Abstract: One or more capabilities of the client device are determined at the client device. A request for a security profile is transmitted from a client device to a remote server. The request includes information related to the one or more capabilities of the client device. The security profile, defining a set of communication parameters based on at least some of the one or more capabilities, is received at the client device from the remote server. The received security profile is interpreted by the client device to obtain instructions for establishing the secure communication channel. The secure communication channel with a second server is then established by the client device based on the instructions from the security profile.

Abstract: A profile defining a sequence of cryptographic operations for establishing a virtual private network (VPN) connection is loaded. The profile is parsed to generate executable instructions for a profile state machine. The profile is executed through the profile state machine by transitioning through a plurality of connection states. Each connection state corresponds to a different phase of VPN connection establishment. Cryptographic operations defined by the profile are performed at each connection state. The cryptographic operations are orchestrated by the profile state machine to establish a secure VPN connection.

Abstract: An Internet Service Provider (ISP) of a user device is identified. At least one VPN server of available VPN servers is identified based on data indicative of respective histories of successful connections from devices in a location of the user device to the available VPN servers via the ISP, The at least one VPN server is then transmitted to the user device.

Abstract: A system and method to filter potentially unwanted traffic from trackers, third-party cookies, malicious websites or other sources and present the aggregated results of said filtering to the VPN user. One of the embodiments enables a VPN user to opt-in or opt-out from the filtering activities while being able to access the aggregated information about filtering. In another embodiment, the user can choose to customize the filtering parameters to add or remove specific targets from the filtering policies.

Abstract: A method including configuring a first device to receive, from a second device in a mesh network, connection information indicating a DNS server associated with a LAN to which the second device is connected; configuring the first device to transmit, to the DNS server, a query to receive a subnet IP address assigned to a LAN device; configuring the first device to receive, from the DNS server based on transmitting the query, the subnet IP address assigned to the LAN device; configuring the first device to determine, based on receiving the subnet IP address from the DNS server, that the LAN device is connected to the LAN; and configuring the first device to transmit, to the second device, a meshnet packet including data to be transmitted by the second device to the LAN device based on utilizing the subnet IP address is disclosed. Various other aspects are contemplated.

Abstract: A method including configuring a VPN server to assign, based on establishing a VPN connection, a first exit IP address to be utilized for retrieving information during the VPN connection; configuring the VPN server to determine, during the established VPN connection, a host device that is likely to block communication from the first exit IP address; configuring the VPN server to modify associated DNS settings to return communication information associated with the VPN server itself when the information is to be retrieved from the host device; configuring the VPN server to receive, during the established VPN connection, the information retrieved from the host device based on utilizing a second exit IP address associated with a secondary server; and configuring the VPN server to transmit, during the established VPN connection, the information to a user device in accordance with the modified DNS settings is disclosed. Various other aspects are contemplated.

Abstract: The present disclosure discloses a method for utilizing a second device to restore access of a first device to content include configuring the second device to receive, from a storage device, access to encrypted content and an encrypted first private key; configuring the second device to determine that the second device is to restore access of the first device to the content within a given duration of time set by the first device; configuring the second device to decrypt the encrypted first private key based on utilizing a second private key associated with the second device; configuring the second device to decrypt the encrypted content based on utilizing the first private key associated with the first device to determine the content; and configuring the second device to transmit, within the given duration of time, the content to the first device. Various other aspects are contemplated.

Abstract: Disclosed herein are techniques associated with an embedded subscriber identification module (eSIM) service. A first request message, including a plan identifier for a service plan, is received from a client device. A target service provider module corresponding to the service provider system is identified based on the plan identifier. The module is a dedicated data structure stored in an intermediary system. An order creation request signal is provided to complete an order for the plan. After receiving a subscription creation confirmation, an order completion status is received. An indication of the completed order is posted to a subscription change topic to cause an event handler to provide an updated order status signal.

Abstract: Disclosed are systems and methods for determining, by a processor associated with a user device, encrypted authentication information by encrypting authentication information that is associated with authenticating the user device with a service provider, the encrypting utilizing one or more encryption keys; detecting, by the processor, an attempt to access a service to be provided by the service provider based on detecting transmission of a request for the service from the user device to the service provider; determining, by the processor, one or more authentication factors to be utilized to authenticate the user device with the service provider based on decrypting the encrypted authentication information by utilizing one or more decryption keys; and enabling, by the processor, authentication of the user device with the service provider based on enabling transmission of the one or more authentication factors to the service provider. Various other aspects are contemplated.

Abstract: Systems and methods for archive scanning are provided herein. In some embodiments, a method includes: selecting an archive; reading a metadata representing a plurality of files within the archive; reading a plurality of hash strings from the archive; comparing the plurality of hash strings with a database of hash strings; and determining, based on the comparing, if the plurality of files within the archive represent a security threat based on the plurality of hash strings.

Abstract: The present disclosure discloses encrypting, by a user device, a folder based at least in part on utilizing a symmetric key to determine an encrypted folder, the encrypted folder being stored on the user device; encrypting, by the user device, the symmetric key, to determine an encrypted symmetric key, based at least in part on utilizing an assigned public key associated with the user device; decrypting, by a trusted device to determine the symmetric key, the encrypted symmetric key based at least in part on verifying biometric information, wherein, the decrypting includes transmitting a request to a trusted device, the request identifying a trusted key to be utilized to decrypt the encrypted symmetric key; and decrypting, by the user device, the encrypted folder based at least in part on utilizing the symmetric key. Various other aspects and techniques are contemplated.

Abstract: A method, in an external meshnet device in communication with a first meshnet device and a second meshnet device, includes determining, based on comparing (i) a first range of first subnet IP addresses associated with a first LAN connected to the first meshnet device and (ii) a second range of second subnet IP addresses associated with a second LAN connected to the second meshnet device, a conflict that a first subnet IP address assigned to a first LAN device in the first LAN is the same as a second subnet IP address assigned to a second LAN device in the second LAN; mapping, based on determining the conflict, an alternate IP address to correspond with the first subnet IP address; and communicating with the first LAN device based on utilizing the alternate IP address instead of the first subnet IP address is disclosed. Various other aspects are contemplated.

Abstract: A method including activating, by a virtual private network (VPN) server, a first exit internet protocol (IP) address for communicating data associated with a user device having an established VPN connection with the VPN server; deactivating, by a VPN server, the first exit IP address from communicating the data associated with the user device based at least in part on determining that an amount of data communicated utilizing the first exit IP address satisfies a data threshold; and reactivating, by the VPN server at a later time, the first exit IP address for communicating the data associated with the user device based at least in part on determining that the amount of data communicated utilizing the first exit IP address fails to satisfy the data threshold is disclosed. Various other aspects are contemplated.

Abstract: First metadata associated with a communication originating from a client device and directed to a target is received from a service provider. Based on a subscriber identification module (SIM) security service, service information is transmitted to a point of presence. The service information includes the first metadata and second metadata associated with the client device.

Abstract: A method including enabling, by an infrastructure device, a mesh network including a first device and a second device such that the first device and the second device communicate meshnet data utilizing a meshnet connection between the first device and the second device; and determining, by the infrastructure device, an initiating device from among the first device and the second device, the initiating device being responsible for initiating optimizing the meshnet connection. Various other aspects are contemplated.

Abstract: A cyber security method and system for detecting malware via an anti-malware application employing a fast locality-sensitive hashing evaluation using a vantage-point tree (VPT) structure for the indication of malicious files and non-malicious files. The locality-sensitive hashing evaluation using the VPT structure can be performed prior to initiating the deeper, more computationally intensive evaluation and is used to identify with high confidence a scanned file or data object being a malicious file, a non-malicious file, or a low confidence measure of the two.

Abstract: A method of generating a machine learning model for detecting malicious connections between two or more computing devices includes executing, within a secure operating environment, a plurality of known malicious software applications and a plurality of known non-malicious software applications, generating a dataset of known handshake parameters by monitoring connections between the plurality of known malicious software applications and one or more target servers, and the plurality of known non-malicious software applications and the one or more target servers, training a machine learning model using the dataset of known handshake parameters to predict a maliciousness of a connection between two or more computing devices based on handshake parameters between the two or more computing devices, and distributing the machine learning model to one or more client devices.

Abstract: The disclosure discloses an infrastructure device that configures a first server to determine an encrypted authentication packet including (i) a crypted code field that indicates a type of the encryption authentication packet, (ii) a crypted payload field that includes an encrypted initial authentication packet, determined by utilizing a nonce, an encryption key, and an encryption algorithm, and (iii) a data length field that indicates a length of the encrypted authentication packet, the length including a sum of a length of the crypted code field, a length of the crypted payload field, and a length of the data length field. The infrastructure device may also configure the first server to transmit, to a second server, the encrypted authentication packet to enable the first server and the second server to conduct an authentication process. Various other aspects are contemplated.

Abstract: A virtual private network (VPN) client receives data including a pre-shared key (PSK). The VPN client decrypts the data based on a short-term key pair to obtain a ciphertext. The VPN client then decrypts the ciphertext based on a short-term quantum-resistant key pair to obtain the PSK. A VPN tunnel is then established between the VPN client and a VPN server based on the PSK.

Abstract: A method determining, by a manager device that is responsible for managing network services provided by an infrastructure device, a manager request including (i) action description information that indicates an action to be performed by the infrastructure device, and (ii) path information that indicates an API to be utilized by the infrastructure device to enable performance of the action; transmitting, by the manager device to the infrastructure device, the manager request to request performance of the action; and receiving, by the manager device from the infrastructure device, an authorization message indicating successful authorization of the manager request, whereby indicating performance of the action, wherein the successful authorization is based at least in part on a verification that a time difference between a point in time when the manager request was determined and a current time satisfies a predetermined duration of time is disclosed. Various other aspects are contemplated.