Abstract: Systems and methods are disclosed for using machine learning (e.g., neural networks and/or combinatorial learning) to solve the non-linear problem of predicting the provisioning of a server farm (e.g., cloud resources). The machine learning may be performed using commercially available products, such as the SNNS product from The University of Stuttgard of Germany. The system, which includes a neural network for machine learning, is provided with an identification of inputs and outputs to track, and the system provides correlations between those. Rather than static rules, the machine learning provides dynamic provisioning recommendations with corresponding confidence scores. Based on the data collected/measured by the neural network, the provisioning recommendations will change as well as the confidence scores.

Abstract: The present invention is directed towards systems and methods for providing Quality of Service (QoS) via a flow controlled tunnel. Traffic from a plurality of applications may be directed into a single connection or flow-controlled tunnel and QoS policies may be applied across the plurality of applications without configuration of individual link speeds, enabling QoS scheduling to dynamically adjust traffic transmission and reception rates to ensure priority management of applications regardless of a final endpoint of the application communications. Accordingly, traffic of different types, including VPN, HTTP, Voice-over-IP (VoIP), remote desktop protocol traffic, or other traffic may be easily balanced and prioritized. In many embodiments, the tunnel may be transparent to applications, such that without any application configuration, application traffic may still be prioritized by QoS requirements.

Abstract: A distributed virtual desktop infrastructure system includes at least one management server and a plurality of client management applications. The management server includes at least one processor, and is programmed and/or configured to determine a home system of the plurality of client systems for at least one user. The plurality of client management applications are in communication with the at least one management server, and are configured to execute on the plurality of client system and display, on at least one client system, a virtual desktop of at least one virtual machine executing on the home system. Related systems and methods are also described.

Abstract: A method and system for preventing a local display device from, displaying data generated by a remote computing device is described. The system includes a local agent for facilitating a remote session; an operating system gen-orating a request to enable a display device controlled by a display adapter; and a filter executing in a driver and in communication with the local agent, the filter intercepting the request generated by the operating system. The filter transmits the request to the local agent when a remote user is active or to the display adapter when the remote user is inactive. The filter will transmits a signal to the operating system that the display adapter has enabled the display device when the filter transmits the request to at least one of the local agent and the display adapter.

Abstract: Methods and systems for providing three dimensional graphics to remote computing machines and appliances that include an agent executing on a local computing machine to intercept a plurality of graphics commands generated by a three dimensional application executing on a local computing machine. A first portion of the plurality of graphics commands are encoded by the agent using a first codec, while a second portion of the plurality of graphics commands are encoded by the agent using a second codec. The agent creates a frame comprising the first portion and the second portion of the plurality of graphics commands, compresses the frame, and transmits the frame to a remote computing machine.

Abstract: In a method and appliance for authenticating, by an appliance, a client to access a virtual network connection, based on an attribute of a client-side certificate, a client authentication certificate is requested from a client. A value of at least one field in the client authentication certificate received from the client is identified. One of a plurality of types of access is assigned responsive to an application of a policy to the identified value of the at least one field, each of the plurality of access types associated with at least one connection characteristic.

Abstract: Described herein are methods and systems for selectively synchronizing locally stored data with data stored in a cloud storage repository. A client application can synchronize a portion of the locally or remotely stored content by choosing to synchronize data that is frequently used, data that is marked as priority data or data that was modified or otherwise accessed during a predetermined period of time. Other selective synchronization optimizations include predictively synchronizing data or content associated with frequently use or priority data and synchronizing data according to a priority score.

Abstract: A computing system is configured to use a trampoline to isolate sensitive code in a virtual environment and in other applications. An import table may describe the entry points of a privileged code module or driver that generates privileged code. A system and method loads a shadow kernel to facilitate isolating the linkage between drivers and the rest of the system. The shadow kernel may be a copy of the operating system kernel that does not have the same integral position in the operation of the computing device. The shadow kernel may be used as a template for creating a jump table to redirect more critical privileged resource access requests from specially loaded kernel mode drivers to the PVM. All requests may pass through the PVM, which redirects non-critical functions to the original kernel. Multiple copies of a given driver or code module may be loaded in a given session.

Abstract: Storage associated with a virtual machine or other type of device may be migrated between locations (e.g., physical devices, network locations, etc.). To maintain the security of the storage, a system may manage the encryption of the storage area such that a storage area is encrypted with a first encryption key that may be maintained through the migration. A header of the storage area, on the other hand, may be encrypted using a second encryption key and the first encryption key may be stored therein. Upon transfer, the header may be re-encrypted to affect the transfer of security.

Abstract: Methods and systems for permitting a controller within a virtualization environment to control access to devices virtualized within hardware are described herein. For example, a NIC may be able to request rules that define how network traffic is managed at the NIC's virtual switch. In some arrangements, the NIC may transmit a query for the matching rule to a proxy, which may determine whether it has a rule matching the request. If the proxy does not have a matching rule, the proxy may query a controller for the matching rule, which may transmit the rule to the proxy. The proxy may update its store of rules and transmit the matching rule to the NIC. Upon receipt of the matching rule, the NIC may update the rules stored in its virtual switch and may process the packet in accordance with the matching rule.

Abstract: By enabling mobile devices, such as smart phones and tablets, to leverage native user interface components, the methods and systems described herein provide users a more seamless experience, wherein the user can potentially be oblivious to the fact that the application is not executing locally on the mobile device. In some embodiments, a user interface is provided which the user uses to trigger the display of a native user interface component. In some embodiments, the systems and methods described herein auto-adjust the pan and zoom settings on the mobile device to ensure that remote windows are presented in a manner that makes it easier for the user to interact with the device. The systems and methods described herein permit the user to switch to the new window in focus or a visual cue may be displayed to indicate that a window has been created somewhere on the remote desktop.

Abstract: Systems and methods for providing a workspace are disclosed. In some aspects, a server provides, to a client computing device, access to a workspace, the workspace including one or more members and one or more content items, in response to verifying that the client computing device is associated with one of the one or more members of the workspace. The server provides, to the client computing device, within a display associated with the workspace, a first user interface element to initiate an online meeting with a first portion of the one or more members of the workspace or a second user interface element to join an ongoing online meeting with a second portion of the one or more members.

Abstract: Methods and systems for improved management of power utilization and resource consumption among physical hosts in a cloud computing environment. The management server may provide functionality facilitating the identification and optimized placement of a virtual machine within a cloud computing environment by evaluating historical and heuristic metrics data associated with both the physical hosts and the virtual machines. The management server utilizes the metrics data to generate scores for a plurality of physical host based on physical resources available in a cloud of computing resources. The management server identifies a physical host on which to place a virtual machine using the metrics data, generated scores, and numerous, configurable criteria. The management server responds to the identification of the physical host on which to place a virtual machine by adjusting processor performance and/or operating states for one or more of the physical hosts in the cloud computing environment.

Abstract: Methods and systems for transparent user interface integration between remote (“published”) applications and their local counterparts are described, providing a seamless, unified user experience, and allowing integration of a start menu, dock, taskbar, desktop shortcuts, windows, window and application switching, system tray elements, client-to-host and host-to-client file type association, URL redirection, browser cookie redirection, token redirection, status message interception and redirection, and other elements. These methods and systems further enhance theme-integration between a client and remote desktop or virtual machine by remoting all UI elements to a recipient for generation, including text controls, buttons, progress bars, radio buttons, list boxes, or other elements; presenting them with the receiver's product and OS-specific UI; and returning status back to the sender. This may achieve a more unified and transparent UI integration.

Abstract: A new approach is proposed that contemplates systems and methods to support canceling audio streams leaked from a speaker to a microphone so that a clean audio stream of a presenter or viewer speaking at a conference call is transmitted. Here, the audio streams being canceled includes the computer audio stream of an application being run or a material being presented online during a web conference and/or the audio stream received from the rest of the group of participants at the conference call. The computer audio stream is then transmitted in addition to the presenter or viewer audio stream, and separate from any other audio stream captured by the hosting device during the conference call.