Techniques for improved software management in information processing systems are disclosed. For example, an apparatus comprises at least one processing platform comprising at least one processor coupled to at least one memory. The processing platform is configured to obtain a first data set indicative of a first version of a software package and a second data set indicative of a second version of the software package. The processing platform is further configured to perform a semantic comparison of at least a portion of the first data set with at least a portion of the second data set to compute a difference between the first version of the software package and the second version of the software package.
Architectures and techniques are described that can provide file system level attack mitigation techniques for a data storage service system or other network service system. By operating at a file system level, the disclosed techniques can access information that is unavailable at the block volume level and which can be leveraged to accurately identify a source of a potential attack. By accurately identifying a source of the potential attack, additional options are available for mitigating the potential attack.
G06F 21/56 - Computer malware detection or handling, e.g. anti-virus arrangements
G06F 21/78 - Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
3.
COORDINATING CYBER INTRUSTION DETECTION AND DATA PROTECTION FOR RESPONDING TO RANSOMWARE ATTACKS
Cyber intrusion detection (CID) and data protection (DP) are coordinated within a storage node to enable the capabilities of DP to be automatically and quickly utilized in response to detected threats to help protect data. CID sends an alert message to DP in response to detection of a ransomware attack or other threat. DP responds to the alert message by implementing at least one countermeasure, such as: generating new targetless snapshots of the storage objects under attack, the version data group of which the storage objects are members, or all storage objects maintained by the storage array; securing and/or preserving some of the targetless snapshots that existed before the infection; changing the targetless snapshot generation and retention schedule; and temporarily halting generation of new targetless snapshots.
Enabling codecs at an IHS, including: detecting a request to encode or decode a media file, the media file associated with a particular codec for encoding or decoding of the media file, the codec wrapper indicating to the media framework a capability to encode or decode the media file, the codec wrapper not including the particular codec; in response to receiving the request, failing, based on the codec wrapper not including the particular codec, encoding or decoding of the media file by the codec wrapper; transmitting a request to a cloud codec management service for a particular token associated with the particular codec; receiving the particular token, the particular token signed and unique to the IHS, and in response: uninstalling the wrapper codec from being associated with the media framework; and enabling the particular codec for the media file to be associated with the media framework.
A circuit may include a difference amplifier configured to determine a difference between a first amplitude of a first signal and a second amplitude of a second signal within a particular frequency band, an integrator configured to generate, based on the difference, a first and second bias signal, a first variable capacitor coupled to a first trace for carrying the first signal and configured to receive the first bias signal to control a first propagation speed of the first signal, the first propagation speed of the first signal corresponding to a first magnitude of the first bias signal, and a second variable capacitor coupled to a second trace for carrying the second signal and configured to receive the second bias signal to control a second propagation speed of the second signal, the second propagation speed of the second signal corresponding to a second magnitude of the second bias signal.
A system can comprise a processor and a memory that can store executable instructions that, when executed by the processor, facilitate performance of operations comprising attaching a protection policy associated with a rule to a storage object, wherein the rule can be applicable to prevent redundant snapshot creation. The operations can further comprise, in response to the attaching of the protection policy to the storage object, triggering creation of a first snapshot and a second snapshot of the storage object. The operations can further comprise detecting any uniquely allocated storage regions between the first snapshot and the second snapshot. The operations can further comprise, based on a determination of whether any extra bits of the any uniquely allocated storage regions are unallocated or zeroed out, determining whether to prevent a third creation of a third snapshot external to the first snapshot and the second snapshot.
An apparatus comprises a processing device comprising a processor coupled to a memory. The processing device is configured to receive, over a first communication channel from an orchestrator entity, at least one command specifying one or more actions to take involving an endpoint device, the one or more actions comprising at least one of writing data to a tag of a tag bridge device and reading data from the tag of the tag bridge device. The processing device is further configured to relay the at least one command to the tag of the tag bridge device over a second communication channel, the second communication channel being established between a tag interface of the processing device and the tag bridge device, wherein the tag bridge device, 10 when plugged in to a port of the endpoint device, relays the at least one command from the tag to the endpoint device.
Techniques for disk mapping involve dividing a plurality of disks into a plurality of groups based on the number and type of the plurality of disks. Such techniques further involve dividing the plurality of groups into a set of available groups and a set of unavailable groups based on the type of a target redundant array of independent disks (RAID), wherein an available group represents that disk units in the available group are able to form the target RAID, and an unavailable group represents that disk units in the unavailable group are unable to form the target RAID. Such techniques further involve enabling, by mapping one or more disk units in one or more available groups of the set of available groups into the set of unavailable groups, one or more unavailable groups of the set of unavailable groups to form the target RAID.
A RAID integrity verification system includes a chassis housing a software RAID subsystem that is coupled to storage devices and configured to provide a logical storage device using the storage devices. A management subsystem in the chassis is coupled to the storage devices and retrieves first RAID configuration information associated with the logical storage device from each of the storage devices and uses it to generate a first RAID logical storage device integrity verification measurement block. Subsequently, the management subsystem retrieves second RAID configuration information associated with the logical storage device from each of the storage devices and uses it to generate a second RAID logical storage device integrity verification measurement block. If the management subsystem determines that the second RAID logical storage device integrity verification measurement block does not match the first RAID logical storage device integrity verification measurement block, it performs RAID logical storage device integrity remediation operation(s).
Systems and methods for diagnostics and remediation for a split-boot architecture are described. In an illustrative, non-limiting embodiment, an Information Handling System (IHS) may include: a printed circuit board; a processor coupled to the printed circuit board; and a memory coupled to the processor, wherein the memory comprises program instructions stored thereon that, upon execution by the processor, cause the IHS to: send, in a split boot architecture, one or more commands from executed firmware onboard the printed circuit board to executed extended firmware via a communication protocol; and based, at least in part, on a response or a lack of response from the executed extended firmware to the one or more commands, perform one or more responsive actions.
A method for managing electromagnetic interference (EMI) includes: obtaining a request; in response to the request: terminating EMI generation by EMI emitting devices in an EMI suppressed internal volume of a data processing device to place the EMI emitting devices in a quiet state; placing the EMI suppressed internal volume into an EMI suppression compromised state to obtain access to the EMI emitting devices in the quiet state; replacing one of the EMI emitting devices in the quiet state, to obtain updated EMI emitting devices, while: the EMI suppressed internal volume is in the EMI suppression compromised state, and the EMI emitting devices are in the quiet state; placing the EMI suppressed internal volume into an EMI suppressed state after replacing the one of the EMI emitting devices; and enabling EMI generation by the updated EMI emitting devices to place the updated EMI emitting devices into an active state.
H05K 9/00 - Screening of apparatus or components against electric or magnetic fields
G05B 19/406 - Numerical control [NC], i.e. automatically operating machines, in particular machine tools, e.g. in a manufacturing environment, so as to execute positioning, movement or co-ordinated operations by means of programme data in numerical form characterised by monitoring or safety
12.
AUTOMATIC SUB-CLUSTER SELECTION ALGORITHM FOR THE HIERARCHICAL CLUSTERING OF FILE OBJECTS
One example method includes, beginning at a parent node of a data structure, calculating a first W-index for the parent node and a left child node, calculating a second W-index for the parent node and a right child node, when the first W-index exceeds a threshold λ, marking the left child node as a candidate to be included in a sub-cluster separate from a sub-cluster that includes the parent node, when the second W-index exceeds the threshold λ, marking the right child node as a candidate to be included in a sub-cluster separate from the sub-cluster that includes the parent node, and recursively calculating respective W-indices for all other parent nodes in the data structure until all child nodes of the data structure have been assigned to a sub-cluster.
Techniques for performing effective noise removal for biased machine learning (ML) based optimizations in storage systems. The techniques include serving, by a storage system, an IO workload, identifying, using ML from among a plurality of storage objects subject to the IO workload, storage objects with low temperatures (e.g., cold storage objects) or likely to have low temperatures in the near future, and removing them from subsequent temperature forecasting analysis, effectively treating such cold storage objects as “noise.” The techniques further include performing the temperature forecasting analysis on remaining ones of the plurality of storage objects such as those with high temperatures (e.g., hot storage objects). In this way, temperature forecasting or prediction is performed, using ML, in a biased fashion over a relatively narrow spectrum of storage object temperatures, thereby improving tiering and data prefetching performance, reducing memory and processing overhead, and so on.
An air mover assembly may include an air mover, a circuit board electrically coupled to the air mover via a plurality of electrical wires, a housing configured to house the circuit board and including hard stops configured to mechanically engage with side edges of the circuit board to retain the circuit board in a fixed position relative to the housing, and a cover configured to mechanically engage with the housing such that the cover and the housing at least partially enclose the circuit board.
An information handling system may include a chassis, an air mover housed within the chassis and configured to drive airflow within the chassis, a heater mechanically coupled to a body of a chassis mechanical feature of the chassis, wherein the heater is located within a path of the airflow driven by the air mover, and a processing device housed within the chassis and configured to implement a thermal control system for controlling the heater to regulate a temperature of the information handling system above a threshold minimum temperature.
According to embodiments of the present disclosure, systems and methods for identifying, categorizing, and displaying links in an email message are disclosed. According to one embodiment, an Information Handling System (IHS) includes computer-executable instructions to receive a request to identify one or more links in an email message, identify one or more links in the email message, arrange each of the one or more links in one of a plurality of categories, and display the arranged links for view by a user.
H04L 41/16 - Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks using machine learning or artificial intelligence
17.
EFFICIENT INGEST TIER REFERENCES VIA VIRTUAL ADDRESSES
A method for efficient ingest tier references via virtual addresses includes generating, by a system including a processor, an address redirector for a data block in response to the data block being written to a first storage location, the address redirector including a reference to the first storage location. The method also includes writing, by the system, data including the data block to a second storage location in response to an amount of the data to be written to the second storage location being determined to be at least a threshold amount. The method further includes altering, by the system in response to the writing of the data to the second storage location, the address redirector to include a reference to the second storage location.
An information handling resource assembly may include an information handling resource implemented with a circuit board having a plurality of locating features formed therein, a receptacle connector having a plurality of mounting features, each of the mounting features formed at respective ends of the receptacle connector, and a housing for housing the information handling resource and the receptacle connector and comprising a plurality of standoffs extending from a surface of the housing, each particular standoff comprising a receiving feature for receiving a respective fastener, such that mechanical engagement of a plurality of fasteners wherein each respective fastener is passed through a respective locating feature of the plurality of locating features, passed through a respective mounting feature of the plurality of mounting features, and received by the receiving feature of the particular standoff mechanically loads the information handling resource and the receptacle connector in a fixed position relative to the housing.
A method for direct addressing in virtual addressed systems includes obtaining, by a system including a processor and in response to receiving a request to access a data item stored by a storage system, address information for the data item from a data structure. The address information includes a first physical storage address of the storage system, a first generation number associated the first physical storage address in the data structure, and an address redirector. The method also includes accessing, by the system and in response to the first generation number being determined to be different from a second generation number associated with the first physical storage address, the data item at a second physical storage address of the storage system instead of the first physical storage address, the second physical storage address being determined based on the address redirector.
A method and apparatus for enabling dynamic selection between compression algorithms to achieve a target data reduction ratio is provided to predict, on a per-extent basis, whether a write operation targeting a piece of data on a particular extent would be preferentially compressed using either compression algorithm A or compression algorithm B. By selectively implementing compression of particular write operations using compression algorithm B, when it is predicted to achieve a greater compression benefits, it is possible to reduce the overall data reduction ratio achieved by the compression engine while economizing the amount of resources expended by the compression engine. The dynamic selection process determines a per-extent compressibility ratio, which is used in connection with a first threshold to evaluate write operations on a per-extent basis. The dynamic selection processes also determines a per-extent size threshold to select between compression algorithms for particular write operations.
Identifying malicious clients in federated learning is disclosed while enhancing privacy. The clients are clustered such that cluster updates in the federated learning are generated. When a suspect cluster is identified, clients in the suspect clusters are labeled as suspect and clients in clusters that are not suspect are labeled as fair. The clients are reclustered and the clusters and clients are relabeled without changing the labels of clients that were previously deemed fair. After one or more iterations, the malicious clients are identified, and corrective actions can be performed.
A technique of managing message between chassis includes forming a first message by a computing node in a first chassis. The first message complies with a first communications protocol and provides an instruction directed to a controller in a second chassis to manage one or more hardware functions of the second chassis. The controller operates in accordance with a second communications protocol that is different from the first communications protocol. The technique further includes transmitting both the first message and a set of I/O requests from the first chassis to the second chassis over a communications link configured to carry messages complying with the first communications protocol. The technique further includes converting, in the second chassis, the first message complying with the first communications protocol into a second message complying with the second communications protocol, the second message including the instruction directed to the controller.
A storage node maintains storage objects that contain decoy datasets that are used to detect cyber-attacks. The decoy datasets may be deployed at logical block addresses (LBAs) including the first and last LBAs of the LBA range of the storage object. Real active data may be stored on the storage object with the decoy datasets. A cyber-attack is detected based on receipt of a suspicious IO command that accesses decoy data. Access to the decoy data may be detected by maintaining an IO access bitmap, calculating digital signatures of decoy datasets, or monitoring for decoy data that is marked for remote replication.
G06F 16/27 - Replication, distribution or synchronisation of data between databases or within a distributed database systemDistributed database system architectures therefor
A remote user equipment device may receive traffic payload from a source radio access network node, with which the remote user equipment has an established communication session, via a relay user equipment device of a sidelink path. The relay device may receive a path switch request, which may be triggered by degraded communication channel conditions between the remote device and the source node or the relay device. The path switch request may indicate a target node with which the remote device is to establish a communication session. Responsive to the switch request, the relay device may transmit to the source node a pending sidelink traffic indication indicative of traffic payload packets undelivered by the relay device to the remote device. The source node may transmit information indicative of the undelivered packets to the target node to facilitate the target node transmitting the undelivered packets to the remote device.
Enabling codecs at an IHS including: accessing a local token store that stores tokens, each token associated with a codec; identifying codecs enabled at the IHS based on the tokens; receiving a request to encode or decode a media file, the media file associated with a particular codec for encoding or decoding of the media file; determining that the particular codec is not enabled at the IHS based on the previously identified enabled codecs, and in response, transmitting a request to a cloud codec management service; receiving the particular token, the particular token signed and unique to the IHS, and in response, storing the particular token at the local token store; restarting the driver, and in response, accessing the local token store; obtaining from the local token store, the particular token, and in response, enabling the particular codec for the media file.
H04L 9/32 - Arrangements for secret or secure communicationsNetwork security protocols including means for verifying the identity or authority of a user of the system
According to embodiments of the present disclosure, systems and methods for authenticating a user according to the structure of their hands are provided. According to one embodiment, an Information Handling System (IHS) includes a surface device, a processor, and a memory with program instructions stored thereon that, upon execution by the processor, cause an Information Handling System (IHS) to receive a plurality of signals representing a plurality of pressure points that have been actuated on the surface device, generate a passcode according to a position of each pressure point relative to one another, and compare the generated passcode with a stored baseline passcode to authenticate the user. The pressure points represent at least one hand of the user.
Systems and methods for security for a split-boot architecture are described. In an illustrative, non-limiting embodiment, an Information Handling System (IHS) may include: a printed circuit board; a processor coupled to the printed circuit board; and a memory coupled to the processor, wherein the memory comprises program instructions stored thereon that, upon execution by the processor, cause the IHS to: obtain one or more cryptographic keys associated with firmware onboard the printed circuit board; and verify extended firmware using the cryptographic keys.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
H04L 9/14 - Arrangements for secret or secure communicationsNetwork security protocols using a plurality of keys or algorithms
H04L 9/32 - Arrangements for secret or secure communicationsNetwork security protocols including means for verifying the identity or authority of a user of the system
28.
METHODS AND PROCESSES TO ENABLE RNN-GNN-BASED NETWORK DIGITAL TWIN FOR O-RAN
One example method includes using a network digital twin of a communications network to perform operations including monitoring, on an ongoing basis, a status of the communications network as the communication network changes, maintaining synchronization between the communications network and the network digital twin based on changes to the status, and the status changes are determined using information gathered during the monitoring, and using the network status to make a prediction regarding performance of the communications network.
H04L 41/147 - Network analysis or design for predicting network behaviour
H04L 41/16 - Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks using machine learning or artificial intelligence
An apparatus in an illustrative embodiment comprises at least one processing device, with the processing device being configured to receive in a storage system from a host device an indication of a data size utilized in a multi-path layer of the host device to select paths for delivery of input-output operations to different storage controllers of the storage system, to determine in the storage system a prefetch data size based at least in part on the data size indication received from the host device, and responsive to detection in the storage system of sequential data reads in input-output operations received from the host device, to prefetch from one or more backend storage devices of the storage system, into a memory associated with a particular one of the storage controllers of the storage system, an amount of data that is determined based at least in part on the prefetch data size.
G06F 12/0862 - Addressing of a memory level in which the access to the desired data or data block requires associative addressing means, e.g. caches with prefetch
32.
Identification and remediation of issues encountered on a user interface of a web-based system
An apparatus comprises at least one processing device configured to identify issues encountered on a user interface of a web-based system, the issues being associated with data structures consolidating data from backend applications supporting the web-based system. The at least one processing device is also configured to determine which of the backend applications are the source of respective ones of the issues. The at least one processing device is further configured to generate a prioritization of the issues based at least in part on supplemental information comprising at least one of service request data and user feedback relating to the data structures. The at least one processing device is further configured to trigger the backend applications supporting the web-based system to remediate the issues based at least in part on the generated prioritization.
A technique is directed to managing wear leveling between storage devices. The technique includes generating a wear imbalance level indicating a variance between a first wear level of a first set of storage devices and a second wear level of a second set of storage devices. The technique further includes, after generating the wear imbalance level, performing a comparison operation that compares the wear imbalance level to a predefined imbalance threshold. The technique further includes, in response to the comparison operation indicating that the wear imbalance level is above the predefined imbalance threshold, providing the first set of storage devices as a first storage tier and the second set of storage devices as a second storage tier.
G06F 3/00 - Input arrangements for transferring data to be processed into a form capable of being handled by the computerOutput arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
G06F 3/06 - Digital input from, or digital output to, record carriers
34.
Data center monitoring and management operation including a protected data tag operation
A system, method, and computer-readable medium for performing a data center monitoring and management operation. The data center monitoring and management operation includes: generating a data tag for an object within a data center asset, the generating the data tag for the object associating a contextual meaning with the object; mapping the data tag to the object, the mapping the data tag to the object associating a data tag with the object; and, protecting the data tag to provide a protected data tag, the protecting the data tag ensuring that only an authorized user can manage an aspect of the protected data tag.
A display device which includes a display component; a display frame; an embedded camera system, the embedded camera system including a camera component, the camera component being physically coupled to the display frame to embed the camera component within the display device and an electronic shutter component, the electronic shutter component being physically coupled to a display frame of the display device, the electronic shutter component restricting visual access to the camera component when the electronic shutter component is functioning in a camera off mode of operation, the electronic shutter component providing visual access to the camera component when the electronic shutter component is functioning in a camera on mode of operation.
An information handling system stylus self-cleans a magnet garage arrangement with a garage variable magnet having a first magnetic attraction when the stylus is proximate and information handling system garage and a second magnetic attraction when the stylus is distal the information handling system garage. The second magnetic attraction has a reduced attractive force at the stylus housing outer surface to discourage attraction of contaminants that might scratch or otherwise damage the housing.
B08B 7/00 - Cleaning by methods not provided for in a single other subclass or a single group in this subclass
G06F 3/0354 - Pointing devices displaced or positioned by the userAccessories therefor with detection of 2D relative movements between the device, or an operating part thereof, and a plane or surface, e.g. 2D mice, trackballs, pens or pucks
G06F 3/038 - Control and interface arrangements therefor, e.g. drivers or device-embedded control circuitry
G06F 3/039 - Accessories therefor, e.g. mouse pads
38.
Processing metadata changes using multiple aggregation policies
A technique for managing metadata changes in a storage system provides different aggregation policies for use with different metadata. The technique includes assigning metadata changes to respective aggregation policies and storing the assigned metadata changes in a set of data structures. The technique further includes destaging the metadata changes from the set of data structures separately for the different aggregation policies in accordance with settings specific to those aggregation policies.
A direct-attached storage device software RAID control communication system includes a chassis housing a software RAID subsystem coupled to an operating system and a controller device. The software RAID subsystem provides a virtual adapter device and a virtual miniport driver for the operating system, provides a physical miniport driver for the controller device, and provides a helper driver between the virtual miniport driver and the physical miniport driver. The helper driver identifies, via the physical miniport driver, a communication entry point for the controller device and logical storage subsystem(s) provided by storage device(s) connected to the controller device, and identifies them to the virtual miniport driver. The virtual miniport driver then presents a logical storage device to the operating system that includes at least some of the logical storage subsystem(s), and uses the communication entry point to transmit communications between the operating system and the physical miniport driver.
A data storage system is operated for reduced power consumption, including regularly scanning usage patterns of data stored on a set of production storage devices to identify cold data whose usage is below a predetermined usage threshold, and adding the cold data of each scan to a collection of cold data. The production storage devices are operated in a normal power mode having normal per-device power consumption. Upon the collection of cold data reaching a predetermined size, (1) one of the production storage devices is designated as a green tier device, and (2) the collection of cold data is moved to the green tier device. The green tier device is operated in a low power mode having a lower per-device power consumption to realize energy savings.
A management-subsystem-based software RAID configuration system includes a chassis housing storage devices that each include a respective storage device memory subsystem and that are each coupled to a management subsystem and a software RAID subsystem. The software RAID subsystem uses the storage devices to create a RAID. When the software RAID subsystem receives a configuration command that instructs a configuration of the RAID from the management subsystem via the respective storage device memory subsystem in a first of the storage devices, it identifies a subset of the storage devices that require configuration based on the configuration command, generates a respective configuration sub-command that instructs the configuration of each of the subset of the storage devices to provide the configuration of the RAID according to the configuration command, and transmits the respective configuration sub-command to each of the subset of the storage devices for which that respective configuration sub-command was generated.
An information handling system housing includes an interior frame that integrates removeable slot adapters and a garage to hold the slot adapters once separate from the frame. In one example embodiment, a slot adapter has plural support structures and screw openings with an offset bottom surface alignment pin so that insertion into openings in different device slots will support different types of devices, such as solid state drives (SSDs) and wireless network interface controllers.
Methods, apparatus, and processor-readable storage media for generating test cases for software testing using machine learning techniques are provided herein. An example computer-implemented method includes obtaining user input data associated with at least one software application; identifying one or more predetermined types of information, including one or more of topic-related information and entity-related information, from at least a portion of the user input data using at least a first set of one or more machine learning techniques; generating one or more test cases for testing at least a portion of the at least one software application by processing at least a portion of the identified information using at least a second set of one or more machine learning techniques; and performing one or more automated actions based at least in part on at least one of the one or more generated test cases.
A crash-based RAID data storage system includes a chassis housing storage subsystems coupled to an operating system and a software RAID subsystem. During a runtime mode of the operating system, the software RAID subsystem reserves a RAID driver telemetry storage portion of a RAID logical storage subsystem provided by at least one storage device in the storage subsystems. In response to the operating system entering a crash dump mode from the runtime mode, the software RAID subsystem initializes respective controller devices in each of the storage subsystems, and during the crash dump mode of the operating system the software RAID subsystem stores RAID driver telemetry data generated by the software RAID subsystem in the RAID driver telemetry storage portion of the RAID logical storage subsystem provided by the at least one storage device using the respective controller device for that storage device.
SYSTEM AND METHOD FOR GUARDING BIT DATA PACKET SELF-RECOVERY WITH A DATA PACKET COMMUNICATION AND POLLING SYSTEM FOR WIRELESS INPUT/OUTPUT (IO) DEVICES
A guarding bit data packet self-recovery system executing at a wireless dongle or adapter of an information handling system comprising a controller to transmit a polling packet including instructions to a wireless input/output (IO) device to return a packet frame of a specified number of data packets at a specified data packet length via a wireless link and the controller to determine conditions of data error levels at a first threshold level and noise level below noise threshold level before generating instructions in a polling packet for the wireless IO device to transmit split bytes including guarding bits coded into each split byte via a Hamming algorithm and the controller to receive the packet frame with the split bytes and guarding bits and decoding the split byte to detect and correct a bit error located in the split byte to recover the wireless IO device data from the split bytes.
A wireless input/output (IO) device input data packet payload compression system of a wireless communication dongle at an information handling system may comprise a controller to instruct an operatively connected wireless IO device to transmit a selected number of compressed input data packets including a compressed wireless IO device input data payload of compressed or truncated wireless IO device input data and having a selected compressed data packet length, the wireless radio system of the wireless communication dongle to receive the selected number of compressed input data packets of the selected compressed data packet length from the wireless IO device, the controller to execute code instructions to translate the compressed input data into reassembled input data for the wireless IO device, and the controller to generate a human interface device report that includes the reassembled input data for processing by an operating system of the information handling system.
SYSTEM AND METHOD FOR RECOVERY AND COMPENSATION FOR DROPPED OR MISSED DATA PACKETS FOR COMMUNICATION BETWEEN A WIRELESS MOUSE AND A WIRELESS COMMUNICATION DONGLE
A wireless input/output (IO) device missed position offset value recovery and compensation system of a wireless communication dongle at an information handling system comprising a controller to transmit with a wireless radio system a polling packet to instruct a wireless mouse to transmit a selected number of data packets, each including a compressed two byte payload of wireless mouse position changes within a data packet frame, the wireless radio system to detect missing data packets within the data packet frame. The controller to translate the wireless mouse position offset values from received payloads into determined cursor positional data for a displayed cursor and to estimate cursor positional data for missing data packets based on wireless mouse position offset values in received payloads in the data packet frame, and the controller to communicate the received and estimated cursor positional data to an operating system of the information handling system.
G06F 3/038 - Control and interface arrangements therefor, e.g. drivers or device-embedded control circuitry
G06F 3/0354 - Pointing devices displaced or positioned by the userAccessories therefor with detection of 2D relative movements between the device, or an operating part thereof, and a plane or surface, e.g. 2D mice, trackballs, pens or pucks
SYSTEM AND METHOD FOR COMPENSATION FOR GAPPED DATA PACKETS DURING POLLING FOR COMMUNICATION BETWEEN A WIRELESS INPUT/OUTPUT (IO) DEVICE AND A WIRELESS COMMUNICATION DONGLE
A wireless IO device gapped position offset value compensation system of a wireless communication dongle at an information handling system may comprise a controller to transmit with a wireless radio system an initial polling packet instructing a wireless mouse to transmit data packets including wireless mouse position offset values within a first data packet frame and to transmit, during an interframe time slot, an updated polling packet to instruct the wireless mouse to transmit data packets within a second data packet frame. The controller to translate the wireless mouse position offset values from received payloads into cursor positional data values, and to estimate a next cursor positional data value during the interframe polling packet time slot based on received wireless mouse position offset values, and the controller to communicate to the information handling system the cursor positional data values and the next estimated cursor positional data value.
G06F 3/0354 - Pointing devices displaced or positioned by the userAccessories therefor with detection of 2D relative movements between the device, or an operating part thereof, and a plane or surface, e.g. 2D mice, trackballs, pens or pucks
G06F 3/038 - Control and interface arrangements therefor, e.g. drivers or device-embedded control circuitry
49.
SYSTEM AND METHOD FOR SYNCHRONIZED RECEIVE/TRANSMIT SWITCHING FOR DATA PACKET COMMUNICATION FRAMES TRANSMITTED BETWEEN A WIRELESS INPUT/OUTPUT (IO) DEVICE AND A WIRELESS COMMUNICATION DONGLE
A wireless input/output (IO) device and dongle synchronized receive/transmit (RX/TX) switching system executing on a wireless IO device comprising a wireless radio system to receive a polling packet from a wireless communication dongle at an information handling system instructing transmission of data packets within a data packet communication frame, the microcontroller to initiate, upon a polling packet detected end of receipt, a first TX ramp up process at the wireless radio system, and set a communication frame transmission timer based on the polling packet, the microcontroller to disable transmission at the wireless radio system, upon a first data packet detected end of transmission, start the radio interrupt callback timer, and upon running of the radio interrupt callback timer, the microcontroller to initiate a second TX ramp up period that concludes at a scheduled initiation of a next allotted time slot for transmission of a second wireless IO device data packet.
Techniques are disclosed for network attached storage (NAS) server placement in a heterogeneous storage cluster. An example system includes at least one processing device including a processor coupled to a memory. The at least one processing device can be configured to implement the following steps: identifying a placement event associated with a NAS asset in a heterogeneous storage cluster, where the NAS asset is located on an initial appliance in the cluster, obtaining resource characteristics associated with the NAS asset, analyzing the resource characteristics to identify an available appliance in the cluster, and deploying the NAS asset to the identified appliance.
One or more aspects of the present disclosure relate to protecting the integrity of datasets stored by a storage array. In embodiments, an input/output (IO) workload is received at a storage array. A restricted access policy is also established for at least one target of one or more IO requests corresponding to the IO workload. Further, access to the at least one target is restricted based on the restricted access policy.
One or more aspects of the present disclosure relate to autonomous write fencing for backup power. In embodiments, an input/output (IO) workload is received at a storage array. Additionally, one or more IO write requests in the IO workload are cached based on a charge level of a backup power supply of the storage array. Further, the cached IO write requests are processed.
G06F 12/0875 - Addressing of a memory level in which the access to the desired data or data block requires associative addressing means, e.g. caches with dedicated cache, e.g. instruction or stack
Spectral efficiency aware predictive modulation and coding scheme table selection (e.g., using a computerized tool), is enabled. For example, a method can comprise, based on spectral efficiency key performance indicator data, determining, by network equipment comprising a processor, a predicted spectral efficiency applicable to a user equipment, based on fluctuation key performance indicator data, determining, by the network equipment, predicted spectral efficiency fluctuation applicable to the user equipment, based on the predicted spectral efficiency and the predicted spectral efficiency fluctuation, determining, by the network equipment, a predicted spectral efficiency range, and based on the predicted spectral efficiency range, selecting, by the network equipment, a modulation and coding scheme table, for the user equipment, determined to modify a spectral granularity within the predicted spectral efficiency range to satisfy a spectral granularity criterion within the predicted spectral efficiency range.
In one or more embodiments, one or more systems may provision a virtual console as a service. A remote access controller (RAC) may communicate virtual console content to a virtual console service (VCS) executing on a private cloud server, enabling recording of larger amounts of virtual console content (VCC) and more advanced processing of the VCC by the private cloud server. In the event a crash occurs, more VCC can be accessed to analyze a system, including streaming subsequent VCC.
H04N 21/24 - Monitoring of processes or resources, e.g. monitoring of server load, available bandwidth or upstream requests
H04N 21/222 - Secondary servers, e.g. proxy server or cable television Head-end
H04N 21/2343 - Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving reformatting operations of video signals for distribution or compliance with end-user requests or end-user device requirements
H04N 21/2747 - Remote storage of video programs received via the downstream path, e.g. from the server
Techniques are provided to facilitate access to fragmented snapshot data. For example, a storage control system generates a snapshot data structure of a storage volume. The snapshot data structure comprises plurality of nodes comprising a volume node and one or more snapshot nodes, the volume node is configured to store new and updated data that is written to logical offsets of the storage volume, and the one or more snapshot nodes comprise point-in-time copies of data of the storage volume taken at different times. The storage control system adds an entry for the volume node in a metadata structure associated with the snapshot data structure, wherein the entry comprises a reference to a physical location of data held by a given one of the snapshot nodes at a given logical offset of the storage volume.
A printed circuit board comprising a differential microstrip pair including a neck-down area and an ultraviolet glue coating a portion of the neck-down area of the differential microstrip pair to control an impedance of the differential microstrip pair.
An apparatus comprises a processing device configured to capture, via at least one camera of augmented reality hardware, a live video feed of an information technology asset. The processing device is also configured to track, in the live video feed, at least one object of interest comprising a hardware component of the information technology asset that is to be serviced. The processing device is further configured to monitor system state information characterizing operation of the information technology asset. The processing device is further configured to generate one or more additional video layers based on the tracked object of interest and the obtained system state information. The processing device is further configured to generate a layered video feed comprising the additional video layers overlayed on the live video feed of the information technology asset, and to provide, to at least one display of the augmented reality hardware, the layered video feed.
Global topics in distributed ledgers are disclosed. A distributed ledger is configured with a global topic whose identifier is publicized and well known. The global topic stores information about trust providers including topic identifiers and smart contract identifiers. Requestors can query the global topic to retrieve the information of specific trust providers. Once the information of the specific trust providers is known, the requestors can publish or write annotations and transactions to the distributed ledger. By associating the entries in the global topic with timestamps, requestors can reconfigure themselves automatically with updated trust provider information whenever a write to the distributed ledger fails.
H04L 9/00 - Arrangements for secret or secure communicationsNetwork security protocols
H04L 9/32 - Arrangements for secret or secure communicationsNetwork security protocols including means for verifying the identity or authority of a user of the system
59.
SUBSCRIPTION-BASED MODEL WITH PROTECTION AGAINST BILLING AVOIDANCE
One example method includes connecting a digital wallet of a customer to an agent of a data confidence fabric, receiving, from an application, a request for performance of a trust function, by the data confidence fabric, with respect to customer data, processing the customer data by applying the trust function to the customer data, returning the customer data, after the processing, to the agent, creating annotations for the customer data, based on the trust function that was applied, upon successful execution of a smart contract, transferring a fee from the digital wallet to a trust provider associated with the data confidence fabric, and providing the processed customer data to another entity.
One example method includes connecting a digital wallet of a customer to an agent of a data confidence fabric, receiving, from an application, a request for performance of a trust function, by the data confidence fabric, with respect to customer data, processing the customer data by applying the trust function to the customer data, returning the data, after the processing, to the agent, creating annotations for the customer data, based on the trust function that was applied, transmitting the annotations, and a corresponding trust provider fee amount, to a smart contract, and when the digital wallet of the customer does not have adequate funds to cover the trust provider fee amount, obtaining funds from an alternate source of funding associated with the data confidence fabric.
G06Q 20/36 - Payment architectures, schemes or protocols characterised by the use of specific devices using electronic wallets or electronic money safes
Invoking smart contracts in data confidence fabrics is disclosed. Trust functions are applied to data that is ingested into and/or flowing in a data confidence fabric. When a trust function is applied, a smart contract is invoked. The smart contract is configured to publish annotations to a distributed ledger that reflect the confidence information added by the trust function and to perform payment as a service such that the trust provider is paid. Publishing the annotations to a distributed ledger may be coupled or uncoupled to performing payment as a service.
G06Q 20/10 - Payment architectures specially adapted for electronic funds transfer [EFT] systemsPayment architectures specially adapted for home banking systems
G06Q 20/36 - Payment architectures, schemes or protocols characterised by the use of specific devices using electronic wallets or electronic money safes
Methods and systems for managing onboarding of data processing systems are disclosed. To onboard the data processing systems, access information for wireless networks may be securely distributed to the data processing systems prior to being onboarded. The access information may be securely distributed using vouchers for the data processing systems. The vouchers may include information usable to secure distribution of the access information via wireless communication links to the data processing systems. The access information may allow the data processing systems to communication with rendezvous systems, orchestrators, and/or other entities that participate in the onboarding processes.
A method, computer program product, and computing system for determining an amount of data moved within a plurality of write input/output (IO) log structures of a storage system during a monitoring interval. A utilization value for each write IO log structure may be determined during the monitoring interval. Over-provisioning resources are allocated from the storage system to the plurality of write IO log structures based upon, at least in part, the amount of data moved within each write IO log structure and the utilization value for each write IO log structure.
A method, computer program product, and computing system for processing a plurality of log files from one or more storage systems. A log pattern concerning at least two or more log files is identified by processing each log file from the plurality of log files using one or more processing threads. A potential overlogging issue associated with the log pattern is identified.
A printed circuit board substrate including multiple sets of glass rows. The multiple sets of glass rows include a first set of glass rows, a second set of glass rows, and a third set of glass rows. The first set of glass rows extend in a first direction. The second set of glass rows extend in a second direction that is perpendicular to the first direction. The third set of glass rows extend in a third direction that is parallel to the first direction. The resin holds the multiple sets of glass rows together and to fill pockets between the multiple of sets of glass rows.
Ducting mitigation in an open radio access network (e.g., using a computerized tool), is enabled. For example, a system can comprise a processor and a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising, based on cell configuration data representative of a cell configuration applicable to a cellular node and based on meteorological data representative of a meteorological measurement applicable to the cellular node, determining, using a ducting prediction model, whether the cellular node is threshold likely to experience ducting, and in response to determining that the cellular node is threshold likely to experience the ducting, determining, using a ducting mitigation model, a ducting mitigation action to be performed that has been determined to mitigate the ducting.
Methods and systems are included for evaluating trust in resources of a zero-trust computing environment. A request is received from a user for access to a resource of the zero-trust environment. A trust score is calculated for the resource based on: users requesting access to the resource, hardware components used to request access to the resource, software applications used to request access to the resource, networks used to request access to the resource and data exposed by providing the requested access to the resource. The request from the user is evaluated based on policies of the zero-trust environment that govern access to the resource, where policies grant or deny access to the resource based in part on the calculated trust score of the resource.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
68.
POLICY EVALUATION BASED TRUST SCORING IN A ZERO-TRUST COMPUTING ENVIRONMENT
Systems and methods provide controlled access to resources in a zero-trust computing environment. Requests for access to resources of the zero-trust environment are tracked, including identifying policies evaluated in response to requests for access to resources. Based on the tracked requests, policies are identified that were satisfied in granting access to resources and that were not satisfied in denying access to resources. Request for access to resources are evaluated based on a trust score for a resource that is calculated based on users requesting access to the resource, hardware requesting access to the resource, software applications requesting access to the resource, networks used to request access to the resource and data exposed by providing the requested access to the resource. The trust score for the resource is adjusted upwards based on the policies satisfied in granting requested access, and adjusted downwards based on policies not satisfied in denying requested access.
Systems and methods for wireless interface sharing for Out-of-Band (OOB) processors in heterogeneous computing platforms. In some embodiments, an Information Handling System (IHS) may include an OOB Microcontroller Unit (MCU) integrated into a heterogeneous computing platform and a network traffic routing controller integrated into the heterogeneous computing platform, where the network traffic routing controller is coupled to the OOB MCU and to a host processor, and where the network traffic routing controller is configured to determine whether to route a packet to the OOB MCU or to the host processor.
Systems and methods for Message Queuing Telemetry Transport (MQTT) for Out-of-Band (OOB) manageability in heterogeneous computing platforms. In some embodiments, an Information Handling System (IHS) may include a heterogeneous computing platform comprising a plurality of devices, and an OOB Microcontroller Unit (MCU), an Embedded Controller (EC), or a network device integrated into or coupled to the heterogeneous computing platform and distinct from any host processor of the heterogeneous computing platform, wherein the OOB MCU, EC, or network device is configured to: establish an OOB connection with a cloud service via a light communication protocol while every host processor of the heterogeneous computing platform is in a low-power state, and retrieve one or more OOB packets from the cloud service via the OOB connection.
H04L 67/12 - Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
H04L 67/025 - Protocols based on web technology, e.g. hypertext transfer protocol [HTTP] for remote control or remote monitoring of applications
71.
CONTEXTUAL SECURITY POLICY ENGINE FOR COMPUTE NODE CLUSTERS
The technology described herein, which can be incorporated into a bare metal as a service environment, is generally directed towards monitoring retrieving and analyzing security configuration stored on recovery partition storage (e.g., OEM partition drives), which can contain critical logs, error state data, and boot critical security data. A backend security policy engine enforces security context configuration policy data, including to prevent malicious attacks on the backend services. Bare metal in-band compute device health is monitored by an out-of-band network using telemetry data services. When an unrecoverable system state is detected, the out-of-band network activates the recovery partition storage for recording the system sensitive logs, debug data and error states, which is stored as encrypted per security policies. Security policy is enforced, including on system logs, to prevent data tampering and/or malicious attacks. A recovery scenario is performed to restore operation of the compute device.
An apparatus includes at least one processing device configured to determine, for endpoint nodes of a distributed processing system, node security information characterizing security issues encountered on one or more of the endpoint nodes. The processing device is also configured to identify, based on the node security information, a first type of security issues encountered on a first endpoint node and a second type of security issues encountered on a second endpoint node. The processing device is further configured to select first and second sets of corrective actions for the first and second types of security issues. The processing device is further configured to apply, to the first endpoint node, the first set of corrective actions, and to apply the second set of corrective actions by deploying an additional endpoint node in the distributed processing system and migrating workloads running on the second endpoint node to the additional endpoint node.
The technology described herein is directed towards workload prioritization (ranking) in a cloud (e.g., private/hybrid) environment based on multi-criteria decision analysis using Mahalanobis distance-based variance-covariance matrix that takes into account the pair-wise correlation between criteria attributes from a dataset. The technology described herein calculates relative closeness values for alternatives (e.g., virtual machines), and can perform a final ranking of a group of virtual machines based on their associated relative closeness values. The workload prioritization process can be incorporated into a decision engine. The decision engine can be used in various use cases, including backup prioritization, shutdown prioritization during power failures, workflow scheduling prioritization, and the like.
An information handling system has a storage device including a telemetry log, a BIOS configured to provide BIOS status data and BIOS security data, an OS configured to provide OS status data and OS security data, and a security management module. The security management module determines whether the information handling system is in a low-threat state or a high-threat state. When the information handling system is in the low-threat state, the security management module directs the BIOS to store the BIOS status data to the telemetry log and the OS to store the OS status data to the telemetry log. When the information handling system is in the high-threat state, the security management module directs at least one of the BIOS to store the BIOS security data and the OS to store the OS security data.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
75.
FLASH ARBITRATION IN HETEROGENEOUS COMPUTING PLATFORMS
Systems and methods for flash arbitration in heterogeneous computing platforms. In some embodiments, an Information Handling System (IHS) may include a heterogeneous computing platform having a plurality of devices, and a flash memory external to the heterogeneous computing platform and coupled to the plurality of devices via a Serial Peripheral Interface (SPI) controller, where the heterogeneous computing platform comprises a flash arbitration circuit coupled between the SPI controller and the plurality of devices, and where the flash arbitration circuit is configured to arbitrate access to the flash memory among the plurality of devices.
Systems and methods for video frame buffer capture in heterogeneous computing platforms. In some embodiments, an Information Handling System (IHS) may include a graphics processor integrated into or coupled to a heterogeneous computing platform and an Out-of-Band (OOB) Microcontroller Unit (MCU) integrated into the heterogeneous computing platform and coupled to the graphics processor, where the OOB MCU is configured to: retrieve a video frame from a video buffer in response to a command to capture the video frame, and transmit the video frame to a remote IHS.
An information handling system may include a host system; and a management controller comprising a firmware that includes a bootloader component that is cryptographically signed by a manufacturer of the information handling system and a runtime component that is not cryptographically signed by the manufacturer of the information handling system. The management controller may be configured to establish trust with a remote information handling system by: receiving a handshake request from the remote information handling system, the handshake request including a payload; encrypting the payload via a key that is accessible by the bootloader component but not accessible by the runtime component; and responding to the handshake request by transmitting the encrypted payload to the remote information handling system.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
G06F 21/33 - User authentication using certificates
Systems and methods for Out-of-Band (OOB) diagnostics in heterogeneous computing platforms. In some embodiments, an Information Handling System (IHS) may include a heterogeneous computing platform having a plurality of devices and an Out-of-Band (OOB) Microcontroller Unit (MCU) integrated into the heterogeneous computing platform and coupled to the plurality of devices via an interconnect. The OOB MCU may be configured to: receive a result of a diagnostics operation performed with respect to at least a given one of the plurality of devices, and transmit an indication of the result, as part of an OOB sniffing operation, to a remote IHS.
Systems and methods for Out-of-Band (OOB) settings management in heterogeneous computing platforms. In some embodiments, an Information Handling System (IHS) may include a heterogeneous computing platform having a plurality of devices and an Embedded Controller (EC) integrated into or coupled to the heterogeneous computing platform, where the EC is configured to: receive, within an OOB packet, a command to write a Basic Input/Output System (BIOS), EC, or host Operating System (OS) setting; and write the BIOS, EC, or host OS setting in a flash memory or a storage device coupled to the EC.
An active search based approach for performing queries in networks, including geographically overlapping networks, is disclosed. After generating a graph representing devices operating in one or more networks, feature sets of the devices are retrieved and stored in corresponding nodes. When performing a query, a small set of nodes is used to train a model, such as a classifier, and the graph is searched for nodes that are part of a particular class. When a sufficient number of nodes are identified, which is much less than the number of nodes in the graph, the corresponding devices are queried and the resulting data may be used to perform an action.
Systems and methods for splitting payloads across Out-of-Band (OOB) packets in heterogeneous computing platforms. In some embodiments, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the IHS to: identify a target device of a payload, where the target device includes an OOB Microcontroller Unit (MCU) or an Embedded Controller (EC) integrated into or coupled to a heterogeneous computing platform of a client IHS, and, based at least in part upon the target device, split the payload across two or more packets.
Systems and methods for recovery from power events in heterogeneous computing platforms. In some embodiments, an Information Handling System (IHS) may include a heterogeneous computing platform and an Out-of-Band (OOB) Microcontroller Unit (MCU) integrated into the heterogeneous computing platform or an Embedded Controller (EC) integrated into or coupled to the heterogeneous computing platform, where the OOB MCU or EC is configured to, in response to detection of an impending power event, store an OOB command onto a non-volatile memory.
Systems and methods for provisioning of Out-of-Band (OOB) manageability features in heterogeneous computing platforms. In some embodiments, an Information Handling System (IHS) may include a heterogeneous computing platform and an OOB Microcontroller Unit (MCU) integrated into the heterogeneous computing platform or an Embedded Controller (EC) integrated into or coupled to the heterogeneous computing platform, where the OOB MCU or EC is configured to, in response to a status of a flag, enable OOB packet sniffing operations.
A method can comprise determining, by a system, a first sleep mode action for a first group of cellular base station signal metrics for a cellular base station over a first time period, wherein the first group of cellular base station signal metrics is determined based on a first layer of communications of the cellular base station. The method can further comprise determining, by the system, a second sleep mode action for a second group of cellular base station signal metrics for the cellular base station over a second time period. The method can further comprise determining, by the system, an arbitrated sleep mode action based on the first sleep mode action and the second sleep mode action. The method can further comprise sleeping, by the system, at least part of the cellular base station based on the arbitrated sleep mode action.
Disclosed systems and methods address escalated vulnerability attributable to system down time. In at least one embodiment, a customer-selectable threshold of detection establishes the number of days a system is allowed to be “down” before forcing a secured update path as described herein. The threshold may represent a compromise and balance between inconvenience and security based on each customer's preference. Tracking of system down time or offline time may be managed via EC/SBIOS and a real time clock (RTC) timer. The system down time may then be compared to the customer setting, e.g., whenever the system is booted.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
86.
INFORMATION HANDLING SYSTEM WITH A SWITCH CIRCUIT TO PERFORM AS A DOCK
An information handling system includes dock and compute portions. The dock portion communicates with a peripheral device. The compute portion includes an external communication port and a processor. The processor determines whether an external information handling system is connected to the external communication port. In response to the external information handling system being connected to the external communication port, the processor enters the information handling system into a dock operating mode. While in the dock operating mode commands from the external information handling system are provided from the external communication port, through the dock portion, and to the peripheral device. In response to the external information handling system not being connected to the external communication port, the processor enters the information handling system into a compute operating mode. While in the compute operating mode, commands from the processor are provided through the dock portion to the peripheral device.
An information handling system includes a flash memory having a basic input/output system (BIOS) firmware image having a modular file structure and a segment offset table that identifies offsets of a first set of modules including the firmware image. The system collects a second set of modules from a BIOS firmware update payload and maps the second set of modules to the first set of modules in the flash memory. The system also updates the BIOS firmware image with the second set of modules based on the offsets in the segment offset table.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
An add-in card includes a card-edge connector including a signal contact finger and a ground contact finger coupled to a ground plane of the add-in card, a plurality of metal layers, and first and second ground vias. The metal layers include a surface metal layer, a first ground metal layer, and a second ground metal layer. The surface metal layer includes the signal contact finger and the ground contact finger. The first ground metal layer is a closest metal layer to the surface metal layer, and the second ground metal layer is farther from the surface metal layer than the first ground metal layer. The first ground via is coupled to a first end of the ground contact finger, the first ground metal layer, and the second ground metal layer. The second ground via is coupled to a second end of the ground contact finger and the second ground metal layer, but is not coupled to the first ground metal layer.
Disclosed systems and methods employ an embedded controller (EC) to monitor password activity and, responsive to detecting the password activity satisfying a criterion associated with a security policy managed by the EC, take action to restrict access to and/or operation of the platform in accordance with the security policy. The monitoring of password activity may include monitoring unsuccessful password change and password unlock attempts in both a preboot and runtime operating environment and within any of various available boot paths including, as examples, an operating system (OS) boot path, a network OS boot path, and a service OS (SOS) boot path. The OS boot source may be one of various telemetry events reported to a cloud-based risk assessment engine. Monitoring password change and password unlock attempts may include monitoring how many unsuccessful password change and unlock attempts have occurred since a most recent successful password change or password unlock attempt.
G06F 21/55 - Detecting local intrusion or implementing counter-measures
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
A system can communicate broadband cellular communications with a user equipment. The system can perform iterations of scheduling downlink data for the user equipment as part of the broadband cellular communications. The system can, in response to determining that hybrid automatic repeat request feedback, which corresponds to downlink data of the iterations of scheduling downlink data, has not been received within a defined time period, initiate a user equipment release transaction with regard to the user equipment, and send a user equipment context release request to a centralized unit of a base station of the system.
A system can communicate broadband cellular communications with a user equipment. The system can direct the user equipment to perform iterations of transmitting a keep alive report periodicity signal according to a packet data convergence protocol protocol data unit format. The system can, in response to determining that a consecutive threshold number of keep alive report periodicity signals of the iterations of transmitting the keep alive report periodicity signal has not been received, initiate a user equipment release transaction with regard to the user equipment.
A system can communicate broadband cellular communications with a base station. The system can receive an indication from the base station to perform iterations of transmitting a keep alive report periodicity signal according to a packet data convergence protocol protocol data unit format. The system can initiate the iterations of transmitting the keep alive report periodicity signal to the base station, wherein, responsive to the initiating, a user equipment release transaction is to be initiated for the system based on a lack of a threshold number of consecutive keep alive report periodicity signals of the keep alive report periodicity signals being received.
An information handling system may include a host system; and a management controller comprising at least one management controller processor and a management controller storage resource. The management controller may be configured to: install a firmware image onto the management controller storage resource; subsequent to installing the firmware image, receive a plugin application; cryptographically verify a source of the plugin application; install the plugin application onto the management controller storage resource; and execute the plugin application.
G06F 21/53 - Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity, buffer overflow or preventing unwanted data erasure by executing in a restricted environment, e.g. sandbox or secure virtual machine
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
94.
OPTIMIZED RESOURCE MANAGEMENT OF CLOUD NATIVE WORKSPACES FOR SHARED PLATFORM
One example method includes receiving, by a workspace size predicting engine, a workspace provisioning request including resource requirement information that specifies one or more features that are to be included when a workspace is provisioned. The one or more features include at least a machine learning (ML) model that is to be run in the workspace. The method also includes predicting, by the workspace size predicting engine, the one or more resources for provisioning the workspace that corresponds to the workspace provisioning request.
One example method includes receiving, by a workspace size predicting engine, a workspace provisioning request regarding a customer machine learning (ML) model, predicting, by the workspace size predicting engine, a size of a workspace that corresponds to the workspace provisioning request, receiving, by a datacenter host prediction engine from the workspace size predicting engine, the workspace size, and predicting, by the datacenter host prediction engine, a datacenter and/or host that is able to support requirements of the workspace.
One example method includes pre-processing a dataset, wherein the dataset includes data and/or metadata that indicates a software configuration of an internet of things (IoT) device, and/or indicates a history of any performance issues and/or security issues experienced by the IoT device, after the dataset is pre-processed, providing the dataset as an input to a machine learning model, using the machine learning model to generate, based on the input, respective target variable value predictions for each target variable in a group of target variables, and a first one of the target variables corresponds to the software configuration, and a second one of the target variables corresponds to the history, and when the target variable value predictions indicate a potential security issue and/or a potential performance issue, with the IoT device, taking a remedial action to resolve the potential security issue and/or the potential performance issue.
G06F 21/57 - Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
G16Y 40/50 - SafetySecurity of things, users, data or systems
97.
SMART INPUT DEVICES WITH USER BEHAVIOR PREDICTIONS
One example method includes detecting an operation of an input device, obtaining a clickstream associated with a user, using information from the clickstream, generating a prediction as to a next action by the user using the input device, and presenting the prediction to the user for possible selection by the user. Selection of the prediction by the user eliminates the need for the user to perform input device manipulations that would otherwise be required if the prediction were not selected.
One example method includes instantiating an ambassador component in a cloud computing environment that comprises container instances and databases, accessing, by the ambassador component, a prediction as to a number of database connections expected to be used by a particular one of the container instances, and the prediction was generated by a prediction engine, receiving, by the ambassador component, a request from the particular container instance for access to one of the databases, and providing, by the ambassador component to the particular container instance from which the request for access was received, an access object usable by that particular container instance to use a database connection to access the database identified in the request.
G06N 3/04 - Architecture, e.g. interconnection topology
G06F 9/50 - Allocation of resources, e.g. of the central processing unit [CPU]
G06F 16/21 - Design, administration or maintenance of databases
G06F 16/27 - Replication, distribution or synchronisation of data between databases or within a distributed database systemDistributed database system architectures therefor
G06N 3/084 - Backpropagation, e.g. using gradient descent
99.
METHODS AND PROCESSES TO ENABLE RNN-GNN-BASED NETWORK DIGITAL TWIN FOR O-RAN
One example method includes using a network digital twin of a communications network to perform operations including monitoring, on an ongoing basis, a status of the communications network as the communication network changes, maintaining synchronization between the communications network and the network digital twin based on changes to the status, and the status changes are determined using information gathered during the monitoring, and using the network status to make a prediction regarding performance of the communications network.
An information handling system in response to detecting sensitive data, gets a memory allocated to the sensitive data from a secure zone of a dual in-line memory module. The system also blocks processes from access to the memory allocated to the sensitive data from the secure zone using security descriptors and access the sensitive data from the secure zone of the dual in-line memory module based on the security descriptors. In addition, the system executes the sensitive data in a firmware remapped memory and cache address line.
G06F 21/78 - Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
G06F 12/14 - Protection against unauthorised use of memory
patents
