Abstract: In one embodiment, a method includes receiving authorization data at a local node of a network. The authorization data indicates a particular network address of a different node in the network and an authenticated user ID of a user of the different node. Resource profile data is retrieved based on the user ID. The resource profile data indicates all application layer resources on the network that the user is allowed to access. The particular network address is associated at the local node with the resource profile data for the user. A request from the particular network address for a requested application layer resource on the network is blocked based on the resource profile data associated with the particular network address.

Abstract: Techniques for negotiating Point-to-Point Protocol (PPP) sessions over an Ethernet network include receiving configuration data that indicates a first node is connected to a second node thorough an Ethernet network that supports Ethernet frame payload sizes larger than 1500 octets. Request data is received at the first node from the second node. The request data indicates a request for PPP communications between the first node and the second node using a requested PPP payload size greater than 1492 octets. A particular PPP payload size greater than 1492 octets is determined. Response data is sent from the first node to the second node. The response data indicates that the particular PPP payload size greater than 1492 octets is to be used for PPP communications between the first node and the second node. These techniques allow better utilization of Ethernet Jumbo, Giant and Baby Giant frames.

Abstract: Visual objects can be classified according to image type. In one embodiment, the present invention includes capturing a visual object, and decompressing the visual object to a colorspace representation exposing each pixel. The contribution of each pixel to a plurality of image types can then be determined. Then, the contributions can be combined, and the image type of the visual object can be determined based on the contributions.

Abstract: A system, method, and computer program product are provided for preventing data loss associated with an image. In use, an image is identified, and it is determined whether the image includes predetermined data. In addition, an action is performed based on the determination, for preventing data loss.

Abstract: A security risk management system comprises a vulnerability database, an asset database, a local threat intelligence database and a threat correlation module. The vulnerability database comprises data about security vulnerabilities of assets on a network gathered using active or passive vulnerability assessment techniques. The asset database comprises data concerning attributes of each asset. The threat correlation module receives threat intelligence alerts that identify attributes and vulnerabilities associated with security threats that affect classes of assets. The threat correlation module compares asset attributes and vulnerabilities with threat attributes and vulnerabilities and displays a list of assets that are affected by a particular threat. The list can be sorted according to a calculated risk score, allowing an administrator to prioritize preventive action and respond first to threats that affect higher risk assets.

Abstract: In one embodiment, a method includes receiving, at a local node of a network, a sequenced data packet of a flow made up of multiple sequenced data packets from a source node directed toward a destination node. The flow is to be parsed by the local node to describe the flow for administration of the network. Based on sequence data in the sequenced data packet, it is determined whether the sequenced data packet is out of order in the flow. If it is determined that the sequenced data packet is out of order, then the sequenced data packet is forwarded toward the destination node before parsing the sequenced data packet. The out of order sequenced data packet is also stored for subsequent parsing at the local node.

Abstract: In one example embodiment, an apparatus is provided that includes a central website that interfaces with one or more end users to establish a profile for each of the end users to be used in matching the end users to each other for a potential relationship. Information is provided in the profile and the information includes relevant characteristics of corresponding end users. A first end user is asked one or more questions after their profile is established, the questions being posed to a second end user whose respective profile has also been established and whose profile has already been matched to the first end user's profile. Answers for the questions from the first and second end users are compared and a subsequent message is sent to the first end user if the answers provided by the first end user and the second end user are compatible.

Abstract: A change management system for and method of change management control, monitoring, and analysis is disclosed. A change management system comprises a means for generating configuration item change information, and a means for processing configuration item change information for logical system groups according to an information structure. The information structure for the logical groups is comprised at least one of change rule information for the configuration items, interrelationship information between the configuration items and the system components, interrelationship information between system components. The method can be used as a monitoring tool for determining the effect of configuration changes.

Abstract: A system, method, and computer program product are provided for scanning data for unwanted content and unwanted sites in response to a user request. In use, a user request is received via a network to scan data prior to downloading the data utilizing a network browser. In addition, the data is scanned for unwanted content and associated unwanted sites in response to the user request. Further, a response is sent to the user via the network.

Abstract: An example method includes receiving a packet for a flow associated with a subscriber; determining if a home agent element has a context for the flow by communicating a handover query to a network element; assigning an Internet protocol (IP) address for the subscriber in response to the home agent element not having the context for the flow; and creating a session for the subscriber, where the session is created using inter-process communication between the home agent element and the network element. The method can further include maintaining communications with a packet data serving node (PDSN) and an Authentication, Authorization, and Accounting (AAA) element in order to assist in roaming between a Long Term Evolution (LTE) network and a code division multiple access (CDMA) network. The inter-process communication is used to maintain the session for the subscriber when the subscriber is attached to different networks.

Abstract: An apparatus is provided that includes a graft for coupling two vascular conduits within a patient. The graft includes: 1) an anchor system that forms an arc at one end of the conduits; and 2) a body element coupled to the anchor system. The anchor system comprises a biodegradable stent. In particular embodiments, portions of the graft are either self-expandable or balloon-expandable. In still other embodiments, anchor system includes NITINOL and the anchor system is substantially self-sealing at one end of the conduits. In one embodiment, the body element comprises polytetrafluoroethylene (PTFE) or expanded polytetrafluoroethylene (EPTFE). In yet other embodiments, the body element includes either a gelatinous or an elastomeric coating disposed on its surface.

Abstract: A network adapter system and associated method are provided. Included is a network adapter having a plurality of designated trusted and untrusted ports. The network adapter includes a processor coupled to a computer. Such processor is further coupled to a network via the ports. In use, the processor is configured for conditionally preventing network traffic from accessing the computer from the network via the untrusted ports and/or preventing unauthorized software from accessing the network in an untrusted manner from the computer.

Abstract: A node in an overlay network requests a ranked list of other nodes in multiple areas of the overlay network that can provide a desired piece of content or service to the requesting node. A separate node such as a router generates the ranked list using a routing algorithm, returning the list to the requesting node so that the requesting node may acquire the desired content or service from the nearest node in the overlay network.

Abstract: A system, method, and computer program product are provided for determining whether text within an image includes unwanted data, utilizing a matrix. In operation, a matrix corresponding to an image is generated. Additionally, text within the image is identified utilizing the matrix. Furthermore, it is determined whether the text includes unwanted data.

Abstract: Regular expressions used for searching for patterns in captured objects can be grouped into attributes. Such attributes can be associated with captured objects using tags stored in a database. In one embodiment, the present invention includes capturing an object being transmitted over a network, and determining that a regular expression appears in the object, the regular expression belonging to a group of one or more regular expressions associated with an attribute. If a regular expression associated with the attribute is found in the object, then an attribute field of a tag containing metadata related to the captured object is set to indicate the presence of the attribute in the captured object. The presence of the attribute in the captured object can now be determined from the tag, which can be stored in a database.

Abstract: A malware scanner 2, for malware such as computer viruses, worms, Trojans and the like, utilizes the external call characteristics associated with known items of malware to identify the presence of malware within a computer file. Malware written in a high level language when compiled can take a variety of different forms as object code, but these different object code forms will usually share external call characteristics to a sufficient degree to allow the presence of such external call characteristics to properly and accurately generically identify different compiled variants of the source code malware.

Abstract: A method is provided in one example and includes receiving data propagating in a network environment and verifying whether the data is associated with a first end user represented in a registered user list. The method also includes verifying a ratification of a policy associated with data monitoring related to the first end user. Selected words can be identified within the data based on a whitelist, where the whitelist includes a plurality of designated words to be tagged. A resultant composite of the selected words that are tagged is generated. In more specific embodiments, the method can include verifying whether the data is associated with a business email domain. In still other embodiments, the method can include verifying whether the data is associated with a business uniform resource locator (URL) domain.

Abstract: A document accessible over a network can be registered. A registered document, and the content contained therein, cannot be transmitted undetected over and off of the network. In one embodiment, the invention includes maintaining a plurality of stored signatures, each signature being associated with one of a plurality of registered documents, intercepting an object being transmitted over a network, calculating a set of signatures associated with the intercepted object, and comparing the set of signatures with the plurality of stored signatures. In one embodiment, the invention can further include detecting registered content from the registered document being contained in the intercepted object, if the comparison results in a match of at least one of the signatures in the set of signatures with one or more of the plurality of stored signatures.