Abstract: Methods and apparatus are provided for identifying suspicious domains using common user clustering. An exemplary method comprises obtaining network event data comprising a plurality of network connections; identifying users and domains associated with the network connections in the network event data; creating a connection between each user/domain pair that communicate with one another in the identified users and the identified domains to generate a graph; connecting domains in the graph using inter-domain edges that share common users to obtain a graph of interconnected domains; identifying bi-connected components in the graph of interconnected domains, wherein the bi-connected components comprise node pairs having at least two paths in the graph of interconnected domains between them; and processing the bi-connected components to identify a plurality of suspicious domains that are likely to participate in a computer security attack.

Abstract: A system for generating virtual private network (VPN) sessions from VPN server log messages uses and displays a VPN sessions table in which each row contains attributes of a corresponding VPN session. Processing of a log message causes a session to be generated when there is no ACTIVE session in the table for a username extracted from a log message. A time extracted from the log message is stored as the session start time and as a temporary end time associated with the session. If a gap between a temporary end time and a time extracted from a log message for the associated ACTIVE session is less than a threshold amount, the temporary end time is set to the extracted time. If the gap is equal to or exceeds the threshold, the status of the session is changed from ACTIVE to CLOSED, and a new ACTIVE session is generated.

Abstract: A computer-implemented technique provides security to an enterprise. The technique involves receiving, by processing circuitry, personal information belonging to users of the enterprise. The technique further involves providing, by the processing circuitry, lists of user identifiers based on user relationships defined by the personal information. The lists of user identifiers respectively identify clusters of users of the enterprise. The technique further involves electronically imposing, by the processing circuitry, security classes on the clusters of users of the enterprise based on the lists of user identifiers. Along these lines, such classification can be used for risk assessment (e.g., authentication), alert filtering (e.g., filtering false alarms), and permission/privilege monitoring and/or assignment, among others.

Abstract: The present invention relates to a method for optimizing the FEC scheme comprising the steps of: (a) receiving a batch of data packets designated for transmission; (b) choosing a number of divisors having no common denominators in accordance with the said batch of data packets; (c) organizing into blocks said batch of data packets a number of times in accordance with the number of divisors using said divisors; and (d) creating a FEC packet for each of said blocks.

Abstract: The present invention relates to a method for optimizing the FEC scheme comprising the steps of (a) receiving a batch of data packets designated for transmission; (b) choosing a number of divisors having no common denominators in accordance with the said batch of data packets; (c) organizing into blocks said batch of data packets a number of times in accordance with the number of divisors using said divisors; and (d) creating a FEC packet for each of said blocks.

Abstract: The present invention relates to a method for optimizing the FEC scheme comprising the steps of (a) receiving a batch of data packets designated for transmission; (b) choosing a number of divisors having no common denominators in accordance with the said batch of data packets; (c) organizing into blocks said batch of data packets a number of times in accordance with the number of divisors using said divisors; and (d) creating a FEC packet for each of said blocks.

Abstract: A system and method for enhancing the revenue and/or efficiency of a network service is disclosed. The system constructs a graph of a social network in which users are capable of two-way communication with other users, the network service provider, or other entities such as advertisers. Using such methods as social VIP ranking, the system is capable of performing a variety of analyses, the results of which provide the network service provider insights on how to best perform such tasks as monitoring and enhancing campaign effectiveness, identify fraud, optimize resource allocation and ensure the quality of network management.

Abstract: A Method, a System and a Computer Program Product for WAP Browsing Analysis In On And Off Portal Domains.

Abstract: There is therefore provided, in accordance with an embodiment of the present invention, a method for processing an amplitude modulated (AM) optical beam amplitude modulated with a modulation pattern having an extinction ratio (ER), said AM beam having a carrier frequency and a carrier frequency amplitude, the method comprising: estimating an absolute amplitude extremum for the AM beam that is either an absolute amplitude maximum or an absolute amplitude minimum, to which recurrent amplitude extrema of the AM beam are approximately equal; estimating a corresponding phase to which the phase of the AM beam is substantially equal whenever the amplitude of the AM beam is substantially equal to the amplitude extremum; and adjusting at least one of the magnitude and phase of the carrier amplitude of the AM beam responsive to the amplitude extremum and its corresponding phase to increase the extinction ratio of the modulation pattern.