Abstract: Described embodiments provide systems and methods for running virtual machines based by probing installation media. A media probe executing on one or more processors may identify an installation media for configuring a virtual machine on a type of operating system. The media probe may detect the type of operating system from the installation media. A virtualization manager executing on the one or more processors may determine a virtualization mode for configuration of the virtual machine based on the type of operating system detected from the installation media. The virtualization manager may create the virtual machine in accordance with the virtualization mode determined based on the type of operating system.

Abstract: Methods, systems, and computer program products for parameter management between programs with different addressing modes are described. A request may be received from a first program with a first addressing mode in a first runtime environment for calling a second program with a second addressing mode different from the first addressing mode, where at least one parameter included in the request is for calling the second program. A parameter area may be allocated in the first runtime environment for the at least one parameter. The at least one parameter may be stored in the allocated parameter area. The second program may be invoked based at least in part on the at least one parameter in the allocated parameter area. In this manner, parameter(s) may be communicated between the first program and the second program in an easy and effective way.

Abstract: A custom file system in a containerized software architecture facilitates the instantiation of application containers. Each container is composed of one or more application image layers. An application container instance includes read-only application image layer data shared among application container instances associated with the same application container. An application container instance may also include read/write application container instance data that is specific to the application container instance.

Abstract: In accordance with disclosed embodiments, there are provided systems, methods, and apparatuses for implementing a stateless, deterministic scheduler and work discovery system with interruption recovery.

Abstract: Implementations described and claimed herein provide systems and methods for intelligent node type selection in a telecommunications network. In one implementation, a customer set is obtained for a communications node in the telecommunications network. The customer set includes an existing customer set and a new customer set. A set of customer events is generated for a node type of the communications node using a simulator. The set of customer events is generated by simulating the customer set over time through a discrete event simulation. An impact of the customer events is modeled for the node type of the communications node. The node type is identified from a plurality of node types for a telecommunications build based on the impact of the customer events for the node type.

Abstract: An apparatus includes a memory and a hardware processor. The memory stores a plurality of conversion rules. The processor receives a first log from a server. The first log indicates that the server attempted to install a software patch. The processor converts, based on the plurality of conversion rules, the first log into a different format to produce a second log and extracts a plurality of words from the second log. The processor also determines, based on the extracted words, that the software patch install failed and determines, based on the extracted words, a cause for the software patch install failure. The processor further determines a series of steps to remedy the cause and perform the series of steps to remedy the cause.

Abstract: Implementations described and claimed herein provide systems and methods for intelligent node type selection in a telecommunications network. In one implementation, a customer set is obtained for a communications node in the telecommunications network. The customer set includes an existing customer set and a new customer set. A set of customer events is generated for a node type of the communications node using a simulator. The set of customer events is generated by simulating the customer set over time through a discrete event simulation. An impact of the customer events is modeled for the node type of the communications node. The node type is identified from a plurality of node types for a telecommunications build based on the impact of the customer events for the node type.

Abstract: Described embodiments provide systems and methods for streaming a virtual disk. A first virtual hard disk (VHDX) file can be converted into a read-only VHDX file on a hypervisor. A second VHDX file can be created as a snapshot of the read-only VHDX file on the hypervisor. Partition globally unique identifiers (GUIDs) of the second VHDX file can be updated to be different from those of the read-only VHDX file. A provisioning services server executing on the hypervisor can stream the second VHDX file as a virtual disk over a virtual network established by the hypervisor, by booting the second VHDX file over the virtual network.

Abstract: Methods for remotely configuring application software on a user device are described. The application software defines at least one operating parameter having a set of pre-defined values which change the way the application interacts with the operating system. The operating parameter can be configured remotely and pushed to the user device where it is enforced by the application. Methods for providing information of the operating parameter to a remote device and for updating the configuration of an application are also described.

Abstract: Various embodiments of the present invention are directed to a communications apparatus and associated methods configured for managing user identification queries. The communication apparatus is configured to receive a user identification query comprising a requesting user identifier and a target user identifier, compare the target user identifier to a user status cache associated with the requesting user identifier to determine a known status, an unknown status, or a pending status, and cause rendering of a known user identification interface or a limited user identification interface. In some embodiments, the communication apparatus is configured to transmit a client device hold instruction in response to determining the pending status for the target user identifier with respective to a given requesting user identifier. Various embodiments discussed herein mediate and resolve voluminous user identification queries through a specially configured group-based caching service and associated system architecture.

Abstract: A computer implemented method is disclosed including producing, with at least one of a computing device, an augmented reality computing device, a virtual reality computing device and a mixed reality computing device, multiple sources of data files provided in individual formats to overlay within a real-world environment, combining the multiple sources of data files into a unified data format that provides for each individual data format of the multiple sources of data files to run independently and with at least one of a spatial anchor and a temporal anchor to provide for a three-dimensional (“3D”) arrangement of the plurality of data, storing in at least one memory device the multiple sources and the at least one spatial anchor and temporal anchor, receiving, through a user interface of a viewing device, query relating to a real-world environment and displaying the 3D arrangement of the plurality of data in the viewing area of the viewing display in spatial relationship with the real-world environment as vie

Abstract: An approach is provided in which the approach receives a set of unchangeable product documentation corresponding to a product that is unalterable by a user. The approach converts a set of user content received from the user into a format compatible with the set of unchangeable product documentation, and integrates the formatted set of user content with the set of unchangeable product documentation into a user interface. The approach displays the user interface on a display.

Abstract: Various embodiments disclosed herein provide for displaying an alert and options when deleting a file associated with a sequence. A system is disclosed herein that can comprise receiving a request to delete a selected file stored in a first folder; determining that the selected file is part of a group of files associated with a sequence; displaying the group of files associated with the sequence using a first portion of a display device; generating a selectable image to display via a second portion of the display device, wherein the selectable image comprises at least a first selectable option to delete the group of files, a second selectable option to delete the selected file, and a third selectable option to select some files of the group of files to delete; and deleting at least one file of the group of files.

Abstract: In one embodiment, a method provides a first orchestration service instance for managing a set of containers operating on a controller node where the controller node controls a set of physical nodes. The method also provides a set of second orchestration service instances for managing a set of first services operating in the set of containers where a second orchestration service instance in a container manages a respective first service in the container. The set of physical nodes include a set of third orchestration service instances for managing a set of second services operating on the set of physical nodes. The first orchestration instance, the set of second orchestration service instances, and the set of third orchestration service instances communicate through a shared communication service that maintains a global state of the controller node, the set of containers, and the set of physical nodes.

Abstract: A licensing system and related methods are described utilizing aspects of distributed ledger technologies to facilitate trusted and verifiable licensing transactions for creative works. A client device can include an asset editing tool for incorporating an asset selected from a plurality of licensable assets into a new creative work. The selected asset can be downloaded for incorporation into the new creative work. The new creative work incorporating the selected asset can be analyzed to determine an amount that the selected asset contributed to the new creative work, or an amount that the new creative work is attributable to the selected asset.

Abstract: A memory stores a catalog of applications and a catalog of trusted sources. A processor detects that a first user attempted to install an application, determines that a source of the application is in the catalog of trusted sources, scans the application to determine that the application does not contain a virus, and determines that there is a first license that allows the first user to install the application. The processor also stores the application into a repository and adds the application to the catalog of applications. The processor receives a request from a second user to install the application, determines that the application is in the catalog of applications, and determines that there is a second license that allows the second user to install the application. The processor further retrieves the application from the repository and initiates installation of the application on a device of the second user.

Abstract: One or more computer processors receive a patch request containing a testing requirement for a target platform. The one or more computer processors create a plurality of clusters containing a plurality of previously patched platforms associated with the target platform. The one or more computer processors calculate a similarity index of previously patched platforms and the target platform utilizing the created plurality of clusters, wherein the similarity index represents a similarity between the target platform and the plurality of patched platforms. The one or more computer processors adjust the testing requirement utilizing one or more similar platforms that are determined by the calculated similarity index and associated testing requirements. The one or more computer processors execute the requested patch utilizing the adjusted testing requirement.

Abstract: A machine learning-based recommendation system is provided for root cause analysis of service issues. An illustrative method of a machine learning system comprises extracting features from service issue investigation log sets corresponding to previously considered service issues; generating representations for the service issue investigation log sets based on the corresponding extracted features; and storing the representations in a knowledge base.

Abstract: Techniques for user-assisted plug-in application recipe (PIAR) execution are disclosed. During execution of a PIAR, a PIAR management application applies one or more data values for a plug-in application field to a machine learning model, to obtain: (a) a candidate mapping between one or more sub-values discovered within the data value(s) and another field accepted by an action of another plug-in application, the data value(s) being of a data type different from a reported data type of the other field, and (b) a confidence metric associated with the candidate mapping, based at least in part on whether the sub-value(s) fit(s) one or more stored formats mapped to the other data type. Based on a determination that the confidence metric does not satisfy a threshold confidence criterion, the PIAR management application obtains user input affirming or rejecting the candidate mapping, and applies the user input to execution of the PIAR.

Abstract: In general, techniques are described for creating a flexible services-based pipeline for firewall filter processing. A network device may be configured to perform the techniques. In one example, a method includes receiving, by a network device, data defining a plurality of firewall filter processing services, the data defining an order in which to apply services of the plurality of firewall filter processing services to firewall filters; configuring, by the network device and based on the received data, an execution engine pipeline to include the plurality of firewall filter processing services in the defined order; prior to programming a received firewall filter to hardware of the network device for filtering network traffic, processing the firewall filter by the execution engine pipeline to produce a processed firewall filter; and programming, by the network device, the processed firewall filter to the hardware for filtering the network traffic.

Abstract: A set of program instructions, when executed by a computer of an information-processing device, causes the computer to perform: detecting; and registering. The detecting detects, after first print queue information is registered, second print queue information being registered. The first print queue information includes a first print queue name, a first print setting, and a first port ID. The first print queue name is based on a printer name acquired via a plug-and-play process for a printer connected to a first port. The second print queue information includes a second print queue name, a second print setting, and a second port ID. The second print queue name is based on the printer name and different from the first print queue name. The registering registers, in response to the detecting, third print queue information including the printer name, the first print setting, and the second port ID.

Abstract: Portable or ambulatory infusion devices and systems capable of remotely updating an ambulatory fluid delivery device include safety protocols that verify the status of the ambulatory fluid delivery device before and after a field update of software. Methods of accomplishing the same field update of software are also described.

Abstract: Disclosed herein are methods, systems, and processes for centralized containerized deployment of network traffic sensors to network sensor hosts for deep packet inspection (DPI) that supports various other cybersecurity operations. A network sensor package containing a pre-configured network sensor container is received by a network sensor host from a network sensor deployment server. Installation of the network sensor package on the network sensor host causes execution of the network sensor container that further causes deployment of an on-premise network sensor along with a network sensor management system, a DPI system, and an intrusion detection/prevention (IDS/IPS) system. The configurable on-premise network sensor is deployed on multiple operating system distributions of the network sensor host and generates actionable network metadata using DPI techniques for optimized log search and management and improved intrusion detection and response (IDR) operations.

Abstract: Determining security vulnerabilities of smart home devices.

Abstract: Systems and methods for privacy-preserving enablement of connections within organizations are disclosed. In one embodiment, a method may include (1) receiving, at a server comprising a computer processor, an identification of a target to contact from a requester in an organization; (2) the computer processor identifying, in a connection database, at least one user within the organization having a connection with the target; (3) the computer processor communicating anonymized information representing the at least one user having the connection and a relationship-strength score for the connection; (4) the computer processor communicating a request for introduction assistance to the at least one user; (5) the computer processor receiving acceptance of the request for introductory assistance from the at least one user; and (6) the computer processor identifying the at least one that accepted the request to the requester.

Abstract: An artificial intelligence (“AI”) engine having multiple independent processes on one or more computing platforms is disclosed, where the one or more computing platforms are located on premises of an organization such that i) the one or more computing platforms are configurable for one or more users in the organization having at least administrative rights on the one or more computing platforms in order to configure hardware components thereof to execute and load the multiple independent processes of the AI engine; ii) the one or more users of the organization are able to physically access the one or more computing platforms; and iii) the hardware components of the one or more computing platforms are connected to each other through a Local Area Network (LAN), and the LAN is configurable such that the one or more users in the organization have a right to control an operation of the LAN.

Abstract: Event metadata may be received at an audit function of an orchestration system for an infrastructure change event associated with an infrastructure change to an enterprise infrastructure of an enterprise. A blockchain instance of a particular decentralized secure ledger is requested from a decentralized secure ledger service via the audit function. A user identifier of a user that is responsible for the infrastructure change event is provided to the decentralized secure ledger service by the audit function. In response to the decentralized secure ledger service authenticating the user identifier, the event metadata for the infrastructure change event is sent to the blockchain instance for storage with the decentralized secure ledger service by the audit function.

Abstract: Systems and methods for provided for detecting compatible modules for replacing anomalous elements in computing systems. The described technique includes receiving system parameters specifying functionality of a first computing system, and querying a state model using the received system parameters to detect an anomaly within the first computing system. In response to detecting an anomaly in the first computing system based on the state model, the system determines a recovery method based on a recovery-method model and information about the detected anomaly, and selecting, from a tool database, a third-party, system-compatible tool configured to implement the determined recovery method.

Abstract: System and computer-implemented method dynamically deploying serverless functions in a cloud architecture utilize a code execution service to receive a request to trigger execution of a serverless function and to determine deployment status information for a previous serverless function version based on the request. The deployment status information is then used to generate a code execution service command for the code execution service to deploy the serverless function.

Abstract: A communication apparatus is disclosed, which comprises a base station module and an access point module for providing wireless connectivity to a communication network to at least one mobile communication device; an interface for coupling the base station module and the access point module for performing at least one of: a channel restriction operation; a power restriction operation; an intelligent uplink scheduling operation; a carrier frequency reselection operation; and a traffic steering operation; whereby alleviating an interference arising due to coexistence of the base station module and the access point module.

Abstract: Methods and systems for modifying software programs are disclosed. For instance, an example method for modifying a software program may include extracting, from a configuration program file, a future list of one or more future active entries relating to a future version of the software program and a future list of one or more future ghost entries relating to the future version of the software program, comparing the future lists of future active and ghost entries to current lists of current active entries and current ghost entries of a current version of the software program. Then, at least one upgrade or at least one downgrade of the current version of the software program is performed in response the comparison of the current and future lists.

Abstract: Some embodiments provide a first computer system that receives a specification of a target computing device through an integrated development environment (IDE) operating on the first computer system. The first computer system further receives input referencing an application programming interface (API) call through the IDE operating on the first computer system. In response to the input, the first computer system also sends a second computing system a request for data associated with resource consumption during execution of the API call by a set of source devices. The set of source devices each has the same specification as the target computing device. The first computer system further receives the data associated with the resource consumption during execution of the API call by the set of source devices. The first computer system also presents the data through the IDE.

Abstract: Provided are techniques for building and fixing a dynamic application topology. Log files are received from multiple sources comprising any of services and nodes. Information is extracted from the log files. An application topology is created for a particular point in time for an application that provides hierarchical relationships of components for executing the application using the extracted information. One or more problems in the application topology are identified. A solution is applied to each of the one or more problems.

Abstract: A processing device comprising a graphical user interface in an industrial vehicle is provided. The processing device comprises a touch screen display that receives touch gesture commands from a vehicle operator, memory storing executable instructions, and a processor in communication with the memory. The processor when executing the executable instructions: defines a plurality of widgets, wherein each widget comprises a visual representation of a current state of an associated function of the vehicle, displays a subset of the plurality of widgets on a portion of the touch screen display defining a plurality of widget spaces, and displays an icon tray on the touch screen display comprising one or more icons, in which at least one of the one or more icons corresponds to a respective one of the plurality of widgets.

Abstract: Methods and systems to provide enablement information by implementing a plug-in application by: executing the plug-in application in a course of application development of the software package connected to a cloud-based computing system; parsing a set of applications contained in the software package to generate a set of metadata data that includes an entire set of metadata for the software package; receiving a set of rules via the cloud-based computing system; defining a set of definitions for each rule in the set of rules to enable a comparison of each rule to the set of metadata to extract one or more features of each application contained in the software package; generating an inventory set of one or more features based on rule definitions for the software package; and generating a recommendation related to a feature of the inventory set of features in each application of the software package.

Abstract: A non-transitory computer-readable storage medium storing a program that causes an information processing apparatus to execute a process, the process includes executing a first program by using a system including a kernel of an operating system (OS) and shared libraries, acquiring first information on a first file group read out from the shared libraries, executing a second program by using the system, acquiring second information on a second file group read out from the shared libraries, executing similarity determination processing of determining similarity between the first program and the second program by comparing the first information and the second information that have been acquired, and outputting the similarity that has been determined.

Abstract: An example method to manage post provisioning operations of a virtual computing instance in a heterogeneous cloud environment is disclosed. The virtual computing instance may be provisioned by a first management entity and configured to receive a command from a second management entity. The method includes defining the instance with a dynamic type by the first management entity and repeatedly finding the dynamic type with one or more finder workflows to determine whether the virtual computing instance is terminated based on the command from the second management entity. In response to not finding the dynamic type within the heterogeneous cloud environment, the method further includes creating a catalog item for the virtual computing instance in a common service catalog and managing one or more resources allocated for the virtual computing instance based on the created catalog item.

Abstract: Approaches for composing the display of a virtualized web browser. Upon a host module, executing in a host operating system, of a virtualized web browser being instructed to display a new web page, policy data is consulted to determine if one or more trigger conditions are satisfied. Upon determining that at least one of the one or more trigger conditions is satisfied, the virtualized web browser, transparently to a user, retrieving and rendering the new web page in a location different than where the previous web page was retrieved and rendered by the virtualized web browser. After the new web page has been retrieved and rendered at the location specified by the policy data, the host module displays the new web page. The policy data may operate to specify the behavior of individual tabs of the virtualized web browser.

Abstract: System and methods are disclosed for remote management of mobile satellite antenna modules having an antenna subsystem module (ASM). An ASM periodically transmits a check-in message and metrics data to a server. The server analyzes the check-in message and metrics data to determine a state of operation of the antenna, and determine one or more management commands to improve the performance of the ASM. Information in the metrics data received from each ASM can be queried and processed using machine learning to determine correlation between attributes of the ASMs and performance of the ASMs.

Abstract: This invention discloses systems and methods for detecting vulnerabilities in IT assets by utilizing crowdsourcing techniques. A corpus containing vulnerability data of IT assets with known vulnerabilities is established. Vulnerability data in the corpus comprises security aspects or attributes related to the IT assets. The security aspects of an IT asset constitute its attack surface which is represented as a feature vector in a feature space. A determination is made as to how similar/close a target asset whose unknown vulnerabilities are to be detected, is to the rest of the IT assets in the corpus. This determination is made based on a measure of similarity/distance between the respective feature vectors in the feature space. Based on the review of similarity results by a community of researchers/experts, a determination of unknown vulnerabilities in the target system is made.

Abstract: A device can receive, from a node of a set of nodes, a dynamic host configuration protocol (DHCP) discovery request. The device can determine a DHCP offer based on metadata associated with the node. The device can transmit, to the node, pre-boot execution environment (PXE) instructions, which can cause the node to load a minimal operating system image and execute a node installation service. The device can receive, from the node installation service, a request for information associated with a node type. The device can provide the information associated with the node type to the node, causing the node to generate configuration data relating to the node type. The device can receive, from the node, a request for a full operating system image, which can be provided to the node and can support one or more capabilities included in the configuration data.

Abstract: A method is described for providing one or more patches to a client device. The method may comprise determining manifest file version information of a manifest file that is used by the client device; detecting an indication that one or more patches have been missed, a patch comprising information for updating at least part of information in the manifest file; requesting one or more missed patches on the basis of the manifest file version information (and the version information of the manifest file that the client would obtain after having applied the last missed patch—if available); and, receiving the one or more missed patches for updating the information in the manifest file.

Abstract: Systems and methods for dynamic filtering of content stream manifests are provided. Rules may be stored in memory of a proxy server regarding a plurality of different manifest inconsistencies. Each rule may associate a different manifest inconsistency with one or more indicators and a corresponding solution. One or more segments of a content stream may be provided between a content delivery network server and a client device. Such segments may be monitored by the proxy server, which may act as an intermediary between the content delivery network server and the client device. The proxy server may detect when a manifest of the monitored content stream exhibits one of the manifest inconsistencies based on the presence of the associated indicators. The solution corresponding to the exhibited manifest inconsistency may be identified based on the stored rule associated with the detected indicators.

Abstract: The present invention provides a virtualization system at least comprising a first device (101) having a first operating system (202) and a first display screen. The virtualization system also at least comprises a second display screen (105), which is separate from the first device, but which is connectable to the first device (101), for example by cable (104a) or wireless (104b) connection. The first device has a virtualization application (103) operable as a guest operating system (203) of the first operating system (202) acting as a host operating system. The guest operating system (203) is a desktop operating system or a desktop-optimized operating system. The virtualization application (103) is launched upon connection of the second display screen (105) to the first device (101) for display of the guest operating system (203) on the second display screen (105). The system may optionally further comprise one or more peripheral components, such as a keyboard (106) and/or a mouse (107), for example.

Abstract: A device may receive a request to configure an environment for a target enterprise resource planning (ERP) system. The device may identify a system image of an ERP package. The device may provide, to other devices that are to support the environment, the system image and installation information to cause the other devices to use the system image to host the ERP package. The device may establish paths that permit data transmission between the target ERP system and a source ERP system. The device may identify development-operations (Dev-Ops) and test tools to be configured within the environment. The device may provision, using the one or more paths, the environment with the set of Dev-Ops and test tools. The device may provide instructions to the other devices to cause the other devices to deploy the environment of the target ERP system and to permit user devices to access the environment.

Abstract: A method and apparatus of installing an operating system are provided. According to an example of the method, a server reads an image file of an operating system from a system providing device, wherein the image file comprises address information corresponding to an automatic response script file, and the automatic response script file is not stored at a position corresponding to the address information. The server receives the automatic response script file provided by the system providing device in response to that the reading by the server advances to the position corresponding to the address information. The server installs the operating system by using the automatic response script file.

Abstract: A chip set for a terminal comprises at least one secure processor, in which a one-time programmable memory is integrated. At least one terminal serial number of the terminal is stored in the chip set. Information for securing the terminal serial number against tampering is stored in the one-time programmable memory.

Abstract: Data structures are stored in an endpoint data store. Each data structure represents an endpoint having one or more components, each component having one or more arbitrary properties. Multiple groups of endpoints are identified by name and defined by group criteria expressed in terms of the one or more arbitrary properties of the one or more components of the endpoints that are members of the group. For each group, the group criteria of the group is stored in a data store in association with the name of the group. Packages and releases may be targeted to endpoints in various manners.

Abstract: Computing environments are scalably generated and provisioned based on metadata associated with separately defined containers of groups of sandboxes. Each container of a group of sandboxes is its own digital construct and is wrapped with metadata that defines the nature and aspects of the grouping, including enumerating individual members of a team, factors or attributes of assignments, and the like. The metadata, therefore, identifies the sandboxes to generate and, within those sandboxes, the computing environments to generate and how such computing environments are to be provisioned. In variable team settings quantities and identities of individuals can be unknown and can dynamically change. Administrators provide team definitions without rosters, or with rosters that comprise only previously registered individuals.

Abstract: Computing environments can be scalably generated and provisioned based on one or more team definitions and definitions of one or more projects assigned to a particular team. Digital constructs can be generated to represent the teams and the projects assigned to such teams, and such digital constructs can comprise metadata identifying sandboxes to generate and, within those sandboxes, computing environments to generate and how such computing environments are to be provisioned. The sandboxes can be generated in parallel and the computing environments can be provisioned in parallel, or staggered based on individual user access. Assignment of consumption limitations can be individually adjusted from default values, and monitoring of such consumption limitations can be performed on an aggregated basis.