process monitor in a Gateway. The method includes the step of, with the process monitor, launching a Gateway Daemon (GWD). The GWD runs a GWD process that implements a Network Address Translation (NAT) process. The NAT process includes receiving a set of data packets from one or more Edge devices and forwarding the set of data packets to a public Internet. The method includes the step of receiving another set of data packets from the public Internet and forwarding the other set of data packets to the one or more Edge devices. The method includes the step of launching a Network Address Translation daemon (NATD). The method includes the step of detecting that the GWD process is interrupted; moving the NAT process to the NATD.

Abstract: Disclosed herein are example techniques to support multiple voice assistant services. An example implementation may involve a playback device capturing audio from the one or more microphones into one or more buffers as a sound data stream monitoring the sound data stream for a wake word associated with a specific voice assistant service and monitoring the sound data stream for a wake word associated with the media playback system. The playback device generates a second wake-word event corresponding to a voice input when sound data matching the wake word associated with the media playback system in a portion of the sound data stream is detected. The playback device determines that the voice input includes sound data matching one or more playback commands and sends sound data representing the voice input to a voice assistant associated with the media playback system for processing of the second voice input.

Abstract: An authentication method and system for mutual authentication between a first entity and a third entity via a second entity, based on an authentication protocol used by the first entity and the third entity. The second entity forwards mutual authentication messages between the first entity and the third entity. An apparatus is configured to perform an authentication method for a mutual authentication between a first entity and a third entity via a second entity, based on an authentication protocol used by the first entity and the third entity, the second entity forwards mutual authentication messages between the first entity and the third entity.

Abstract: A terminal A transmits an owner identity confirmation start request to a terminal B including owner server association information capable of identifying an owner of the terminal and a terminal management server A of the terminal. The terminal B transmits an owner identity confirmation request to the terminal management server B of the terminal, the owner identity confirmation request including the owner server association information received and the owner server association information including information of the terminal B. The terminal management server B transmits, to the terminal management server A, an inter-server owner identity confirmation request including the identity confirmation information of the owner of the terminal B and the owner server association information of the terminal A.

Abstract: Methods and systems for implementing private allocated networks in a virtual infrastructure are presented. One method operation creates virtual switches in one or more hosts in the virtual infrastructure. Each port in the virtual switches is associated with a private allocated network (PAN) from a group of possible PANs. In one embodiment, one or more PANs share the same physical media for data transmission. The intranet traffic within each PAN is not visible to nodes that are not connected to the each PAN. In another operation, the method defines addressing mode tables for the intranet traffic within each PAN. The entries in the addressing mode tables define addressing functions for routing the intranet traffic between the virtual switches, and different types of addressing functions are supported by the virtual switches.

Abstract: Systems and methods for a device portal management system that stores discovery data for multiple computing devices are described. The device portal management system may store first discovery data for a first computing device and second discovery data from a second computing device. A user associated with the first computing device and the second computing device may access the discovery data via the device portal management system. The user may further configure the first computing device and the second computing device via the device portal management system.

Abstract: A device provisioning configuration request from a network device to be configured is received. The network device provides the request to a network location obtained via a Dynamic Host Configuration Protocol request made automatically by the network device. A configuration agent script is provided in response to the device provisioning configuration request. One or more notifications associated with a provisioning progress are received from the network device via the configuration agent script. At least one of the one or more notifications is utilized in a provisioning workflow.

Abstract: An example system includes a processor to receive updates for a database of a publish and subscribe system. The processor is to generate an optimistic update based on the received updates. The processor is also to adaptively update the database using the optimistic update. In some examples, the processor generates a bulk optimistic update based on the optimistic update and adaptively updates the database using the bulk optimistic update or a read-modify-write sequence.

Abstract: Described are systems and methods for automatically generating, by a computing device, a regular expression that matches a list of input strings. A method includes identifying a set of baseline regular expression classes that match a portion of an input string of the list of input strings. The method further generates a current regular expression as a sequence of baseline regular expression classes from the set of baseline regular expression classes based on matching baseline regular expression classes to characters of a first input string of the list of input strings. The method further determines whether the current regular expression matches all input strings of the list of input strings, and if it does not, the method regenerates a portion of the current regular expression that occurs after an earliest character, in order, of one of the one or more input strings, that does not match the current regular expression.

Abstract: Methods and apparatus, including computer program products, are provided for supporting network functions. In some example embodiments, there may be provided a method that includes selecting, by a network node, a network function instance and/or a group of network function instances, the selecting based on information indicating membership of the network function instance in the group of network functions instances and the information including session information for a request associated with a session of a user equipment, the session information indicating whether the network function instance and/or the group of network function instances is assigned to the user equipment; and forwarding, by the network node, the request to the selected network function instance and/or the selected group. Related systems, methods, and articles of manufacture are also described.

Abstract: Described herein are systems and methods for end user connection load balancing amongst multiple on-premise connector proxies deployed across geographic locations and reducing connection setup latency without using a shared or distributed database. The system can load balance connections deterministically amongst the on-premise connector proxies using load statistics. The system utilizes an intelligent DNS service that can use network experience data, service availability, and application metrics to provide sophisticated traffic management via DNS or API-based decisions. The system can include a domain name system (DNS) resolver configured to receive metrics for a first connector and a second connector of a data center of an entity, receive a DNS request including an entity identifier and a data center identifier; and transmit a response to the DNS request identifying a server selected based on the metrics identified using the entity identifier and the data center identifier.

Abstract: A method, computer program product, and computing system for using a storage path to facilitate disaster recovery are described. A method may comprise receiving a selection of the storage path to facilitate access to a cloud storage device by the cloud computing client. The method may further comprise configuring the storage path to facilitate access to the cloud storage device by the cloud computing client, wherein the storage path is dedicated to the cloud computing client, and wherein a cloud computing site infrastructure is inaccessible to the cloud computing client via the storage path. The method may also comprise configuring a backup routine to generate a backed-up client resource and transmit the backed-up client resource to the cloud storage device via the storage path. The method may additionally comprise transmitting a list of backed-up client resources stored at the cloud storage device.

Abstract: An information providing device acquires a keyword specified from a page on which an advertisement display area used for displaying an advertisement is arranged, selects advertisements corresponding to the keyword from a storing means storing information of each of a plurality of advertisements as display target candidates, and specifies a display target advertisement to be displayed in the advertisement display area of the page from among the display target candidates. Then, the information providing device, in a case where the display target candidate that is not specified among the display target candidates of a same advertiser as that of the specified display target advertisement satisfies a predetermined condition, determines the display target candidate and the display target advertisement as display target advertisements to be displayed in the advertisement display area.

Abstract: Some embodiments provide a system to protect an electric vehicle charging infrastructure. An electric vehicle charging site may receive AC power from a power grid and provide DC power to electric vehicles. The charging site may include a plurality of monitoring nodes each generating a series of current monitoring node values over time that represent a current operation of the electric vehicle charging infrastructure. A supply equipment communication controller may receive an access request from an access requestor associated with an electric vehicle, the access request being associated with a platform certificate. A secondary actor policy decision point at the charging site may evaluate the access requestor's identity and respond with an action message allowing high-level communication with the access requestor to proceed. Note that information associated with the current monitoring node values and/or the access request may be stored in a secure, distributed transaction ledger (e.g.

Abstract: A communication network encrypts a first portion of a transaction associated with point-to-point communications using a point-to-point encryption key. A second portion of the transaction associated with end-to-end communications is encrypted using an end-to-end encryption key.

Abstract: A method and apparatus for media decoding by a decoder include decoding a first indication indicative of a first conformance point of a coded video sequence. A second indication indicative of a second conformance point of the coded video sequence is decoded. It is determined whether the coded video sequence is decodable by the decoder based on at least one of the first indication and the second indication. The coded video sequence is selectively decoded based on determining whether the decoded video sequence is decodable by the decoder.

Abstract: The present teaching relates to method and system for evaluating a conversion. The method extracts meta-information including a conversion parameter and a reward. The meta-information corresponds to a conversion associated with an advertisement displayed previously by a plurality of entities. The method receives a plurality of claims for the conversion from one or more entities, and selects a claim corresponding to an entity from the plurality of claims based on the conversion parameter and information included in the plurality of claims. Further, the method transmits information related to the selected claim.

Abstract: A client device requests a web page via a clientless VPN. In response to the request, web page content comprising at least one script element is received at the clientless VPN. The clientless VPN inserts a wrapper function around at least a portion of the script element, forming modified web content. The client device is provided with the modified web content.

Abstract: Solutions for validating a customized user equipment (UE), prior to permitting the UE to register on a cellular network, include: receiving a set of requirement queries into a validation tool, the set of requirement queries including at least one software application identification, at least one user interface (UI) configuration, and at least one network connectivity configuration; receiving a set of requirements into the validation tool, the set of requirements corresponding with the set of requirement queries; receiving, from a customization tool on the UE, UE configuration information corresponding with the set of requirement queries; determining whether the UE configuration information meets the set of requirements; based on at least the UE configuration information meeting the set of requirements, generating a validation report for the UE; and transmitting the validation report over a network.

Abstract: Examples described herein provide network service discovery in a network. Examples herein include receiving, from a network device in the network, a set of records corresponding to a set of service advertisements indicative of capabilities of services hosted by respective host devices connected to the network device. Examples herein include determining, a set of neighbor network devices corresponding to the network device, based on radio frequency (RF) data in the network and a predefined set of policies associated with each of the set of records. Examples herein further include sending the set of records to the set of the neighbor network devices, where each of the set of neighbor network devices is to serve service discovery requests based on the set of records.

Abstract: A method, computer system, and computer program product are provided for modifying a web application at runtime. A single-page web application is loaded by a web browser of a client, wherein the single-page web application exchanges data between the client and a server. An extension for the single-page web application is obtained. The extension is applied to the single-page web application, wherein applying the extension adds a new feature, or modifies an existing feature, of the single-page web application without reloading the single-page web application.

Abstract: Embodiments are directed towards real time display of event records and extracted values based on at least one extraction rule, such as a regular expression. A user interface may be employed to enable a user to have an extraction rule automatically generate and/or to manually enter an extraction rule. The user may be enabled to manually edit a previously provided extraction rule, which may result in real time display of updated extracted values. The extraction rule may be utilized to extract values from each of a plurality of records, including event records of unstructured machine data. Statistics may be determined for each unique extracted value, and may be displayed to the user in real time. The user interface may also enable the user to select at least one unique extracted value to display those event records that include an extracted value that matches the selected value.

Abstract: Systems and methods include determining if a destination address for a destination host is on-link; when the destination address is on-link, negotiating and selecting a Link-Local (LL) source address and a LL destination address that is on-link; and, when the destination address is not on-link, utilizing an address for the destination host separate from LL addresses. The destination host can be a multi-homed host. The negotiating and selecting and the utilizing are based on a plurality of rules performed in order. The plurality of rules are defined in RFC 6724, September 2012.

Abstract: A system and method for the real-time management of a device, and more particularly to the establishment and enforcement of policies or rules associated with the feature or functions that may be performed with the device, such as making and receiving calls, exchanging data, playing games and music, sending and receiving email, accessing web sites, and paying for goods and services. If a child or employee is using the device, there may be a need to regulate how that device can be used and to determine who will pay for what goods or services. In addition to providing all of the features associated with a device, service providers need to be able to establish and enforce rules (policies) regulating how and when that device can be used and who will pay for a good or service requested by the user of the device.

Abstract: A computer system automatically tests a network communication model by predicting whether particular traffic (whether actual or simulated) should be allowed on the network, and then estimating the accuracy of the network communication model based on the prediction. Such an estimate may be generated even before the model has been applied to traffic on the network. For example, the model may be generated based on a first set of network traffic. The accuracy of the model may then be estimated based on a second set of network traffic. This allows the accuracy of the model to be estimated without first waiting to apply the model to actual network traffic, thereby reducing the risk associated with applying the model before its accuracy is known.

Abstract: Aspects of the subject disclosure may include, for example, a method for processing an advertising request message, including, receiving an advertising request message from a mobile device, determining if an advertising exchange server associated with the advertising request is permitted to receive enhanced information associated with the mobile device if a service provider is permitted to provide location information associated with the mobile device responsive to determining that the advertising exchange server associated with the advertising request is permitted to receive the enhanced information, responsive to determining that the service provider is permitted to provide location information, adding location information associated with the mobile device to a header of the advertising request message, and transmitting the advertising request message to the advertising exchange server. Other embodiments are disclosed.

Abstract: Methods, apparatus, systems and articles of manufacture to coordinate receipt of monitoring information are disclosed. An example method includes in response to a first received message requesting a session identifier, creating, with a first processing device, the session identifier. The session identifier including an identifier of the first processor. The first message is received from a media device via a load balancer. First monitoring information is extracted from the first message. The first monitoring information is stored in a first database of the first processor.

Abstract: A method for managing a communication session includes receiving a request to perform a task. The task is divided into one or more steps. One or more user devices are identified that can be used to perform one or more of the steps. One or more communication channels are identified that are available to the one or more user devices. The communication session is permitted to switch from one or more of the user devices and communication channels to complete the one or more steps of the task while maintaining a continuity of the communication session.

Abstract: To optimize content of a webpage in a manner that depends on whether or not a user has linked accounts to each other. The solving means is an information processing apparatus including a storage unit, a communication unit, and a control unit. The storage unit stores information regarding a first account of each of a plurality of users and first content and second content to be placed on a webpage. The communication unit communicates with a user terminal of the user.

Abstract: Augmented reality presentations are provided at respective electronic devices. A first electronic device receives information relating to modification made to an augmented reality presentation at a second electronic device, and the first electronic device modifies the first augmented reality presentation in response to the information.

Abstract: Provided are a video streaming system, and a corresponding video streaming method and video streaming apparatus. The video streaming system includes a terminal and a VR device. Application platform software and server streaming software are installed on the terminal. Client streaming software is installed on the VR device, the client streaming software is configured to send posture data to the server streaming software on the terminal, the server streaming software is configured to send the posture data to the application platform software, and the application platform software is configured to render a picture. The hardware configuration of the terminal itself is utilized for picture processing, and satisfactory pictures can be obtained on the screen of the VR device. On the other hand, the picture is rendered according to prediction positioning data/prediction posture data, thereby effectively reducing picture jitter and display delay.

Abstract: An architecture for a load-balanced groups of multi-stage manycore processors shared dynamically among a set of software applications, with capabilities for destination task defined intra-application prioritization of inter-task communications (ITC), for architecture-based ITC performance isolation between the applications, as well as for prioritizing application task instances for execution on cores of manycore processors based at least in part on which of the task instances have available for them the input data, such as ITC data, that they need for executing.

Abstract: A sender device can determine that data associated with an application is to be sent to a service via a network. The sender device can generate resource queries directed to at least two participant devices and receive responses indicating whether each of the participant devices has a resource available to host a virtual network function (“VNF”). The sender device can generate commands directed to security interface applications executed by the participant devices. The commands can instruct the participant devices to instantiate the VNFs. The sender device can partition the data into data partitions directed to the participant devices. The sender device can send the data partitions to the VNFs of the participant devices. The VNFs can forward the data partitions to a network access device that can combine the data partitions and send the data to the service via the network.