Abstract: System calls to a kernel of a mobile computing device are monitored. A particular system call is intercepted relating to input/output (I/O) functionality of the mobile computing device. A data loss prevention (DLP) policy is identified that is applicable to the particular system call. An action is performed on the particular system call based at least in part on the DLP policy.

Abstract: Systems, methods, and computer media for dynamically updating online advertisements and providing updated online advertisements are provided. An object-oriented online advertisement is provided that has properties inherited from an advertisement class. The inherited properties include metadata fields and corresponding metadata values. The metadata fields and values determine the content, appearance, behavior, and other characteristics of the online advertisement when it is published on a web page. Changes to or addition or deletion of metadata fields and values in an advertisement class or subclass are communicated to the online advertisements, and the metadata of the advertisements are updated to reflect the changes.

Abstract: Technologies for prevention of forgery of a network communication request to a server include a system for security of a network communication request. The system includes a communication module configured to receive the network communication request from a client. The network communication request may have a content parameter. The communication module may be configured to generate a string of content parameters comprising the content parameters and a hash of the content parameter, and communicate portions of a result of the network communication request to the client incorporating the encrypted string of content parameters. Furthermore, the communication module may receive a subsequent request from the client. The subsequent request may be associated with the network communication request. As a result of authenticating the subsequent request, the communication module may complete the network communication request.

Abstract: Systems, computer-implemented methods and computer-storage media are provided for presenting customizable advertisements to a user. Advertising is customized through the use of user-specific or user-relevant data. Items such as keywords, profile data, and application data are received and are then used to retrieve customizations. These customizations are stored by a server or group of servers that the vendor makes available to the advertising provider. Items that could further identify adaptations desirable for advertising, such as a user profile, may be sent to the vendor's server as well. The adaptations take forms that include pictures, text, graphics, links, audio, and video files. Systems that comprise an advertising server, a vendor server, and a client application used for completing the above method, as well as computer-readable media necessary at each device to accomplish the customizations, are also described.

Abstract: System calls to a kernel of a mobile computing device are monitored. A particular system call is intercepted relating to input/output (I/O) functionality of the mobile computing device. A data loss prevention (DLP) policy is identified that is applicable to the particular system call. An action is performed on the particular system call based at least in part on the DLP policy.

Abstract: Particular embodiments described herein provide for an electronic device that includes a binder kernel driver. The binder kernel driver can be configured to receive an application program interface (API) call, extract metadata from the API call, determine that the API call should be hooked based on the extracted metadata, and hook the API call.

Abstract: Managed devices containing a Trusted Platform Module (TPM) to provide a trusted environment generate a device certificate at initialization of the TPM and send the device certificate to a management console for storing in a certificate database. Upon detecting a file of interest, the TPM signs the file, adding to a signature list created by previous managed devices. The signature list can be used to analyze the spread of the file across the system of managed devices, including tracking the file to the first managed device to have had a copy, without requiring real-time access to the managed devices during the spread of the file. In some embodiments, additional security measures may be taken responsive to determining the first managed device and the path the file has taken across the system of managed devices.

Abstract: An electronic data sharing device configured to exchange a first tag with a corresponding tag from a further electronic data sharing device, wherein the first and second tags provide information that enables respective users of the electronic data sharing devices to share information via a server enabled internet-connected software system associated with the electronic data sharing devices, wherein the electronic data sharing device is either configured with a pre-shared key or is able to encrypt a session key, wherein the pre-shared key or session key are used to generate tags to ensure that: the electronic data sharing device and tags can only be made use of by the server.

Abstract: Various technologies, methods, systems, processes, and compositions of matter pertaining to advertisements, and advertisement interactions with users and applications may be described. A single advertisement may be selected for a user based on a single lookup of the user profile at an advertisement server. The advertisement server may send a single adget to the user. This single adget is then seamlessly used on multiple devices. Each device may automatically select a different View of the advertisement. Each device may automatically render a different Actions as supported by a device.

Abstract: An electronic data sharing device facilitates sharing of user related information with other users without requiring users to enter that information into their device. The device can detect another user's initiation of a data exchange request and generate a transactionally unique tag to exchange with the other user's device. The exchanged tags, when transferred to a server, enable users to access user related information held on the server.

Abstract: Techniques for dynamic instrumentation are provided. A method for instrumentation preparation may include obtaining address data of an original instruction in an original instruction stream, obtaining kernel mode data comprising a kernel breakpoint handler, obtaining user mode data comprising a user breakpoint handler, allocating a page of a process address space, creating a trampoline, associating the trampoline with a breakpoint instruction, and replacing the original instruction with the breakpoint instruction. A method for instrumentation may include detecting the breakpoint instruction, calling the kernel breakpoint handler, modifying an instruction pointer via the kernel breakpoint handler such that the instruction pointer points to the trampoline, and executing the trampoline. The system for instrumentation may include a breakpoint setup module and a breakpoint execution module for respectively setting up and completing instrumentation involving the trampoline.

Abstract: An electronic data sharing device for sharing user related information with users of other functionally similar electronic data sharing devices, the electronic data sharing device configured to: generate a temporary, non-unique, identification tag to identify the electronic data sharing device, transmit from the electronic data sharing device the generated identification tag via a wireless medium, receive at the electronic data sharing device a further identification tag generated by a further electronic data sharing device, and generate an alert on the electronic data sharing device when the transmission and reception of the identification tags coincide to indicate that the further electronic data sharing device is in the vicinity.

Abstract: System calls to a kernel of a mobile computing device are monitored. A particular system call is intercepted relating to input/output (I/O) functionality of the mobile computing device. A data loss prevention (DLP) policy is identified that is applicable to the particular system call. An action is performed on the particular system call based at least in part on the DLP policy.

Abstract: In an example, there is disclosed a security architecture for enhanced, non-invasive whitelisting of executable objects. When an executable object tries to perform an action, a security engine seamlessly intercepts the action and determines whether the action is whitelisted, blacklisted, or graylisted, assigning the action a corresponding security score. Whitelisted actions may be allowed, blacklisted actions may be disallowed, and graylisted actions may require additional verification from a user. Because the score is assigned to the combination of the executable object and the action, false positives may be avoided, such as those that may occur when an executable object is prefetched but has not yet tried to perform any useful work.

Abstract: A system and method satisfies temperature and pressure requirements of solid oxide fuel cell system in a manner that increases the overall efficiency and decreases the overall weight of system. The system and method include a secondary blower for boosting air stream pressure level sufficient for operation of a reformer that is designed to minimize pressure drop; an integrated heat exchanger for recovering heat from exhaust and comprising multiple flow fields for ensuring inlet temperature requirements of a solid oxide fuel cell are met; and a thermal enclosure for separating hot zone components from cool zone components for increasing thermal efficiency of the system and better thermal management.

Abstract: System(s), method(s), and/or techniques (“tools”) are described that enable electronic document functionality for a limited-capability computing device. The tools may enable a computing device with limited display capabilities to present and enable navigation through nested items or hierarchical view levels of an electronic document. The tools may also build renderable view information by which a device may enable electronic document functionality based on the capabilities of that device.

Abstract: Methods, apparatuses, and computer program products for preserving, from resource management adjustment, portions of an overcommitted resource managed by a hypervisor are provided. Embodiments include identifying, by the hypervisor, a privileged guest from among a plurality of guests of the hypervisor; identifying, by the hypervisor, portions of the overcommitted resource that are allocated to the privileged guest; and preventing, by the hypervisor, resource management adjustment to the identified portions of the overcommitted resource that are allocated to the privileged guest.

Abstract: Methods, apparatuses, and computer program products for preserving, from resource management adjustment, portions of an overcommitted resource managed by a hypervisor are provided. Embodiments include identifying, by the hypervisor, a privileged guest from among a plurality of guests of the hypervisor; identifying, by the hypervisor, portions of the overcommitted resource that are allocated to the privileged guest; and preventing, by the hypervisor, resource management adjustment to the identified portions of the overcommitted resource that are allocated to the privileged guest.

Abstract: A system and method satisfies temperature and pressure requirements of solid oxide fuel cell system 10 in a manner that increases the overall efficiency and decreases the overall weight of system 10. The system and method include a secondary blower 30 for boosting air stream pressure level sufficient for operation of a reformer 12 that is designed to minimize pressure drop; an integrated heat exchanger 18 for recovering heat from exhaust 36 and comprising multiple flow fields 18A, 18B, 18C for ensuring inlet temperature requirements of a solid oxide fuel cell 14 are met; and a thermal enclosure 46 for separating hot zone 48 components from cool zone 50 components for increasing thermal efficiency of the system and better thermal management.

Abstract: A system and method in one embodiment includes modules for detecting an access request by an application to access information in a mobile device, determining that the application is a potential threat according to at least one policy filter, and blocking a send request by the application to send the information from the mobile device without a user's consent. More specific embodiments include user selecting the information through a selection menu on a graphical user interface that includes information categories pre-populated by an operating system of the mobile device, and keywords that can be input by the user. Other embodiments include queuing the send request in a queue with other requests, and presenting an outbox comprising the queue to the user to choose to consent to the requests. The outbox includes graphical elements configured to permit the user to selectively consent to any requests in the queue.