Abstract: Methods, systems, and computer-readable storage media for post-hoc analysis of access control decisions, where actions include receiving a request to analyze an access control request, for which an access control decision has been provided based on a policy, retrieving information associated with the access control request from a log, the information including a first security state version and a time, determining a time interval based on the time and an audit policy, retrieving information associated with at least a second security state version based on the time interval, and evaluating the access control request based on information of the first security state and information of the second security state to provide a post-hoc access control decision.

Abstract: An apparatus and method for centralized policy management of large-scale networks (221) of computational devices is disclosed. The apparatus includes a number of distributed clients (400) run on registered computers (201-203), gathering policy advisories (401) and reporting (405) relevance (403) to a system administrator (224). The system administrator may view the relevant messages (505) through a management interface (500) and deploy suggested actions to distributed clients (503), where the actions are executed to apply the solutions of the advisories (408).

Abstract: Systems and methods for providing device and/or device type fingerprinting based on properties of network traffic originating from a device to be identified. In one implementation, the method includes capturing packets routed through a network at an intermediate node between the originating device to be identified and destination, measuring properties of the captured traffic, including packet inter-arrival time, and generating a signature based on the measured properties that includes identifying information about the hardware and/or software architecture of the device. Various implementations do not require deep packet inspection, do not require a managed device-side client, are protocol and packet payload agnostic, and effective for MAC or IP-level encrypted streams. Also, various implementations can provide wired-side detection of wireless devices and device types and can detect both previously detected and unknown devices.

Abstract: Systems and methods consistent with the present invention provide an interface to facilitate the communication between systems. A source system translates data into an XML format and transmits the data to a synchronizer interface tool. The synchronizer tool stores the data in a persistent intermediate storage, such as a queue, allowing the source system to go offline or perform other tasks while the data is transmitted to the target system. The synchronizer tool initiates the transmission of the data to the target system. If the target system indicates that it received the data, then the synchronizer tool sends an acknowledgement to the source system indicating the data was received. If the target system does not receive the transmission, the synchronizer tool maintains the data in the persistent intermediate storage and reinitiates transmission of the data to the target system.

Abstract: A method of controlling wireless communications is provided. A call is received from a first mobile device at a base transceiver station (BTS) interface of a first distributed mobile architecture (DMA) server. The call is associated with a destination device. The first DMA server determines that a first distributed mobile architecture gateway (DMAG) supports communication with the destination device based on registration data stored at the first DMA server. Voice information associated with the call is converted to packet data. The packet data is routed to the destination device via the first DMAG.

Abstract: A system and method are disclosed for classifying a message. The method includes receiving the message, identifying in the message a distinguishing property; generating a signature using the distinguishing property; and comparing the signature to a database of signatures generated by previously classified messages.

Abstract: The disclosure includes a system and method for providing recommended content to a user. The system includes a processor and a memory storing instructions that when executed cause the system to: receive data describing one or more engagement actions performed by a user; generate an engagement profile associated with the user; receive data describing one or more images associated with the user, the one or more images including temporal data describing one or more timestamps and location data describing one or more locations; generate a location profile based on the one or more locations and the one or more timestamps; receive data describing one or more content items; determine one or more interest scores for the one or more content items; determine one or more recommended items based on the one or more interest scores; and provide the one or more recommended items to the user.

Abstract: A virtual application may be configured with several extension points within a host operating system. The virtual application may be configured with a private namespace in which various components, such as registry settings, dynamic linked libraries, and other components may reside. During configuration, links may be placed in the host operating system that may point to objects in the virtual application's private namespace so that the operating system and other applications may launch, control, or otherwise interact with the virtual application. The links may be located in a file system, registry, or other locations and may be available to other applications, including other virtual applications. A configuration routine may place the links into the host operating system at the time the application may be configured.

Abstract: A mobile station can be authenticated by, for example, sending a challenge to a mobile station, and receiving a first authentication response from the mobile station through a wireless link, the first authentication response being generated based on the challenge and an authentication key stored at the mobile station. A second authentication response is generated based on the first authentication response. The second authentication response is provided to an IMS network for authenticating the mobile station to enable the mobile station to access the IMS network. In some examples, an authentication response of the mobile station is carried in an SIP message sent from the femtocell to a server that can authenticate the mobile station or forward the authentication response to another server that can authenticate the mobile station. Authentication of the mobile station can be performed as an integrated part of or separate from a registration process.

Abstract: A network caching system has a multi-protocol caching filer coupled to an origin server to provide storage virtualization of data served by the filer in response to data access requests issued by multi-protocol clients over a computer network. The multi-protocol caching filer includes a file system configured to manage a sparse volume that “virtualizes” a storage space of the data to thereby provide a cache function that enables access to data by the multi-protocol clients. To that end, the caching filer further includes a multi-protocol engine configured to translate the multi-protocol client data access requests into generic file system primitive operations executable by both the caching filer and the origin server.

Abstract: Certain aluminum salts of organic phosphorus acids are found to have a strong effect on inhibiting the epoxy cure rate in epoxy formulations. The substances act catalytically and can be used at a low level in an epoxy formulation to adjust the reactivity of a resin formulation to give longer gel times. Compositions and methods of preparing and using the compositions are disclosed.

Abstract: Techniques for restricting the execution of algorithms contained in applications executing on virtual machines executing within a computer system are described herein. A first sampled set of computer executable instructions is gathered from a virtual machine by a controlling domain and compared against a reference set of computer executable instructions. If the first set is similar to the reference set, and if the execution of the algorithm corresponding to the reference set is restricted by one or more computer system polices, one or more operations limiting the execution of the restricted algorithm are performed, thus ensuring conformance with the computer system policies.

Abstract: An object of the present invention is to provide a curable resin composition capable of giving a cured product which is excellent in mechanical properties (such as elastic modulus) and toughness. The curable resin composition contains 60 to 99 parts by mass of an unsaturated ester resin, 0.5 to 20 parts by mass of an epoxy resin, and 0.1 to 20 parts by mass of crosslinked rubber particles having a number average particle diameter of 20 nm to 600 nm. The crosslinked rubber particles are obtained by polymerizing a vinyl monomer in the presence of one or more rubber polymers selected from the group consisting of a butadiene rubber, a butadiene-styrene rubber, a butadiene-butyl acrylate rubber, a butyl acrylate rubber and an organosiloxane rubber.

Abstract: It is presented a method for transferring receiving of streaming content from a first media receiver to a second media receiver, the method comprising the steps, executed in a streaming transfer server, of: receiving a presence message indicating the presence of the second media receiver; receiving an in use message indicating that the first media receiver is in active use by the user; transmitting a present media receiver message to the first media receiver, the present media receiver message comprising an identifier of the second media receiver; receiving a transfer message indicating that the receiving of the streaming content should be transferred from the first media receiver to the second media receiver; obtaining an identifier of the streaming content; and transmitting an initiate content message to the second media receiver, wherein the initiate content message comprises the identifier of the streaming content.

Abstract: A computer implemented method includes monitoring activity on the virtual machine. A plurality of activities being performed at the virtual machine is identified. Each of the activities includes an activity source, an activity target, and an association between the activity source and the activity target. The activity sources, activity targets, and associations are stored in the memory. A fingerprint indicative of the activity on the virtual machine is created from the stored activities. The fingerprint is transmitted to prevent future attacks that comprise the same or similar activities as indicated by the fingerprint.

Abstract: A mechanism is provided in a data processing system for providing portable composite solutions. The mechanism deploys a set of virtual images for a plurality of components of a composite solution to a build environment to form a set of virtual machines. The mechanism deploys a network virtual image to the build environment to form a network virtual machine. The network virtual machine comprises a router. The mechanism configures the router to create a private subnet with a set of fixed addresses and set of host names for the composite solution. Optionally, the mechanism may discover the fixed addresses during the build phase. The mechanism optionally installs middleware components to the set of virtual machines for the composite solution to form a set of solution virtual machines. The mechanism captures the set of solution virtual machines as a set of solution virtual images as a portable composite solution.

Abstract: The present invention relates to an etheramine mixture containing a monoether diamine and its method of production by alkoxylating an initiator with an alkylene oxide to produce a precursor polyol and reductively aminating the precursor polyol to form the etheramine mixture. The etheramine mixture may be used in variety of applications including as a curing agent for an epoxy resin or as a reactant in the production of polyurea.

Abstract: A social device including capabilities for participating in a social network group via a social infrastructure. Various functions and resources of the social device are accessible by members of the social network group. Likewise, the social device may be configured to access services and other resources of the social network group. The social device may participate in the social network group through an autonomous, automated or member-triggered process. In one embodiment, the social device functions as a social gateway to communicatively couple a child node and a social network group. The social gateway may comprise a set top box or mobile communication device, and the child node may be a human user that interacts with the social gateway through a user interface. In a further embodiment, the social gateway may concurrently operate as a child device that communicates with a social network group through another social device.

Abstract: Example embodiments of a system and method for providing a congestion measurement in a network are disclosed. In an example embodiment information is received at an information transfer rate, from a source network device. A sample of the information may be taken before the information is transmitted to a destination network device. In an example embodiment, a congestion measurement value is computed that corresponds to the sample and represented with at least two bits. A multi-bit indicator of the congestion measurement value is then transmitted to control the information transfer rate of information arriving in the future.

Abstract: A phosphorus-atom-containing oligomer is used as a curing agent for epoxy resin, the phosphorus-atom-containing oligomer being a mixture of a phosphorus-atom-containing compound represented by structural formula (1) below with n representing 0 and a phosphorus-atom-containing oligomer represented by structural formula (1) below with n representing 1 or more: (where R1 to R5 each independently represent a hydrogen atom, an alkyl group having 1 to 4 carbon atoms, or the like; X represents a hydrogen atom or a structural unit represented by structural formula (x1) below: where, in structural formula (x1), R2 to R5 each independently represent a hydrogen atom, an alkyl group having 1 to 4 carbon atoms, or the like), wherein a content of the phosphorus-atom-containing oligomer represented by general structural formula (1) with n representing 1 or more is in the range of 5 to 90% on a peak area bases in GPC measurement.