Abstract: A request including a cookie directed from a user device to a target device is received at a validation software. The cookie is a data structure stored on the user device by a web browser to track session information. The cookie is hashed to obtain a hashed cookie. A validation request containing a subset of the hashed cookie is transmitted to a validation server. A response indicating that the subset of the hashed cookie matches a hash of a compromised cookie is received from the validation server. An alert of a potential session compromise is output at the user device based on the response.

Abstract: A method including configuring a first device to receive, from a second device in a mesh network, connection information associated with a LAN to which the second device is connected; configuring the first device to calculate, based on utilizing the connection information, a range of subnet IP addresses associated with the LAN; configuring the first device to determine that a LAN device is connected to the LAN based on determining that a sample subnet IP address associated with the LAN device falls within the range of subnet IP addresses associated with the LAN; and configuring the first device to transmit, to the second device via the meshnet connection in the mesh network, an initiation meshnet packet including information to be transmitted by the second device to the LAN device via a LAN connection between the second meshnet device and the LAN device is disclosed. Various other aspects are contemplated.

Abstract: A method including configuring a VPN server to activate a first exit IP address for communicating data associated with a user device having an established VPN connection with the VPN server; configuring the VPN server to deactivate the first exit IP address from communicating the data associated with the user device based at least in part on determining that an amount of data communicated utilizing the first exit IP address satisfies a data threshold; and configuring the VPN server to reactivate, the first exit IP address for communicating the data associated with the user device based at least in part on determining that the amount of data communicated utilizing the first exit IP address fails to satisfy the data threshold is disclosed. Various other aspects are contemplated.

Abstract: Disclosed are systems and methods for determining, by a processor associated with a user device, encrypted authentication information by encrypting authentication information that is associated with authenticating the user device with a service provider, the encrypting utilizing one or more encryption keys; detecting, by the processor, an attempt to access a service to be provided by the service provider based on detecting transmission of a request for the service from the user device to the service provider; determining, by the processor, one or more authentication factors to be utilized to authenticate the user device with the service provider based on decrypting the encrypted authentication information by utilizing one or more decryption keys; and enabling, by the processor, authentication of the user device with the service provider based on enabling transmission of the one or more authentication factors to the service provider. Various other aspects are contemplated.

Abstract: A method for identifying a malicious connection between a client device and a server includes obtaining handshake parameters for the client device and the server responsive to the client device initiating a connection with the server, generating a feature set by extracting features from the handshake parameters, predicting a maliciousness of the connection using a machine learning model, where the extracted features are provided as inputs to the machine learning model, and automatically initiating a corrective action if the connection is predicted to be malicious.

Abstract: One or more capabilities of the client device are determined at the client device. A request for a security profile is transmitted from a client device to a remote server. The request includes information related to the one or more capabilities of the client device. The security profile, defining a set of communication parameters based on at least some of the one or more capabilities, is received at the client device from the remote server. The received security profile is interpreted by the client device to obtain instructions for establishing the secure communication channel. The secure communication channel with a second server is then established by the client device based on the instructions from the security profile.

Abstract: A profile defining a sequence of cryptographic operations for establishing a virtual private network (VPN) connection is loaded. The profile is parsed to generate executable instructions for a profile state machine. The profile is executed through the profile state machine by transitioning through a plurality of connection states. Each connection state corresponds to a different phase of VPN connection establishment. Cryptographic operations defined by the profile are performed at each connection state. The cryptographic operations are orchestrated by the profile state machine to establish a secure VPN connection.

Abstract: An Internet Service Provider (ISP) of a user device is identified. At least one VPN server of available VPN servers is identified based on data indicative of respective histories of successful connections from devices in a location of the user device to the available VPN servers via the ISP, The at least one VPN server is then transmitted to the user device.

Abstract: A system and method to filter potentially unwanted traffic from trackers, third-party cookies, malicious websites or other sources and present the aggregated results of said filtering to the VPN user. One of the embodiments enables a VPN user to opt-in or opt-out from the filtering activities while being able to access the aggregated information about filtering. In another embodiment, the user can choose to customize the filtering parameters to add or remove specific targets from the filtering policies.

Abstract: A method including configuring a first device to receive, from a second device in a mesh network, connection information indicating a DNS server associated with a LAN to which the second device is connected; configuring the first device to transmit, to the DNS server, a query to receive a subnet IP address assigned to a LAN device; configuring the first device to receive, from the DNS server based on transmitting the query, the subnet IP address assigned to the LAN device; configuring the first device to determine, based on receiving the subnet IP address from the DNS server, that the LAN device is connected to the LAN; and configuring the first device to transmit, to the second device, a meshnet packet including data to be transmitted by the second device to the LAN device based on utilizing the subnet IP address is disclosed. Various other aspects are contemplated.

Abstract: A method including configuring a VPN server to assign, based on establishing a VPN connection, a first exit IP address to be utilized for retrieving information during the VPN connection; configuring the VPN server to determine, during the established VPN connection, a host device that is likely to block communication from the first exit IP address; configuring the VPN server to modify associated DNS settings to return communication information associated with the VPN server itself when the information is to be retrieved from the host device; configuring the VPN server to receive, during the established VPN connection, the information retrieved from the host device based on utilizing a second exit IP address associated with a secondary server; and configuring the VPN server to transmit, during the established VPN connection, the information to a user device in accordance with the modified DNS settings is disclosed. Various other aspects are contemplated.

Abstract: The present disclosure discloses a method for utilizing a second device to restore access of a first device to content include configuring the second device to receive, from a storage device, access to encrypted content and an encrypted first private key; configuring the second device to determine that the second device is to restore access of the first device to the content within a given duration of time set by the first device; configuring the second device to decrypt the encrypted first private key based on utilizing a second private key associated with the second device; configuring the second device to decrypt the encrypted content based on utilizing the first private key associated with the first device to determine the content; and configuring the second device to transmit, within the given duration of time, the content to the first device. Various other aspects are contemplated.

Abstract: Disclosed herein are techniques associated with an embedded subscriber identification module (eSIM) service. A first request message, including a plan identifier for a service plan, is received from a client device. A target service provider module corresponding to the service provider system is identified based on the plan identifier. The module is a dedicated data structure stored in an intermediary system. An order creation request signal is provided to complete an order for the plan. After receiving a subscription creation confirmation, an order completion status is received. An indication of the completed order is posted to a subscription change topic to cause an event handler to provide an updated order status signal.

Abstract: Disclosed are systems and methods for determining, by a processor associated with a user device, encrypted authentication information by encrypting authentication information that is associated with authenticating the user device with a service provider, the encrypting utilizing one or more encryption keys; detecting, by the processor, an attempt to access a service to be provided by the service provider based on detecting transmission of a request for the service from the user device to the service provider; determining, by the processor, one or more authentication factors to be utilized to authenticate the user device with the service provider based on decrypting the encrypted authentication information by utilizing one or more decryption keys; and enabling, by the processor, authentication of the user device with the service provider based on enabling transmission of the one or more authentication factors to the service provider. Various other aspects are contemplated.

Abstract: Systems and methods for archive scanning are provided herein. In some embodiments, a method includes: selecting an archive; reading a metadata representing a plurality of files within the archive; reading a plurality of hash strings from the archive; comparing the plurality of hash strings with a database of hash strings; and determining, based on the comparing, if the plurality of files within the archive represent a security threat based on the plurality of hash strings.

Abstract: The present disclosure discloses encrypting, by a user device, a folder based at least in part on utilizing a symmetric key to determine an encrypted folder, the encrypted folder being stored on the user device; encrypting, by the user device, the symmetric key, to determine an encrypted symmetric key, based at least in part on utilizing an assigned public key associated with the user device; decrypting, by a trusted device to determine the symmetric key, the encrypted symmetric key based at least in part on verifying biometric information, wherein, the decrypting includes transmitting a request to a trusted device, the request identifying a trusted key to be utilized to decrypt the encrypted symmetric key; and decrypting, by the user device, the encrypted folder based at least in part on utilizing the symmetric key. Various other aspects and techniques are contemplated.

Abstract: A method, in an external meshnet device in communication with a first meshnet device and a second meshnet device, includes determining, based on comparing (i) a first range of first subnet IP addresses associated with a first LAN connected to the first meshnet device and (ii) a second range of second subnet IP addresses associated with a second LAN connected to the second meshnet device, a conflict that a first subnet IP address assigned to a first LAN device in the first LAN is the same as a second subnet IP address assigned to a second LAN device in the second LAN; mapping, based on determining the conflict, an alternate IP address to correspond with the first subnet IP address; and communicating with the first LAN device based on utilizing the alternate IP address instead of the first subnet IP address is disclosed. Various other aspects are contemplated.

Abstract: A method including activating, by a virtual private network (VPN) server, a first exit internet protocol (IP) address for communicating data associated with a user device having an established VPN connection with the VPN server; deactivating, by a VPN server, the first exit IP address from communicating the data associated with the user device based at least in part on determining that an amount of data communicated utilizing the first exit IP address satisfies a data threshold; and reactivating, by the VPN server at a later time, the first exit IP address for communicating the data associated with the user device based at least in part on determining that the amount of data communicated utilizing the first exit IP address fails to satisfy the data threshold is disclosed. Various other aspects are contemplated.

Abstract: First metadata associated with a communication originating from a client device and directed to a target is received from a service provider. Based on a subscriber identification module (SIM) security service, service information is transmitted to a point of presence. The service information includes the first metadata and second metadata associated with the client device.

Abstract: A method including enabling, by an infrastructure device, a mesh network including a first device and a second device such that the first device and the second device communicate meshnet data utilizing a meshnet connection between the first device and the second device; and determining, by the infrastructure device, an initiating device from among the first device and the second device, the initiating device being responsible for initiating optimizing the meshnet connection. Various other aspects are contemplated.