Abstract: An apparatus comprises at least one processing device comprising a processor coupled to a memory. The processing device is configured to receive from a requester a request to modify a parameter of an access-controlled account associated with a set of sensor devices. Responsive to receipt of the request, the processing device initiates at least one instance of a proof of physical presence protocol, the proof of physical presence protocol requiring performance by the requester of at least one action involving at least one sensor device of the set of sensor devices associated with the access-controlled account. Responsive to successful completion of at least one instance of the proof of physical presence protocol, the processing device sends at least one notification to each of one or more registered users of the access-controlled account. The processing device approves or rejects the request based at least in part on at least one of a number and a type of responses to the one or more notifications.

Abstract: Authentication translation is disclosed. A request to access a resource is received at an authentication translator, as is an authentication input. The authentication input corresponds to at least one stored record. The stored record is associated at least with the resource. In response to the receiving, a previously stored credential associated with the resource is accessed. The credential is provided to the resource.

Abstract: An apparatus in an illustrative embodiment comprises at least one processing device comprising a processor coupled to a memory. The processing device is configured to receive sensor data from one or more nodes of a node network, to compute predicate data based at least in part on the received sensor data, to transmit at least a portion of the received sensor data and the computed predicate data to a third party application, to receive additional data from the third party application responsive to the transmitted portion of the received sensor data and the computed predicate data, to generate a control signal based at least in part on the received sensor data, the computed predicate data, and the received additional data from the third party application, and to transmit the control signal to at least one of the nodes of the node network. Other illustrative embodiments include methods and computer program products.

Abstract: Preference data is received. The received preference data is compared to stored preference data associated with a user with which the received preference data is associated. A determination is made whether to authorize an action based at least on the comparison. The preference data is received as a selection.

Abstract: Initializing a graph for providing proof of space includes generating an initial graph at a device. The initial graph is acyclic. Content of a first node in the initial graph is generated based at least in part on (1) a predecessor node that is a predecessor of the first node and (2) on a godparent node. A position of the godparent node is based at least in part on content of the predecessor node. It further includes storing at least a portion of the initial graph on the device.

Abstract: Systems and methods as provided herein may create a biometric model associated with a user. The created biometric model may be used to generate challenges that are presented to the user for authentication purposes. A user response to the challenge may be compared to an expected response, and if the user response matches within a predetermined error of the expected response, the user may be authenticated. The systems and methods may further generate challenges that are adaptively designed to address weaknesses or errors in the created model such that the model is more closely associated with a user and the user is more likely to be the only person capable of successfully responding to the generated challenges.

Abstract: Systems and methods as provided herein may create a biometric model associated with a user. The created biometric model may be used to generate challenges that are presented to the user for authentication purposes. A user response to the challenge may be compared to an expected response, and if the user response matches within a predetermined error of the expected response, the user may be authenticated. The systems and methods may further generate challenges that are adaptively designed to address weaknesses or errors in the created model such that the model is more closely associated with a user and the user is more likely to be the only person capable of successfully responding to the generated challenges.

Abstract: An apparatus in one embodiment comprises at least one processing device that includes a processor coupled to a memory. The processing device is configured to receive in a requesting device a service availability notification relating to availability of one or more services implemented by a service providing device, to generate in the requesting device a request for a particular service based at least in part on the received service availability notification, and to send the request for the particular service from the requesting device to the service providing device. The requesting device illustratively comprises a resource-constrained device relative to the service providing device with respect to the particular service, and the particular service comprises a service that is capable of being performed in the requesting device but is offloaded from the requesting device to the service providing device via the request in order to conserve resources of the requesting device.

Abstract: An apparatus in an illustrative embodiment comprises at least one processing device comprising a processor coupled to a memory. The processing device is configured to receive power consumption data relating to at least one monitored device, and to classify the monitored device based at least in part on the power consumption data. The processing device is further configured to select a power policy for the classified device, and to control application of power to the classified device in accordance with the selected power policy. For example, controlling application of power to the classified device in accordance with the selected power policy may comprise determining contextual information for the classified device, generating a control signal based at least in part on the contextual information and the selected power policy, and transmitting the control signal to at least one node of a node network. Other illustrative embodiments include methods and computer program products.

Abstract: An apparatus comprises at least one processing device comprising a processor coupled to a memory. The processing device is configured to identify artifacts in a plurality of messages of an account of a user, and to replace the identified artifacts in the messages with respective modified artifacts while also maintaining in access-controlled storage at least information related to the identified artifacts. The processing device receives from a requestor a request for a given one of the identified artifacts that has been replaced with a corresponding modified artifact, determines a profile of the requestor based at least in part on the request, makes a security determination based at least in part on the determined profile, and takes at least one automated action based at least in part on the security determination.

Abstract: Preference data is received. The received preference data is compared to stored preference data associated with a user with which the received preference data is associated. A determination is made whether to authorize an action based at least on the comparison. The preference data is received as a selection.

Abstract: Information of an electronic message to be delivered to an intended recipient is received. For an original resource identifier included in the electronic message, a corresponding alternative resource identifier that can be at least in part used to obtain the original resource identifier and obtain context information associated with the electronic message is determined. The original resource identifier included in the electronic message is replaced with the alternative resource identifier to generate a modified electronic message. The modified electronic message with the alternative resource identifier is allowed to be delivered to the intended recipient instead of the electronic message with the original resource identifier. A request made using the alternative resource identifier in the modified message triggers a security action based at least in part on the context information associated with the electronic message.

Abstract: Authentication translation is disclosed. A request to access a resource is received at an authentication translator, as is an authentication input. The authentication input corresponds to at least one stored record. The stored record is associated at least with the resource. In response to the receiving, a previously stored credential associated with the resource is accessed. The credential is provided to the resource.

Abstract: Disclosed is a method and apparatus for performing steps to cause encoded information to be stored at a client device during a first network session between a server and the client device. To cause encoded information to be stored at a client device, the server first determines a set of network resource requests that encode the information. These network resource requests may include requests for one or more specific URLs and/or requests for one or more files. The server then causes the client device to initiate the network resource requests. The server may cause this initiation by, for example, redirecting the client device to the network resources. The client device initiating the network resource requests causes data representative of the network resource requests to be stored at the client device.

Abstract: A measure of influence of a sender entity is determined for a message receiving entity based at least in part on an analysis of previous electronic messages sent by the sender entity. An electronic message associated with the sender entity is received. The measure of influence of the sender entity is utilized to determine a security risk associated with the received electronic message.

Abstract: An apparatus in an illustrative embodiment comprises at least one processing device comprising a processor coupled to a memory. The at least one processing device is configured to receive a request comprising one or more identifiers of a particular user device detected by at least one access point in communication with the user device, to retrieve a profile of the particular user device based at least in part on the one or more identifiers of the request, to determine from the retrieved profile contact information of the user device, to generate based at least in part on the retrieved profile at least one message requesting at least one privacy-related permission from a user associated with the user device, and to send the message to the user device over a communication channel determined from the contact information. Other illustrative embodiments include methods and computer program products.

Abstract: An apparatus in an illustrative embodiment comprises at least one processing device comprising a processor coupled to a memory. The at least one processing device is configured to detect a first user device, to receive at least identifying information of a second user device, to establish an association between the first user device and the second user device based at least in part on the received identifying information, and to determine proximity of the first user device and the second user device at one or more locations for one or more times based at least in part on the established association. Other illustrative embodiments include methods and computer program products.

Abstract: Tiered advertisement bidding is disclosed. One or more quality metrics associated with a user profile are determined. An advertisement bid is selected from a plurality of tiered bids based at least in part on the determined quality metrics. Determining the quality metrics can include determining a conversion assessment. Determining the quality metric can also include determining whether a need associated with a user profile has been met for a category. In some cases, persona detection is performed with respect to the user profile.

Abstract: A verifying entity of a decentralized system is configured to receive information associated with at least one ledger entry of a distributed ledger of the decentralized system, to verify at least a portion of one or more computations associated with the received information, to generate evidence of at least one error in the at least a portion of the one or more computations associated with the received information, and to associate the generated evidence with a public key of the verifying entity. The decentralized system may comprise a proof of space based mining system, and the at least one ledger entry of the distributed ledger may comprise at least one proof of space for the proof of space based mining system.

Abstract: In one example, intelligence is gathered about an attacker that is attempting an attack via a malicious exploit message by exploiting the attacker's belief that the attack is succeeding. A received message (e.g., malicious message) sent from a first message account (e.g., attacker) to a second message account (e.g., intended victim) is received. A security risk associated with the received message is determined. It is determined that the security risk associated with the received message meets one or more criteria. Based on the determination that the security risk associated with the received message meets the one or more criteria, a responsive message is sent in response to the received message from a third message account (e.g., security service) to the first message account. The responsive message includes a content reference identified as referring to a content for a user of the first message account.