Abstract: Systems and methods perform selective rate limiting with a distributed set of agents and a remote controller. An agent receives a packet from a client, and inspects the packet using different rules. Each rule may include at least one different (i) rule definition with traffic dimensions identifying a different attack, (ii) signal with which to identify attack traffic matching the rule definition, (iii) threshold specifying a condition, and (iv) action to implement based on the condition of the threshold being satisfied. The agent provides the signal in response to the packet matching the traffic dimensions from the rule definition of a particular rule. The controller updates a value linked to the signal and a client identifier of the client, and implements the action of the particular rule across the distributed set of agents in response to the value satisfying the condition for the particular rule threshold.

Abstract: Systems and methods perform selective rate limiting with a distributed set of agents and a remote controller. An agent receives a packet from a client, and inspects the packet using different rules. Each rule may include at least one different (i) rule definition with traffic dimensions identifying a different attack, (ii) signal with which to identify attack traffic matching the rule definition, (iii) threshold specifying a condition, and (iv) action to implement based on the condition of the threshold being satisfied. The agent provides the signal in response to the packet matching the traffic dimensions from the rule definition of a particular rule. The controller updates a value linked to the signal and a client identifier of the client, and implements the action of the particular rule across the distributed set of agents in response to the value satisfying the condition for the particular rule threshold.

Abstract: A system for web application security includes an interface and a processor. The interface of a web server is to receive a pending request made to the web server using an in-line request process. The processor of the web server is to provide information regarding the pending request to an agent process; and in the event that an instruction to block the pending request is received from the agent process at the in-line request process within a time constraint, block the pending request using the in-line request process.

Abstract: An online social network is managed using one server for database management tasks and another server, preferably in a distributed configuration, for CPU-intensive computational tasks, such as finding a shortest path between two members or a degree of separation between two members. The additional server has a memory device containing relationship information between members of the online social network and carries out the CPU-intensive computational tasks using this memory device. With this configuration, the number of database lookups is decreased and processing speed is thereby increased.

Abstract: In one embodiment, a social-networking system identifies a first plurality of users of the online social network, wherein the first plurality of users each share one or more user attributes, accesses, from a tracking database, tracking information of online activities of the first plurality of users with respect to a plurality of content objects, each content object having an associated stored value, calculates, for each content object, a first probability of interaction with the content object by the first plurality of users based on the accessed tracking information, calculates, for each content object, an expected value based on the associated stored value and the first probability of interaction, and sends, to a client device of a first user of the first plurality of users, one or more of the content objects based on the calculated expected values.

Abstract: Relevant content is prepared and selected for delivery to a member of a network based, in part, on prior online activities of the other members of the network, and the closeness of the member's relationship with the other members of the network. The relevant content may be an online ad, and is selected from a number of candidate online ads based on click-through rates of groups that are predefined with respect to the member and with respect to certain attributes. An online ad's revenue-generating potential may be considered in the selection process.

Abstract: In particular embodiments, a method comprises accessing, from a first user of an online social network, profile information of the first user comprising personal information of the first user and a visibility preference specified by the first user, wherein the visibility preference specifies a degree of separation preference and determines a flow of the first user's profile information to users of the online social network and a flow of information to the first user, identifying relationships between the first user and one or more second users of the online social network based on the personal information and the visibility preference of the first user, and further based on personal information of the one or more second users, and updating a member database with the identified relationships between the first user and one or more of the second users.

Abstract: A system for web application security includes an interface and a processor. The interface of a web server is to receive a pending request made to the web server using an in-line request process. The processor of the web server is to provide information regarding the pending request to an agent process; and in the event that an instruction to block the pending request is received from the agent process at the in-line request process within a time constraint, block the pending request using the in-line request process.

Abstract: An online social network is managed using one server for database management tasks and another server, preferably in a distributed configuration, for CPU-intensive computational tasks, such as finding a shortest path between two members or a degree of separation between two members. The additional server has a memory device containing relationship information between members of the online social network and carries out the CPU-intensive computational tasks using this memory device. With this configuration, the number of database lookups is decreased and processing speed is thereby increased.

Abstract: In particular embodiments, a computing system may receive a search query from a first user of an online social network, identify one or more second users of the online social network that match the search query, where each identified second user may have a visibility setting specifying which other users of the online social network can view information from the online social network associated with the second user, and send to the first user information associated with each second user having a relationship within the online social network to the first user such that the visibility setting of the second user specifies that the first user can view the information associated with the second user.

Abstract: A system for web application security includes an interface and a processor. The interface of a web server is to receive a pending request made to the web server using an in-line request process. The processor of the web server is to provide information regarding the pending request to an agent process; and in the event that an instruction to block the pending request is received from the agent process at the in-line request process within a time constraint, block the pending request using the in-line request process.

Abstract: Particular embodiments access a search query submitted by a first user of a social-networking system; identify one or more web pages in response to the search query; for each of the one or more web pages, determine a value indicating a number of user clicks associated with the web page by one or more second users of the social-networking system who are connected to the first user within the social-networking system; and send a set of hyperlinks for the one or more web pages, wherein hyperlinks for web pages where the value is greater than zero are visually emphasized over other hyperlinks.

Abstract: In particular embodiments, a method comprises maintaining a database of connections between a plurality of members of an online social network, creating a new entry for a new user in the database responsive to the new user joining the online social network, determining whether the new user joined the online social network in response to a request from an existing user of the online social network, and if the new user joined the online social network in response to a request from the existing user, then sending a prompt to the new user to confirm the relationship between the new user and the existing user.

Abstract: An online social network is provided in which members of the online social network control who may view their personal information and who may communicate with them. The members control who may view their personal information by setting a visibility preference. A member may not view another member's full personal profile if the measure of relatedness between the two is greater than the visibility preference of the other member. The members also control who may communicate with them by setting a contactability preference. A member may not communicate with another member if the measure of relatedness between the two is greater than the contactability preference of the other member.

Abstract: An online social network is managed using one server for database management tasks and another server, preferably in a distributed configuration, for CPU-intensive computational tasks, such as finding a shortest path between two members or a degree of separation between two members. The additional server has a memory device containing relationship information between members of the online social network and carries out the CPU-intensive computational tasks using this memory device. With this configuration, the number of database lookups is decreased and processing speed is thereby increased.

Abstract: An online social network is provided in which members of the online social network control who may view their personal information and who may communicate with them. The members control who may view their personal information by setting a visibility preference. A member may not view another member's full personal profile if the measure of relatedness between the two is greater than the visibility preference of the other member. The members also control who may communicate with them by setting a contactability preference. A member may not communicate with another member if the measure of relatedness between the two is greater than the contactability preference of the other member.

Abstract: A system for web application security includes an interface and a processor. The interface of a web server is to receive a pending request made to the web server using an in-line request process. The processor of the web server is to provide information regarding the pending request to an agent process; and in the event that an instruction to block the pending request is received from the agent process at the in-line request process within a time constraint, block the pending request using the in-line request process.

Abstract: Particular embodiments receive, at a first computing device associated with a social-networking system and from a second computing device associated with a third-party system, a query comprising a first identifier corresponding to a user of the third-party system, wherein the first identifier is computed by applying a hash algorithm to a user credential associated with the user of the third-party system; determine, by the first computing device, whether the user of the third-party system matches any member of the social-networking system; and if the second identifier corresponding to a member of the social-networking system matches the first identifier, then send, by the first computing device to the second computing device, social-network information of the member of the social-networking system in response to the query.

Abstract: In particular embodiments, a method comprises accessing, from a first user of an online social network, profile information of the first user comprising personal information of the first user and a visibility preference specified by the first user, wherein the visibility preference specifies a degree of separation preference and determines a flow of the first user's profile information to users of the online social network and a flow of information to the first user, identifying relationships between the first user and one or more second users of the online social network based on the personal information and the visibility preference of the first user, and further based on personal information of the one or more second users, and updating a member database with the identified relationships between the first user and one or more of the second users.

Abstract: An online social network is managed using one server for database management tasks and another server, preferably in a distributed configuration, for CPU-intensive computational tasks, such as finding a shortest path between two members or a degree of separation between two members. The additional server has a memory device containing relationship information between members of the online social network and carries out the CPU-intensive computational tasks using this memory device. With this configuration, the number of database lookups is decreased and processing speed is thereby increased.