Abstract: Impairments can be applied to nodes of a distributed computing environment using a software operator. For example, a system can receive, by a controller of a distributed computing environment executing a network-impairment operator, a custom resource defining a reduced-performance configuration for a worker node of the distributed computing environment. The system can deploy the reduced-performance configuration to the worker node for a predetermined period of time. Subsequent to the predetermined period of time passing, the system can remove the reduced-performance configuration from the worker node.

Abstract: Some embodiments of the invention provide a method of deploying tenant deployable elements on resource elements in public cloud datacenters. The method receives a request to deploy a particular tenant deployable element in one of a first public cloud datacenter (PCD) and a second PCD, the first public cloud datacenter belonging to a first cloud service provider (CSP) and the second public cloud datacenter belonging to a second CSP. For each candidate resource element in the first PCD, the method identifies a first set of performance metrics associated with the candidate resource element. For each candidate resource element in the second PCD, the method identifies a second set of performance metrics associated with the candidate resource element. The method evaluates the identified first and second sets of metrics to select a resource element to implement the particular tenant deployable element in one of the first and second PCDs.

Abstract: A quality estimation apparatus includes an acquisition unit for acquiring a set of web page loading latencies, and a calculation unit for calculating a probability that a quality of experience value is a predetermined value or more for each latency in the set, as a probability that the quality of experience value is the predetermined value or more for the set, and enables estimation of the user experience quality for the set of web page loading latencies.

Abstract: To dynamically determine and apply WAF protections for an application deployed to the cloud, exposed entities, are identified. The identified entities are further evaluated to determine whether the application is eligible for WAF protection based on whether the application uses a protocol that is compatible with WAF protection. If the application is eligible for WAF protection, after instantiating a WAF, WAF protections that should be enabled or disabled are determined based on characteristics of the application that are identified at runtime. The WAF can then be configured based on the identified protections such that those which are pertinent to the application will be enabled, while those which are not applicable to the application and thus will not be used are disabled. As a result, security provided by the WAF for a cloud application is tailored to the application based on information about the application gathered in the cloud deployment environment.

Abstract: Data characterizing a list of resources including a first resource within a first remote computing environment and a second resource within a second remote computing environment is received from a database separate from a plurality of remote computing systems. Metadata characterizing a first tag to be applied to the first resource and a second tag to be applied to the second resource is received. A data model of the resources is generated. The data model associates the first resource with the first tag and the second resource with the second tag. The data model is stored within a second database. Related apparatus, systems, techniques and articles are also described.

Abstract: A computing device may include a memory and a processor configured to cooperate with the memory to run a browser configured to perform a sequence to obtain an asset and display a user interface for launching a virtual session using the asset. The processor may further run code configured to determine a failure of the browser to complete the sequence, and cause the browser to display the user interface for launching the virtual session using a previously cached version of the asset responsive to the failure of the browser to complete the sequence.

Abstract: A content management system for collecting files from one or more authenticated submitters in a collection folder. A collector, who generates the collection folder, can invite one or more submitters to submit one or more files to the collection folder. The one or more submitters have limited rights to the collection folder. The limited rights can include uploading rights and prohibiting a submitter from viewing files that other submitters associated with the collection folder submitted. Thus, the collection folder is able to store files from the one or more submitters, but prevent them from viewing other's submissions.

Abstract: An Internet browsing monitoring system has a web server providing a web page in which some of the elements associated with the browsing monitoring are encoded in the web page by a CSS code, the web page includes a mechanism detecting interactions to be logged, and, when a type of interaction to be logged is detected, sends the CSS code associated with the considered element with at least one indicator of the detected interaction to an interaction logging server. The interaction logging server has an input memory receiving the CSS codes associated with a considered element and the at least one indicator of the detected interaction and an extractor analyzing each CSS code associated with a considered element and the at least one indicator of the detected interaction, split them into chunks, encode at least some of the chunks in the form of a number, and store the resulting sequence of numbers encoding the chunks in a database.

Abstract: Systems, methods, apparatus, and software for pre-fetching and/or pre-loading sub-resources used in rendering HTML files, web pages and the like are provided herein. Implementations include expedited sub-resource loading in which a cache node or other content delivery network component receives a first end user device request seeking a primary resource (e.g., an HTML file). Using information in the first request, the content delivery network pre-fetches one or more identified sub-resources (e.g., JavaScript code) required for rendering of the HTML file. Pre-fetched sub-resources are held by the cache node. During parsing of the HTML file by the end user device, a web browser or other application requires the sub-resource(s) and the end user device thus sends a second request to the cache node asking for the required sub-resource(s). The cache node sends the requested, pre-fetched sub-resource(s).

Abstract: The present disclosure provides systems and methods for user interaction and task completion using multiple devices. A set of devices may be used to perform a task, such that different devices may perform different steps of the task. A device management service may update state information at each device of the set, thereby enabling a user to interact with any of the computing devices to perform the task. A device management service may also automatically determine which device should be used by the user, based on task or step requirements, device characteristics, and device capabilities, among other examples. Thus, rather than being required to continue a task on the same device (even when the device is not well-suited for the current step or task), the user is provided with the option to use and, in some instances, is automatically transitioned to use, different devices within the set.

Abstract: Methods, systems, and computer readable media for controlling delivery of content are provided. In some embodiments, a system for controlling delivery of content is provided. The system includes processing circuitry configured to: transmit, to a server, a plurality of requests for blocks of the content; while at least some of the plurality of requests are still outstanding: detect a change of a service characteristic of a connection between the system and the server; determine a preferred number of outstanding requests; and cancel at least some of the requests from the plurality that are still outstanding based on the preferred number and a count of the requests from the plurality that are still outstanding.

Abstract: Methods and systems for scanning a network. The disclosed methods may involve receiving a list of a plurality of target devices and scanning a first device to determine if a particular port and protocol combination appears to be open on the first device. Upon determining that a particular port and protocol combination appears to be open on the first device, the method involves interrogating the first device before or during scanning of a second device to gather data regarding a service running on the first device.

Abstract: Methods, systems, devices, and tangible non-transitory computer readable media for checking computing device inactivity are provided. The disclosed technology can access, based on a device policy, organizational data associated with activity of a user's computing device. Based on the device policy and the organizational data, a valid inactivity time period including continuous organization approved time periods of valid inactivity beginning at a most recent time the computing device was active and ending a predetermined amount of time after the most recent time can be determined. Based on the device policy and the organizational data, a determination of whether inactivity criteria associated with inactivity of the computing device are satisfied is made. Satisfying the inactivity criteria can include the computing device being inactive after the valid inactivity time period. Furthermore, indications associated with the computing device's inactivity can be generated if the inactivity criteria are satisfied.

Abstract: A data-driven approach to network performance diagnosis and root-cause analysis is presented. By collecting and aggregating data attribute values across multiple components of a content delivery system and comparing against baselines for points of inspection, network performance diagnosis and root-cause analysis may be prioritized based on impact on content delivery. Recommended courses of action may be determined and provided based on the tracked network performance analysis at diagnosis points.

Abstract: A method, system, and computer readable medium for managing applications on an application execution system are disclosed. On an application server the number of instances of a first application type that are in a busy state is determined. This determination is performed at each respective time interval in a plurality of time intervals. Then, a first running average for the busy state of the first application type is computed based upon the number of instances of the first application type that are in a busy state, at the application server, at each respective time interval. A removal request is sent when the first running average for the busy state meets a first removal criterion. The removal request is a request to remove the application server from a data structure that specifies which of a plurality of application servers accept service requests for the first application type.

Abstract: Web server security is assessed. Some embodiments analyze data exchanged with a web server to determine a risk associated with accessing the web server. For example, one or more of a type of web application accessed via the web server, a type of interpreted language used to implement the web server, and/or a type and/or version of an http server operable on the web server are examined. Based on the analysis, the risk associated with accessing the web server is determined. Some embodiments then block access to the web server based on the analysis. Alternatively, in some embodiments, a user may be alerted to the risk, and then allowed to proceed upon accepting the risks. Some embodiments share the determined risk assessment with other client devices via a web server risk data store.

Abstract: A method, apparatus and computer program product for controlling a web-based presentation is described. In an embodiment of the invention, the already presented content and future content of the presentation is analyzed. When a user question is received from a user terminal communicatively coupled to the web-based presentation, the user question is buffered so that the system can determine whether content answering the user question has been or will be presented in the presentation based on the analyzed content. Responsive to the determination, the system will perform an action.

Abstract: Systems, devices and methods for adaptive compression of stored information includes a memory management computing device programmed to monitor a size of a plurality of data structures stored in a data repository. The computing device compares the size of each of a plurality of data structures to a predetermined threshold. When a size of an uncompressed data structure meets the threshold, the memory management computing device calculates a value of a first compression parameter based on a value of a first parameter and a value of a second parameter of each data element of the uncompressed data structure, calculates a value of a second compression parameter based the value of the first parameter of each data element of the uncompressed data structure, generates a compressed data structure based on the value of the first compression parameter and the second compression parameter; and replaces, in the data repository, the uncompressed data structure with the compressed data structure.

Abstract: The described technology relates to integrating events electronically scheduled in enterprise web applications and other event applications. A capability is provided for events created by an enterprise web application and events from other external event streams to be presented in a consolidated calendar in the enterprise web application. Capabilities are also provided for sharing the calendar among enterprise users and non-enterprise users, and for efficiently generating the shared calendar.

Abstract: A messaging system includes a first messaging app on a first device and a second messaging app, on a second device, that can exchange messages (e.g. text messages, etc.), and the second messaging on can transmit content from a second extension app that operates with the second messaging app to the first messaging app that operates with a first extension app. The content can be opaque to the messaging app, but can be processed by the extension apps to display live, dynamic content in message bubbles in a message transcript of a conversation.