Abstract: A system for optimizing network traffic is described. The system includes a transport communication protocol (TCP) controller configured to acquire data regarding a flow of a plurality of data packets over a link and to determine TCP characteristics for the flow, a traffic prioritization module configured to assign a flow priority to the flow, and a traffic priority controller configured detect congestion on the link and determine a congestion window size for the flow based on the flow priority and the TCP characteristics.

Abstract: System and methods discussed for automatically generating conversation-based reports from email threads for easier and more intuitive user-consumption may include a parser, configured to identify all related emails, extract relevant portions of each email including embedded or in-line comments within quoted portions, and generate a single report document that presents the conversation in chronological order. Duplicate portions of each email are automatically removed and excluded from the report, reducing memory and bandwidth requirements, and also making the report more intuitive and easier to read. Attachments to the email may be included in the report, with additional deduplication to further reduce memory and bandwidth requirements.

Abstract: Systems and methods for establishing a secure connection are described. A server receives a plurality of routing tokens for establishing a service connection between a service node and the server along a network path through a plurality of network devices. The routing tokens can be validated by a corresponding network device. The server transmits a packet including the routing tokens to a first network device. The first network device validates a first routing token associated therewith, then directs the packet along the network path to a second network device, and so forth, until each of the network device receives and validates their routing token. The server establishes a cryptographic context between the service node and server for establishing a secure channel between the service node and the server. The server transmits a service node routing token to the service node via the secure channel for validation.

Abstract: A client application installed on a client device may monitor communications flows between embedded browsers of the client application and one or more servers, including enterprise servers and non-enterprise servers, at upper layers of a network stack of the client device including the application layer, session layer, and presentation layer. Communications to different endpoints may be classified as enterprise or non-enterprise, measured, and aggregated to provide disambiguation of enterprise and non-enterprise communications of the device transiting a single communications link (e.g. cellular data connection). Server and network policies may be applied in accordance with the measurements with higher accuracy than policies based on total bandwidth utilized by the device without regard to its classification.

Abstract: A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory and configured to provide office safety controls. The at least one processor is further configured to perform computer vision analysis on an image of a shared resource to determine safety related conditions associated with the shared resource, the safety related conditions including a count of people using the shared resource and timing of the use of the shared resource, and update analytics associated with the shared resource based on the determined safety related conditions. The at least one processor is further configured to maintain a notification subscription associated with a user, the notification subscription including user specified safety parameters related to the shared resource, and generate a notification regarding the shared resource, the generation based on a comparison of the updated analytics and the user specified safety parameters.

Abstract: Methods, systems, and apparatuses for discovering dynamic path maximum transmission unit (PMTU) between a sending computing device and a receiving computing device (e.g., a client device and a host device) are described herein. A sending computing device may iteratively transmit bursts of probe packets, each burst being defined by a search range between a maximum packet size and a minimum packet size. The sending computing device may iteratively update the search range based on the previous iteration until the search converges on the PMTU. When the PMTU is discovered, each of the computing devices may update their transport and presentation layer buffers based on the discovered PMTU without any other protocol level disruption. In a multi-path scenario, the computing device may discover PMTU for each of the paths and select a performance optimal path based on the individual PMTUs and other network characteristics such as loss, latency, and throughput.

Abstract: Described embodiments provide for dynamically optimizing the number of application layer streams that may be multiplexed into a single transport layer connection, providing the advantages of application layer multiplexing without incurring unnecessary congestion-based network delays. A device may monitor net bandwidth and packet loss rates for a connection, and may dynamically increase and decrease a number of concurrent application layer streams to balance throughput and congestion avoidance. As congestion increases, the device may reduce concurrent stream limits in order to spawn additional transport layer connections, allowing faster congestion recovery and reduced performance impairment.

Abstract: Described embodiments provide systems and methods of selecting files to attach to an electronic mail. A server may identify, for each file of a plurality of files, a file context using content of each file. The server may identify, responsive to a request from a client for one or more attachments to add to an electronic mail, a mail context for the electronic mail based at least on content of the electronic mail. The server may compare the file context of at least one of the plurality of files with the mail context of the electronic mail. The server may select one or more files from the plurality of files based on the comparison of the file context with the mail context. The server may provide the client a list of the one or more files for selection as the one or more attachments for the electronic mail.

Abstract: Methods and systems for remote rendering of extended reality (XR) objects are described herein. A server may receive an image of a physical environment. The image may include different views of the physical environment around a client device. The server may render at least one surface of a virtual object based on the different views of the physical environment. The at least one surface may include a reflection of another object of the physical environment from a view point of the client device at the time the image was taken. The server may generate graphics including the rendered at least one surface. The server may send the generated graphics to the client device to enable display of a computer generated environment on the client device. The computer generated environment may include the at least one virtual object with an appearance of a reflective surface.

Abstract: Techniques are disclosed for providing personalized pages. An example methodology implementing the techniques includes, displaying, by a computing device, a plurality of elements in a page and monitoring interaction with the displayed page. The method also includes, responsive to determining a topic based on the interaction with the plurality of elements in the displayed page, identifying one or more files related to the identified topic and providing an element on the page, the element configured to provide access to one of the identified one or more files in response to an input received on the element. The element may be provided in a file zone in the displayed page.

Abstract: Described herein are systems and methods for managing releases of global services in a controlled manner. A computing environment may include a first release of a global service, a second release of the global service, and a manager service. The first and second release may be enabled and disabled. The first release may be enabled and the second release may be disabled. The second release may be ready for use in the computing environment after passing one or more checks. A manager service may enable use of the second release in the computing environment. The manager service may disable use of (but maintain execution of) the first release in the computing environment. The second release may be determined to have one or more issues. Responsive to determining the second release has issue(s), the manager service may disable use of the second release and re-enable use of the first release.

Abstract: A computing device configure to automatically generate responses to user-submitted requests is provided. The device includes a computer readable medium and a processor. The processor can be configured to perform, for example, a virtual assistant that is configured to monitor virtual assistant communications and receive a user-submitted request for additional information from a client device. In some examples, the request is submitted via a virtual assistant. The virtual assistant can be configured to process the user-submitted request to determine one or more keywords and compare the one or more keywords against at least one data set associated with the knowledge base data structure to determine at least one response to the user-submitted request. Based upon the determination of at least one response to the user-submitted request, the virtual assistant monitor can be further configured to generate a reply to the user-submitted request and transmit the reply to the client device.

Abstract: Techniques manage connection between a user device (e.g., a tablet, a smartphone, a personal computer, a user workstation, etc.) and a peripheral device (e.g., an external mouse, a wireless keyboard, a wireless output device, other accessories, combinations thereof, etc.). Such techniques involve obtaining a current peripheral identifier from an operating system running on the user device, the current peripheral identifier identifying the peripheral device. Such techniques further involve, based on the current peripheral identifier, performing a peripheral recognition operation that attempts to recognize the peripheral device. Such techniques further involve, based on a result of the peripheral recognition operation, performing a peripheral access operation that determines whether the user device is allowed to connect with the peripheral device.

Abstract: Improved watermarking techniques for text content are disclosed. An example methodology implementing the techniques includes selecting a sequence of text characters to form a watermark and representing at least one text character of the sequence of text characters by a code which, when inserted into text content, does not affect the appearance of the text content. The methodology also includes embedding the code which represents the at least one text character of the watermark into text content so that the code enables identification of the at least one text character upon extraction of the code from the text content.

Abstract: Methods, systems, computer-readable media, and apparatuses method for performing single sign on for a user device to the Internet. User sign-in credentials including an identity token of the user are received by a hosted desktop from the user device, including an indication that the user is attempting to access a website. The website is authorized as a trusted website by a network authorization node, and the website is issued a one-time-use token. A web browser of the hosted desktop receives an application provided by the website to cause the web browser to call the hosted desktop to initiate single sign on. Authenticity of the one-time-use token is requested by a daemon process, and the website's public key is obtained. Upon verifying authenticity of the web site, the identity token of the user is passed to the website, to enable the website to establish single sign on with the user.

Abstract: Embodiments described include a computing device for generating risk scores of network entities. The computing device can include one or more processors configured to detect a plurality of risk indicators. Each of the risk indicators identify one of a plurality of activities of a network entity of an organization. The network entity includes a device, an application or a user in the organization's network. The one or more processors can generate a risk score of the network entity, by combining a risk value, an amplification factor and a dampening factor of each of the plurality of risk indicators, and adding an adjustment value for the plurality of risk indicators. The one or more processors can determine, using the generated risk score, a normalized risk score of the network entity. The one or more processors can initiate an action according to the normalized risk score.

Abstract: Disclosed, among other things, is a computing system that may translate a first message, which is indicative of a first event of a remote application, into a format communicable over a control channel of a cellular network, and may send the first message to a client device over the control channel. Also disclosed is client device that may translate a second message, which is indicative an action to be taken with respect to the remote application, into a format communicable over the control channel, and may send the second message to the computing system over the control channel.

Abstract: Methods, systems, and apparatuses for discovering dynamic path maximum transmission unit (PMTU) between a sending computing device and a receiving computing device (e.g., a client device and a host device) are described herein. A sending computing device may iteratively transmit bursts of probe packets, each burst being defined by a search range between a maximum packet size and a minimum packet size. The sending computing device may iteratively update the search range based on the previous iteration until the search converges on the PMTU. When the PMTU is discovered, each of the computing devices may update their transport and presentation layer buffers based on the discovered PMTU without any other protocol level disruption. In a multi-path scenario, the computing device may discover PMTU for each of the paths and select a performance optimal path based on the individual PMTUs and other network characteristics such as loss, latency, and throughput.

Abstract: In one aspect, an example methodology implementing the disclosed techniques includes, by a computing device, receiving an input from a user during an online meeting and generating a note comprising the input and a timestamp recording a point in time within the online meeting at which the note is generated. The method also includes, by the computing device, providing a user interface in which to display content of the online meeting and the note, the user interface including an annotation marker indicative of an availability of the note and, in response to a selection of the note in the user interface, adjusting a display of the content to a point in the content corresponding to the timestamp.

Abstract: Methods and systems for determining information of applications are described herein. A computing device may receive, from one or more client devices, data indicating application usage events. The computing device may determine, based on the data, popular applications that a target user regularly uses. The computing device may determine, based on the data, recommended applications that users similar to the target user regularly use. The computing device may determine, based on the popular applications and/or the recommended applications, a collection of applications for the target user. The collection of applications may be displayed on a user interface of a client device associated with the target user for expedited access of interested applications.