Abstract: Described embodiments provide systems and methods for protecting private data or confidential information. A device can receive a request from a client for a page from a server that includes confidential information to be verified with an owner of the confidential information. The device may be intermediary between the client and the server. Prior to providing the page to the client for rendering, the device may replace a first user interface (UI) element having the confidential information in the page, with a second UI element to obfuscate the confidential information. The device may receive an activation of the second UI element to request the owner to verify the confidential information from the client. The device may send to the client an update to the page to include an indication of whether the confidential information has been correctly verified with the owner.

Abstract: Systems and methods described herein provide an automated workflow tool that automatically and efficiently creates an executable workflow while preventing or reducing the introduction of errors into the workflow. The tool receives a selection of a start tile. In response, the tool presents a number of selectable items to configure an action to detect that initiates execution of the start tile as the first step in the workflow. Responsive to saving a configuration of the start tile including the action, the tool determines that the configuration of the start tile instructs the tool to add a second tile connected to the start tile on the canvas of the workflow. The tool presents a number of selectable items to configure the second tile as a next step in the workflow. The tool executes the workflow configured with the start tile and the second tile responsive to detecting the action configured in the start tile.

Abstract: The present disclosure is directed to a scalable, extensible, fault-tolerant system for stateful joining of two or more streams that are not fully synchronized, event ordering is not guaranteed, and certain events arrive a bit late. The system can ensure to combine the events or link the data in near real-time with low latency to mitigate impacts on downstream applications, such as ML models for determining suspicious behavior. Apart from combining events, the system can ensure to propagate the needed entities to other product streams or help in entity resolution. If any of the needed data is yet to arrive, a user can configure a few parameters to achieve desired eventual and attribute consistency. The architecture is designed to be agnostic of stream processing framework and can work well with both streaming and batch paths.

Abstract: Systems and methods for updating a configuration of an SD-WAN application using connectivity or usage data include a software-defined wide area network (SD-WAN) application executing on a client device receiving one or more of historic or predictive data relating to connectivity or usage of the client device. The SD-WAN application detects an update condition for the SD-WAN application using the one or more historic or predictive data relating to the connectivity or usage of the client device. The SD-WAN application updates a configuration of the SD-WAN application responsive to detecting the update condition. The SD-WAN application transmits application traffic using the updated configuration.

Abstract: Systems and methods for selecting tunnels for transmitting application traffic by an SD-WAN application include a software-defined wide area network (SD-WAN) application executing on a client device establishing a connection between the SD-WAN application and one or more applications. The SD-WAN application maintains a plurality of tunnels between the SD-WAN application and respective tunnel destinations. The SD-WAN application receives application traffic from an application of the one or more applications. The SD-WAN application selects, based on the application traffic, a respective tunnel of the plurality of tunnels via which to transmit the application traffic of the application. The SD-WAN application transmits the application traffic via the selected tunnel.

Abstract: A computer system configured to identify errors in a session launch initiated by a client application is provided. The computer system includes a memory and at least one processor coupled to the memory. The at least one processor is configured to receive one or more events from one or more applications or devices involved in the session launch, wherein an event of the one or more events comprises information from an application or device call (e.g., an application programming interface (API) call) communicated during the session launch, the information comprising destination information; build a primary Directed Acyclic Graph (DAG) based on the information from the API call; determine an error identifier based on the primary DAG; retrieve a troubleshooting recommendation from a library based on the error identifier; and send the troubleshooting recommendation to the client application.

Abstract: Dynamically controlling use of a shared computing resource by virtual-computing sessions of a client computing device includes storing per-virtual-channel weights representing contributions of session virtual channels to performance, the stored weights including sets of weights for respective distinct application types. A resource allocation operation includes (i) for each session, selecting a set of weights based on a type of application using the session and applying the selected set of weights to activity state data to produce a session activity value, the activity state data representing activity states of the session virtual channels, and (ii) generating resource usage control signals based on the session activity values of the sessions, the resource usage control signals representing a target pattern of use of the shared computing resource by the sessions. An enforcement operation uses the resource usage control signals to establish the target pattern of use of the shared resource by the sessions.

Abstract: A virtual server includes at least one processor to create a single composited layered image comprising an operating system layer and an application shortcut that includes a representation of an application while not including the application. The single composited layered image is provided as a virtual session to a client computing device. An application layer is mounted to the single composited layered image in response to a user of the client computing device interacting with the application shortcut, with the application layer including the application.

Abstract: A method for policy-based analytics includes retrieving, from a graph database, first data representing a first entity in a computing environment, a second entity in the computing environment, and an event associated with the first entity and the second entity; predicting, according to a risk indicator model, a risk associated with the first entity based at least in part on the event; and updating the graph database to include second data representing the risk and a risk indicator. The first and second entities are stored as properties of a first vertex and a second vertex, respectively, and the event is stored as a property of an edge between the first vertex and the second vertex. The risk indicator is stored as a property of a third vertex. The risk is stored as a property of an edge between the first vertex and the third vertex.

Abstract: Described embodiments improve the performance of a computer network via selectively forwarding packets to bypass quality of service (QoS) processing, avoiding processing delays during critical periods of high demand, increasing throughput and efficiency may be increased by sacrificing a small amount of QoS accuracy. QoS processing may be applied to a subset of packets of a flow or connection, referred to herein as “lazy” processing or lazy byte batching. Packets that bypass QoS processing may be immediately forwarded with the same QoS settings as packets of the flow for which QoS processing is applied, resulting in tremendous overhead savings with only minimal decline in accuracy.

Abstract: A computing system includes a mobile device having a wireless transceiver and an orientation sensor that senses orientation of the mobile device and generates orientation data based on the sensed orientation. A controller converts the orientation data to graphical pointer data, which is transmitted via the wireless transceiver to a local computing device, which translates the graphical pointer data to represent a graphical pointer being displayed on its display. The graphical pointer is controlled on the display of the local computing device by changing orientation of the mobile device.

Abstract: A computer system is provided. The computer system includes a memory, a network interface, and at least one processor configured to monitor a user interface comprising a plurality of user interface elements; detect at least one changed element within the plurality of user interface elements; classify, in response to detecting the at least one changed element, the at least one changed element as either indicating or not indicating an error; generate, in response to classifying the at least one changed element as indicating an error, an error signature that identifies the at least one changed element; identify, using the error signature, a remediation for the error; and provide the remediation in association with the at least one changed element.

Abstract: A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory. The at least one processor is configured to scan session data representative of operation of a user interface comprising a plurality of user interface elements; detect, at a point in the session data, at least one changed element within the plurality of user interface elements; classify, in response to detecting the at least one changed element, the at least one changed element as either indicating or not indicating an error; store an association between the error and the point in the session data; and provide access to the point in the session data via the association.

Abstract: Techniques are disclosed for a hybrid undo/redo for text editing, where non-linear undo and redo operations are performed across dynamic regions in a document and linear undo and redo operations are performed within the dynamic regions in the document. In an example, the hybrid undo/redo may be achieved by maintaining respective region offset values for the dynamic regions created in a document by the edits made to the document. In operation, the respective region offset values associated with the dynamic regions can be used to negate or otherwise counteract the effect of edits made in the dynamic regions.

Abstract: Methods and systems for analysis of a plurality of channels that provide a remote desktop session are described herein. Channel metrics for each of a plurality of communication channels may be received. Each of the plurality of communication channels may be configured to deliver, to a computing device and via a network, different aspects of a remote desktop session. A plurality of channel scores may be determined for each communication channel of the plurality of communication channels. Based on the plurality of channel scores, an aggregate score may be determined. Based on the aggregate score satisfying a threshold, a notification may be transmitted. For example, an indication of one or more executable scripts predicted to improve a performance of one or more of the plurality of communication channels may be transmitted.

Abstract: A virtual file organization system, method and program product are disclosed. Included is a system that assigns classification tags to files stored within a storage system based on a natural language processing (NLP) context analysis of each file; and a virtual smart folder that is viewable within a user interface, wherein: opening the virtual smart folder causes a set of virtual subfolders to be displayed in which each virtual subfolder includes a category title; opening of a virtual subfolder causes a set of files residing at disparate locations in the storage system to be displayed; and the files displayed by opening the virtual subfolder each include an assigned classification tag that is associated with the category title of the virtual subfolder.

Abstract: Systems and methods for real-time data band multi-path routing include a device determining a first designation for a first point of presence (POP) and a second designation for a second POP. The first POP and the second POP are intermediary to a client device and an endpoint. The device selects, based on the first designation or the second designation and network traffic for transmitting to the endpoint, a first connection to the first POP or a second connection to the second POP. The device transmits the network traffic between the client device and the endpoint, via the selected first connection or second connection.

Abstract: Systems and methods for providing a single sign-on for authenticating a workspace user accessing an application outside of the workspace are provided. For example, the method can include launching a workspace session based upon initial authentication information for the user. The method can further include receiving a request to access an additional application during the workspace session. For example, the request can include launching the additional application in a context such as a system browser. The method can further include blocking authentication of the additional application in the original context, performing an alternative authentication process in an alternate context using the initial authentication information, and providing access to the additional application in the original context based upon the alternative authentication process.

Abstract: Described embodiments provide systems and methods for performing secure transactions. A first service executing on at least one server may receive a request from a second service for the first service to perform a transaction. The request may include an identifier of a record. An agent of the first service may determine, according to the identifier, whether the record is present in a storage. The storage may be accessible using credentials of the agent of the first service and an agent of the second service. The first service may send a response to the request if the record is present in the storage.

Abstract: A computing system includes a virtualization server that runs virtual machine sessions and provides a hosted application with user interface (UI) elements having an ordered hierarchy of graphical control elements when sequenced therethrough. A client computing device accesses the hosted application and receives the ordered hierarchy of graphical control elements and displays the graphical control elements as local virtual UI elements, applies user input to one of the graphical control elements in focus, generates a local virtual UI element graphics overlay for display corresponding to a predicted response to the user input as a next graphical control element in the ordered hierarchy and sends the user input to the virtualization server.