Abstract: Systems and methods include receiving network transaction data for a plurality of users monitored by a cloud-based system; creating a relationship graph based on the plurality of user's recent network transactions for a time period, wherein the relationship graph includes vertices for domains and edges for transactions by users between the domains having some number of transaction in the time period; and analyzing the relationship graph to detect previously undetected suspicious anomalies. The weights on each edge are based on a relationship between two domains where the relationship includes any of malware, Internet Protocol (IP) addresses, Autonomous System Number (ASN), registration, and redirects.

Abstract: Detection of algorithmically generated domains is disclosed. A DNS query is received. Markov Chain analysis is performed on a domain included in the received query. A determination of whether the received query implicates an algorithmically generated domain is made based at least in part on a result of the Markov Chain analysis.

Abstract: Detection of algorithmically generated domains is disclosed. A DNS query is received. Markov Chain analysis is performed on a domain included in the received query. A determination of whether the received query implicates an algorithmically generated domain is made based at least in part on a result of the Markov Chain analysis.

Abstract: Method for operating a dirt collecting device for a sweeping vehicle or for a vacuum cleaner nozzle of a floor or upright vacuum cleaner, which each comprise a suction fan with controllable speed and/or power, wherein in a first method step, the suction power of the suction fan is set at such a low level that the suction pressure in the dirt collecting device or the vacuum cleaner nozzle is merely sufficient to convey and deposit the absorbed coarse dirt into the intermediate container, and to convey the absorbed fine dirt into a downstream collection container, (normal operation); and that in a second method step, the filling level in the intermediate container is detected with respect to the coarse dirt deposited therein; and that in a third method step, if the filling level in the intermediate container is exceeded, the suction power of the suction fan is increased such that the coarse dirt, which is temporarily deposited in the intermediate container, becomes dispersible and is conveyed into the downstrea

Abstract: An operating element for operating a machine by an operator in which control lines for connecting the control lever with a control unit in at least a paired design is provided. A first wiring harness and a second wiring harness run along the control lever to the receptacle. The first wiring harness runs from a first starting point to the receptacle and the second wiring harness runs from a second starting point to the receptacle. The first starting point and second starting point are arranged at a distance from the receptacle. The first wiring harness at a first connection point is connected to the receptacle, and the second wiring harness at a second connection point is connected to the receptacle. The first and the second connection point are arranged separately from each other on a straight connecting line, and the connecting line runs through a central axis of the control lever.

Abstract: A method is provided for the creation of an addendum for use in the design and production of sheet metal formed components, which method uses a sectionless approach. In a preferred approach, elevation curve (EC) lines are established relating to the component (ECc) and binder (ECb), and it is these lines which are used to design the addendum. Additional EC lines (EC1, EC2, EC3, etc.) can be added to modify or optimize the addendum design. The spaces between the EC lines are filled using various parameterized filling techniques so as to provide the addendum design. Optimization of the addendum can be achieved by modification of the various EC lines, so as to modify or control the various design parameters, in accordance with various quality or design criteria. A more rapid, and less complicated approach to addendum design is provided.

Abstract: Method for operating a dirt collecting device for a sweeping vehicle or for a vacuum cleaner nozzle of a floor or upright vacuum cleaner, which each comprise a suction fan with controllable speed and/or power, wherein in a first method step, the suction power of the suction fan is set at such a low level that the suction pressure in the dirt collecting device or the vacuum cleaner nozzle is merely sufficient to convey and deposit the absorbed coarse dirt into the intermediate container, and to convey the absorbed fine dirt into a downstream collection container, (normal operation); and that in a second method step, the filling level in the intermediate container is detected with respect to the coarse dirt deposited therein; and that in a third method step, if the filling level in the intermediate container is exceeded, the suction power of the suction fan is increased such that the coarse dirt, which is temporarily deposited in the intermediate container, becomes dispersible and is conveyed into the downstrea

Abstract: Method for operating a dirt collecting device for a sweeping vehicle or for a vacuum cleaner nozzle of a floor or upright vacuum cleaner, which each comprise a suction fan with controllable speed and/or power, wherein in a first method step, the suction power of the suction fan is set at such a low level that the suction pressure in the dirt collecting device or the vacuum cleaner nozzle is merely sufficient to convey and deposit the absorbed coarse dirt into the intermediate container, and to convey the absorbed fine dirt into a downstream collection container, (normal operation); and that in a second method step, the filling level in the intermediate container is detected with respect to the coarse dirt deposited therein; and that in a third method step, if the filling level in the intermediate container is exceeded, the suction power of the suction fan is increased such that the coarse dirt, which is temporarily deposited in the intermediate container, becomes dispersible and is conveyed into the downstrea

Abstract: Systems and methods include receiving a domain for a determination of a likelihood the domain is malicious or benign; obtaining data associated with the domain including log data from a cloud-based system that performs monitoring of a plurality of users; analyzing the domain with a plurality of components to assess the likelihood, wherein at least one of the plurality of components is a trained machine learning model; and combining results of the plurality of components to predict the likelihood the domain is malicious or benign.

Abstract: Detection of DNS tunneling traffic is disclosed. A DNS query comprising a subdomain portion and a root domain portion is received from a client device. A determination is made that the root domain portion received in the DNS query is associated with a malicious DNS tunneling root domain. A remedial action is taken in response to the determining.

Abstract: Detection of algorithmically generated domains is disclosed. A DNS query is received. Markov Chain analysis is performed on a domain included in the received query. A determination of whether the received query implicates an algorithmically generated domain is made based at least in part on a result of the Markov Chain analysis.

Abstract: A request to establish a session with a first server is received from a client device. The first server is associated with a first hostname, and the request includes information identifying a second hostname purported to correspond to the first server. A Domain Name System (DNS) lookup using the second hostname is performed. A determination that the second hostname was spoofed by the client device is determined based on a response to the DNS lookup. In response to the determination being made that the request received from the client device includes the spoofed second hostname, a determination that the client device has injected or overridden at least one of an HTTP Host header and a Server Name Indicator in the request is made, and an action to take with respect to the client device is determined.

Abstract: Techniques for multifactor authentication as a network service are disclosed. In some embodiments, a system, process, and/or computer program product for multifactor authentication as a network service includes monitoring a session at a firewall, applying an authentication profile based on the new session, and performing an action based on the authentication profile.

Abstract: Enforcing a policy is described. A mapping between an IP address of a device and a user identity is identified at a first appliance, at least in part by correlating event information. The mapping is transmitted to a second appliance. A policy is applied by the second appliance to the device based at least in part on the user identity.

Abstract: Techniques for multifactor authentication as a network service are disclosed. In some embodiments, a system, process, and/or computer program product for multifactor authentication as a network service includes monitoring a session at a firewall, applying an authentication profile based on the new session, and performing an action based on the authentication profile.

Abstract: A request to establish a session with a first server is received from a client device. The first server is associated with a first hostname, and the request includes information identifying a second hostname purported to correspond to the first server. A Domain Name System (DNS) lookup using the second hostname is performed. A determination that the second hostname was spoofed by the client device is determined based on a response to the DNS lookup. In response to the determination being made that the request received from the client device includes the spoofed second hostname, a determination that the client device has injected or overridden at least one of an HTTP Host header and a Server Name Indicator in the request is made, and an action to take with respect to the client device is determined.

Abstract: A method is provided for the creation of an addendum for use in the design and production of sheet metal formed components, which method uses a sectionless approach. In a preferred approach, elevation curve (EC) lines are established relating to the component (ECc) and binder (ECb), and it is these lines which are used to design the addendum. Additional EC lines (EC1, EC2, EC3, etc.) can be added to modify or optimize the addendum design. The spaces between the EC lines are filled using various parameterized filling techniques so as to provide the addendum design. Optimization of the addendum can be achieved by modification of the various EC lines, so as to modify or control the various design parameters, in accordance with various quality or design criteria. A more rapid, and less complicated approach to addendum design is provided.

Abstract: Enforcing a policy is described. System log messages are received, via an interface, from a network device. At least a portion of the received system log messages are parsed to obtain an IP address and to obtain a user identifier. A policy to apply to a session associated with the IP address is determined, based at least in part on the user identifier. The policy is applied to the session.

Abstract: Techniques for multifactor authentication as a network service are disclosed. In some embodiments, a system, process, and/or computer program product for multifactor authentication as a network service includes monitoring a session at a firewall, applying an authentication profile based on the new session, and performing an action based on the authentication profile.

Abstract: A method is provided for the creation of an addendum for use in the design and production of sheet metal formed components, which method uses a sectionless approach. In a preferred approach, elevation curve (EC) lines are established relating to the component (ECc) and binder (ECb), and it is these lines which are used to design the addendum. Additional EC lines (EC1, EC2, EC3, etc.) can be added to modify or optimize the addendum design. The spaces between the EC lines are filled using various parameterized filling techniques so as to provide the addendum design. Optimization of the addendum can be achieved by modification of the various EC lines, so as to modify or control the various design parameters, in accordance with various quality or design criteria. A more rapid, and less complicated approach to addendum design is provided.