Columbia University

Infinio Systems, Inc.

AT&T Intellectual Property I, LP

University of Massachusetts

Vishal Misra

Daniel Rubenstein

Angelos D Keromytis

Salvatore J Stolfo

Janak Parekh

Michael E Locasto

Jason Nieh

Tal Malkin

Oren Laadan

Alexander Sherman

Joshua Reich

Eliahu Brosh

Yudong Yang

Martin Charles Martin

Yuming Jiang

Rittwik Jana

Kadangode K Ramakrishnan

Vijay Gopalakrishnan

Seungjoon Lee

David W Harvey

Angelos Stavrou

Scott Howard Davis

Jon Feldman

Hanhua Feng

Don Towsley

Hooman Vassef

Kyung-Wook Hwang

Yossi Chait

Christopher V Hollot

Abhinav Kamra

Salomon Oldak

Wei-Bo Gong

Michael Locasto

Scheduling traffic of a communication session between an application on WiFi and another device, by: receiving traffic of a first session; determining that the traffic belongs to a first classification; determining that a time allocated to the first classification times a second classification airtime is less than or equal to a time allocated to the second classification times a first classification airtime; selecting a counter associated with the first session as being the largest of multiple counters each associated with a different communication session of multiple communication sessions (which include the first session); determining that the traffic of the first session is to be scheduled for transmission to the application over WiFi in response to the counter being determined to be the largest of the plurality of counters; and based on the traffic being determined to be scheduled, increasing the airtime associated with the first classification and decreases the counter.

Systems, methods, and media for scheduling traffic of a communication session between an application on a WiFi network and another device

Mechanisms for providing multi-homing, comprising: a memory device; and at least one hardware processor coupled to the memory device and configured to: intercept a connection between a device and a server using a proxy; establish a first connection between the device and the proxy; create multiple second connections between the proxy and the server, wherein at least two of the multiple second connections use different connection types; receive a request for blocks of data from the device using the first connection; allocate the blocks of data across the multiple second connections; request the blocks of data from the server using the multiple second connections as allocated; receive the blocks of data from the server using the multiple second connections; and forward the blocks of data to the device using the first connection.

Systems, methods, and media for providing multi-homing

Methods for distributing and providing access to stored content from remote storage comprising: receiving a first request to access a first portion of stored content from a requestor, wherein the first request is in a file system request format; creating a placeholder for the stored content so that the placeholder has at least one parameter identical to the stored content and the placeholder can hold the first portion of the stored content and at least a second portion of the stored content; requesting the first portion of the stored content from remote storage; receiving the first portion of the stored content from the remote storage; storing the first portion of the stored content in the placeholder; and before the second portion of the stored content has been stored in the placeholder, providing the first portion of the stored content to the requestor using a file system response format.

Methods, systems, and media for stored content distribution and access

Systems and methods for a content addressable cache that is optimized for SSD use are disclosed. In some embodiments, the cache utilizes an identifier array where identification information is stored for each entry in the cache. However, the size of the bit field used for the identification information is not sufficient to uniquely identify the data stored at the associated entry in the cache. A smaller bit field increases the likelihood of a 'false positive', where the identification information indicates a cache hit when the actual data does not match the digest. A larger bit field decreases the probability of a 'false positive', at the expense of increased metadata memory space. Thus, the architecture allows for a compromise between metadata memory size and processing cycles.

Optimized read cache for persistent cache on solid state devices

Systems and methods for correlating and distributing intrusion alert information among collaborating computer systems are provided. These systems and methods provide an alert correlator and an alert distributor that enable early signs of an attack to be detected and rapidly disseminated to collaborating systems. The alert correlator utilizes data structures to correlate alert detections and provide a mechanism through which threat information can be revealed to other collaborating systems. The alert distributor uses an efficient technique to group collaborating systems and then pass data between certain members of those groups according to a schedule. In this way data can be routinely distributed without generating excess traffic loads.

Systems and methods for correlating and distributing intrusion alert information among collaborating computer systems

A method includes receiving information from a tracker device indicating that a plurality of devices is associated with a media content item. The method also includes establishing peer-to-peer sessions with a first group and a second group of the devices, selecting the first group based on a first bit-rate satisfying a threshold bit-rate, and sending a first request, via a first peer-to-peer session, to a first device of the first group. The media content item is divided into a plurality of chunks. The first request identifies a first chunk. The method also includes receiving the first chunk, modifying the threshold bit-rate based on a number of buffered chunks, and selecting the second group based on a second bit-rate satisfying the modified threshold bit-rate. The method also includes sending a second request to a second device of the second group. The second request identifies a second chunk.

System and method of adaptive bit-rate streaming

A caching system is provided. The computing infrastructure runs off of a centralized storage, and data stored on the centralized store can also be retrieved from nearby machines that are part of the local infrastructure and have recently accessed the centralized store. Address-to-digest mappings are used to find an index of the desired data block. That digest is then used to hold where the data block is being cached. In some embodiments, the digest is hashed and the hash of the digest is used to determine where the data block is being cached. The data block is accessed from the cache using its cache, therefore different addresses may result in the retrieval of the same data block. For example, in a virtual machine environment, two different nodes may retrieve the same data block using different addresses.

Content centric networking

Methods for distributing and providing access to stored content from remote storage comprising; receiving a first request to access a first portion of stored content from a requestor, wherein the first request is in a file system request format; creating a placeholder for the stored content so that the placeholder has at least one parameter identical to the stored content and the placeholder can hold the first portion of the stored content and at least a second portion of the stored content; requesting the first portion of the stored content from remote storage; receiving the first portion of the stored content from the remote storage; storing the first portion of the stored content in the placeholder; and before the second portion of the stored content has been stored in the placeholder, providing the first portion of the stored content to the requestor using a file system response format.

Systems and methods provide an alert correlator and an alert distributor that enable early signs of an attack to be detected and rapidly disseminated to collaborating systems. The alert correlator utilizes data structures to correlate alert detections and provide a mechanism through which threat information can be revealed to other collaborating systems. The alert distributor uses an efficient technique to group collaborating systems and then pass data between certain members of those groups according to a schedule. In this way data can be routinely distributed without generating excess traffic loads.

Methods, systems, and media for forming linear combinations of data are provided. In some embodiments, methods for forming a linear combination of data include: receiving at a device a first codeword, wherein the first codeword comprises a linear combination of at least a first data unit including data, and a second data unit including data; encoding at the device the first codeword and a third data unit including data to form a second codeword, wherein the second codeword includes a linear combination of at least the first data unit, the second data unit, and the third data unit; and transmitting from the device the second codeword.

Methods, systems, and media for forming linear combinations of data

Methods, media and systems for responding to a Denial of Service (DoS) attack are provided. In some embodiments, a method includes detecting a DoS attack, migrating one or more processes that provide a service to an unaffected system; authenticating users that are authorized to use the service; and routing traffic generated by authenticated users to the unaffected system.

Methods, media and systems for responding to a denial of service attack

Growing community of inventors

New York, NY, United States of America

Vishal Misra