Abstract: Systems and methods are provided for managing keep-alive messages remote to a wireless communication device. In a particular embodiment, a method provides receiving an application request from a wireless communication device for an application that transfers keep-alive messages and receiving a first keep-alive message from the application intended for delivery to the wireless communication device. The method further provides processing the first keep-alive message to determine whether a response to the keep-alive message is necessary. If a response to the keep alive message is necessary, transferring a keep-alive message response to the application.

Abstract: A wireless communication device that executes applications receives keep-alive messages including keep-alive data from the applications. The device processes the keep-alive data to select keep-alive messages for keep-alive message integration. The wireless communication device transfers integrated keep-alive data for the selected messages during a transfer window. A wireless communication system receives and processes the integrated keep-alive data to transfer individual keep-alive messages having the keep-alive data.

Abstract: Embodiments disclosed herein provide systems and methods that prevent clone devices from registering with a wireless communication network. In a particular embodiment, a wireless device exchanges communications with a wireless communication network during an initial period of time. The wireless device transfers an initial location of the wireless device during the initial period of time to an authorization system for the wireless communication network. During a second period of time, the wireless device transfers a registration request indicating a confirmation location and a location of the wireless device during the second period of time to the authorization system. The authorization system processes the registration request to validate the confirmation location based on the initial location. If the confirmation location is validated based on the initial location, then the authorization system allows the wireless device to access the wireless communication network during the second period of time.

Abstract: A method and system to detect botnet beaconing event based on a beacon detection rule set to generate a beacon alert, which is in turn used to trigger an elevated exfiltration detection activity by reducing various thresholds in an exfiltration detection rule set.

Abstract: Embodiments disclosed herein provide systems and methods for packet filtering in a wireless communication network. In a particular embodiment, a wireless network receives from a requesting device a request for a plurality of data packets to be transferred by a source for delivery to the requesting device. The network then generates session information associating the source of the data packets with the requesting device. Additionally, the network receives a first subset of the data packets from the source for delivery to a destination identified by the data packets. After receiving the packets, the network identifies a destination device based on the destination identified by the packets. The network processes the session information to determine whether the destination device is associated with the source of the packets. If the destination device is associated with the source, the network transfers the packets for delivery to the destination device.

Abstract: A method, system, and medium are provided for facilitating a communications call. The method comprises receiving a request to connect to a destination described by a first target which includes a user-identification parameter and a domain parameter. Second, using the target, generating a second target associated with the first target. Finally, permitting the request to be fulfilled if the request is associated with the second target.

Abstract: The present invention provides a method and system for mitigating distributed denial of service (DDoS) attacks using central management and shared resources. The present invention implements a shared model for mitigating devices distributed in a packet network to mitigate a DoS attack. Mitigating devices are distributed in the packet network to support different network devices during a DoS attack. Configuration information is loaded dynamically into the mitigating devices to adjust the mitigation effort to different network devices. The present invention also implements a shared model for detecting devices distributed in the packet network to detect the presence of a DoS attack. Baselines are created to distinguish between valid packets and invalid packets. When invalid packets are detected, a notification occurs to other devices or a central management system.

Abstract: A system, a method and computer-readable media for supporting multiple security tiers in a network. A system is provided that includes an access terminal. The access terminal includes multiple virtual machines, which are each associated with a different security profile. The system further includes an access network that validates the virtual machines. The access network also assigns security procedures for use with the various virtual machines by referencing their associated security profiles. The system further includes a core network. The core network also enforces the various security profiles, and references the profiles in the selection of services used in the handling of communications from the virtual machines.

Abstract: A method, system, and medium are provided for facilitating a communications call. The method comprises receiving a request to connect to a destination described by a first target which includes a user-identification parameter and a domain parameter. Second, using the target, generating a second target associated with the first target. Finally, permitting the request to be fulfilled if the request is associated with the second target.