Abstract: Apparatus, methods, and computer-readable media for facilitating self-managed trust in Internet-of-Things networks are disclosed herein. An example method of trust management at a network manager includes enrolling a network endpoint with a network managed by the network manager. The example method also includes receiving trusted reference information for the network endpoint based on enrolling the network endpoint. Additionally, the example method includes performing verification of the network endpoint based on at least one of the trusted reference information or an attestation received from the network endpoint. Further, the example method includes enforcing policies to the network endpoint based on a result of the verification. Such trust management may improve privacy and security at the network, as well as reduce latency in responding to trust incidents.

Abstract: Methods, apparatus, and computer program products for controlling access to an electronic device based on biometric input are described. An example of such a method includes receiving a current biometric input, determining template similarity scores for the current biometric input, if at least one template similarity score satisfies a template similarity score criterion, then updating a false user counter value in a first numerical direction and performing an authentication process on the current biometric input, else, determining stored biometric input similarity scores for the current biometric input, if at least one stored biometric input similarity score satisfies a stored biometric input similarity score criterion, then maintaining the false user counter value, else, replacing a previously stored biometric input with the current biometric input, and updating the false user counter value in a second numerical direction opposite to the first numerical direction.

Abstract: Various embodiments of methods and systems for proactive resource allocation and configuration are disclosed. An exemplary method first compiles and links a profile instrumented application with a compiler comprising a profile guided optimization feature that inserts calls to a profiler runtime. The profile instrumented application is executed on a target device using one or more workload datasets representative of probable workloads. During execution, based on recognition of the inserted calls, an instrumentation-based profile dataset is generated in association with each of the one or more workload datasets. Next, the profile instrumented application is recompiled and relinked based on the instrumentation-based profile datasets to create a set of profile guided optimizations to the source code, thereby resulting in an optimized application.

Abstract: Methods, apparatus, and computer program products for providing security for an electronic device are described. An example of a method includes monitoring, by the electronic device, a status of the electronic device for one or more threats to a security of the electronic device, detecting, by the electronic device, the one or more threats to the security of the electronic device based on the status of the electronic device and on one or more security policies associated with the electronic device, and self-enforcing, by the electronic device, the one or more security policies by implementing one or more targeted security actions, as indicated by the one or more security policies, to selectively alter the status of the electronic device, based on the detected one or more threats to the security of the electronic device.

Abstract: Methods, systems and devices for generating data models in a client-cloud communication system may include applying machine learning techniques to generate a first family of classifier models that describe a cloud corpus of behavior vectors. Such vectors may be analyzed to identify factors in the first family of classifier models that have the highest probability of enabling a mobile device to better determine whether a mobile device behavior is malicious or benign. Based on this analysis, a second family of classifier models may be generated that identify significantly fewer factors and data points as being relevant for enabling the mobile device to better determine whether the mobile device behavior is malicious or benign based on the determined factors. A mobile device classifier module based on the second family of classifier models may be generated and made available for download by mobile devices, including devices contributing behavior vectors.

Abstract: A system, methods and server for creating and using manifests to support the rendering of a webpage by a computing device. Multiple computing devices may render a webpage and generate meta data. A server may collect and use the meta data to generate a manifest. The manifest may provide information describing priorities and formats for loading the resources of the webpage. The computing device may transmit information to the server for comparison with the manifest and to determine priorities and formats for retrieving the resources of the webpage. The server may request and send the webpage resources to the computing device based on the manifest information, to which the computing device may render the webpage. The server may access the webpage and generate meta data to create the manifest. The server may alternatively send the manifest information to the computing device.

Abstract: A mobile device may include a plurality of sensors and a processor. The processor may be configured to determine trust data for an asset based upon inputs from the plurality of sensors, determine whether an asset is accessible or not accessible based upon evaluating the trust data with a trust determination algorithm, and continuously update the trust data to continue to allow access to the asset or revoke access to the asset based upon the inputs from the plurality of sensors.

Abstract: Methods, apparatus, and computer program products for controlling access to an electronic device based on biometric input are described. An example of such a method includes receiving a current biometric input, determining template similarity scores for the current biometric input, if at least one template similarity score satisfies a template similarity score criterion, then updating a false user counter value in a first numerical direction and performing an authentication process on the current biometric input, else, determining stored biometric input similarity scores for the current biometric input, if at least one stored biometric input similarity score satisfies a stored biometric input similarity score criterion, then maintaining the false user counter value, else, replacing a previously stored biometric input with the current biometric input, and updating the false user counter value in a second numerical direction opposite to the first numerical direction.

Abstract: Various embodiments of methods and systems for proactive resource allocation and configuration are disclosed. An exemplary method first compiles and links a profile instrumented application with a compiler comprising a profile guided optimization feature that inserts calls to a profiler runtime. The profile instrumented application is executed on a target device using one or more workload datasets representative of probable workloads. During execution, based on recognition of the inserted calls, an instrumentation-based profile dataset is generated in association with each of the one or more workload datasets. Next, the profile instrumented application is recompiled and relinked based on the instrumentation-based profile datasets to create a set of profile guided optimizations to the source code, thereby resulting in an optimized application.

Abstract: A method and system for performing domain name service (DNS) pre-fetching, content pre-fetching, or a combination thereof, are disclosed for a wireless portable computing device (PCD). The system and method may include rendering a web page on a display screen of the PCD and performing a DNS pre-fetch for any visible links within the web page. Further, the method may include determining whether a screen changing operation (i.e., a scrolling operation) is being performed and placing one or more DNS pre-fetch tasks in a queue for each link that is displayed on the display screen when the screen changing operation is performed. The method and system may reduce wait times for a wireless PCD when it is rendering webpages on its display screen.

Abstract: A mobile device may include a plurality of sensors and a processor. The processor may be configured to determine trust data for an asset based upon inputs from the plurality of sensors, determine whether an asset is accessible or not accessible based upon evaluating the trust data with a trust determination algorithm, and continuously update the trust data to continue to allow access to the asset or revoke access to the asset based upon the inputs from the plurality of sensors.

Abstract: A system, methods and server for creating and using manifests to support the rendering of a webpage by a computing device. Multiple computing devices may render a webpage and generate meta data. A server may collect and use the meta data to generate a manifest. The manifest may provide information describing priorities and formats for loading the resources of the webpage. The computing device may transmit information to the server for comparison with the manifest and to determine priorities and formats for retrieving the resources of the webpage. The server may request and send the webpage resources to the computing device based on the manifest information, to which the computing device may render the webpage. The server may access the webpage and generate meta data to create the manifest. The server may alternatively send the manifest information to the computing device.

Abstract: A computing device adapted to receive at least one JavaScript, the computing device comprising a processor type and one or more architectural features. The at least one JavaScript comprises one or more first sections of the JavaScript and one or more second sections of the JavaScript. The one or more first sections of the JavaScript may be pre-compiled using the processor type or the one or more architectural features. The one or more second sections of the JavaScript may be sent to a JavaScript Compiler in source format. A JavaScript Engine may be adapted to execute the one or more first sections of the JavaScript and the subsequently compiled one or more second sections of the JavaScript, keeping elements of the scripting code proprietary, with the pre-compilation of the one or more first sections of the JavaScript eliminating run-time compilation and therefore providing performance benefits.

Abstract: A system, methods and server for creating and using manifests to support the rendering of a webpage by a computing device. Multiple computing devices may render a webpage and generate meta data. A server may collect and use the meta data to generate a manifest. The manifest may provide information describing priorities and formats for loading the resources of the webpage. The computing device may transmit information to the server for comparison with the manifest and to determine priorities and formats for retrieving the resources of the webpage. The server may request and send the webpage resources to the computing device based on the manifest information, to which the computing device may render the webpage. The server may access the webpage and generate meta data to create the manifest. The server may alternatively send the manifest information to the computing device.

Abstract: Methods and devices for displaying content in a power efficient manner are disclosed. In accordance with many embodiments, content is received that includes a plurality of subcomponents, and a subcomponent with a larger surface is darkened so as to generate at least one darkened subcomponent. In addition, a contrast of selected ones of the subcomponents is adjusted so as to enable the selected ones of the subcomponents to be viewed against the darkened subcomponent while others of the plurality of subcomponents are left in their source format. The at least one darkened subcomponent, selected ones of the subcomponents, and the subcomponents that are in their source format are composited into a composite view; and displayed.

Abstract: Methods and apparatus for performing efficient pattern matching in a client-server network are described herein. A communication device acquires an object to be matched. At least one reduced set of features is extracted from the object to be matched and a determination as to whether the object to be matched matches one of a plurality of known objects in a local library stored on the communication device is generated. An indication representing a match of the object is presented if the determination indicates a local match exists in the local library. A match request including the at least one reduced set of features is transmitted for a remote matching determination when the determination indicates that no local match exists in the local library. In accordance with some aspects, a series of one or more match requests may be transmitted for a remote matching determination.

Abstract: A computing device and methods of operating the same are disclosed. The computing device may include a network interface that receives web content and a display that displays a displayable format of the web content. In addition, a plurality of browser processing components are included that carry out browser processing activity to generate a displayable format of the web content, and the computing device includes a browser management component that monitors at least one browser processing activity of a corresponding browser processing component and coordinates at least one browser management activity to either reduce the likelihood that the at least one browser management activity adversely affects performance of the plurality of browser processing components, or allow the at least one browser management activity to perform activities that leads to overall improvement of the browsing experience.

Abstract: A method of establishing transmission control protocol (TCP) connections is disclosed and may include receiving a uniform resource locator (URL) as part of a hyper text transfer protocol (HTTP) request. Further, the method may include searching a host database with the URL and determining whether host data for the URL is available. The method may also include performing a domain name service (DNS) lookup for a URL host and for one or more sub-resource hosts, wherein all DNS lookups are performed in parallel at substantially the same time, when host data for the URL is available.

Abstract: Methods and apparatus for processing scripting-language code in webpages are disclosed. The method includes obtaining scripting-language code that is utilized by a higher-priority webpage, compiling the scripting-language code to generate higher-priority compiled code objects, storing the higher-priority compiled code objects on a communication device, distinguishing the higher-priority compiled code objects from other compiled code objects that are stored on the communication device to delay the higher-priority compiled code objects from being removed from the communication device, and executing the higher-priority compiled code objects when the webpage is requested by the user. In many variations, this approach is not applied to all webpages visited, but only on certain webpages and scripts that are considered high priority, either implicitly or explicitly, based on a priority function that computes a multi-level priority from the history and past browser activity.

Abstract: One embodiment comprises a non-transitory, tangible computer readable storage medium, encoded with processor readable instructions to perform a method of displaying content in a web page. One method optimizes the order of HTTP requests made during the downloading of a web page or web application comprising a plurality of objects, and receiving a first portion of the plurality of objects in a first order. Additionally, (i) a viewable section of the web page, (ii) centers of the viewable section of the web page and each of the plurality of objects, and (iii) a distance from the center of the viewable section of the web page to the center of each of the plurality of objects may be determined. Furthermore, the objects may then be prioritized based on their distance from the center of the viewable section. A request to receive at least one additional portion of the objects in a second order based on the prioritization of the objects may then be sent.