Abstract: Associating a network packet with biometric information for a user includes identifying biometric identification information for a user of a network device, including an identifier of the biometric identification information in at least one of a header and a trailer of a network packet without including biometric identification information in a payload of the network packet, and sending the packet via a network, wherein the identifier identifies the network packet as having originated from the user.

Abstract: Associating a network packet with biometric information for a user includes identifying biometric identification information for a user of a network device, including an identifier of the biometric identification information in at least one of a header and a trailer of a network packet without including biometric identification information in a payload of the network packet, and sending the packet via a network, wherein the identifier identifies the network packet as having originated from the user.

Abstract: Associating a network packet with biometric information for a user includes identifying biometric identification information for a user of a network device, including an identifier of the biometric identification information in at least one of a header and a trailer of a network packet without including biometric identification information in a payload of the network packet, and sending the packet via a network, wherein the identifier identifies the network packet as having originated from the user.

Abstract: Methods, systems, and computer program products for identifying a change in a container associated with a plurality of files are disclosed. According to one aspect, a method includes providing for identify a change in a container associated with a plurality of associated files. The prevailing metadata is not required to be from all of the plurality of associated files. Further, the container may be named based on the prevailing metadata.

Abstract: Disclosed are methods, systems, and computer program products for identifying sensitive application-layer data and controlling transmission of the data in a network. According to one method, sensitive data in a system resource is identified at an application layer. A packetization of the identified sensitive data is detected. A flag indicative of the presence of sensitive data is inserted in a packet having at least a portion of the identified sensitive data in response to identifying the sensitive data and detecting the packetization. The flag is inserted in a portion of the packet corresponding to a layer other than the application layer. Transmission of the packet is controlled in a network based on the flag.

Abstract: Associating a network packet with biometric information for a user includes identifying biometric identification information for a user of a network device, including an identifier of the biometric identification information in at least one of a header and a trailer of a network packet without including biometric identification information in a payload of the network packet, and sending the packet via a network, wherein the identifier identifies the network packet as having originated from the user.

Abstract: Methods, systems, and computer program products for reconfiguring an operational mode of an input interface based on a privacy level are disclosed. According to one method, at least one of an environment in which data is being entered into a computer via an input interface and a destination for the data being entered is identified. An input interface privacy level is determined based on the identified at least one of the environment and the data destination. The input interface is reconfigured to operate in a mode corresponding to the determined input interface privacy level.

Abstract: Disclosed are methods, systems, and computer program products for identifying sensitive data from a user-entered input sequence based on user-defined criteria. According to one method, user-defined criteria for identifying sensitive data within user-entered input sequences that include sensitive data and padding data are received. A request for sensitive data from a requesting agent is presented. A user-entered input sequence that includes sensitive data and padding data is received in response to the request for sensitive data. Sensitive data is identified within the user-entered input sequence using the user-defined criteria. The identified sensitive data is provided to the requesting agent in response to the request for sensitive data.

Abstract: Presence information for an object in a digital image is determined. An identifier associated with at least one object depicted in the image is sufficient to determine presence information from at least one of a presence application and a presence roster list is used to subscribe to presence information associated with the at least one object via a presence service. Presence information for the at least one object is determined based on the identifier from the at least one of a presence application and a presence roster list. An action related to the object is performed using the determined presence information.

Abstract: Presence information for an object in a digital image is determined. An identifier associated with at least one object depicted in the image is allowed to be stored as image metadata. The identifier is sufficient to determine presence information from at least one of a presence application and a presence roster list. Presence information for the at least one object is determined based on the identifier from the at least one of a presence application and a presence roster list. An action related to the object is performed using the determined presence information.

Abstract: Methods, systems, and computer program products for determining availability of presentable content via a subscription service are disclosed. According to one aspect, a method includes receiving an indication of first presentable content associated with a first subscription service. Metadata associated with the selected first presentable content is received. Based on the received metadata, it is determined whether second presentable content corresponding to the first presentable content is available from a second subscription service. Further, and indication is provided that the second presentable content is available.

Abstract: Methods, systems, and computer program products for determining availability of presentable content via a subscription service are disclosed. According to one aspect, a method includes receiving a selection of first presentable content associated with a first subscription service. Metadata associated with the selected first presentable content is received. Based on the received metadata, it is determined whether second presentable content corresponding to the first presentable content is available from a second subscription service. Further, it is indicated whether the second presentable content is available for presentation via the second subscription service.

Abstract: Disclosed are methods, systems, and computer program products for identifying sensitive data from a user-entered input sequence based on user-defined criteria. According to one method, user-defined criteria for identifying sensitive data within user-entered input sequences that include sensitive data and padding data are received. A request for sensitive data from a requesting agent is presented. A user-entered input sequence that includes sensitive data and padding data is received in response to the request for sensitive data. Sensitive data is identified within the user-entered input sequence using the user-defined criteria. The identified sensitive data is provided to the requesting agent in response to the request for sensitive data.

Abstract: Methods, systems, and computer program products for determining an originator of a network packet using biometric information are disclosed. A network packet is received from a network device. A header or a trailer of the network packet is analyzed to determine whether the header or trailer includes an identifier of biometric identification information of a network user. The network packet is identified as having originated from the network user if the header or trailer includes the identifier of biometric identification information of the network user. Identifying the network packet as having originated from the network user does not require reading a payload of the packet.

Abstract: Methods, systems, and computer program products for associating an originator of a network packet with the network packet using biometric information are disclosed. According to one method, biometric identification information is identified for a network user. The identified biometric identification information is associated with a header or a trailer of a network packet originated by the network user. The network packet may be sent over a network.

Abstract: Disclosed are methods, systems, and computer program products for identifying sensitive data from a user-entered input sequence based on user-defined criteria. According to one method, user-defined criteria for identifying sensitive data within user-entered input sequences that include sensitive data and padding data are received. A request for sensitive data from a requesting agent is presented. A user-entered input sequence that includes sensitive data and padding data is received in response to the request for sensitive data. Sensitive data is identified within the user-entered input sequence using the user-defined criteria. The identified sensitive data is provided to the requesting agent in response to the request for sensitive data.

Abstract: A method for determining the entry point of an attack by a vandal such as a hacker upon a device such as a computer or a server such as a web server that operates under the protection of an intrusion detection system. Intrusion detection information regarding the attack and network information regarding the attack are correlated, and the entry point of the attack thereby deduced. In one embodiment, a source address of a message representative of the attack is found in a router table of a router that provides a connection supporting the attack. Logical ports of the connection are determined, and the corresponding physical ports found, thereby identifying the attack's entry point into the protected device.

Abstract: Method, system, and program product for port based authentication protocols where addresses are dynamically assigned within a network environment, and more particularly to port based authentication in the network environment, where connection information is captured and stored. This facilitates administrator access to information created as a result of protocol exchanges involved in dynamic address assignment, authentication, and connection.

Abstract: A method of operating an intrusion detection system. The system determines occurrence of a signature event indicative of a denial of service intrusion on a protected device. A value of a signature event counter is increased. The value of the signature event counter is adjusted to not include a count of signature events past a sliding window. The value of the signature event counter is determined to exceed a signature threshold quantity, followed by generation of an alert at a time subsequently recorded in a log. The log is cleared of entries past a permissible age. A present alert generation rate is determined as a ratio of the total number of timestamps in the log to the permissible age. The present alert generation rate is ascertained to exceed an alert generation rate threshold. A selected element of the signature set is altered to decrease the alert generation rate.

Abstract: Presence information for an object in a digital image is determined. An identifier associated with at least one object depicted in the image is allowed to be stored as image metadata. The identifier is sufficient to determine presence information from at least one of a presence application and a presence roster list. Presence information for the at least one object is determined based on the identifier from the at least one of a presence application and a presence roster list. An action related to the object is performed using the determined presence information.