Abstract: A method and system for profiling a user based upon a user's previous on-line actions is provided. The profile provides a characterization of the user's preferences based upon a received user event. The user event identifying event identification information and a user identifier. A look-up in a cached web map is performed to retrieve classification information associated with the event identification information. A user profile is retrieved or created for the user identifier. Profile update information is generated based upon the retrieved classification information for the user event, to identify how the user is to be updated based upon the retrieved classification information and defined profiling rules. The user profile is updated and stored for access by an external advertising server. The classification information provides a text-score record comprising a text string and a score defined in relation to a lexical ontology comprising a hierarchy of categories.

Abstract: A system and method are provided for delivering targeted content to a subscriber coupled to a service provider network. Network application data generated by the subscriber is received and processed by a network application element deployed in the service provider network associated with a network identifier of the subscriber's computing device. The network application data is generated from user interaction with a server coupled to the service provider network or through a public communication network. The network application data is converted to web events associated with the network identifier. The web events are filtered to remove irrelevant data from received web events. A subscriber profile can then be generated base upon the filtered web events associated with the subscriber. Targeted content can then be delivered to the subscriber based upon the subscriber's profile.

Abstract: An apparatus, system and method are described for use in detecting the presence of malware on subscribers computers. The apparatus, system and method are network based and may be deployed within an Internet Service Provider (ISP) network. The system may include a plurality of network sensors for receiving and analyzing network traffic to determine the presence of malware. An aggregating apparatus receives alerts of the presence of malware and translates a network identifier of the alert to a subscriber identifier. The aggregating apparatus aggregates alert information and forwards it to a reporting infrastructure that can generate notifications in order to notify a subscriber that malware has been detected on a computer associated with the subscriber.

Abstract: A system, a method and a computer readable medium for anonymizing collected data associated with one or more data owners is provided. An identifier is received and a hash process is performed using the identifier and a cryptographic salt to produce a hash output. The hash output is associated with an anonymous identifier. The anonymous identifier is then associated with the data. The anonymized data may then be provided to one or more third party processors for processing an analysis.

Abstract: A system and method for selecting an accompanying content, such as an advertisement, for presentation with a main content, such as a web page is described. The system and method provide a profile of the main content that is used when selecting the accompanying content. The main content profile may be used to select the accompanying content when the main content is requested by a user for which little or no profile information is available. The main content profile is based on the content consumption history of a group of users for which profile information is available.

Abstract: A system and method are provided for delivering targeted content to a subscriber coupled to a service provider network. Network application data generated by the subscriber is received and processed by a network application element deployed in the service provider network associated with a network identifier of the subscriber's computing device. The network application data is generated from user interaction with a server coupled to the service provider network or through a public communication network. The network application data is converted to web events associated with the network identifier. The web events are filtered to remove irrelevant data from received web events. A subscriber profile can then be generated base upon the filtered web events associated with the subscriber. Targeted content can then be delivered to the subscriber based upon the subscriber's profile.

Abstract: An apparatus, system and method are described for use in detecting the presence of malware on subscribers computers. The apparatus, system and method are network based and may be deployed within an Internet Service Provider (ISP) network. The system may include a plurality of network sensors for receiving and analyzing network traffic to determine the presence of malware. An aggregating apparatus receives alerts of the presence of malware and translates a network identifier of the alert to a subscriber identifier. The aggregating apparatus aggregates alert information and forwards it to a reporting infrastructure that can generate notifications in order to notify a subscriber that malware has been detected on a computer associated with the subscriber.

Abstract: A method and system for profiling a user based upon a user's previous on-line actions is provided. The profile provides a characterization of the user's preferences based upon a received user event. The user event identifying event identification information and a user identifier. A look-up in a cached web map is performed to retrieve classification information associated with the event identification information. A user profile is retrieved or created for the user identifier. Profile update information is generated based upon the retrieved classification information for the user event, to identify how the user is to be updated based upon the retrieved classification information and defined profiling rules. The user profile is updated and stored for access by an external advertising server. The classification information provides a text-score record comprising a text string and a score defined in relation to a lexical ontology comprising a hierarchy of categories.