Abstract: A URL categorization query is received. The URL categorization query includes at least one URL. The URL is used to determine a set of data distribution keys. A distributed key-value data store is queried using at least one data distribution key included in the determined set of data distribution keys. Categorization information is returned. The returned URL categorization information can be used to enforce policies.

Abstract: A URL categorization query is received. The URL categorization query includes at least one URL. The URL is used to determine a set of keys. A database is queried using the determined set of keys. Categorization information is returned. The returned URL categorization information can be used to enforce policies.

Abstract: Traffic log data generated by cloud firewalls executing in a cloud environment during a time period that indicate classes and corresponding amounts of network traffic detected across sessions as well as usage cost data recorded for the cloud firewalls during the time period are obtained. The traffic log data are preprocessed to generate training data comprising feature vectors indicating the aggregate amount of network traffic detected for each traffic class during a corresponding time interval within the time period and are labeled with the associated usage cost. A machine learning model is trained on the labeled traffic log data to learn the impact each traffic class has on the accumulated usage costs. The trained model generates predicted usage costs based on distributions of detected network traffic across traffic classes that are analyzed to correlate traffic patterns with usage costs to determine the optimal size(s) of cloud firewalls to deploy.

Abstract: A system and method for intelligently evaluating and automatically mitigating detected security activities includes implementing an on-premise security device that detects a potential security activity at a property of a subscriber; establishing a security channel between the on-premise security device and a remote machine learning-based security module operating in a cloud computing environment if the potential security activity satisfies escalation criteria; automatically transmitting, via the security channel, sensor data from the on-premise security device to the remote machine learning-based security module; computing, by the remote machine learning-based security module, a threat severity inference based on the sensor data; deriving device control instructions based on the threat severity inference; transmitting, via the security channel, the device control instructions to the on-premise security device; and mitigating the potential security activity by executing the device control instructions at the o

Abstract: A URL categorization query is received. The URL categorization query includes at least one URL. The URL is used to determine a set of keys. A database is queried using the determined set of keys. Categorization information is returned. The returned URL categorization information can be used to enforce policies.

Abstract: An apparatus, method and computer program product for emulating a persistent connection using http. According to one embodiment, the method includes receiving an empty get from a first client; receiving a get from a second client, the get containing data to be sent to the first client; and sending a response to the first client, in response to the empty get, the response containing the data. According to another embodiment, the method includes receiving, from a client, a get containing first data to be sent to an application server; sending the first data to the application server; sending an ack response to the client in response to the get; receiving a response from the application server, the response containing second data to be sent to the client; waiting for an empty get from the client; receiving an empty get from the client; and sending the second data to the client in response to the empty get.