Abstract: An aqueous humor outflow device comprises an arcuate scaffold that extends continuously in a circumferential direction from a first end to a second end of the aqueous humor outflow device and has a cross-sectional area that allows the arcuate scaffold to fit within a conventional aqueous humor outflow pathway of a mammalian eye. The arcuate scaffold comprises a docking station or a port within which to retain an implant device, such as a drug eluting device or a drug delivery device.

Abstract: For increased security, a source is determined for software to be installed on a computing device. In one approach, a side-load server receives, from a mobile device, data regarding an application to be installed on the mobile device. The server determines a source of the application, then sends, to an authenticity server, data regarding the source. The server receives, from the authenticity server, a first state designation for the application. In response to receiving the first state designation, the server sets a second state designation, and sends the second state designation to the mobile device (e.g., to permit or block installation of the application).

Abstract: In one approach, a first computing device receives a request from a second computing device. The request is for access by the second computing device to a service provided by a third computing device over a network. In response to receiving the request, the first computing device performs a security evaluation of the second computing device. The evaluation determines a risk level. The first computing device generates, based on the evaluation, a token for the second computing device. The token includes data encoding the risk level. The token is sent to the second computing device and/or third computing device. The sent data is used to configure the service provided to the second computing device.

Abstract: Historical data is collected from prior risk analysis for applications to be installed or already installed on computing devices. A risk profile is determined for new applications to be installed or already installed on the same and/or different computing devices. The risk profile is determined by comparing or correlating the historical data to data regarding the new applications (e.g., metadata such as package identifier, signer data, name, version). Various remediation actions are determined based on the risk profile.

Abstract: A cloud server collects and stores context data from mobile devices. Data collected for a mobile device is compared to the historical data. A security policy is selected for the mobile device based on the comparison. The selected policy is deployed to the mobile device. A status of the deployment is tracked by the cloud server.

Abstract: An operating system monitors a computing device to determine that one or more events, including background activity, have occurred. In response to detecting the background activity, data associated with the background activity is automatically obtained from the computing device. An application is initiated on the operating system of the computing device, and the data is transmitted to the application.

Abstract: An optical fiber has corrugations on an outer surface to dissipate a portion of an input light beam, allowing the remaining portion of the light beam to be coupled to the optical fiber. By dissipating the portion of input light, damage to the optical fiber by uncoupled light is reduced.

Abstract: A nested anti-resonant nodeless hollow core fiber (NANF) enables transmission of multi-kilowatt, continuous wave (CW) light beams operating in wavelengths between 1050 nm and 1100 nm provided by single mode lasers. Such a NANF has little loss over kilometer ranges, and can be employed in long distance subsurface applications, such as in the petroleum industry.

Abstract: A cloud server collects and stores context data from mobile devices. Data collected for a mobile device is compared to the historical data. A security policy is selected for the mobile device based on the comparison. The selected policy is deployed to the mobile device. A status of the deployment is tracked by the cloud server.

Abstract: A nested anti-resonant nodeless hollow core fiber (NANF) enables transmission of multi-kilowatt, continuous wave (CW) light beams operating in wavelengths between 1050 nm and 1100 nm provided by single mode lasers. Such a NANF has little loss over kilometer ranges, and can be employed in long distance subsurface applications, such as in the petroleum industry.

Abstract: An optical fiber has corrugations on an outer surface to dissipate a portion of an input light beam, allowing the remaining portion of the light beam to be coupled to the optical fiber. By dissipating the portion of input light, damage to the optical fiber by uncoupled light is reduced.

Abstract: A simulation for sensor data may be evaluated and used for future simulations for an autonomous vehicle software. The method includes receiving log data collected for an environment along a given run for a given vehicle, using a software for autonomous driving to perform a simulated run of the given run using logged sensor data from the log data and environment data constructed using the log data, and determining first details regarding detection of objects during the given run using logged sensor data. The method also includes using the software to run a simulation of one or more detection devices on a simulated vehicle driving along the given run to obtain simulated sensor data, and determining second details regarding detection of objects using the simulated sensor data. Metrics may then be extracted from the first details and the second details, and the simulation may be evaluated based on the metrics.

Abstract: Techniques for deployment of policies to computing devices are described herein. The techniques can include a server deploying a passive policy to the computing devices. After deploying the passive policy, data is collected from each of the computing devices regarding operation of the computing device. The server monitors, based on comparing the passive policy to the collected data, compliance of each computing device with the passive policy. The server determines, based on the monitoring, a set of the computing devices that exhibit a policy violation associated with the passive policy. The server deploys an active policy to the set of computing devices. The active policy corresponds to the passive policy, and deploying the active policy causes one or more actions that correspond to the policy violation to be performed on each of the set of computing devices.

Abstract: For increased security, a source is determined for software to be installed on a computing device. In one approach, a side-load server receives, from a mobile device, data regarding an application to be installed on the mobile device. The server determines a source of the application, then sends, to an authenticity server, data regarding the source. The server receives, from the authenticity server, a first state designation for the application. In response to receiving the first state designation, the server sets a second state designation, and sends the second state designation to the mobile device (e.g., to permit or block installation of the application).

Abstract: For increased security, a source is determined for software to be installed on a computing device. In one approach, an application identifier is received from the computing device for an application to be installed. A source identifier of the application is determined. The application identifier and the source identifier are sent over a network to a server. A first state designation for the first application is received from the server. The first state designation represents a trusted state or an untrusted state. In response to receiving the first state designation, a second state designation is set. The second state designation is sent to the computing device.

Abstract: Systems and methods are described for providing connection pools between source network devices and a target, connection-limited service. Each connection pool can facilitate connections between source devices and the target service, while ensuring that connections to the connection-limited service do not exceed a defined limit. A connection manager service can initialize a connection pool for a target service on request by a client device, and provide an identifier for the connection pool to the client device. Source network devices can then transmit operations for the target service to the connection manager service, which can route the operations to an appropriate connection pool based on the identifier.

Abstract: Systems and methods are described for facilitating authentication of hosted network services to other services. A target service, such as a database, may require specific authentication information, such as a username and password, to access the target service. While this information could be manually specified in the hosted network service, de-centralized storage of authentication information is generally discouraged by security best practices. This disclosure provides an authentication proxy system that reduces or eliminates a need for hosted network services to store authentication information for target services. Rather, the authentication proxy system can obtain authentication information for the hosted network service that is provided by a hosting system, and authenticate the hosted network service using that authentication information.

Abstract: Systems and methods are described for facilitating service connections by user-defined code executing on an on-demand code execution system. Rather than hard code state information used by network services into the code, the code can be provided with an interface that augments requests for network services with state information. When the user-defined code is executed by the on-demand code execution system, additional code can also be executed that provides the interface. The user-defined code may access the target network service through the interface, as if the target network service existed locally to an environment of the code. The interface can then augment requests to the target network service with state information. Because state information is maintained outside the user-defined code, portability of the user-defined code can be increased.

Abstract: The present disclosure provides devices and methods for holographic screen suspension systems. These systems can allow for a smooth reflection surface of the screen that is void of wrinkled or non-uniform surfaces.

Abstract: In one approach, a first computing device receives a request from a second computing device. The request is for access by the second computing device to a service provided by a third computing device over a network. In response to receiving the request, the first computing device performs a security evaluation of the second computing device. The evaluation determines a risk level. The first computing device generates, based on the evaluation, a token for the second computing device. The token includes data encoding the risk level. The token is sent to the second computing device and/or third computing device. The sent data is used to configure the service provided to the second computing device.