Abstract: A migration management service monitors the resource usage or other behavior factors related to virtual machine instances implementing database functionality and hosted on various physical computing devices. Based on the resource usage associated with the implementation of the database functionality and other behavioral factors, the migration management service identifies a set of target hosted virtual machine instances for possible migration. The migration management service can further identify and prioritize from the set of target hosted virtual machine instances which hosted virtual machine instances may have a greater likelihood to impact the execution of other hosted virtual machine instances being hosted in the same physical computing device. Based on the identification and prioritization, the migration management service can then cause the migration of one or more hosted virtual machine instances unto on a different physical computing device.

Abstract: A variety of techniques are disclosed for detection of advanced persistent threats and similar malware. In one aspect, the detection of certain network traffic at a gateway is used to trigger a query of an originating endpoint, which can use internal logs to identify a local process that is sourcing the network traffic. In another aspect, an endpoint is configured to periodically generate and transmit a secure heartbeat, so that an interruption of the heartbeat can be used to signal the possible presence of malware. In another aspect, other information such as local and global reputation information is used to provide context for more accurate malware detection.

Abstract: Various implementations disclosed herein provide a mechanism for determining that a configuration status of a compliant device is too far out-of-date, and subsequently bridging the configuration status of the compliant device to the up-to-date configuration data and instructions in response. In various implementations, determination of the configuration status of the compliant device is possible using a single request from the compliant device, which in turn reduces the amount of network traffic and utilization of network resources needed to update the compliant device with the up-to-date configuration data and instructions.

Abstract: An Ethernet power sourcing equipment (PSE), and a method and an apparatus for power over Ethernet (PoE), where the Ethernet PSE includes a PSE chip, a master control processor, a power supplying port, and a preprocessor. The preprocessor is configured to determine whether the master control processor starts upon power-on, control the PSE chip to detect whether the power supplying port is connected to a valid powered device (PD) when the master control processor starts upon power-on, and control, according to a preset rule, the PSE chip to power on the valid PD when the power supplying port is connected to the valid PD. Hence, the Ethernet PSE has abundant management functions and can quickly power on a PD.

Abstract: A method for allocating computing resources of a processor is provided. The method includes the following. A current processor load is detected. Required computing resources are determined according to the current processor load. The required computing resources correspond to a total frequency of each processor core. The minimum number of required processor cores is determined. The maximum number of the processor cores in a system is obtained, and a selectable range of the number of processor cores is determined. A plurality of frequency allocation strategies are obtained according to a formula Nc_x*Fx=Nc_min*Fmax. A correspondence between operating frequencies and power values of each processor core is obtained, and a frequency allocation strategy is determined, such that a total frequency of each processor core satisfying the computing resources and a total power value of each processor core is minimum.

Abstract: An electronic device includes a connector for connection to an external device; a controller electrically connected to a first external device detection terminal of the connector to detect an electric state of the first external device detection terminal and to output a signal corresponding to the detected electric state; a processor having a first input terminal electrically connected to the controller, that is configured to receive the signal through the first input terminal, having a second input terminal electrically connected to a second external device detection terminal of the connector, and that is configured to detect an electric state of the second external device detection terminal; and an electronic component disposed between the second external device detection terminal and the processor such that an overvoltage is not entered into the processor through the second input terminal. Various example embodiments are available.

Abstract: Described herein are technologies for maintaining firmware setting during firmware updates. PLDM data is created prior to a firmware update. In instances of firmware updates, such as during runtime, recovery, or capsule, a flashing tool is used to perform the firmware flashing as well as exporting the setup configuration in a particular or required PLDM format. After the firmware is updated, the PLDM data is imported to preserve the firmware settings.

Abstract: Methods and apparatus are disclosed for securely erasing partitions of reconfigurable logic devices such as FPGAs in a multi-tenant server environment. In one example, a method of securely erasing an FPGA includes identifying one partition of previously-programmed resources in the FPGA, erasing the identified partition by storing new values in memory or storage elements of the identified partition, and storing new values in memory or storage elements of additional external resources electrically connected to the integrated circuit and associated with the identified partition. Thus, other partitions and subsequent users of the identified partition are prevented from accessing the securely erased data. A configuration circuit, accessible by a host computer via DMA, can be programmed into the FPGA reconfigurable logic for performing the disclosed erasing operations.

Abstract: A distributed computing application is described that provides a highly elastic and multi-tenant platform for Hadoop applications and other workloads running in a virtualized environment. Deployments of a distributed computing application, such as Hadoop, may be executed concurrently with a distributed database application, such as HBase, using a shared instance of a distributed filesystem, or in other cases, multiple instances of the distributed filesystem. Computing resources allocated to region server nodes executing as VMs may be isolated from compute VMs of the distributed computing application, as well as from data nodes executing as VMs of the distributed filesystem.

Abstract: Techniques for implementing policy-based anti-rollback techniques on a computing device are described herein. As an example, a remote service may provide the computing device with a boot policy which indicates, for each boot stage of a software bootloader process, what software versions are permitted to execute. Prior to providing the computing device with the boot policy, the remote service may sign the boot policy with a private key, and include of an identifier corresponding to the computing device. At each boot stage of the bootloader process, components of the computing device may verify, using a public key, that the boot policy was signed with the private key, and that the boot policy corresponds to the computing device. After verification, the components may analyze the boot policy to determine whether each boot stage is permitted to execute a software version and boot to the next boot stage.

Abstract: Various examples for providing a dynamic runtime interface for device management are described. In one example, a computing environment can access metadata that describes a configuration of a user interface made in a profile template designer application. The computing environment can identify a request for a profile creator that provides at least one setting for a desired configuration of a client device enrolled with a management service, and, in response to the request being identified, dynamically generate the user interface using the metadata, where the user interface includes a configured to receive the at least one setting for the desired configuration of the client device. The computing environment can generate a configuration profile accessible by the client device that causes an agent application executable on the client device to configure the client device in accordance with the configuration profile.

Abstract: Systems and methods for overload management of Internet-of-Things (IoT) gateways. In some embodiments, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory including program instructions stored thereon that, upon execution by the processor, cause the IHS to: detect an overload condition in the IHS; in response to the detection, compare a current volatility of a data field against a volatility baseline for that data field, wherein the data field is one of a plurality of other fields contained within a packet communicated between an IoT device and the IHS; and take responsive action based, at least in part, upon the comparison.

Abstract: A start test method executed by a system including a calculation device and a management device that manages failure information on the calculation device, the start test method includes storing, by a first processor included in the management device, a failure rate that has been calculated for each of parts of the calculation device based on the failure information received from the calculation device as performance information, associating with time information and a part of the calculation device; obtaining a failure rate of each of the parts at a time of start of the calculation device based on the performance information and a time when the calculation device is to be started; notifying the calculation device of the obtained failure rate; and executing, by a second processor included in the calculation device, a start test of the calculation device in accordance with the notified failure rate.

Abstract: A first execution of an application is performed on a virtual machine. A set of virtual machine parameters associated with the first execution is determined. One or more command lines of the application are mapped to the set of virtual machine parameters. The mapping is stored in a cache. A second execution of the application is performed on the virtual machine. The second execution retrieves the set of virtual machine parameters from the cache.

Abstract: A distributed system may implement analyzing bit vectors for resource placement. Bit vectors may be maintained or generated for currently hosted resources in a distributed system according to placement criteria so that individual bit values of a bit vector indicate whether a corresponding one of the placement criteria is satisfied for the current placement of the resource. A resource may be identified for migration and a possible placement determined for the resource. A bit vector may be generated for the possible placement and compared with the bit vector for the current placement of the resource to determine whether the possible placement improves the placement of the resource with respect to the placement criteria.

Abstract: Embodiments of the present disclosure relate to a method, device and computer program product for kernel management. The method comprises: receiving, from a server, a plurality of instances of a kernel module to be loaded into a kernel, the plurality of instances corresponding to a plurality of candidate versions, determining a current version of the kernel in response to the kernel being started or updated, and loading, to the kernel, an instance of the plurality of instances corresponding to the current version. Embodiments of the present disclosure may improve the security of the operating system, meet close-source requirement of a commercial operating system and also simplify the process of the kernel module referring to one or more APIs.

Abstract: The present disclosure provides a system and method for preserving firmware settings in a baseboard management controller (BMC) or a flash memory component of a server system. In accordance with one aspect of the present disclosure, a computer-implemented method for automatically preserving firmware settings of the server system, comprises: powering on the server system; retrieving a plurality of future firmware settings from a baseboard management controller (BMC) of the server system; applying the plurality of future firmware settings to the server system; sending a plurality of current firmware settings to the BMC with a unique string mapping scheme; performing an entire firmware flash update; copying the plurality of current firmware settings stored on the BMC to the plurality of future firmware settings of the BMC; and rebooting the server system by applying the plurality of future firmware settings stored on the BMC.

Abstract: A first execution of an application is performed on a virtual machine. A set of virtual machine parameters associated with the first execution is determined. One or more command lines of the application are mapped to the set of virtual machine parameters. The mapping is stored in a cache. A second execution of the application is performed on the virtual machine. The second execution retrieves the set of virtual machine parameters from the cache.

Abstract: A system to automatically gather attribute data about elements such as networks, network interface cards, operating systems, device types, installed software, processes in execution, financial data, etc. in an organization or a designated subset of the organization. Fingerprint files are used, each fingerprint file corresponding to an element of a specific type and each containing a list of attributes that will be found if that element exists in the system. Each fingerprint contains or points to one or more collection instructions which control a data collector process to attempt to gather attribute data. Each fingerprint contains or points to rules that are used to analyze the attribute data gathered to calculate the probability that the element exists. The rules can be fired sequentially, in if-then-else fashion or can be incorporated in a script in loops and with mathematical manipulations, tests and branching for more sophisticated analysis.

Abstract: A self-correcting secure computer system is provided. The computer system includes a read-only memory (ROM) device, a random access memory (RAM) device, and at least one processor in communication with the ROM device and the RAM device. The at least one processor is programmed to receive an activation signal, retrieve, from the ROM device, data to execute an operating system, and execute, on the RAM device, the operating system based on the data from the ROM device.

Abstract: An apparatus for driving a touchpad of a portable terminal including a second control unit controlling the touchpad in an active mode is provided. The apparatus includes a sensor unit for generating interrupt signals when pressure on the touchpad is sensed, a first control unit for outputting activating signals to activate the second control unit when the interrupt signals are input and a switching unit for transmitting the interrupt signals generated from the sensor unit to the first control unit when the second control unit is in an inactive mode. Accordingly, even though the multimedia processor embedded in the portable terminal is in an inactive mode, the multimedia processor is activated when a user presses the touchpad, thereby making it possible to process signals input by touching the touchpad, particularly, to keep the user interface.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for receiving, by a network device, a request from a computing device to join a network, where the network is segmented to include a provisioning network, a first network segment, and a second network segment, and the second network segment provides limited network access privileges to computing devices compared to network access privileges provided by the first network segment. Providing the computing device access to the provisioning network. Determining, while the computing device is connected to the provisioning network, properties of the computing device. Selecting which of the first network segment and the second network segment to assign access to the computing device based on the properties of the computing device. Providing security credentials to the computing device for accessing the selected one of the first network segment or the second network segment.

Abstract: The present invention discloses an automatic loading system and method for service functions of a hydraulic machine. The loading system includes an acquiring portion for acquiring i service function component chains of a hydraulic machine, a determining portion for determining a demand sequence of the service function component chains used by a user within each preset time period in a measuring cycle based on the acquired service function component chains and a deciding portion for automatically loading a service function of the hydraulic machine in a next moment according to the demand sequence based on a current input operation command of the user. By adopting the automatic loading system or method provided by the present invention, response speed of intelligent services of the hydraulic machine can be improved.

Abstract: Techniques for translating graphical representations of domain knowledge are provided. In one example, a computer-implemented method comprises receiving, by a device operatively coupled to a processor, a graphical representation of domain knowledge. The graphical representation comprises information indicative of a central concept and at least one chain of events associated with the central concept. The computer-implemented method further comprises translating, by the device, the graphical representation into an artificial intelligence planning problem. The artificial intelligence planning problem is expressed in an artificial intelligence description language. The translating comprises parsing the graphical representation into groupings of terms. A first grouping of terms of the grouping of terms comprises an event from the at least one chain of events and a second grouping of terms of the grouping of terms comprises the information indicative of the central concept.

Abstract: A non-transitory storage medium having stored thereon logic, the logic being executable by one or more processors to perform operations including comparing a current privilege of a first process with an initial privilege of the first process recorded in a privilege list, and responsive to determining a change exists between the current privilege of the first process and the initial privilege of the first process that is greater than a predetermined threshold, determining the first process is operating with the current privilege due to an exploit of privilege attack is shown.

Abstract: Provided are an electronic device and a method of controlling same. The method of controlling the electronic device: displays a UI including a security index showing that the electronic device is in a state operating in a secure mode; compares the security index to a reference security index and determines whether the security index has been falsified; and when the security index is a falsified security index, shows that the security index is a security index that has been falsified.

Abstract: Techniques for translating graphical representations of domain knowledge are provided. In one example, a computer-implemented method comprises receiving, by a device operatively coupled to a processor, a graphical representation of domain knowledge. The graphical representation comprises information indicative of a central concept and at least one chain of events associated with the central concept. The computer-implemented method further comprises translating, by the device, the graphical representation into an artificial intelligence planning problem. The artificial intelligence planning problem is expressed in an artificial intelligence description language. The translating comprises parsing the graphical representation into groupings of terms. A first grouping of terms of the grouping of terms comprises an event from the at least one chain of events and a second grouping of terms of the grouping of terms comprises the information indicative of the central concept.

Abstract: Embodiments of the disclosure disclose a method and apparatus for migrating a virtual machine. A specific embodiment of the method comprises: loading a target kernel module of a target operating system, the target operating system used for controlling a target electronic device running a virtual machine, and the target kernel module used for performing a shutdown operation for the target electronic device; determining whether to perform the shutdown operation based on electronic device running state information of the target electronic device; determining whether to migrate the virtual machine when a preset triggering condition is met, in response to determining not to perform the shutdown operation; and migrating the virtual machine if determining to migrate the virtual machine.

Abstract: A method includes obtaining, from a service management database, one or more change tickets and one or more incident tickets relating to an information technology infrastructure, defining one or more change-incident pairs based on linkages between the incident tickets and the change tickets, identifying, from the change-incident pairs, one or more dimensions affecting outcomes of implementation of one or more change types, generating at least one recommendation for altering implementation of subsequent changes of a given change type to the information technology infrastructure based on the identified dimensions, applying the at least one recommendation to the implementation of one or more subsequent changes of the given change type to configuration items in the information technology infrastructure, monitoring the information technology infrastructure to determine outcomes of the subsequent changes of the given change type, and modifying the at least one recommendation responsive to the monitoring.

Abstract: A system may include a client device to connect to a network and a network device communicatively coupled to the client device. The network device may determine that the client device has been authenticated to the network via a captive portal page. The network device may further create a ticket corresponding to the client device. Possession of the ticket by the client device may indicate authentication of the client device to the network. The network device may then transmit the ticket to the client device for storage on the client device. The stored ticket may enable the client device to remain authenticated to the network after a period of inactivity.

Abstract: A device includes a reconfigurable circuit and reconfiguration logic. The reconfiguration logic is to: receive, via a policy interface, a user policy and an image policy; receive a first reconfiguration image via a first configuration interface of a plurality of configuration interfaces; validate the first configuration interface based on the user policy; validate the first reconfiguration image based on the image policy; and in response to a determination that the first configuration interface and the first reconfiguration image are both valid, reconfigure the reconfigurable circuit using the first reconfiguration image.

Abstract: The present disclosure provides a system and method for enabling an administrator or a controller to update BIOS setup options on a server system and then automatically update the BIOS setup options on other server systems in a baseboard management controller (BMC) virtual local area network (VLAN). For example, the method may comprise: receiving, at a specific controller of a node, a command to update the BIOS setup option; determining whether the specific controller is a master by checking an internal flag of the specific controller; in an event that the specific controller is neither a master or a slave, broadcasting a master request to the VLAN; determining whether a reply is received within a predetermined time period; in an event that the reply is not received, setting the internal flag of the specific controller as a master; and sending an original equipment manufacturer (OEM) completion response.

Abstract: Systems and methods are provided that intercept access to mainframe computing systems' messaging systems. For example, a method may include using a replacement messaging interface adapter to intercept a messaging request being directed from a client program to a messaging interface module of a messaging subsystem that is identified by a messaging stub interface module that implements a documented messaging interface. The method may also include performing an auxiliary function on the messaging request. The method may additionally include transmitting the messaging request to the messaging interface module of the messaging subsystem. The method may further include receiving a response from the messaging subsystem. Additionally, the method may include providing the response to the client program.

Abstract: Systems and methods for distributing computing tasks are disclosed. One system includes a first computing system and a second computing system. The first computing system includes a processing unit and a memory, the memory storing a computer-executable workload including a plurality of procedures including at least one distributable procedure, the at least one distributable procedures capable of execution independent of underlying operating system or platform resources of the first computing system and configured for execution on an architecture of the first computing system. The system further includes a distributable computation unit executable on a second computing system, the distributable computation unit including the at least one distributable procedure, a state of computing resources of the first computing system, and an application capable of execution on the second computing system to perform the at least one distributable procedure.

Abstract: Provided are an electronic device and a method of controlling same. The method of controlling the electronic device: displays a UI including a security index showing that the electronic device is in a state operating in a secure mode; compares the security index to a reference security index and determines whether the security index has been falsified; and when the security index is a falsified security index, shows that the security index is a security index that has been falsified.

Abstract: A centralized data store may provide multiple processing environments access to data. Different data processing clients may determine structural data for a data set stored in a remote data store. An access coordination scheme may be implemented to grant permission to the different processing clients to perform various operations with respect to the portions of the data set. The data processing clients may then access the data set according to the structural data so that operations may be performed with respect to the data permitted by the access coordination scheme to the data processing clients.

Abstract: A technique involves performing, in a data storage system, a full-boot procedure which includes a set of critical boot activities and a set of avoidable boot activities. The technique further involves providing, in response to completion of the full-boot procedure, a fastboot notification indicating to the data storage system that a fastboot procedure is to be performed in response to a warm boot event. The technique further involves placing, after providing the fastboot notification, the data storage system into a normal operating mode in which the data storage system performs data storage operations in response to data storage requests from a set of external host computers. Such operation enables the data storage system to subsequently perform a fastboot procedure that avoids the set of avoidable boot activities in response to the next warm boot event.

Abstract: A Z-Wave networking device is disclosed having a processor, a WiFi transceiver, a Z-Wave network transceiver, and a flash memory from which the processor boots a startup image. The processor can boot a first startup image that configures the Z-Wave network transceiver as a Z-Wave network controller, and the processor can boot a second startup image that configures the Z-Wave network transceiver as a Z-Wave repeater node. An Internet server receives registration information for the device, and instructs the device to boot from the first startup image upon determining that a Z-Wave network controller is not present in the Z-Wave network, or from the second startup image upon determining that a Z-Wave network controller is already present in the Z-Wave network. In embodiments, the Z-Wave networking device comprises an HVAC thermostat.

Abstract: An installation tool includes a memory, a retrieval engine, an extraction engine, a configuration engine, a compiler, and an installer. The memory stores installation parameters of a previous software update for an application. The retrieval engine receives a request to install a first software update for the application and in response to the request, retrieves the installation parameters of the previous software update. The extraction engine extracts from the application a plurality of source binary files for the application. The configuration engine receives a plurality of requirements for installing the first software update based upon the retrieved installation parameters. The compiler creates an installation executable for the first software update based upon the plurality of source binary files and the plurality of requirements. The installer executes the installation executable to apply the first software update according to the plurality of requirements.

Abstract: A method is described for dynamically determining availability of a computing resource. An application session is established, and an application session data matrix is generated including parameters specifying aspects of the application session, an application associated with the application session, and a computing resource on which the application session depends. A component signature block is derived based on the parameters of the application session data matrix. The component signature block identifies the computing resource on which the application session depends and a total number of sessions dependent on the computing resource. A metric signature block is generated based on one or more parameters of the application session data matrix and the component signature block. The metric signature block is classified according to one or more probability models. A computing resource availability rating for the computing resource is derived based on an output of the one or more probability models.

Abstract: A method and apparatus for provisioning a computing resource is provided. Provisioning a computing resource based on a provisioning policy is initiated. The provisioning policy may specify one or more supplementary operations whose successful completion is optional for the computing resource to be used. Further in the method and apparatus, the computing resource is provided for use.

Abstract: Some examples, described herein, may include detecting a button press of a banking button on a remote control device associated with a media device. The banking button may be designated to access a financial institution. Some examples may include accessing a financial services platform based on detecting the button press. The financial services platform may be associated with the financial institution. Some examples may include providing account information, associated with a financial account of the financial institution, to the financial services platform. The account information, when provided, may cause the financial services platform to access the financial account. Some examples may include obtaining financial information, associated with the financial account, from the financial services platform. Some examples may include providing the financial information to the media device to enable the media device to present the financial information for display.

Abstract: Certain aspects of the present disclosure relates to processing managing an operating system to set up a computer association tool. The technique includes processing an Operating System Deployment (OSD) functionality of a Microsoft System Center Configuration Manager (SCCM) to configure a server, wherein the OSD causes the server to a Pre-boot Execution Environment (PXE Boot). The SCCM may be launched for the PXE boot process to be associated with the server and configuring the SCCM to associate with a specific OSD Task Sequence. Boot from a Network Interface Card (NIC) that has an associated MAC address, using the PXE, wherein the PXE boot process then hands the operation over to the designated OSD Task Sequencer (TS) which handles the configuration process according to at least one variable.

Abstract: A system and method is provided for deploying a network monitoring agent to monitor a network. The method includes receiving a deployment request to deploy a monitoring agent, the monitoring agent including first executable instructions to monitor the network, the request specifying a region external from the network in which to deploy the monitoring agent. The method further includes installing the monitoring agent for execution within a controlled runtime environment on a host machine, the host machine operating in the specified region and having a single operating system. The monitoring agent is executed within the controlled runtime environment to monitor the network from an external perspective of the network. In the controlled runtime environment, during execution of the monitoring agent, all areas of the operating system that are writable by the monitoring agent are isolated from areas of the operating system that are writable by any other software application using the operating system.

Abstract: An apparatus assigns a communication control unit with a first priority as a priority when the communication control unit decrypts an encrypted common key and assigns a print control unit with a second priority higher than the first priority. Resource distribution of the apparatus with respect to the communication control unit and the print control unit is determined according to the priorities.

Abstract: In an approach for selecting a boot-up path in a multi-node server, a processor receives a first set of computing capability data for a first boot-up path of a server and a second set of computing capability data for a second boot-up path of the server. A processor compares the first set of computing capability data to the second set of computing capability data. A processor determines that the first boot-up path has greater computing capabilities than the second boot-up path based on the comparison. Responsive to determining the first boot-up path has greater computing capabilities, a processor boots-up the server using the first boot-up path.

Abstract: A method for setting up forwarding tables is described. A USAT part for a node is received. The USAT part includes glow definitions and a FGPL. Each glow describes network traffic flows and role instructions for the flows. Each FGP describes a role for the switching node; a validity rule; and relevant network topology. The method also includes determining a selected active FGP in the FGPL using the validity rule for the FGP, a network state and the ordering of the FGPs; initializing the glows, requesting a role identification to perform based on the selected FGP, determining the role instructions and instructing the TMS to update tables accordingly; and storing entries in software tables based on glows and the role instructions for the identified role, dynamically resolving conflicts among entries, and granting table updates to hardware tables. The tables include a software table for each hardware memory for forwarding packets.

Abstract: A method and apparatus for task scheduling, execution and monitoring are provided. In the method and apparatus, a task package specifying at least one of a task, a task trigger or an execution environment is received. An execution environment is instantiated and the task is sent to the execution environment for execution.

Abstract: The invention provides a server administration tool for migration of a relational database to a cloud server environment. The server administration tool includes a database migration tool a server patching tool to monitor and maintain a server system. The database migration tool allows for the migration and upload of a database stored on a source server to a target cloud server. The migrated database may be directly uploaded to the target server or hosted on a virtual machine. The server patching tool allows for patching of an initially incompatible source server enabling migration of a stored database to a new target server. The tool analyzes a database stored on a source server for compatibility with a new, target cloud server to determine whether an implemented patch would succeed or fail. In this way, errors reported by the tool, may be rectified without requiring costly, additional server downtime.

Abstract: A method for providing a virtual Wi-Fi network with secure tunnel provisioning is disclosed. The method provides a reliable, persistent connection between wireless communications enabled devices located at a user's premises and a service provider, and includes the steps of using a software code running on a computing device to pass instructions including a remote server address to an Application Programming Interface (API) running on a wireless router connected to the computing device through a Local Area Network (LAN); using the wireless router to establish a secure communication session with the remote server through a Wide Area Network (WAN); receiving at the wireless router through the WAN parameters required to set up a wireless Virtual Local Area Network (VLAN); and using the router, establishing a wireless VLAN at the user's premises and connecting the wireless VLAN to the remote server through the WAN using a secure tunnel connection.