Abstract: Techniques discussed herein include providing a cloud computing environment in which applications are deployed using virtual-machine-based virtualization with a static pool of computing nodes (e.g., substrate nodes, overlay nodes) and container-based virtualization with a dynamic pool of computing nodes (e.g., nodes managed by a container orchestration platform). The control plane functionality may be invoked by a deployment orchestrator (e.g., using a client of the container orchestration platform). In some embodiments, the control plane may include a set of applications that are configured to communicate with core services for certificate generation and rotation, namespace and quota management, metric monitoring and alarming, node authentication, and cluster membership management.

Abstract: Techniques discussed herein include providing a cloud computing environment in which applications are deployed by a deployment orchestrator using virtual-machine-based virtualization with a static pool of computing nodes (e.g., substrate nodes, overlay nodes) and container-based virtualization with a dynamic pool of computing nodes (e.g., nodes managed by a container orchestration platform). Components of a data plane may be used to deploy containers to micro-virtual machines. A container runtime interface (CRI) may receive a deployment request from the deployment orchestrator. A container networking interface of the data plane may configure network connections and allocate an IP address for the container. A container runtime of the data pane may generate and configure the container with the IP address and run the container within a micro-virtual machine that is compatible with the container orchestration platform.

Abstract: A chassis assembly having mixed material for reduced mass is provided. The assembly comprises an upper structure comprised of metal. The upper structure has a plurality of first bond surfaces, each of which is parallel with each other at varying elevations relative to a z-axis of a 3-dimensional coordinate thereof. The assembly further comprises a lower structure made of a polymer composite. The lower structure has a plurality of second bond surfaces, each of which is parallel with each other at varying elevations relative to the z-axis thereof. The second bond surfaces are arranged to align with the first bond surfaces in complementing relation such that the lower structure is joined with the upper structure at the first and second bond surfaces. The assembly further comprises an adhesive disposed between the first and second bond surfaces to join the lower and upper structures at the first and second bond surfaces, defining a bond gap between the first and second bond surfaces.

Abstract: The present disclosure generally relates to a system and method for providing audio and image data. The system and method may receive blurbs from users that include audio and image data. The exemplary disclosed system and method may prioritize or push a given blurb based on consumption by other users. The exemplary disclosed system and method may further prioritize or push a given blurb based on an aggregate metric based on consumption and engagement by other users.

Abstract: A chassis assembly having mixed material for reduced mass is provided. The assembly comprises an upper structure comprised of metal. The upper structure has a plurality of first bond surfaces, each of which is parallel with each other at varying elevations relative to a z-axis of a 3-dimensional coordinate thereof. The assembly further comprises a lower structure made of a polymer composite. The lower structure has a plurality of second bond surfaces, each of which is parallel with each other at varying elevations relative to the z-axis thereof. The second bond surfaces are arranged to align with the first bond surfaces in complementing relation such that the lower structure is joined with the upper structure at the first and second bond surfaces. The assembly further comprises an adhesive disposed between the first and second bond surfaces to join the lower and upper structures at the first and second bond surfaces, defining a bond gap between the first and second bond surfaces.

Abstract: Particular embodiments described herein provide for an electronic device that includes a binder kernel driver. The binder kernel driver can be configured to receive an application program interface (API) call, extract metadata from the API call, determine that the API call should be hooked based on the extracted metadata, and hook the API call.

Abstract: A computer implemented method for preventing return-oriented programming (ROP) attacks includes registering one or more critical regions, wherein a critical region corresponds to an address that has been selected to be monitored for potential ROP attacks, identifying one or more critical functions, wherein a critical function corresponds to a function that has been selected to be analyzed as a potential ROP threat, instrumenting the one or more critical regions with ROP protection mechanisms, detecting a critical function execution attempt on one or more of the identified critical regions, determining whether values associated with the critical function match corresponding expected values, and, responsive to determining that values associated with the critical function do not match expected values, activating a return-oriented programming protection mechanism.

Abstract: A computer implemented method for preventing return-oriented programming (ROP) attacks includes registering one or more critical regions, wherein a critical region corresponds to an address that has been selected to be monitored for potential ROP attacks, identifying one or more critical functions, wherein a critical function corresponds to a function that has been selected to be analyzed as a potential ROP threat, instrumenting the one or more critical regions with ROP protection mechanisms, detecting a critical function execution attempt on one or more of the identified critical regions, determining whether values associated with the critical function match corresponding expected values, and, responsive to determining that values associated with the critical function do not match expected values, activating a return-oriented programming protection mechanism.

Abstract: Managed devices containing a Trusted Platform Module (TPM) to provide a trusted environment generate a device certificate at initialization of the TPM and send the device certificate to a management console for storing in a certificate database. Upon detecting a file of interest, the TPM signs the file, adding to a signature list created by previous managed devices. The signature list can be used to analyze the spread of the file across the system of managed devices, including tracking the file to the first managed device to have had a copy, without requiring real-time access to the managed devices during the spread of the file. In some embodiments, additional security measures may be taken responsive to determining the first managed device and the path the file has taken across the system of managed devices.

Abstract: Particular embodiments described herein provide for an electronic device that includes a binder kernel driver. The binder kernel driver can be configured to receive an application program interface (API) call, extract metadata from the API call, determine that the API call should be hooked based on the extracted metadata, and hook the API call.

Abstract: Particular embodiments described herein provide for an electronic device that includes a binder kernel driver. The binder kernel driver can be configured to receive an application program interface (API) call, extract metadata from the API call, determine that the API call should be hooked based on the extracted metadata, and hook the API call.

Abstract: A computer implemented method for preventing return-oriented programming (ROP) attacks includes registering one or more critical regions, wherein a critical region corresponds to an address that has been selected to be monitored for potential ROP attacks, identifying one or more critical functions, wherein a critical function corresponds to a function that has been selected to be analyzed as a potential ROP threat, instrumenting the one or more critical regions with ROP protection mechanisms, detecting a critical function execution attempt on one or more of the identified critical regions, determining whether values associated with the critical function match corresponding expected values, and, responsive to determining that values associated with the critical function do not match expected values, activating a return-oriented programming protection mechanism.

Abstract: A computer implemented method for preventing return-oriented programming (ROP) attacks includes registering one or more critical regions, wherein a critical region corresponds to an address that has been selected to be monitored for potential ROP attacks, identifying one or more critical functions, wherein a critical function corresponds to a function that has been selected to be analyzed as a potential ROP threat, instrumenting the one or more critical regions with ROP protection mechanisms, detecting a critical function execution attempt on one or more of the identified critical regions, determining whether values associated with the critical function match corresponding expected values, and, responsive to determining that values associated with the critical function do not match expected values, activating a return-oriented programming protection mechanism.

Abstract: System calls to a kernel of a mobile computing device are monitored. A particular system call is intercepted relating to input/output (I/O) functionality of the mobile computing device. A data loss prevention (DLP) policy is identified that is applicable to the particular system call. An action is performed on the particular system call based at least in part on the DLP policy.

Abstract: In an example, there is disclosed a security architecture for enhanced, non-invasive whitelisting of executable objects. When an executable object tries to perform an action, a security engine seamlessly intercepts the action and determines whether the action is whitelisted, blacklisted, or graylisted, assigning the action a corresponding security score. Whitelisted actions may be allowed, blacklisted actions may be disallowed, and graylisted actions may require additional verification from a user. Because the score is assigned to the combination of the executable object and the action, false positives may be avoided, such as those that may occur when an executable object is prefetched but has not yet tried to perform any useful work.

Abstract: System calls to a kernel of a mobile computing device are monitored. A particular system call is intercepted relating to input/output (I/O) functionality of the mobile computing device. A data loss prevention (DLP) policy is identified that is applicable to the particular system call. An action is performed on the particular system call based at least in part on the DLP policy.

Abstract: System calls to a kernel of a mobile computing device are monitored. A particular system call is intercepted relating to input/output (I/O) functionality of the mobile computing device. A data loss prevention (DLP) policy is identified that is applicable to the particular system call. An action is performed on the particular system call based at least in part on the DLP policy.

Abstract: Systems, methods, and computer media for dynamically updating online advertisements and providing updated online advertisements are provided. An object-oriented online advertisement is provided that has properties inherited from an advertisement class. The inherited properties include metadata fields and corresponding metadata values. The metadata fields and values determine the content, appearance, behavior, and other characteristics of the online advertisement when it is published on a web page. Changes to or addition or deletion of metadata fields and values in an advertisement class or subclass are communicated to the online advertisements, and the metadata of the advertisements are updated to reflect the changes.

Abstract: Technologies for prevention of forgery of a network communication request to a server include a system for security of a network communication request. The system includes a communication module configured to receive the network communication request from a client. The network communication request may have a content parameter. The communication module may be configured to generate a string of content parameters comprising the content parameters and a hash of the content parameter, and communicate portions of a result of the network communication request to the client incorporating the encrypted string of content parameters. Furthermore, the communication module may receive a subsequent request from the client. The subsequent request may be associated with the network communication request. As a result of authenticating the subsequent request, the communication module may complete the network communication request.

Abstract: Systems, computer-implemented methods and computer-storage media are provided for presenting customizable advertisements to a user. Advertising is customized through the use of user-specific or user-relevant data. Items such as keywords, profile data, and application data are received and are then used to retrieve customizations. These customizations are stored by a server or group of servers that the vendor makes available to the advertising provider. Items that could further identify adaptations desirable for advertising, such as a user profile, may be sent to the vendor's server as well. The adaptations take forms that include pictures, text, graphics, links, audio, and video files. Systems that comprise an advertising server, a vendor server, and a client application used for completing the above method, as well as computer-readable media necessary at each device to accomplish the customizations, are also described.