Abstract: The subject matter of this specification can be embodied in, among other things, a computer-implemented method for securing email communications that includes receiving data including an email calculating a hash of the data, parsing the data into one or more atomic components, classifying the atomic component based on a collection of predetermined threat level categories, and providing an indication of a threat level category of the atomic component.

Abstract: A system for reducing overlay network overhead includes a memory, a processor in communication with the memory, a first container and a second container running on a first host, and a container scheduler executing on the processor. Each of the first container and second container expose a network service port(s). The container scheduler executes on the processor to assign a network complexity weight to the first host. The network complexity weight is based on a quantity of network service ports that the first container and the second container expose. The container scheduler also filters hosts based on resource availability corresponding to each host and ranks the hosts based on a respective network complexity weight corresponding to each host. Additionally, the container scheduler dispatches a third container to a second host based on the resource availability and network complexity weight corresponding to the second host.

Abstract: A first time that a Domain Name System (DNS) response message is sent by the gateway server of a network to a user device may be determined, the DNS response message being generated by a Local DNS server of the network in response to a DNS request message from the user device for routing via the gateway server to the user device. A second time that a client handshake message for an external server identified by a network address in the DNS response is received at the gateway server may be determined, in which the client handshake message is sent by the user device. A roundtrip time for the network that is a time difference between the first time and the second time is calculated. The roundtrip trip time is then halved to obtain a network latency time measurement for the network.

Abstract: A method of operating a communications network is disclosed. Modern communications networks produce vast amounts of network operational data which have the potential to provide a useful summary of the operational state of the network. Whilst processes such as clustering are known for arranging the vast amount of data into groups, the clusters themselves do not provide data which might be easily interpreted by network elements or administrators. Network operational data often comprises a plurality of data items, each of which gives a value for each of a set of attributes. By processing a cluster to identify attributes in the cluster whose values vary less in the cluster then they vary outside of the cluster, and then generating a cluster description which is based on a measure of the central tendency of the values of those attribute in the cluster, an easily interpretable general description of the data items in the cluster is provided.

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: A computer-implemented method for recommending a monitoring interval in provided. A non-limiting example of the computer-implemented method includes receiving, by a processor, monitoring data at an initial monitoring interval and calculating, by the processor, a set of aggregation data from the monitoring data including a first subset of aggregation data at a first interval of the initial monitoring interval. The method calculates, by the processor, a first density score for the first subset of aggregation data and a first indicator score for the first subset of aggregation data and provides, by the processor, the first interval as a recommended interval when the first density score does not exceed a density threshold and the first indicator threshold does not exceed an indicator threshold.

Abstract: A network protection system (NPS) is augmented to provide additional functionality—preferably within the SSL/TLS connection at the OSI presentation layer—to enable efficient management and handling of security-violating client connections. When the NPS determines to suspend a suspect application client connection, the NPS modifies the request (the TLS encrypted packet) at a random offset to include a random byte value. When the modified request is then received at the server, a TLS decryption error occurs. In response, the server drops the request gracefully and, in particular, a termination response is returned from the server to the NPS, which then passes the termination response back to the requesting client.

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: Techniques are described herein that are capable of performing an aggregation-based determination of resiliency of a cloud computing service to chaos events. Chaos events are executed against a cloud computing service during a time frame that includes multiple time periods. For each chaos event, service health indexes (SHIs) that correspond to the time periods are calculated. Each SHI indicates an extent to which indicators, which represent respective measurements of performance of the cloud computing service during the respective time period, satisfy respective criteria. The SHIs for each chaos event are analyzed to provide a respective resiliency score. At least some of the resiliency scores of the respective chaos events are aggregated to provide an aggregated resiliency score, which represents resiliency of the cloud computing service to the chaos events.

Abstract: A network diversity resolution system comprising: a diversity assessment tool, the diversity assessment tool including a path finding module and a sampling module that communicate with an input/output device; the path finding module communicates with an enterprise data warehouse; the path finding module configured to search through a network inventory stored in the enterprise data warehouse, the path finding module constructing a representation to identify at least two representative paths between a selected first end point and a second end point; wherein the at least two representative paths meets at least a capacity requirement between the first end point and the second end point; and wherein the sampling module generates at least one circuit reassignment plan based on the at least two representative paths, wherein the sampling module provides a score for each of the at least one circuit reassignment plan, wherein the score is based on at least one of a machine preference, path length, and number of changes

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: The method and system detects if proxies are used by a user from a web server's side. The method and system uses HTTP/2 and HTTP/3 protocols and, more precisely, the ping frames to test the round trip time of messages between a web server and a user. At the same time, a web server uses an Internet Control Message Protocol echo requests to measure the round trip time to an IP address. A web server can then compare, aggregate, and analyze different round trip times and determine if they are coming from different sources, i.e. if a user is using a proxy server. A web server can make decisions based on the comparison of round trip times. For example, a difference in a single user's round trip times may trigger a restrictive user policy at the web server's end and a web server can decide to return the requested content, return an error message, or ban them and similarly limit services.

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: A data processing apparatus includes a central processing unit that receives user operations for changing a portion of a document, and edits the document by a first user and a second user in parallel. The first user and the second user each have an editing right and, in response to the editing rights, an editing page is displayed differently depending on the user.

Abstract: According to one aspect, embodiments provide a system for optimizing control schemes executed by a plurality of intelligent agents controlling a plurality of client devices, the system comprising an observer configured to communicate with the plurality of intelligent agents, a database configured to store information received from the plurality of intelligent agents, and an external data source, the observer being further configured to poll the plurality of intelligent agents for operational information of at least one power device, collect information from the external data source and from the database, update the database based on the operational information and the information collected from the external data source and the database, and modify a first control scheme executed by a first intelligent agent of the plurality of intelligent agents to control a first client device.

Abstract: Systems methods and computer programs are disclosed that enable generating transaction messages. In one embodiment, the method comprises: generating a transaction message using a first computing device, the transaction message comprising: compensation information comprising instructions indicating a transaction to be executed in order to undo a previously executed transaction; and a transaction identification that identifies an executing program within the first computing device to execute the transaction; and sending the transaction message over an input/output device connected to the first computing device for processing on a second computing device.

Abstract: An announcement protocol may allow disparate, and previously incompatible, content delivery network caches to exchange information and cache content for one another. Announcement data may be stored by the respective caches, and used to determine whether a cache is able to service an incoming request. URL prefixes may be included in the announcements to identify the content, and longest-match lookups may be used to help determine a secondary option when a first cache determines that it lacks a requested content.

Abstract: Idempotent processing of data may be implemented for data records retrieved from a data stream. A data stream may receive data records as input and distribute the ingestion, storage, and processing of the data records amongst one or more partitions of the data stream. Partition metadata may be maintained which includes checkpoint metadata for retrieving, processing, and sending data records in the data stream to a specified destination. When assigned a partition for processing, checkpoint metadata for partition may be accessed to determine whether a pending checkpoint for the partition exists. If not pending checkpoint exists, new data records may be retrieved, processed, and sent from the partition of the data stream to a specified destination. If a checkpoint is pending, then the data records identified by the checkpoint metadata as pending may be retrieved, processed, and sent to the specified destination.

Abstract: Systems and methods for implementing heterogeneous feature integration for device behavior analysis (HFIDBA) are provided. The method includes representing each of multiple devices as a sequence of vectors for communications and as a separate vector for a device profile. The method also includes extracting static features, temporal features, and deep embedded features from the sequence of vectors to represent behavior of each device. The method further includes determining, by a processor device, a status of a device based on vector representations of each of the multiple devices.