Abstract: This document describes techniques for expanding user groups while preserving user privacy and data security. In one aspect, a method includes receiving, by a content platform and from a client device of a user, a request for a digital component that also includes a user identifier. A determination is made that the user identifier is included in a user list that includes multiple user identifiers respectively corresponding to multiple users in a user action group. In response to determining that the unique identifier is included in the user list, a digital component of the entity for which the user list is generated is selected and provided to the client device of the user for display to the user of the client device.

Abstract: A system and method are disclosed for identifying a media item to be provided to a group of users of a content sharing platform, wherein the media item is associated with a category, and wherein each user in the group of users is associated with a weight indicating a probability of a correspondence between a respective user and the category associated with the media item, receiving a request to change a size of the group of users from a first level to a second level, the first level corresponding to a first weight threshold for the group of users, and calculating, based a value indicating a difference between the first level and the second level, a second weight threshold for the group of users corresponding to the second level, the second weight threshold to be subsequently used to determine whether the media item is to be provided to a user requesting content from the content sharing platform.

Abstract: Systems and methods for facilitating collaboration between video creators/publishers and users in need of video creations and/or publication of videos are provided. A profile component receives and stores profile information regarding video creators. A video request component receives a request for at least creation of a video, the request indicating one or more characteristics associated with the creation of the video. A search component responds to the request and searches the profile information in connection with identifying one or more of the video creators that can create the video based on a correlation between their respective profile information and the one or more characteristics associated with the video creation.

Abstract: Systems and methods for facilitating collaboration between video creators/publishers and users in need of video creations and/or publication of videos are provided. A profile component receives and stores profile information regarding video creators. A video request component receives a request for at least creation of a video, the request indicating one or more characteristics associated with the creation of the video. A search component responds to the request and searches the profile information in connection with identifying one or more of the video creators that can create the video based on a correlation between their respective profile information and the one or more characteristics associated with the video creation.

Abstract: Systems and methods for facilitating collaboration between video creators/publishers and users in need of video creations and/or publication of videos are provided. A profile component receives and stores profile information regarding video creators. A video request component receives a request for at least creation of a video, the request indicating one or more characteristics associated with the creation of the video. A search component responds to the request and searches the profile information in connection with identifying one or more of the video creators that can create the video based on a correlation between their respective profile information and the one or more characteristics associated with the video creation.

Abstract: A system and method is disclosed for affecting action associated with machine-generated traffic. First historical information associated with Internet traffic to an Internet service at a first time is accessed and a first Internet Protocol Address (“IPA”) size representing a first number of devices sharing at least one IP address that accessed the Internet service at the first time is determined. Second historical information associated with Internet traffic to the Internet service that occurred at a second time is accessed and a second IPA size is determined. An algorithm is applied that uses the first IPA size to estimate a third IPA size, representing a third number of devices sharing at least one IP address at the second time. A difference between the third and the second IPA sizes is computed, and evaluated to a threshold. An action is taken at a resource-provider system when the difference exceeds the threshold.

Abstract: Systems and methods for facilitating collaboration between video creators/publishers and users in need of video creations and/or publication of videos are provided. A profile component receives and stores profile information regarding video creators. A video request component receives a request for at least creation of a video, the request indicating one or more characteristics associated with the creation of the video. A search component responds to the request and searches the profile information in connection with identifying one or more of the video creators that can create the video based on a correlation between their respective profile information and the one or more characteristics associated with the video creation.

Abstract: A method is provided for determining a rating of a likelihood of a victim system receiving malicious traffic from an attacker system at a point in time. The method comprises: generating a first forecast from a time series model based on past history of attacks by the attacker system; generating a second forecast from a victim neighborhood model based on similarity between the victim system and peer victim systems; generating a third forecast from a joint attacker-victim neighborhood model based on correlation between a group of attacker systems including the attacker system and a group of victim systems including the victim system; and determining the rating of the likelihood of the victim system receiving malicious traffic from the attacker system at the point in time based on the first forecast, the second forecast, and the third forecast.

Abstract: A system and method for filtering unwanted Internet Protocol traffic based on blacklists receives a first blacklist containing a first plurality of Internet protocol addresses associated with unwanted Internet traffic. The system also operates a first plurality of access control lists adapted to block the unwanted Internet traffic from one of the first Internet protocol addresses listed in the first blacklist. The system also assigns a first weight to each of the first Internet protocol addresses based on a reliability of Internet traffic from each of the first Internet protocol addresses. Additionally, the system reduces a first number of the first access control lists to optimally trade off a number of desirable Internet protocol addresses blocked with a number of bad Internet protocol addresses blocked based on the first weight of each of the first Internet protocol addresses.

Abstract: A method is provided for determining a rating of a likelihood of a victim system receiving malicious traffic from an attacker system at a point in time. The method comprises: generating a first forecast from a time series model based on past history of attacks by the attacker system; generating a second forecast from a victim neighborhood model based on similarity between the victim system and peer victim systems; generating a third forecast from a joint attacker-victim neighborhood model based on correlation between a group of attacker systems including the attacker system and a group of victim systems including the victim system; and determining the rating of the likelihood of the victim system receiving malicious traffic from the attacker system at the point in time based on the first forecast, the second forecast, and the third forecast.

Abstract: A system and method for filtering unwanted Internet Protocol traffic based on blacklists receives a first blacklist containing a first plurality of Internet protocol addresses associated with unwanted Internet traffic. The system also operates a first plurality of access control lists adapted to block the unwanted Internet traffic from one of the first Internet protocol addresses listed in the first blacklist. The system also assigns a first weight to each of the first Internet protocol addresses based on a reliability of Internet traffic from each of the first Internet protocol addresses. Additionally, the system reduces a first number of the first access control lists to optimally trade off a number of desirable Internet protocol addresses blocked with a number of bad Internet protocol addresses blocked based on the first weight of each of the first Internet protocol addresses.