Abstract: Various embodiments disclose a method comprising, receiving, by a computing device, a first message for transmission to an endpoint from a messaging queue; determining, by the computing device, a first network to which the endpoint is connected; creating, by the computing device, an endpoint object corresponding to the endpoint, the endpoint object being configured with network specific information associated with the first network; receiving, by the endpoint object executing on the computing device from a subnetwork object executing on the computing device, an indication that the message can be delivered to the endpoint via the first network; and in response to the indication, transmitting, by the endpoint object, the first message to the endpoint using the first network.

Abstract: Methods, systems, and apparatuses, including computer programs encoded on computer storage media, for generating a data structure that includes entity information and casing information associated with the entity across one or more enterprise team servers. The data structure is then used to determine a corrective action, which is subsequently performed. Because of how the described techniques generate the data structure and determine a corrective action, the described techniques can enhance threat detection, improve risk assessment, and increase incident resolution throughput of a networked system. The data structure may be provided for use in performing a downstream task, wherein the downstream task comprises using a machine learning model to process the data structure.

Abstract: To generate an encrypted packet, a transmitting endpoint in a communication system chooses the desired IPsec tunnel, then retrieves the SA linked to that tunnel from its Outbound SA table of its local SA database (SAD), and encrypts the packet using the retrieved SA. To decrypt the encrypted packet, the receiving endpoint extracts the Security Parameter Index (SPI) value, the source address, the destination address, and the source port number from the packet to retrieve the appropriate SA from its local SAD database and decrypts the encrypted packet using the retrieved SA. In this way, the transmitting and receiving endpoints can retrieve the appropriate SAs for situations in which either endpoint is one of multiple endpoints located behind a Carrier-Grade Network Address Translation (CG-NAT) function having a single public IP address shared by the multiple endpoints.

Abstract: Systems, methods, and devices that relate to an inspection system deployed in a core network. The inspection system includes one or more inspection agent nodes located close to an edge of the core network configured to generate one or more network reports based on information from one or more access nodes. An inspection manager node is in communication with the one or more inspection agent nodes to receive one or more network reports from the one or more inspection agent nodes, derive an actual network behavior of the one or more access nodes based on the one or more network reports, detect a discrepancy between an expected network behavior and the actual network behavior, and trigger a reconfiguration of at least one of the one or more access nodes based on the discrepancy.

Abstract: A high assurance system provides for communication between trusted user devices with auxiliary adaptation for augmenting communication security across an untrusted environment. First and second main encrypting devices coupled to respective trusted user devices are cryptologically tethered to one another by a main communication link established across the untrusted environment between trusted user devices in cryptologically protected manner. An auxiliary encrypting device is cryptologically tethered to the first main encrypting device by an auxiliary communication link established across the untrusted environment between a trusted auxiliary device and one trusted user device in cryptologically protected manner. The main and auxiliary encrypting devices define portals traverse trust boundaries between trusted and untrusted environments, each including at least one encryption unit and a communication unit coupled thereto by a connectionless interconnect.

Abstract: In various examples, a computerized method for document-sharing conferencing is described. The method may include steps such as acquiring and saving an electronic document. The method may include receiving an active event indication and instructing the electronic document to be displayed on one or more displays during an active event. The method may further include receiving an active layer for the electronic document and instructing the active layer to be displayed on the electronic document during the active event. The method may also include saving the active layer with the electronic document.

Abstract: Disclosed are systems and methods for improving interactions with and between computers in content searching, hosting and/or providing systems supported by or configured with devices, servers and/or platforms. The disclosed systems and methods for efficiently monitoring and following up on delivered messages for which a user expects and/or requires a reply. The disclosed functionality provides a fully automated, personalized, easy and efficient way to identify and manage outgoing mail messages that require reply by marking outbound messages as RSVP messages, which are those messages determined to require a reply. Such functionality is based on the ability of the disclosed framework to distinguish between a “satisfactory response” (i.e., a response that includes the required information) and a response that is not.

Abstract: A memory system includes a first storage; a second storage storing log information indicating a history of accesses to the first storage; a third storage storing a first private key and a first public key; and a processor configured to convert the log information into a first hash value by inputting the log information into a hash function, sign the first hash value using the first private key, and generate a first signature. The processor is further configured to convert the log information read from the second storage into a second hash value by inputting the log information into the hash function; and perform signature verification using the first public key paired with the first private key and the second hash value.

Abstract: A system and method for defense in depth, which employs a feedforward orchestrator, of at least one software delivery pipeline includes a security context and the feedforward orchestrator being configured to analyze the security context for each stage of the software delivery pipeline to mitigate security vulnerabilities. The system and method also implement security controls with at least one feedforward technique. Also, the feedforward orchestrator continuously employs feedback of the system to inform subsequent stages or subsequent layers of integration and deployment functions of the at least one software delivery pipeline.

Abstract: In various examples, a computerized method for document-sharing conferencing is described. The method may include steps such as acquiring and saving an electronic document. The method may include receiving an active event indication and instructing the electronic document to be displayed on one or more displays during an active event. The method may further include receiving an active layer for the electronic document and instructing the active layer to be displayed on the electronic document during the active event. The method may also include saving the active layer with the electronic document.

Abstract: A system and method for generating an application layer for a representation graph is disclosed. The method includes defining a data entity in a representation graph, the data entity including a plurality of data fields; generating a node based on the data entity in the representation graph, the node representing a unique entity; receiving data respective of the unique entity from a plurality of data sources, such that a first data source of the plurality of data sources provides data to a first data field of the plurality of data fields, and a second data source of the plurality of data sources provides data to a second data field of the plurality of data fields; applying a control to the node based on the received data; and initiating an action based on applying the control to the received data.

Abstract: Obfuscation techniques used in phishing attacks that evade detection using current machine learning models can be identified and statistically characterized for use in generating adversarial training samples to improve the performance of a machine learning model phishing classifier. By using statistical information regarding the prevalence and effectiveness of various obfuscation techniques observed in real-world samples, adversarial samples that are effective and realistic examples of phishing content that evades phishing content classifier detection can be generated and used to augment the data set used for training or re-training the machine learning model classifier.

Abstract: A media docking device includes an input circuit, an output circuit and a processing circuit. The input circuit is electrically connected to a media source device for receiving media data. The output circuit is electrically connected to a media play device. The processing circuit is electrically connected to the input circuit and the output circuit. The processing circuit determines if a verification procedure is passed. If the verification procedure is passed, the processing circuit transfers the media data to the media play device. If the verification procedure is not passed, the processing circuit limits a transmission of the media data, such that the media data will not be completely played by the media play device.

Abstract: Some embodiments address technical challenges arising from efforts to identify and mitigate security risks, in particular but not only, risks that sensitive data will be exfiltrated. Some embodiments provide or utilize an anomaly detector which is configured to detect a security anomaly in data based on at least a distribution of sensitive information type documents in a collection of documents and classifications of documents by trainable classifiers based on machine learning. Some embodiments provide or utilize a security policy generator which is configured to proactively and automatically generate security policy recommendations, rank at least two of the security policy recommendations, and present at least one top-ranked generated security policy recommendation in a user interface. Some embodiments generate a security policy in a managed computing system based on at least an anomaly score, and then configure the managed computing system according to the generated security policy.

Abstract: Aspects of the subject disclosure may include, for example, obtaining first network performance data characterizing a wireless network, wherein the wireless network provides one or more users of a plurality of users access to a collection of servers that enable a plurality of services; obtaining second network performance data characterizing a wired network, wherein the wired network provides the one or more users access to the collection of servers that enable the plurality of services; obtaining first service performance data characterizing a first service of the plurality of services that are enabled by the collection of servers; obtaining first service requirements of the first service; and responsive to a first user of the one or more users indicating a preference to utilize the first service, selecting one of the wireless network or the wired network as a selected network for the first user, wherein the selecting of the selected network is based upon the first network performance data, the second networ

Abstract: It is provided a method comprising: receiving one or more received data sets, wherein each of the received data sets comprises data each representing a value of a respective status parameter of a system, and at least one of the data sets comprises a respective value quality score representing a quality of the value of the respective status parameter: calculating, by a cognitive function, an optimal configuration range set and a confidence score of the optimal configuration range set based on the one or more received data sets; providing the calculated optimal configuration range set and the confidence score to a controller.

Abstract: Disclosed are various embodiments for managing a graph of decentralized identifiers (DIDs) associated with verifiable credentials (VCs) and verifiable credential linkages or relationships including those denoting linkages amongst verifiable credentials of different users. The DID tree graph can be maintained and managed to ensure that the DIDs and corresponding VCs are accurate and that the linkages or relationships between DIDs and corresponding VCs are still valid. The DID tree graph can be queried to identify DIDs associated with a DID subtree representing an established relationship or linkage between one or more VCs.

Abstract: A system for instantly empowering any social network, and /or application, and/or workflow with live collaboration tools, enterprise messaging and data collection without any code modification. The system is incorporated with cross domain network configuration and comprises a server including a processor and a memory having a plugin component or browser extension executed by the processor. The plugin or browser extension component comprises a registration module, a link generation module, and an instant communication module. The registration module enables a service provider to create an account by registering one or more credentials. The link generation module generates a first URL for each registered service provider. The first URL prompts visitor to install or download the browser extension or plugin, respectively. Upon a visitor clicking on a link the system activates a live video conferencing, chat and data collection and scheduling modules.

Abstract: Techniques for monitoring video conferencing quality-of-service in autonomous systems are disclosed. In an example method, a video conference provider establishes a video conference including a plurality of client devices, in which each client device is connected to an autonomous system of a plurality of autonomous systems. The video conference includes a first client device connected to a first autonomous system administered by a communication service provider (CSP). The video conference provider determines, from packets received from the first client device, video conference information. The video conference provider determines one or more metrics about performance of the video conference in the first autonomous system based on the video conference information and outputs the metrics in real-time.

Abstract: Systems and methods for cryptographic key storage management whereby the system receives a first request to access a first API and communicatively connects a channel to a key management service (KMS) that is on a serverless computing platform. After receiving a cryptographic key from the KMS, the system attaches the cryptographic key to the first API, thereby creating a first data structure. The system stores the first data structure to a writable storage location that has a predetermined maximum capacity for data structures. The system receives a second request to access the first API and retrieves and uses the stored first data structure to grant access to the first API. The system also determines when the writable storage location has reached the predetermined capacity and determines and evicts a least recently used data structure stored to the writable storage location.