Abstract: This disclosure relates to protecting the security and privacy of data, including user identifiers (IDs). In some aspects, a method includes receiving, by a cryptographically-secure private set intersection (CSPSI) server and from a first device corresponding to a first entity, a first identifier retrieval request corresponding to a digital component request being sent from the first device to a second device corresponding to a second entity. The first identifier retrieval request includes a first encrypted user identifier generated by encrypting a user identifier for a user using a first encryption key corresponding to the first entity. The CSPSI server determines, using the encrypted user identifier, a bilateral encrypted user identifier for the user generated by encrypting the first encrypted user identifier using a second encryption key corresponding to the second entity. The CSPSI server sends the bilateral encrypted user identifier for the user to the first device.

Abstract: Systems, media, and methods are provided to select advertisements for available impressions associated with a publisher's impression inventory. The selected advertisements may correspond to advertisement campaigns managed by buyers that seek to promote goods or services on web pages or media. The advertisement campaign is generated via an interface that receives a request for reserved or non-reserved portions of the publisher's impression inventory. The advertisement engine suggests a price for first chair access to the reserved portion or non-reserved portion via the interface. The advertisement engine selects advertisements based on the profiles of the advertisement campaigns. The profiles indicate placement preferences for advertisements and whether a portion of the impression inventory is reserved or non-reserved for the advertisement campaigns.

Abstract: Various embodiments pertain to techniques for forecasting and providing guaranteed delivery of ad impression opportunities using real-time bidded platform inventories. In various embodiments, bid landscape data, such as information regarding a number of impression requests by a particular supply unit, a time of the impression requests, and an amount of a winning bid for the impression requests, is recorded for use in forecasting an available impression volume as a function of cost. The forecasted available impression volume represents a number of ad impression requests likely to be obtained through real-time bidding channels. In various embodiments, an advertiser can place an order for a number of ad impressions at a particular price, and the ad impressions ordered can be specifically allocated for that advertiser. The number of ad impressions ordered by an advertiser that are guaranteed vary depending on the price and the available volume forecasted at that price.

Abstract: Systems and method can be provided for selecting advertising payloads for display in an available advertising impression location. The advertising payloads can be selected based on an auction between various types of hosted and third party campaigns, including hosted reserved advertising campaigns and hosted non-reserved advertising campaigns. The rules of the auction can be set and/or updated over time to allow hosted campaigns to meet desired goals, such as delivering a minimum number of impressions or spending an expect budget amount.

Abstract: Described is a technology for managing network security by having network clients that are capable of self-assessment assess themselves for security risks and/or security vulnerabilities. Other clients may be remotely assessed for security risks and/or security vulnerabilities. Assessments may include antimalware scans, vulnerability assessment, and/or port scans. The results of the self-assessments and remote assessments are combined into a data set (e.g., a view) indicative of the network security state. In this manner, for example, significant network resources are conserved by allowing those clients capable of self-assessment to assess themselves and thereafter only provide their self-assessment results. Clients capable of self-assessment may also be remotely assessed, to determine whether any discrepancies exist between their remote assessments and self-assessments. Clients may be discovered, along with their self-assessment capabilities, by network communication.

Abstract: Described is a technology for managing network security by having network clients that are capable of self-assessment assess themselves for security risks and/or security vulnerabilities. Other clients may be remotely assessed for security risks and/or security vulnerabilities. Assessments may include antimalware scans, vulnerability assessment, and/or port scans. The results of the self-assessments and remote assessments are combined into a data set (e.g., a view) indicative of the network security state. In this manner, for example, significant network resources are conserved by allowing those clients capable of self-assessment to assess themselves and thereafter only provide their self-assessment results. Clients capable of self-assessment may also be remotely assessed, to determine whether any discrepancies exist between their remote assessments and self-assessments. Clients may be discovered, along with their self-assessment capabilities, by network communication.

Abstract: A managed network with a quarantine enforcement policy based on the status of installed updates for software on each client seeking access to the managed network. To determine whether a client requesting access has up-to-date software, an access server may communicate directly with an update server to determine the update status of the client requesting access. Information from the update server allows the update server to determine which update the client requesting access is missing. The access server may also receive an indication of the severity of the updates missing from the client requesting access. The access server may use the severity information to apply a quarantine enforcement policy, thereby avoiding the need for either the client or access server to be programmed to identify specific software updates that must be installed for a client to comply with a quarantine enforcement policy.