Abstract: Described embodiments provide systems and methods for accessing resources. A computing device may receive a first request to access a resource, the resource being executable on one or more servers and including data to provision the resource to one or more client devices. The computing device may determine that a relationship between a user of a client device and the resource exists that enables provision of the resource to the client device with use of first credentials defined by an administrative entity of the computing device. Responsive to the determination, the computing device may initiate a second request to provide a user interface through which to access the resource. The computing device may provide the user with access to the user interface responsive to authentication of the user with use of second credentials different from the first credentials.

Abstract: Described embodiments provide systems and methods for tunneling data packets to a server. A computing device can include a processor and a network interface. The processor is configured to execute a network service, a local application, and a virtual private network (VPN) application. The network service can receive a packet from the local application for transmission via a VPN tunnel, the packet comprising a source address of the computing device and a source port associated with the local application. The network service can determine that the packet matches a first tunnel filter. The network service can encapsulate, responsive to the determination that the packet matches the first tunnel filter, the packet with the header comprising a localhost destination address and a destination port associated with the VPN application. The network service can provide the encapsulated packet to the VPN application.

Abstract: A computer system is provided. The system includes a memory, a user interface, and a processor coupled with the at least one memory and the at least one user interface. The processor is configured to detect an electronic communication to a user comprising one or more links that address one or more web resources, determine whether each link of the one or more links addresses a recognized web resource or an unrecognized web resource, replace each link that addresses an unrecognized web resource with a replacement link that addresses a predetermined web page, and render the electronic communication to the user via a user interface.

Abstract: Techniques are provided for telephone call information collection and retrieval. A receiver device receives a telephone call from a caller device. The receiver device collects information associated with the telephone call and stores the information in a memory. Subsequently, the receiver device displays, via a graphical user interface, the telephone number of the caller device. The receiver device receives, via the graphical user interface, a user selection of the telephone number of the caller. In response to the user selection, the receiver device displays, via the graphical user interface, the information stored in the memory, including, for example, the start and end times of the telephone call, the location(s) of the receiver device during the telephone call, and text representing the audio of the call (e.g., speech-to-text conversion of at least a portion of the audio).

Abstract: Effectively allocating computing resources to end-users is provided. A system can identify mapping groups comprising a first mapping group that maps first users to corresponding first machines having a first hardware configuration, and a second mapping group that maps second users to corresponding second machines having a second hardware configuration. The system can determine a first metric indicating computing resource utilization of a first machine of the first machines when executing one or more sessions of a first user in the first mapping group, and a second metric indicating computing capacity of the second machines. The system can re-map the first user from the first mapping group to the second mapping group to cause sessions of the first user to execute on a second machine of the second machines.

Abstract: A computer system configured to protect user credentials is provided. The computer system includes a memory and at least one processor coupled to the memory. The at least one processor is configured to select a number N of non-sequential positions in a password according to a selection strategy; sample the number N of characters from the password corresponding to the selected non-sequential positions; store the selected positions; store the sampled characters separately from the selected positions; detect entry of the sampled characters in the N non-sequential positions in a protected location; and perform a security action in response to the entry of the sampled characters in the protected location.

Abstract: Methods and systems for secure authentication in an extended reality (XR) environment are described herein. An XR environment may be output by a computing device and for display on a device configured to be worn by a user. A first plurality of images may be determined via the XR environment. The first plurality of images may be determined based on a user looking at a plurality of objects, real or virtual, in the XR environment. The first plurality of images may be sent to a server, and the server may return a second plurality of images. A public key and private key may be determined based on different portions of each of the second plurality of images. The public key may be sent to the server to register and/or authenticate subsequent communications between the computing device and the server.

Abstract: Embodiments described include systems and methods for calling an application programming interface of a client application for a network application via an embedded browser of the client application. The method includes establishing, by a client application on a client device, one or more sessions to one or more network applications accessed via an embedded browser of the client application. The client application providing a plurality of application program interfaces (APIs). The client application can intercept a first API called by a network application of the one or more network applications and identify a policy for using the plurality of APIs of the client application. The client application can determine, based at least on the policy, a second API of the plurality of APIs to use for the intercepted first API, and execute, for the intercepted first API call, the second API of the plurality of APIs of the client application.

Abstract: A computing device for providing an intelligent invitation system for network-based conversation applications is provided. The computing device includes a computer readable medium and at least one processor operably coupled to the computer readable medium. The at least one processor can be configured to receive conversation information related to a conversation between two or more conversation participants. The processor can analyze the conversation information to identify one or more additional users to invite to the conversation by, for example, performing a speech to text conversion of the conversation information and processing the text for one or more specific keywords that can be used to identify the one or more additional users. The processor can then generate and transmit a notification to at least one of the conversation participants, the notification including information related to the one or more additional users to invite to the conversation.

Abstract: A computing device may include a memory and a processor cooperating with the memory to generate connection leases for a plurality of client devices. The client devices may be configured to request virtual computing sessions from virtual delivery appliances in accordance with respective connection leases. Virtual delivery appliances within a first group may be configured to operate during off-peak hours, and virtual delivery appliances within a second group different than the first group may be configured not to operate during the off-peak hours. The processor may generate each connection lease to include at least one of the virtual delivery appliances from the first group.

Abstract: Described embodiments provide systems and methods for selecting a device via which to access a server. A service having one or more processors coupled with memory may detect a measure of experience for a client device in accessing a server via a first device being below a threshold. The service may identify, responsive to the detection, a plurality of devices available for the client device to access the server. The service may determine a distance between each of the plurality of devices and at least one of the client device or the server. The service may select a second device from the plurality of devices via which the client device is to access the server based at least on the distance between the second device and at least one of the client device or the server.

Abstract: A computer system comprises a memory, a network interface, and at least one processor is provided. The memory stores a plurality of user profile records and a plurality of skill profile records. The at least one processor is configured to receive a request to recommend a skill to improve mental health of a user; retrieve, from the plurality of user profile records, a user profile record associated with the user and the skill, the user profile record including a first weight; retrieve, from the plurality of skill profile records, a skill profile record associated with the skill, the skill profile record including a second weight; determine a third weight based on the first weight and the second weight; generate a response to the request, the response including an identifier of the skill and the third weight; and transmit the response to a virtual assistant.

Abstract: Methods and systems for persisting a protocol state from a first instance of a virtual desktop application to a second instance of the virtual desktop application are described herein. In some embodiments, a computing platform may establish, by a first virtual desktop instance, a secure session with a virtual delivery agent (VDA), resulting in a protocol state of the first virtual desktop instance. Further, the computing platform may persist, using the first virtual desktop instance, the protocol state. Next, the computing platform may transmit, from the first virtual desktop instance to a second virtual desktop instance, the protocol state. Additionally, the computing platform may authenticate, using authentication tokens comprising the protocol state, a connection between the second virtual desktop instance and a gateway device.

Abstract: Described embodiments provide systems and methods for policy-based authentication, where the policy may designate locations and/or forms of proof of locations, for use in authentication. Some embodiments include or utilize a database storing authentication policies. In an example system, an authentication server in communication with the database is configured to receive a request from a device needing authentication. The request may include a credential. The authentication server is configured to retrieve, from the database storing authentication policies, an authentication policy corresponding to the device, the retrieved authentication policy specifying a location parameter. The authentication server is configured to receive location data from the device and resolve the authentication request using the credential and the received location data pursuant to the retrieved authentication policy.

Abstract: Methods, apparatuses, systems, and computer-readable mediums for sharing user credentials in federated authentication are described herein. An identity provider may receive a user credential from a user device. The identity provider may receive, from a relying party, a request for an access token. The identity provider may encrypt the user credential based on a nonce that is uniquely generated for the relying party. The identity provider may send a response to the relying party. The response may include the access token, the encrypted user credential, and the nonce.

Abstract: Described embodiments provide systems and methods for generating a network space to perform mitigation actions on a plurality of users. At least one server may determine a plurality of users of one or more levels of riskiness in a network environment, and network locations of the users. Using a plurality of clustering features, the at least one server may generate a network space comprising a cluster of network locations corresponding to a subset of the users of at least a defined level of riskiness. The at least one server may perform a mitigation action on the subset of users corresponding to the generated network space.

Abstract: A computing device configured to determine current user status information is provided. The computing device includes a computer readable memory, a network interface, and at least one processor operably coupled to the memory and the network interface. The at least one processor can be configured to receive, via the network interface from a first end-user application being of a first type, a first message specifying status information of a first user, process the status information of a first user to determine current user status information for the first user, generate a second message specifying the current user status information for the first user, and transmit the second message to a second end-user application being of a second type distinct from the type of the first end-user application such that at least one second user can review the current status information for the first user.

Abstract: A computer system configured to augment images of software objects is provided. The computer system includes a memory and at least one processor coupled to the memory. The at least one processor is configured to iteratively select an attribute value from a predetermined set of attribute values; modify an attribute of a software object according to the attribute value; and generate a respective augmented image of the software object with the attribute modified according to the attribute value. The software object may comprise an executable software object.

Abstract: Systems and methods for establishing a multipath connection include a first processor of a first cluster forwarding a first request from a client to establish a first connection with a server to a second processor of a second cluster. A third processor of the first cluster receives a second request to establish a multipath connection between the client and the server. The third processor forwards the second request to the second processor responsive to determining that the second request is to establish a multipath connection. The second processor establishes the multipath connection that includes the first connection and a second connection used as paths of the multipath connection.

Abstract: One example disclosed method involves a computing system providing a client device a virtualized computing environment. Upon receiving a request to access a file or folder in the virtualized computing environment from the client device, a file system filter driver of the computing system may intercept the request, and determine authorization to access the file or folder based at least in part on a security policy associated with the user account. If the client device is authorized to access the file or folder, the computing system may cause the client device to output a representation of contents of the first file or folder using the virtualized computing environment.