Abstract: A method including configuring a virtual private network (VPN) server, having established VPN connections with one or more user devices, aggregate amounts of VPN data communicated with a host device; configuring the VPN server to determine difference amounts indicating differences in the aggregate amounts of VPN data; configuring the VPN server to determine average aggregate amounts of VPN data; configuring the VPN server to determine a largest average aggregate amount, from among the average aggregate amounts, as an average threshold level; and configuring the VPN server to selectively transmit a notification to the one or more devices indicating that the one or more user devices is to manage transmission of data from the one or more user devices based at least in part on a result of comparing the average threshold level with an observed average aggregate amount. Various other aspects are contemplated.

Abstract: A method including receiving, by a device from a virtual private network (VPN) server, a notification indicating that the device is to manage transmission of data from the device to the VPN server, the notification being received based at least in part on a determination that an observed average aggregate amount of VPN data communicated with a host device satisfies an average threshold level associated with an aggregate amount of VPN data communicated with the host device; and managing, by the device, transmission of the data from the device to the VPN server based at least in part on receiving the notification. Various other aspects are contemplated.

Abstract: A method including receiving first connection information associated with a first LAN from a first meshnet device and second connection information associated with a second LAN from a second meshnet device; calculating a first range of first subnet IP addresses associated with the first LAN, and a second range of second subnet IP addresses associated with the second LAN; determining, based on comparing the first range and the second range, a conflict that a first subnet IP address assigned to a first LAN device is the same as a second subnet IP address assigned to a second LAN device; mapping, based on determining the conflict, an alternate IP address to correspond with the first subnet IP address; and communicating with the first LAN device based at least in part on utilizing the alternate IP address instead of utilizing the first subnet IP address is disclosed. Various other aspects are contemplated.

Abstract: A method including receiving, by an infrastructure device from a first device in communication with a second device in a mesh network, periodic requests requesting the infrastructure device to determine a current communication parameter associated with the first device; receiving, by the infrastructure device from first device during an interval between transmissions of the periodic requests, an aperiodic request requesting the infrastructure device to determine the current communication parameter based at least in part on the first device determining occurrence of a triggering event during the interval; and transmitting, by the infrastructure device to the first device during the interval, communication information based at least in part on receiving the aperiodic request, the communication information indicating the current communication parameter. Various other aspects are contemplated.

Abstract: A method including transmitting, by a first device in communication with a second device in a mesh network, periodic requests to an infrastructure device associated with the mesh network, the periodic requests requesting the infrastructure device to determine a communication parameter associated with the first device; transmitting, by the first device during an interval between transmissions of the periodic requests, an aperiodic request requesting the infrastructure device to determine the communication parameter based at least in part on determining occurrence of a triggering event during the interval; receiving, by the first device during the interval, communication information based at least in part on transmitting the aperiodic request, the communication information indicating the communication parameter; and communicating, by the first device with the second device, meshnet data in the mesh network based at least in part on utilizing the communication information indicating communication parameter.

Abstract: A method including receiving, by an infrastructure device from a first device in communication with a second device in a mesh network, periodic requests requesting the infrastructure device to determine a current communication parameter associated with the first device; receiving, by the infrastructure device from first device during an interval between transmissions of the periodic requests, an aperiodic request requesting the infrastructure device to determine the current communication parameter based at least in part on the first device determining occurrence of a triggering event during the interval; and transmitting, by the infrastructure device to the first device during the interval, communication information based at least in part on receiving the aperiodic request, the communication information indicating the current communication parameter. Various other aspects are contemplated.

Abstract: A method including receiving, at a VPN server from a user device during an established VPN connection between the VPN server and the user device, a data request for the VPN server to retrieve data of interest from a host device; utilizing, by the VPN server, a first exit IP address to transmit a query for retrieving the data of interest to the host device during the established VPN connection; determining, by the VPN server based at least in part on transmitting the query, that the first exit IP address is blocked by the host device; and utilizing, by the VPN server, a second exit IP address to retransmit the query for retrieving the data of interest to the host device during the established VPN connection is disclosed. Various other aspects are contemplated.

Abstract: A method including communicating, by a first device with a second device, data over a meshnet connection in a mesh network; selectively transmitting, by the first device in the mesh network, a request to determine a communication parameter associated with the first device, the selectively transmitting including refraining from transmitting the request based at least in part on determining that a condition associated with transmitting the request is satisfied. Various other aspects are contemplated.

Abstract: A method including receiving, by a first device from a second device in a mesh network, a status message indicating that the first device is operating in the mesh network as an exit device with respect to the second device and that the second device is operating in the mesh network as an entry device with respect to the first device such that data communicated by the second device outside the mesh network is routed via the first device; and refraining, by the first device based at least in part on receiving the status message, from selecting the second device as an exit device with respect to the first device such that data communicated by the first device outside the mesh network is not routed via the second device. Various other aspects are contemplated.

Abstract: A method including determining, by a processor, a first communication parameter associated with a first device and a second communication parameter associated with a second device, the first device and second device communicating data over a meshnet connection associated with a mesh network; storing, by the processor in a memory, a first correlation including the first communication parameter and the first device and a second correlation including the second communication parameter and the second device; and updating, by the processor in the memory, the first communication parameter in the first correlation based at least in part on determining a change in the first communication parameter or the second communication parameter in the second correlation based at least in part on determining a change in the second communication parameter. Various other aspects are contemplated.

Abstract: A method including determining, by an infrastructure device, harmful patterns indicating characteristics of harmful traits included in affected data known to include harmful content, and clean patterns indicating characteristics of clean traits included in clean data known to be free of the harmful content; training, by the infrastructure device, a machine learning model to indicate presence of the harmful content based at least in part on utilizing the harmful patterns and the clean patterns; transmitting, by the infrastructure device to a user device, the harmful patterns, the clean patterns, and the machine learning model; and determining, by the user device, whether given data includes the harmful content based at least in part on utilizing the harmful patterns, the clean patterns, and the machine learning model. Various other aspects are contemplated.

Abstract: A method including receiving, by a user device, harmful patterns indicating characteristics of harmful traits included in affected data known to include malicious content and clean patterns indicating characteristics of clean traits included in clean data known to be free of the malicious content; determining, by the user device, a pattern associated with traits included in given data; and determining, by the user device, whether the given data includes the malicious content based at least in part on comparing the determined pattern with the harmful patterns and the clean patterns. Various other aspects are contemplated.

Abstract: A method including encrypting, by a user device, a file based at least in part on utilizing a file symmetric key and a first encryption algorithm to determine a first-encrypted file; storing, by the user device, the first-encrypted file in a local memory; encrypting, by the user device, the file based at least in part on utilizing a synchronization key and a second encryption algorithm to determine a second-encrypted file, the second encryption algorithm being different from the first encryption algorithm; encrypting, by the user device, metadata associated with the file based at least in part on utilizing a metadata key to determine encrypted metadata; and transmitting, by the user device to a storage device, the second-encrypted file in association with the encrypted metadata is disclosed. Various other aspects are contemplated.

Abstract: Systems and methods for archive scanning are provided herein. In some embodiments, a method includes: selecting an archive; reading a metadata representing a plurality of files within the archive; reading a plurality of hash strings from the archive; comparing the plurality of hash strings with a database of hash strings; and determining, based on the comparing, if the plurality of files within the archive represent a security threat based on the plurality of hash strings.

Abstract: A method including determining, by a manager device configured to manage network services provided by an infrastructure device, a manager request including a signature header signed by utilizing a manager private key associated with the manager device and a timestamp header identifying a point in time when the signature header was signed; transmitting, by the manager device to the infrastructure device, the manager request to request performance of an action associated with managing the network services; authorizing, by the infrastructure device, the manager request based at least in part on determining that a difference between the point in time when the signature header was signed and a current time satisfies a predetermined duration of time; and enabling, by the infrastructure device, performance of the action associated with managing the network services based at least in part on authorizing the manager request. Various other aspects are contemplated.

Abstract: A method including determining, by an infrastructure device, harmful patterns indicating characteristics of harmful traits included in affected data known to include harmful content, and clean patterns indicating characteristics of clean traits included in clean data known to be free of the harmful content; training, by the infrastructure device, a machine learning model to indicate presence of the harmful content based at least in part on utilizing the harmful patterns and the clean patterns; transmitting, by the infrastructure device to a user device, the harmful patterns, the clean patterns, and the machine learning model; and determining, by the user device, whether given data includes the harmful content based at least in part on utilizing the harmful patterns, the clean patterns, and the machine learning model. Various other aspects are contemplated.

Abstract: A method including transmitting, by an infrastructure device to a user device, an invitation link to enable the user device to receive network services from the infrastructure device; transmitting, by the infrastructure device to the user device based on verifying that the invitation link was activated by the user device, seed information to enable the user device to determine authentication information; determining, by the user device, the authentication information based on utilizing the seed information; transmitting, by the user device to the infrastructure device during a communication session, a user request related to an action to be performed regarding receiving the network services, the user request being signed based on utilizing a first portion of the authentication information; and authorizing, by the infrastructure device, the user request based on verifying that the communication session is currently active. Various other aspects are contemplated.

Abstract: A method including determining, by a first device having an established virtual private network (VPN) connection with a VPN server and an established meshnet connection with a second device in a mesh network, a transmission packet to be transmitted by the first device; and determining, by the first device, whether the transmission packet is to be transmitted by utilizing the VPN connection or by utilizing the meshnet connection based at least in part on determining a destination associated with the transmission packet. Various other aspects are contemplated.

Abstract: A method including transmitting, by a first meshnet device to a third-party application installed on the first meshnet device, an association between a second meshnet device and a unique identifier of the second meshnet device; receiving, by the first meshnet device from the third-party application, a query for a meshnet IP address assigned to the second meshnet device; transmitting, by the first meshnet device to the third-party application based on receiving the query, the meshnet IP address assigned to the second meshnet device; receiving, by the first meshnet device from the third-party application based on transmitting the meshnet IP address, a communication packet to be transmitted to the second meshnet device, the communication packet indicating the meshnet IP address as a destination address; and transmitting, by the first meshnet device, the communication packet to the second meshnet device is disclosed. Various other aspects are contemplated.

Abstract: A method including receiving, by a receiving device from a transmitting device, a combination of messages including encrypted decoy messages and one or more encrypted content messages, the encrypted decoy messages being determined based at least in part on encrypting decoy data and the one or more encrypted content messages being determined based at least in part on encrypting content data; and decrypting, by the receiving device, a received message included in the combination of messages based at least in part on utilizing a cryptographic key; and determining, by the receiving device, that the received message is a content message or that the received message is a decoy message based at least in part on a result of decrypting the received message. Various other aspects are contemplated.