Abstract: Systems and methods for autonomous program management include a device which receives a request from a client responsive to execution of a script on the client. The request may include a location corresponding to the script and an identifier. The device may determine that activity of the client is activity of an autonomous program based on a comparison of the location to a reference being generated by the device for the client and determined using the identifier from the request. The device may block a subsequent request from the client to a server responsive to the determination.

Abstract: A computing system may include a server, and a client computing device in communication with the server. The server may be configured to provide a corresponding virtual desktop instance for the client computing device. The computing system may include a local device to be coupled to a given client computing device and to be operable in a given virtual desktop instance associated with the given client computing device, thereby generating client initialization packets. The server may be configured to generate a server mapping table. The given client computing device may be configured to generate a client mapping table, replace a client packet with a client mapping ID number to define compressed client initialization packets, and send the compressed client initialization packets to the server. The server may be configured to replace the client mapping ID number with the client packet in the compressed client initialization packets based upon the server mapping table.

Abstract: A system, method and program product for handling potentially problematic events in an enterprise computing platform. A method is disclosed that includes receiving a request to process an event from a client, wherein the event specifies a feature to be performed on an enterprise resource within the enterprise platform. The method further includes retrieving a processing threshold for the feature from a set of stored configuration settings and obtaining metadata associated with the enterprise resource, wherein the metadata indicates an attribute of the enterprise resource. The method then determines whether the attribute of the enterprise resource exceeds the processing threshold, and if so, does not process the event.

Abstract: Systems and methods for ordering software applications in a computing environment. The methods involve: presenting user-selectable icons for launching a plurality of software applications in a graphical user interface in accordance with a first order; performing a machine-learning algorithm to determine a weighting value for each software application of the plurality of software applications based on information specifying at least one aspect of a software launch request and at least one aspect of a first user's current circumstance; determining a second order in which the user-selectable icons should be presented in the graphical user interface based on the weighting values determined for the software applications; and dynamically modifying the graphical user interface to present the user-selectable icons in the second order which is different from the first order.

Abstract: A server includes one or more processors configured to determine relationships between one or more executable files, one or more library files, and one or more application programming interfaces (APIs) of a first application, and compare the determined relationships of the first application to determined relationships between one or more executable files, one or more library files, and one or more APIs of a second application. An indication of a matching status between the first and second applications is provided based on the compare.

Abstract: Systems and methods of managing virtual application performance in a virtual computing environment are provided. A system determines an application interaction score based on corresponding application interaction factors associated with sessions. The system determines the application interaction score for each virtual application accessed during each of the sessions. The system generates an aggregated application interaction score for each of the sessions based at least on combining the application interaction score for each of the virtual applications accessed during a corresponding session. The system performs an action based at least in part on the aggregated application interaction score to improve performance of a virtual application accessed via the virtual computing environment.

Abstract: A client device may, as part of a remote access or cloud-based network environment, access a resource either by using a connection to a gateway or by using a connection that bypasses the gateway. Which connection is used may be based on the network location of the resources provided by the network environment and network location of the client device. For example, if the client device and a resource are located at the same network location or connected to the same local network, the client device may access the resource by using a connection that bypasses the gateway. If the client device and the resource are located at different network locations or are connected to different local networks, the client device may connect to the gateway to access the resource.

Abstract: Systems and methods for operating a system including a plurality of directories. The methods comprises: receiving, by a computing device, a first search request for identity information associated with an individual user of the system that is in a common request format supported by a common Application Programming Interface (“API”); performing first operations by the computing device to generate second search requests by transforming a format of the first search request from the common request format to a plurality of directory search request formats respectively supported by the plurality of directories; and respectively communicating the second search requests to the plurality of directories for retrieving the identity information associated with an individual user of the system.

Abstract: A method and system for testing a software application includes receiving and storing a software application for execution in a memory associated with a processor, detecting a first trigger event corresponding to the software application, and attempting to load a disposable code in the memory in response to detecting the trigger event. The method further includes, if the disposable code is successfully loaded in the memory, by the processor: executing the software application to pass a reference to the software application into the disposable code, and executing the disposable code to create an interface between the software application and one or more testing tools. The interface is configured to intercept communications to and from the software application during an execution of the software application.

Abstract: Methods and systems for unifying display of virtual resources are described herein. A virtual session between a client device and a server device may be established. During the virtual session, a user may request, via the client device, to access a uniform resource locator (URL) via a browser associated with the server device. The URL request may be redirected. For example, the client device may receive, from the server device, a request to access the URL via a different browser. The client device may determine another browser with which to access the URL, and the URL may be launched via the other browser. The client device may generate a unified display of the URL launched via the other browser and one or more other URLs.

Abstract: A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory and configured to extract, from a website vulnerability scanner log, a uniform resource locator (URL) and a vulnerability score and vulnerability classification associated with the URL. The at least one processor is further configured to generate an application vulnerability graph comprising connected nodes that are associated with a field of the URL. The nodes are labeled to indicate the associated field of the URL and color coded based on the vulnerability score. The nodes are also associated with the vulnerability classification. The at least one processor is further configured to enable or disable security protection against a user-selected vulnerability classification of a user-selected node by generating web application firewall security rules and/or web application firewall relaxation rules.

Abstract: A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory and configured to measure one or more environmental factors; convert the one or more environmental factors to entropy values by truncation or rounding of the one or more environmental factors to a selected number of bits; and combine the entropy values to generate an encryption key. The one or more environmental factors may include a location of the computer system, a current date and time, parameters of a network environment to which the computer system is connected, or an identification of a server to which the computer system is connected. The at least one processor is further configured to encrypt and/or decrypt at least a portion of a data file and/or at least a portion of a binary executable application using the encryption key.

Abstract: A computer system is provided. The computer system includes a memory, a user interface, and a processor coupled to the memory and the user interface. The at least one processor is configured to render, via the user interface, a first representation of the computer system and a second representation of a remote computer system distinct from the computer system; receive, via the user interface, input initiating a drag-and-drop operation of a digital resource provided by the remote computer system; detect entry of a cursor effectuating the drag-and-drop operation into the first representation; confine the cursor to a portion of the first representation; move a target proxy window to encompass the portion of the first representation; and free the cursor to continue effectuation of the drag-and-drop operation.

Abstract: A computer system is provided. The computer system includes a memory, a network interface, and at least one processor coupled to the memory and the network interface. The processor is configured to receive, via the network interface, a request for a computing session; determine a security score for the computing session; identify a virtual resource designated to support computing sessions having the security score; and establish the computing session with the virtual resource.

Abstract: A method of performing operations involving accessing a set of protected computing resources of a computing device includes (a) receiving, by a frontend service, an instruction via a network connection, the instruction directing the computing device to perform an operation involving accessing the set of protected resources, the set of protected computing resources being configured to refuse access to the frontend service, (b) in response to receiving the instruction, sending a request from the frontend service to a backend service, the request instructing the backend service to access the set of protected resources, the backend service being configured to not communicate via the network connection, the set of protected computing resources being configured to permit access to the backend service, and (c) in response to the backend service receiving the request from the frontend service, the backend service accessing the set of protected resources in fulfillment of the operation.

Abstract: The present disclosure is directed towards systems and methods for configuring the interface of an embedded browser. The client application can dynamically control the interface of the embedded browser based on the sessions established between the client application and one or more network applications. The client application can change the configuration of the embedded browser's interface contextually based on different network applications accessed by the embedded browser.

Abstract: A technique for performing authentication includes a first device receiving security data from a second device that shares its network connection with the first device. The first device applies the security data received from the second device when requesting authentication to a secured resource on the network. For example, the security data may include a token code or other data that may be used as a token, such as identification information about the second device.

Abstract: Data is received characterizing a plurality of virtual resources executing application code and deployed within a remote computing environment. The remote computing environment is providing a first configuration of computing resources for execution of the plurality of virtual resources. Resource consumption information associated with the plurality of virtual resources is monitored via an application programing interface of the remote computing environment. A second configuration of computing resources for the plurality of virtual resources is determined using a set of rules and the resource consumption information. A request is transmitted to the remote computing environment to provide the second configuration of computing resources for execution of the plurality of virtual resources. Related apparatus, systems, techniques and articles are also described.

Abstract: Methods and systems for token transfer are described herein. A remote computing device may receive, from a mobile computing device, a public key of a public-private key pair. The public key may be associated with a first application of the mobile computing device. The first application may be configured to send credentials to a second application of the mobile computing device. The second application may be isolated from other applications executable on the mobile computing device. The remote computing device may receive, from the first application, a token. The token may have been previously issued to the first application and may have been encrypted, using the public key, by the first application. The remote computing device may send, to the second application, the token to enable the second application to authenticate with a plurality of services that interact with the second application.

Abstract: Described embodiments provide systems, methods and computer implemented instructions for resuming virtual computing sessions. A first device detects a disconnection via a primary communication channel from a server hosting a virtual computing session. The first device identifies a second device paired with the first client device. The first device transmits a request to enable a hotspot function of the second client device. The first device receives an indication that the hotspot function of the second client device is enabled. The first device resumes, in communication with the second device, access to the virtual computing session hosted by the server via a secondary communication channel through the hotspot function of the second device.