Abstract: Described embodiments provide systems and methods for protecting private data or confidential information. A device can receive a request from a client for a page from a server that includes confidential information to be verified with an owner of the confidential information. The device may be intermediary between the client and the server. Prior to providing the page to the client for rendering, the device may replace a first user interface (UI) element having the confidential information in the page, with a second UI element to obfuscate the confidential information. The device may receive an activation of the second UI element to request the owner to verify the confidential information from the client. The device may send to the client an update to the page to include an indication of whether the confidential information has been correctly verified with the owner.

Abstract: Described embodiments provide systems and methods for validating a request to access a resource. A device can receive a first request from the client that includes a first resource of the server. The device may add the first resource to an accessed-resource list of a session between the client and the server. The device may receive a response from the server to the first request that includes a second resource. The device may incorporate a mapping between an indication of the second resource and the first resource, to a shared data structure. The device within the session may receive a second request that includes a third resource of the server. The device may determine to allow the server to receive the second request when an indication of the third resource is mapped to at least one resource in the shared data structure that is present in the accessed-resource list.

Abstract: Described embodiments provide systems and methods for managing session accessed by a client device. The systems and methods can include one or more processors configured to receive data in a plurality of modalities corresponding to a plurality of features of a session for an entity accessed by a client device. The one or more processors can determine based on the data of the session and a distance model trained with historical data of the entity, a distance between a representation of the data of the session and a predetermined representation for the entity established based on the historical data of the entity. The one or more processors can compare the distance with a threshold established for the entity. The one or more processors can generate, based on the comparison between the distance with the threshold, an action to manage access by the client device to the session for the entity.

Abstract: Aspects of the disclosure relate to various systems and techniques that provide methods and systems for identifying log event for computing systems. For example, receiving a log event of an application and identifying at least one key word and determining a number of instances in which the computing device has received the log event based on the at least one key word. Further, determining a value for the leg event based on the determined number of instances where the value is representative of an inverse relationship between the number of instances of receipt of the log event and a criticality of that log event and initiating an action to address the event indicated by the log event based on a comparison between the determined value and a threshold.

Abstract: In one disclosed method, a first application accessed by a client device receives an indicator of an action that a second application is configured to take with respect to a third application. The client device accesses a fourth application and presents, based at least in part on the indicator received by the first application, a user interface element for the fourth application. Based at least in part on detecting selection of the user interface element, the client device presents a user interface configured to cause the second application to take the action with respect to the third application in response to a user input. The client device detects the user input to the user interface and causes, based at least in part on the user input, the second application to perform the action with respect to the third application.

Abstract: Methods and systems for managing cloud services are disclosed herein. According to various aspects of the disclosure, a number of users of cloud services can be organized in to a plurality of hierarchically organized groups. A feature associated with a cloud resource can then be enabled for a first group of users. An enablement value can then be calculated for a member of a second group of users and the feature can be enabled for that member of the second group of users based on the calculated enablement value.

Abstract: Aspects of the disclosure relate to various systems and techniques that provide for a method and apparatus for transmitting speech as text to a remote server and converting the text stream back to speech for delivery to a remote application. For example, a person, through workspace virtualization, is accessing a remote application that accepts speech as its input. The user, using a microphone, would speak into the microphone where the speech would be converted into text with a local speech-to-text converter. The text version of speech is sent to a remote server, which converts the text back to speech using a remote server based text-to-speech converter where the reconstructed speech is usable as input to a remote application or device.

Abstract: Methods and systems for deploying an enhanced processing system that performs reflection based endpoint security testing are described herein. A computing system may determine, by performing reflection on a web server library, controller types corresponding to an API. For each of the controller types, the computing system may determine method information objects corresponding to the respective controller types. Based on calls to an endpoint method for each of the one or more method information objects, the computing system may determine endpoint failures associated with the API. The endpoint methods may correspond to each of the one or more method information objects. Based on the determined endpoint failures associated with the API, the computing system may adjust one or more endpoints of the API.

Abstract: A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory and configured to load a web application into a browser; generate a random character string; and access a Uniform Resource Identifier (URI) to trigger execution of a protocol handler. The protocol handler is registered with the operating system to handle the URI scheme. The URI includes the random character string. The at least one processor is further configured to cause the protocol handler to start a local client application and provide the random character string to the local client application. The at least one processor is further configured to cause the local client application to start a Hypertext Transfer Protocol (HTTP) listener on a local loopback HTTP endpoint configured for communication between the web application and the local client application. The pathname of the endpoint includes the random character string.

Abstract: In one aspect, an illustrative methodology implementing the disclosed techniques includes, by a computing device, determining that an application process includes use of a first image and a second image, one of the first and second images being generated as part of the application process, and detecting a difference in content of the first image or the second image based on a comparison of the first and second images. The method also includes, by the computing device, revoking access to a file that includes at least one of the first and second images based on the detection of the difference in content of one of the first and second images.

Abstract: A computing system may include a computing device configured to store and update published resource entitlements for a plurality of client devices. The system may further include a plurality of virtual delivery appliances configured to receive connection requests from the client devices, with the connection requests including a connection lease issued based upon the published resource entitlements for the client devices, request validation of the connection leases from the computing device, and provide the client devices with access to virtual sessions corresponding to the published resource entitlements responsive to validation of connection leases from the computing device. The computing device, responsive to validation requests from the virtual delivery appliances, may also compare the connection leases to the updated published resource entitlements and validate virtual session requests based thereon.

Abstract: A method, computer program product, and computer system for determining, by a computing device, a service instance count for each of a plurality of services to be executed on a plurality of host devices. A similarity between the plurality of services may be determined. A host instance count for the plurality of host devices may be determined based upon, at least in part, the similarity between the plurality of services. Each service instance may be allocated to a respective host device for execution based upon, at least in part, the similarity between the plurality of services, the service instance count, and the host service count.

Abstract: A computing system may store a first file in a system repository that is to be synchronized with at least a first repository associated with a first client device and a second repository associated with a second client device. The computing system may determine that the first repository is to receive a downloaded copy of at least a portion of the first file, and may cause a copy of the at least a portion of the first file to be downloaded from the system repository to the first repository. Based at least in part on the computing system determining that the first repository is to receive the downloaded copy, an identifier of the at least a portion of first file may be stored in the second repository without storing a copy of the at least a portion of the first file in the second repository.

Abstract: Techniques are disclosed for sensitive information leak prevention using electromagnetic rays to prevent image capture of sensitive information. An example methodology implementing the techniques includes rendering a presentation slide on a display device, identifying at least one portion of the rendered presentation slide that contains sensitive information, and determining a location of the identified at least one portion on the rendered presentation slide. The method also includes triggering at least one electromagnetic emitter to emit an electromagnetic signal within the location of the identified at least one portion of the rendered presentation slide. The emitted electromagnetic signal inhibits image capture of the sensitive information by an image capture device.

Abstract: A monitoring module interfaces with existing non-retrospective data storage systems, thus providing mechanisms for detecting and reporting changes in data values stored in such systems. The monitoring module acts as a change detection layer that can operate in connection with multiple disparate systems and/or locations, so as to provide users with a unified view into data stored in such systems. For example, a user can consult a single app, website, or software application, to view changes for data values stored in multiple disparate systems and/or locations; the app can be configured to automatically generate notifications and alerts to users, and can provide the ability to respond to such notifications and alerts, take actions, and/or dive deeper into underlying data.

Abstract: Methods and systems for secure authentication in an extended reality (XR) environment are described herein. An XR environment may be output by a computing device and for display on a device configured to be worn by a user. A first plurality of images may be determined via the XR environment. The first plurality of images may be determined based on a user looking at a plurality of objects, real or virtual, in the XR environment. The first plurality of images may be sent to a server, and the server may return a second plurality of images. A public key and private key may be determined based on different portions of each of the second plurality of images. The public key may be sent to the server to register and/or authenticate subsequent communications between the computing device and the server.

Abstract: Disclosed embodiments describe systems and methods for versioning a cloud environment for a device. A versioning system can store a snapshot of a first version of an environment of a device for using a cloud provider of a plurality of cloud providers. The environment can include one or more resource template files and one or more deployment application programming interfaces (APIs) for the cloud provider. The versioning system can receive a request to automatically deploy a second version of the environment for the device. A snapshot of the second version of the environment can include at least one second resource template file different than the one or more resource template files of the snapshot of the first version of the environment. The versioning system can automatically deploy the second version of the environment responsive to the request.

Abstract: In some implementations, a method may involve determining first feature vectors for a plurality of data items accessed by a user of one or more client devices, the first feature vectors representing first contextual data about the one or more client devices at times that respective data items of the plurality of data items were accessed, the plurality of data items including a first data item. A predictive model, configured to classify input feature vectors into context types, may be used to determine that the first feature vector for the first data item is classified as a first context type. A second feature vector representing second contextual data about a first client device operated by the user may be determined and the predictive model may be used to determined that the second feature vector is classified as the first context type.

Abstract: A computer system to authorize a first endpoint to access enterprise digital resources is provided. The computer system includes the first endpoint, a second endpoint, and an endpoint management service being executed in a server. The endpoint management service communicates with the first endpoint via the second endpoint. For example, the endpoint management service receives authentication credentials from the first endpoint via the second endpoint. Similarly, the endpoint management service, upon verification of the authentication credentials, transmits an authorization token to the first endpoint via the second endpoint. The first endpoint, upon receiving and deploying the authorization token, can execute enterprise managed application programs and can access enterprise digital resources. In some examples, both the first and second endpoints are owned and/or used by a same user.

Abstract: A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory. The processor is configured to identify a message to a plug and play (PnP) manager of an operating system, the message comprising an identifier of a device to be configured by the PnP manager, determine whether the device is targeted for device identifier translation at least in part by determining whether the device satisfies one or more target device criteria, and replace the identifier of the device with a reference identifier different from the identifier of the device in response to a determination that the device is targeted for device identifier translation, the reference identifier being usable by the PnP manager to install or configure the device.