Abstract: According to some embodiments, a method performed by a classification scanner comprises receiving an electronic message and determining a classification that applies to the electronic message. The classification is determined based on an express indication from a user. The method further comprises providing a machine learning trainer with the electronic message and an identification of the classification that applies to the electronic message. The machine learning trainer is adapted to determine a machine learning policy that associates attributes of the electronic message with the classification.

Abstract: According to some embodiments, a method performed by a classification scanner comprises receiving an electronic message and determining whether the electronic message includes an express indication from the user indicating that a classification applies to the electronic message. In response to determining that the electronic message does not include the express indication that the classification applies to the electronic message, the message further comprises sending the electronic message to a machine learning scanner. The machine learning scanner is adapted to use a machine learning policy to determine whether the classification applies to the electronic message.

Abstract: Systems and methods for the dynamic selection of IP address in email platforms, and the synchronization of hostnames and IP addresses in such platforms, are disclosed.

Abstract: According to certain embodiments, a provisioning manager comprises an interface and processing circuitry. The interface is configured to obtain provisioning data from a provisioning database. The processing circuitry is configured to prepare one or more configuration files based on the provisioning data and provide the one or more configuration files to the one or more service instances using file distribution technology. The one or more configuration files indicate how to provision one or more service instances used in sending or receiving electronic messages.

Abstract: According to some embodiments, a method performed by a classification scanner comprises receiving an electronic message and determining whether the electronic message includes an express indication from the user indicating that a classification applies to the electronic message. In response to determining that the electronic message does not include the express indication that the classification applies to the electronic message, the message further comprises sending the electronic message to a machine learning scanner. The machine learning scanner is adapted to use a machine learning policy to determine whether the classification applies to the electronic message.

Abstract: In some embodiments, a method comprises receiving an electronic message. In response to determining that the electronic message includes an express indication from a user that a classification applies or does not apply, the method comprises identifying message attributes of the electronic message that correspond to policy attributes of a machine learning policy and determining values of the policy attributes based on the identified message attributes. The method additionally comprises providing information to a machine learning trainer adapted to train the machine learning policy based on the information. The information comprises the values of the policy attributes and information indicating the classification that applies or does not apply to the electronic message, where such information is based on the express indication that the user included in the electronic message.

Abstract: A method includes receiving electronic data, extracting a first identifier from the electronic data, extracting first attributes from the electronic data, and searching a database for identifiers that match the first identifier to determine a number of matching identifiers. The method also includes determining that the number of matching identifiers exceeds a first threshold and searching the database for attributes associated with each of the matching identifiers to determine a subset of matching attributes. The method further includes calculating a specificity for the subset of matching attributes, determining that the specificity of the subset of matching attributes is less than or equal to a second threshold, and creating a filter based at least in part on the determination that the specificity of the subset of matching attributes is less than or equal to the second threshold.

Abstract: According to certain embodiments, a provisioning manager comprises an interface and processing circuitry. The interface is configured to obtain provisioning data from a provisioning database. The processing circuitry is configured to prepare one or more configuration files based on the provisioning data. The configuration file(s) indicate how to provision one or more service instances. The processing circuitry is further configured to commit the configuration file(s) to one or more repositories in order to make the configuration file(s) available to at least one of the service instances. The processing circuitry is further configured to send one or more notifications indicating to one or more of the service instances that the configuration file(s) have been committed to the one or more repositories.

Abstract: According to some embodiments, a method performed by a classification scanner comprises receiving an electronic message and determining a classification that applies to the electronic message. The classification is determined based on an express indication from a user. The method further comprises providing a machine learning trainer with the electronic message and an identification of the classification that applies to the electronic message. The machine learning trainer is adapted to determine a machine learning policy that associates attributes of the electronic message with the classification.

Abstract: According to certain embodiments, a delivery manager comprises an interface and processing circuitry. The interface is configured to receive a certificate that a Domain Name Service (DNS) associates with a DNS name of a recipient system. The processing circuitry is configured to distribute the certificate to a plurality of sending systems. Each sending system is configured to store the certificate in a local memory of the sending system, use the certificate from the local memory of the sending system to perform encryption in response to a future determination to send an encrypted message to the recipient system, and send the encrypted message directly to the recipient system.

Abstract: According to certain embodiments, a delivery manager comprises an interface and processing circuitry. The interface is configured to receive a certificate that a DNS associates with a DNS name of a first endpoint. The processing circuitry is configured to distribute the certificate to a second endpoint. The second endpoint is configured to store the certificate in a local memory of the second endpoint and, in response to a future determination to establish a connection with the first endpoint, use the certificate from the local memory of the second endpoint to establish transport layer security (TLS) for the connection.

Abstract: According to some embodiments, a delivery system comprises an interface and one or more processors. The interface is operable to receive a current preference from a recipient. The current preference indicates how the recipient prefers messages to be delivered. The processors determine whether the current preference differs from a previous preference that the delivery system associates with the recipient. The interface communicates the current preference to a plurality of senders if the current preference differs from the previous preference. The senders are configured to store the current preference in local memory and to apply the current preference from local memory in response to a future determination to send a message to the recipient.

Abstract: According to certain embodiments, a system is operable to receive a message intended for a recipient. The system is further operable to generate first and second push envelopes comprising first and second encrypted copies of the message, respectively. The push envelopes also comprise executable code that facilitates decrypting the message. The system is operable to associate the first and second push envelopes with a message index that uniquely identifies the message. The system is operable to communicate the first push envelope to the recipient and to communicate the second push envelope to a viewing system.

Abstract: According to one embodiment, an apparatus is configured to receive a request to communicate a message including a body to an intended recipient and to receive a first public key of the intended recipient and a second public key of the intended recipient. The apparatus is further configured to encrypt the body using a first message key to produce a first encrypted body, to encrypt the first message key using the first public key to produce a first encrypted message key, to encrypt the first encrypted message key and the first encrypted body using a second message key to produce a second encrypted body, and to encrypt the second message key using the second public key to produce a second encrypted message key. The apparatus is also configured to communicate an encrypted message to the intended recipient, the encrypted message including the second encrypted message key and the second encrypted body.

Abstract: Disclosed is a communication journaling and archival system which obtains content from social networks, handles re-authentication requirements which occur with respect to monitored users and social networks, includes content obtained from social networks in a journal and archiving system compatible with email journaling and archiving, and can be configured to send a journaled communication to multiple journal destinations and journal formats.

Abstract: According to certain embodiments, a method receives a certificate that identifies a sender system as owning a domain. The method sends an electronic message to the domain identified in the certificate. The electronic message is sent via a mail exchange network that correlates the domain to an address that a true owner of the domain has registered with a mail exchange authority. The method receives a response from the address that the mail exchange network correlates to the domain. The response indicates that the certificate is associated with the true owner of the domain. The method authenticates the sender system as the true owner of the domain based on the response.

Abstract: According to some embodiments, a proxy server comprises one or more processors operable to establish communication with a secure client application of a device. The client is configured with a partition that contains data received from the proxy server within the secure application. If the client passes authentication, the server communicates preview information to the client previewing files that the server received from a business server on behalf of the client. The client requests a selected file. The server renders the selected file into a first portion and a second portion based on the immediate display capabilities of the client. The server communicates the first portion, determines that a trigger point was reached, and then communicates the second portion in response to the trigger point being reached. The client is configured to delete the first portion and the second portion in response to a completion event.

Abstract: An e-mail system is disclosed that overcomes many deficiencies of, but is backward compatible with, existing e-mail systems. Embodiments of the system may include various features, including but not limited to: (1) secure transfer of e-mail messages, without the need for users to replace existing e-mail clients or to change e-mail addresses; (2) tracking of all actions performed in connection with an e-mail transmission; (3) the ability for a recipient to view information about an e-mail message, optionally including information about how other addressees have responded to it, before deciding whether to retrieve the e-mail message; (4) the aggregation of entire e-mail conversations into a single threaded view; (5) the ability to include both private and public messages in a single e-mail communication; (6) sender control over downstream actions performed in connection with an e-mail message; (7) flexible control over cryptographic methods used to encrypt emails messages for storage.

Abstract: Certain embodiments disclose a method of provisioning security services for a domain or set of domains. The method comprises sending an electronic message to the domain or set of domains. The electronic message comprising a secret message. The secret message is encrypted using a public key that a certificate server associates with the domain or set of domains. The method further comprises receiving a response from the domain or set of domains. The response comprises data derived by decrypting the secret message using a private key of the domain or set of domains. In response to a determination that the received data corresponds to the secret message sent in the electronic message, the method initiates the provisioning of the security services for the domain or set of domains.

Abstract: A system includes a plurality of mail encryption gateways and a router. Each mail encryption gateway encrypts email according to an encryption policy of a customer. The router stores a plurality of sender policy framework (SPF) records. The router also receives an email and compares a source IP address of the email with the plurality of SPF records. The router determines that the source IP address corresponds to an SPF record of the plurality of SPF records and in response to that determination, determines that a Simple Mail Transfer Protocol From Field of the email comprises a domain of a cloud provider corresponding to the SPF record. In response to that determination, the router determines that a Multipurpose Internet Mail Extension From Field of the email comprises a domain of a customer and in response to that determination, routes the email to a mail encryption gateway.