Abstract: Methods, systems, and media for dynamically separating Internet of Things (IoT) devices in a network are provided. In accordance with some embodiments of the disclosed subject matter, a method for dynamically separating IoT devices in a network is provided, the method comprising: detecting a first IoT device in the network; monitoring network communication of the first IoT device; determining device information of the first IoT device based on the monitored network communication; and causing the first IoT device to communicate on a first subnet of a plurality of subnets in the network based on the device information.

Abstract: An end-user computing device can include a theft detector that maintains a registered host device list containing identifiers of at least one registered host device. The theft detector can have root access to operations of the end-user device and the theft detector can provides a secure reboot request in response to detecting a possible theft condition. The end-user computing device can also include a boot loader that executes a secure reboot of the end-user device in response to a secure reboot request from the theft detector. The secure reboot of the end-user device resets the end-user device to prevent access to the end-user device.

Abstract: A network server is provided. The network server includes at least one processor in communication with at least one memory device. The network server is programmed to receive an access request originating from a user device, perform an authentication process for connecting with the user device, transmit, to the user device, a request message for a media access control (MAC) address of the user device, receive, from the user device, a response message including the MAC address of the user device, and determine whether to grant the access request based on the MAC address of the user device.

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: Provided are an identifier resolution method and apparatus for the Internet of Things. In the method, different identifier resolution systems are compatible through constructing an identifier resolution architecture for the Internet of Things, and a unified method is used for resolving various identifiers. Therefore, it is simply required to maintain one identifier resolution architecture for the Internet of Things when resolving different identifiers, which reduces the workload and difficulty for maintenance of the identifier resolution system and thus reduces the workload and difficulty for maintenance of the Internet of Things.

Abstract: Electronic communications between a client device and a server device are improved by providing a middleware component that incorporates electronic data read and/or written to a database in a hybrid data structure. The hybrid structure is further designed to allow for “NULL” or other pre-defined data values when one or more data fields are unavailable or erroneous. The client device, in turn, can be configured to check for the pre-defined data values in certain fields and to gracefully process such values. The hybrid structure with pre-defined error values therefore provides for very efficient data transmittal and processing, while retaining the ability to handle errors or other unusual situations relating to the data.

Abstract: A method including receiving, at a first VPN server during an established VPN connection, a first data request and a second data request from a user device; transmitting, by the first VPN server during the established VPN connection, the first data request to a second VPN server and the second data request to a third VPN server; receiving, by the first VPN server from the second VPN server during the established VPN connection, first data associated with the first data request; and receiving, by the first VPN server from the third VPN server during the established VPN connection, second data associated with the second data request, the second exit IP address being different from the first exit IP address. Various other aspects are contemplated.

Abstract: Various methods, apparatuses/systems, and media for intelligent identification of content data in files are disclosed. A receiver receives a request from a user to send an electronic mail (email) for external communication outside of an organization's internal network. A processor detects whether the email includes a file as an attachment to the email; scans the file for content data; tags and highlights the content data for preview check and for receiving user's input of confirmation data when it is determined that the email includes an external recipient. The receiver receives the user's input of confirmation data whether the external recipient is a recipient who is authorized to obtain the file including the content data. The processor transmits the email to the external recipient in response to receiving a positive user's input of confirmation data.

Abstract: Systems, methods and products for identifying IP mass hosts and determining whether they are good or bad. One embodiment is a method including selecting a first candidate IP address, identifying a set of domains hosted at the IP address, and identifying registrants of the domains. A number of unique ones of the registrants is determined and if the number of unique registrants exceeds a threshold number, the candidate IP address is deemed an IP mass host. Otherwise, the candidate IP address is deemed not to be an IP mass host. For an IP mass host, domains that have bad reputations are identified, and it is determined whether the bad domains comprise at least a threshold percentage of the total hosted domains. If the IP mass host has at least the threshold percentage of bad domains, the IP mass host is deemed a bad mass host.

Abstract: Systems and methods for automated digital-property analysis are disclosed. A document representing a digital property may be received and the document, or key elements and/or language characterizations representing the document, may be utilized to search one or more databases for similar documents. The search results may be ranked and displayed for review. If an indication that the search results do not correspond to the document is received, that indication may be utilized to promote registration of the document with a trade-secret registry, for provision of insurance policies, etc. Scheduled auditing may be established and utilized to confirm the digital property has not be disclosed and/or to determine a potential misappropriation event.

Abstract: Systems and methods for displaying a view of a virtual file system through a file viewer of a computer operating system are described herein. In an embodiment, an application receives a request to return data to display in a view of a file repository from a service of a computer operating system which is configured to cause displaying of the view of the file repository. The application accesses stored configuration information which identifies one or more particular queries which are mapped to a particular folder of the file repository. The application transmits the one or more particular queries to a database management system and receives structured data that satisfies the one or more particular queries in response.

Abstract: The present application describes a system and method for passively collecting DNS traffic data as that data is passed between a recursive DNS resolver and an authoritative DNS server. The information contained in the collected DNS traffic data is used to generate a virtual authoritative DNS server, or a zone associated with the authoritative DNS server, when it is determined that the authoritative DNS server has been compromised.

Abstract: An interconnect module (ICM) having at least two internal data paths is provided. The ICM determines if a connected network interface card (NIC) supports a division of work between the NIC and the ICM. NICs may be standard NICs, advanced NICs (ANICs), or smart NICs (SNICs). The ICM may perform a different amount of processing for network packets received from different devices based on the division of work previously identified. Some NICs may preprocess network packets with respect to switching and routing processing to allow the ICM to bypass that functionality for those packets. Packets received from devices not providing a division of work receive full processing including switching and routing processing. Devices may be grouped to either a switching and routing group or a virtual bypass group such that data received from devices associated with the virtual bypass group may bypass selected processing typically performed by the ICM.

Abstract: Some embodiments of the invention provide a method of reporting telemetry data in a telecommunication network. The telemetry data is collected from a set of one or more telemetry-producing (TP) network elements and is distributed to a set of one or more telemetry-consuming (TC) network elements registered to receive the telemetry data. The method receives a telemetry packet produced by a TP network element and performs a filtering operation to determine whether the telemetry packet should be reported to at least a subset of one or more TC network elements. When the filtering operations result in a determination that the telemetry packet should be reported, the method forwards the telemetry packet to the subset of TC network elements.

Abstract: A method of wireless communication by a wireless device calculates a first latency for a first wireless interface using a DNS (domain name service) protocol. The method also calculates a second latency for a second wireless interface using the DNS protocol. The method stores the first latency and the second latency in a database; and selects the first interface or the second interface based on the calculated first latency and second latency.

Abstract: Technologies are disclosed for resource mapping during URL changes in multi-tenant distributed computing systems. The distributed computing system may resolve a URL by using a tenant and/or site name extracted from the URL to retrieve an entry in a site map table. The entry includes an address to a database that contains the requested content. After a tenant or site name has been changed, or if the tenant or site have been moved, the distributed computing system will resolve pre-existing URLs to the old entry, resulting in a file not found error. In some embodiments, during an operation that changes a tenant or site name, a redirect URL containing the new tenant and/or site name is added to the old entry. When a request addressed to a URL containing the old tenant and/or site names is received, the distributed system sends a redirect response that includes the redirect URL.

Abstract: A method for dynamically updating domain name system (DNS) records from network function (NF) profile information includes, at an NF repository function (NRF) including at least one processor, receiving a message relating to an NF profile of an NF. The method further includes constructing, based on NF service availability information in the NF profile and local configuration of the NRF, a DNS resource record for the NF. The method further includes utilizing a dynamic DNS update procedure to dynamically update a DNS resource record for the NF with a DNS server.

Abstract: A method for synchronizing a binding process among a group of network devices connected to a server that is multi-homed to the group of network devices in provided. The method is executed by a first network device among the group of network devices and includes: receiving, from the server, network traffic associated with a host executing on the server; configuring, using the network traffic, a binding between the first network device and the host and setting a binding status of the first network device for the host to a first status; and transmitting, in response to the setting and via an out-of-band (OOB) channel to a second network device among the plurality of network devices, first binding instructions for causing the second network device set a binding status of the second network device for the host to a second status different from the first status.

Abstract: A non-transitory computer-readable storage medium storing a detection program that causes a processor included in a noise estimation apparatus to execute a process, the process includes acquiring domain information included in cyber attack information, acquiring record information corresponding to the acquired domain information from a second managing server, the second managing server managing a response history of a first managing server by monitoring communication of the first managing server, the first managing server managing an association between domain information and an IP address, the response history being related to the association between the domain information and the IP address, identifying an IP address that is repeatedly used and a name server associated with the identified IP address by analyzing the record information, and outputting first list information indicating the identified IP address and the identified name server.

Abstract: Systems and methods are provided for use in identifying synthetic identities. One example method includes receiving a request from a relying party for an identity asserted by a user to the relying party, where the request includes identity data indicative of the identity, feature data associated with the user asserting the identity, and a device ID for a communication device of the user. The method also includes parsing the identity data, the feature data, and the device ID from the request, and calculating a device behavior score based on the feature data and the device ID. The method then includes aggregating the device behavior score and at least one of a fraud profile score, a user profile score, and/or an exposure behavior score into a metric indicative of a likelihood that the identity asserted by the user is a synthetic identity and transmitting the metric to the relying party.

Abstract: A method including receiving, by a processor associated with a read-only device, an access request to access an initial operating system from a requesting device associated with a virtual private network (VPN) server, the initial operating system being stored on a read-only memory associated with the read-only device; transmitting, by the processor to the requesting device based at least in part on receiving the access request, a request for authentication information associated with the VPN server; and controlling, by the processor, access to the initial operating system by the requesting device based at least in part on a result of a comparison of the authentication information associated with the VPN server with authentication information stored in the read-only memory. Various other aspects are contemplated.

Abstract: The present invention is directed to communications apparatus, systems, and methods for preventing and/or minimizing session data clipping/loss when using the ICE protocol procedures on a session border controller. An exemplary method embodiment of operating a Session Border Controller (SBC) includes, receiving, at the SBC, an initial offer message from a first user equipment device directed to a second user equipment device, said initial offer message including one or more candidate addresses for the first user equipment device; and establishing a data path between the SBC and the second user equipment device in response to receiving said initial offer message prior to establishing a data session between the first user equipment device and the session border controller.

Abstract: A system and method for protocol independent receive side scaling (RSS) includes storing a plurality of RSS hash M-tuple definitions, each definition corresponding to one of a set of possible protocol header combinations for routing an incoming packet, the set of possible protocol header combinations being modifiable to include later-developed protocols. Based on initial bytes of the incoming packet, a pattern of protocol headers is detected, and used to select one of the plurality of RSS hash M-tuple definitions. The selected RSS hash M-tuple definition is applied as a protocol-independent arbitrary set of bits to the headers of the incoming packet to form a RSS hash M-tuple vector, which is used to compute a RSS hash. Based on the RSS hash, a particular queue is selected from a set of destination queues identified for the packet, and the packet is delivered to the selected particular queue.

Abstract: A method is provided for storing at least one domain name system container image, wherein the domain name system container image is configured to create at least one domain name system container instance in a domain name system infrastructure. The method includes: creating at least one item of signed domain name system information, wherein the at least one item of signed domain name system information is created by a cryptographic signature of an item of domain name system information, wherein the cryptographic signature is created outside the domain name system server infrastructure; creating at least one domain name system container image, wherein the at least one domain name system container image has the signed domain name system information and at least one item of domain name system server software; and storing the at least one domain name system container image in a container registry.

Abstract: A smart network interface card (SNIC) is provided. The SNIC may connect to an interconnect module (ICM) having at least two internal data paths. The SNIC and ICM determine a division of work between them. In general, NICs may be standard NICs, advanced NICs (ANICs), or smart NICs (SNICs). The ICM may perform a different amount of processing for network packets received from different devices based on the division of work previously identified. Some SNICs may preprocess network packets with respect to switching and routing processing to allow the ICM to bypass that functionality. Packets received from devices providing a division of work (e.g., SNICs) may receive reduced processing for functions offloaded to the SNIC. SNICs may utilize either a switching and routing group or a virtual bypass group such that data may bypass selected processing typically performed by the ICM.

Abstract: A method for providing topology information, use of a name service server, a device, a computer program, a computer-readable medium and a method for configuring a device to be named within an industrial network, wherein a) the device to be named receives a neighbouring name message from a neighbouring device, b) a self-naming module creates a topological neighbouring domain name based on the neighbouring name message, c) the self-naming module transmits the topological neighbouring domain name to a name service server, d) the self-naming module receives from the name service server a response message, which includes at least one device name of the device to be named belonging to the topological neighbouring domain name, and e) at least one device name from the response message is assigned to the device to be named and this name is stored as the device name by the self-naming module.

Abstract: In some implementations, a device may receive file location information identifying a file to be transferred to a user device associated with the first network provider, wherein the file location information identifies a domain name associated with a second network provider. The device may provide, based on the file location information, a request to obtain one or more records associated with the domain name. The device may receive the one or more records based on the request. The device may selectively obtain, based on the one or more records, the file from a first content device associated with the second network provider or from a second content device associated with a third-party provider. The device may provide the file to the user device.

Abstract: Systems and methods are disclosed for determining a topology of a network comprising a plurality of intermediary devices and intermediary paths. One method includes transmitting probes having a TTL value with a destination set to a destination device; receiving, for each probe transmitted, a response including an IP address of a responding device; determining whether more than one responding device has responded to the probes; determining whether more than one responding device has been found for two previous transmissions of probes when more than one responding device has responded to the probes; and transmitting, for each more than one responding device, probes having a decreased TTL value with a destination set to one of the IP addresses of the more than one responding devices, when more than one responding device has been found for two previous transmissions.

Abstract: A first message is detected. The first message is directed towards a first messaging recipient in a messaging application. The first message contains one or more content items. A set of one or more candidate messaging recipients is determined based on the first message and based on a content analysis of the one or more content items. A second messaging recipient is identified from the set of one or more candidate messaging recipients. The identification is based on the content analysis. The first message is routed to the second messaging recipient. The first message is routed in response to the identifying the second messaging recipient.

Abstract: An inspection device includes a memory and a processor. The processor is coupled to the memory and configured to transmit, to a network, an inspection packet that includes a first address for which a plurality of transfer devices in a network does not learn correspondences between the first address and transfer destination devices. The first address is a transmission destination address. The inspection device receives a first packet from the network and determines whether the first packet matches the inspection packet. The inspection devices transmits, to the network, a setting packet of which a transmission source address is set to the first address.

Abstract: A communication system includes multiple Point-of-Presence (POP) interfaces distributed in a Wide-Area Network (WAN), and one or more processors coupled to the POP interfaces. The processors are configured to assign to an initiator in the communication system a client Internet Protocol (IP) address, including embedding in the client IP address an affiliation of the initiator with a group of initiators, to assign to a responder in the communication system a service IP address, including embedding in the service IP address an affiliation of the service with a group of responders, and to route traffic between the initiator and the responder, over the WAN via one or more of the POP interfaces, in a stateless manner, based on the affiliation of the initiator and the affiliation of the service, as embedded in the client and service IP addresses.

Abstract: A device implementing the subject system may include at least one processor configured to receive, by a first system process, a first network address that corresponds to a domain name that was resolved by a second system process, the resolving having been responsive to a resolution request therefor by an application process. The at least one processor may be further configured to receive, by the first system process, a second network address for which a network connection was opened by the application process. The at least one processor may be further configured to, responsive to determining that the application process opened a network connection for a network address for which the application process did not provide, to the second system process, a resolution request for the corresponding domain name, provide, by the first system process, an indication of the network address in conjunction with an indication of the application process.

Abstract: A method includes a second system that determines a type of a first management Internet Protocol (IP) address, and sends, to a first system, first information used to indicate the type of the first management IP address; the first system determines the first management IP address based on the type of the first management IP address indicated by the first information, and releases a first correspondence between system identification information and the first management IP address to an advertisement system; the advertisement system sends the first correspondence to a network management system; and the network management system manages the first system based on the first correspondence.

Abstract: In general, embodiments of the invention relate to routing packets between hosts or virtual machines in different layer 2 domains. More specifically, embodiments of the invention relate to using overlay routing mechanisms in an Internet Protocol (IP) fabric to enable communication between hosts or virtual machines in different layer 2 domains to communication. The overlay routing mechanisms may include direct routing, indirect routing, naked routing, or a combination thereof (e.g., hybrid routing).

Abstract: Systems and methods are provided for distributing a domain name service (DNS) response cache in a DNS resolving system on a network. The systems and methods described herein may improve response times for client queries and also protect the DNS resolving system from DNS related cyber attacks.

Abstract: An object of the present invention is to provide an edge device, a control method, and a program with which the effects of loop generation can be minimized from the NW operator side while ensuring connection normality with the device of an NW user. An edge device according to the present invention physically closes an access port upon confirmation that the access port has been connected to an external device while the access port is in a physically released state and a DF state is undefined, notifies other edge devices within an EVPN MH configuration that the host device has entered a state in which the host device may become the DF and causes an EVPN function unit to calculate the DF state to be set, physically opens the access port when the calculation result indicates DF, and physically closes the access port when the calculation result indicates BDF.

Abstract: A domain name access method and a device are described. As described herein, a domain name server (DNS) server performs resolution on a domain name requested by the terminal device. The DNS server may then send an internet protocol (IP) address of an application server obtained through the resolution and use condition information to the terminal device. With this, communication efficiency of the terminal device can be improved, and waste of transmission resources in a communications system is also avoided.

Abstract: Systems and methods of network packet switching use a table representation of a trie data structure to identify a timestamp (TS) range (or time range) for a received packet based on the packet timestamp (TS). The trie data structure is programmed with a plurality of predetermined time ranges. Each node in the trie data structure corresponds to a TS prefix and is associated with a corresponding predetermined time range. A search engine in the network switch can use the packet TS as a key to traverse the trie data structure and thereby matching the packet TS to a predetermined time range according to a Longest Prefix Match (LPM) process. Provided with the TS ranges of the incoming packets, various applications and logic engines in the network switch can accordingly process the packets, such as determining a new destination IP address and performing channel switch accordingly.

Abstract: The disclosure relates to a 5th generation (5G) or pre-5G communication system for supporting a higher data transmission rate than a 4th generation (4G) communication system such as Long Term Evolution (LTE). According to various embodiments, there is provided an operating method of an application function (AF) in a wireless communication system that includes: transmitting, to a network exposure function (NEF), a Nnef_EventExposure_Subscribe message including an address of a user equipment (UE) to request a subscription of a user plane function (UPF) event exposure service for the UE; and receiving, from the NEF, a Nnef_EventExposure_Notify message including information on the UPF event exposure service for the UE.

Abstract: A messaging system receives a message including a recipient ID and a message body, the message body containing one or more customizable fields. The messaging system receives a user preference model based on the recipient ID. The user preference model identifies message elements and content preferred by the recipient of the message. Based on the user preference model, the messaging system modifies the customizable fields in the message body, generating a modified message. The modified message is transmitted to a client device associated with the recipient ID for presentation to the recipient.

Abstract: An approach for diagnosing degradations in performance and malfunctions in sensor networks is disclosed. This approach is based on so-called “fault signatures”. Such fault signatures are generated for known fault conditions through a statistical analysis process that results in each known fault having a unique fault signature. Such unique fault signatures can then point to the root cause of a problem.

Abstract: Systems and method directed to providing a framework for a trustworthy and security compliant edge computing infrastructure are described. Such framework allows self-built edge datacenters to continue providing enhanced service quality in regions where user data and user privacy are of top concerns. In examples, the systems and methods may include an edge router configured to route a communication received from a mobile device to a network address translation appliance, the network address translation appliance associates an anonymous internet protocol address with an internet protocol address associated with the mobile device, and provides the request to an edge datacenter. The edge data center may request content and/or services from a technology partner datacenter via an application gateway for security and privacy that is configured to receive the request for content from the edge datacenter and determine if the request for content is associated with user protected information.

Abstract: An example embodiment may involve determining that a client device (such as a smartphone, tablet, or in-automobile audio device) is in an automobile and that the client device has access to a playlist of audio content. Possibly based on the client device being in the automobile and having access to the playlist of audio content, the client device may request a stream of the audio content. As a consequence of making the request, the client device may receive the stream of the audio content and begin audible playout of the audio content.

Abstract: Systems and methods for multi-device communication are disclosed herein. An example method includes generating a nested data packet including a first access address and a first payload, the first payload including a first target payload and a first payload nesting section, the first access address being assigned to a first device, a second access address and a second payload placed into the first payload nesting section, and transmitting the nested data packet to the first device and the second device.

Abstract: A method of translating an Internet protocol (IP) packet, the method including forming, by a first electronic device, a forwarding table by assigning a first IP address and a second IP address to a second electronic device, a tethering service being provided to the second electronic device through the first electronic device through an internal network, the first IP address and the second IP address having different formats and being associated in the forwarding table, and performing, by the first electronic device, an IP address translation on a first IP packet to be transmitted based on the forwarding table such that the first IP packet includes the first IP address or the second IP address, the first IP packet being included in a communication between the second electronic device and an external network through the internal network and the first electronic device.

Abstract: A packet-filtering system configured to filter packets in accordance with packet-filtering rules may receive data indicating network-threat indicators and may configure the packet-filtering rules to cause the packet-filtering system to identify packets comprising unencrypted data, and packets comprising encrypted data. A portion of the unencrypted data may correspond to one or more of the network-threat indicators, and the packet-filtering rules may be configured to cause the packet-filtering system to determine, based on the portion of the unencrypted data, that the packets comprising encrypted data correspond to the one or more network-threat indicators.

Abstract: Embodiments relate to systems, devices, non-transitory computer-readable storage media, and computer-implemented methods for resolving DNS requests by receiving a first Domain Name System (DNS) resolution request, extracting first contextual data from the first DNS resolution request, determining to apply a first resolution rule based on the first contextual data and a contextual condition, forwarding the first DNS resolution request to a DNS resolver based on applying the first resolution rule, receiving a second DNS resolution request, extracting second contextual data from the second DNS resolution request, determining to apply a second resolution rule based on the second contextual data and the contextual condition, and retrieving a resource in response to the second DNS resolution request based on applying the second resolution rule.

Abstract: A method including accessing, by a device associated with a virtual private network (VPN) server, an initial operating system stored on a read-only device, the initial operating system being associated with the VPN server providing VPN services; receiving, by the device from the read-only device, a request for authentication information to authenticate the device as an authorized recipient of the initial operating system; transmitting, by the device to the read-only device, the authentication information; and receiving, by the device from the read-only device, the initial operating system based at least in part on transmitting the authentication information. Various other aspects are contemplated.

Abstract: A method, system and computer program product for facilitating inter-proxy communication via an existing protocol. A proxy receives a message (e.g., request message) using a protocol, such as HTTP. If the proxy determines to add proxy relevant information to the message, then the proxy defines a new message header for the inter-proxy communication, which is added to the existing header section of the message. The proxy relevant information is then added in the newly added message header of the message. The message with the proxy relevant information is then transmitted to a subsequent proxy using the protocol of the underlying request-response transaction. In this manner, inter-proxy communications are enabled via an existing protocol (e.g., HTTP) that is used in the request-response transaction so that proxies can communicate with one another pertaining to matters (e.g., maintenance schedule) unrelated to the original intent of the transaction using the existing protocol (e.g., HTTP).

Abstract: A system and method for automatic IP address range allocation is provided. The system and method include a) storing an availability map of IP addresses including a pointer to a next available IP address range of a first size, b) receiving, from a requestor computer device, a request for an IP address range of the first size, c) selecting the next available IP address range of the first size based on the pointer, d) moving the pointer to another available IP address range of the first size, e) placing the selected IP address range of the first size in a quarantine pool, and f) transmitting, to the requestor computer device, the selected IP address range of the first size.