Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for computer network security risk assessment. One of the methods includes obtaining compromise likelihoods for user accounts. Information describing a network topology of a network is obtained, with the network topology being nodes each connected by an edge to other nodes, each node being associated with a compromise likelihood, and one or more nodes are high value nodes associated with a compromise value. Unique paths to each of the high value nodes are determined for a particular user account. An expected value for each path is determined based on the compromise likelihood of the particular user account, the compromise likelihood of each node included in the path, the communication weight of each edge included in the path, and the compromise value associated with the high value node. User interface data is generated describing at least one path.

Abstract: Systems and methods for providing auto-completion options to input characters are presented. In response to receiving input characters, a plurality of items of content (that are non-textual items of content) of a corpus of content are identified. These items of content are clustered into n clusters of content according to similarities among the items of content. From the items of content of each cluster, a descriptive title is determined for the cluster. This descriptive title is an auto-completion option for the cluster. The descriptive titles/auto-completion options are provided in response to receiving the input characters.

Abstract: Disclosed are recombinant insect ferritin nanoparticles that can be used to display two different trimeric antigens at an equal ratio. Also disclosed are nucleic acids encoding the recombinant insect ferritin nanoparticles and methods of producing the recombinant insect ferritin nanoparticles. Methods for eliciting an immune response in a subject are also provided.

Abstract: This document relates to methods and materials for treating a mammal having an autoimmune disease. For example, materials and methods for producing a T cell comprising a FOXP3 polypeptide. Methods and materials for treating a mammal having an autoimmune disease comprising administering to a mammal having an autoimmune disease an effective amount of a T cell are also provided herein.

Abstract: Electrodes that can be formed in a flexible band of a wrist-worn device to detect hand gestures are disclosed. Multiple rows of electrodes can be configured to detect electromyography (EMG) signals produced by activity of muscles and tendons. The band can include removable electrical connections (e.g., pogo pins) to enable the electrode signals to be routed to processing circuitry in the housing of the wrist-worn device. Measurements between signals from the active electrodes and one or more reference electrodes can be obtained to capture EMG signals at a number of locations on the band. The measurement method and mode of operation (lower power coarse detection or higher power fine detection) can determine the location and number of electrodes to be measured. These EMG signals can be processed to identify hand movements and recognize gestures associated with those hand movements.

Abstract: Aspects of the subject technology relate to gesture-control inputs to an electronic device for controlling one or more other devices. The electronic device can efficiently provide gesture control for multiple other devices by mapping a finite set of user gestures to a specific set of gesture-control elements for each of the multiple other devices. In this way a single gesture can be detected for potentially controlling various different functions of various different devices. Prior to gesture control, the electronic device may receive a selection of a particular one of the multiple other devices for control, and obtain the specific set of gesture-control elements for gesture control of that selected device.

Abstract: This document relates to methods and materials for treating a mammal having an autoimmune disease. For example, materials and methods for producing a T cell comprising a FOXP3 polypeptide. Methods and materials for treating a mammal having an autoimmune disease comprising administering to a mammal having an autoimmune disease an effective amount of a T cell are also provided herein.

Abstract: Some embodiments provided herein relate to gene delivery systems and methods using a single plasmid that carries a self-inactivating transposase gene and a corresponding transposon. Some embodiments include nucleic acids having certain sequences, vector including such nucleic acids, and compositions including the vectors.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for generating custom courses for users. A goal of a user of a database system is ascertained and users of a database system that have reached the goal are identified. A list of content items including educational content is generated. The list can be generated using artificial intelligence or computer-generated models. In addition, dependency trees can be applied during the generation of a computer-generated list of content items. The content items can represent a variety of resources including educational learning modules or trails, as well as other actions that the user can take to reach their goal. The list can be provided via a web page for display by a client device, and the user can interact with the list. The user's achievements with respect to the list are tracked and a record of the user's achievements can be updated within the web page, as well as other web pages for access by other users.

Abstract: An amino acid composition for collagen formation includes a first chain unit component, a second chain unit component, and a third chain unit component of collagen. The first chain unit component, the second chain unit component, and the third chain unit component are the same or different from each other, and each of the first chain unit component, the second chain unit component, and the third chain unit component is selected from the group consisting of al chain component, ?2 chain component, ?3 chain component, ?4 chain component, ?5 chain component, and ?6 chain component. The amino acid composition includes Alanine, Phenylalanine, Cysteine, Aspartate, Asparagine, Glutamate, Glutamine, Glycine, Histidine, Leucine, Isoleucine, Lysine, Methionine, Proline, Arginine, Serine, Threonine, Valine, Tryptophan, and Tyrosine and/or the pharmaceutically acceptable salt or ester derivatives thereof.

Abstract: Methods and systems for hardware-accelerated packet multicasting are provided. According to one embodiment, a first multicast packet to be multicast to a first multicast destination is received by a virtual routing system. The multicast packet is caused to be transmitted to the multicast destination by: (i) directing the multicast packet to a first VR of multiple VRs instantiated within the virtual routing system by selecting the first VR from among the multiple VRs to multicast the multicast packet; (ii) configuring the virtual routing system to use a routing context associated with the selected VR in connection with processing of the multicast packet; (iii) reading at least a portion of the multicast packet from one of multiple multicast address spaces associated with the selected VR; and (iv) forwarding the multicast packet to the first multicast destination. Similar steps are then performed for a second multicast packet.

Abstract: Methods and systems for hardware-accelerated packet multicasting are provided. According to one embodiment, a first multicast packet to be multicast to a first multicast destination is received by a virtual routing system. The multicast packet is caused to be transmitted to the multicast destination by: (i) directing the multicast packet to a first VR of multiple VRs instantiated within the virtual routing system by selecting the first VR from among the multiple VRs to multicast the multicast packet; (ii) configuring the virtual routing system to use a routing context associated with the selected VR in connection with processing of the multicast packet; (iii) reading at least a portion of the multicast packet from one of multiple multicast address spaces associated with the selected VR; and (iv) forwarding the multicast packet to the first multicast destination. Similar steps are then performed for a second multicast packet.

Abstract: Methods and systems for hardware-accelerated packet multicasting are provided. According to one embodiment, a first packet to be multicast to a first destination and a second packet to be multicast to a second destination are received. The first and second packets are classified in accordance with different virtual routers (VRs) of multiple VRs instantiated by a virtual routing engine (VRE) of a virtual routing system by determining a first selected VR to multicast the first packet and a second selected VR to multicast the second packet. For each of the first and second packets: a routing context of the VRE is switched to a routing context associated with the selected VR; at least a portion of the packet is read from one of multiple multicast address spaces associated with the selected VR; and the packet is forwarded to the destination.

Abstract: Methods and systems for hardware-accelerated packet multicasting are provided. According to one embodiment, a first packet to be multicast to a first destination and a second packet to be multicast to a second destination are received. The first and second packets are classified in accordance with different virtual routers (VRs) of multiple VRs instantiated by a virtual routing engine (VRE) of a virtual routing system by determining a first selected VR to multicast the first packet and a second selected VR to multicast the second packet. For each of the first and second packets: a routing context of the VRE is switched to a routing context associated with the selected VR; at least a portion of the packet is read from one of multiple multicast address spaces associated with the selected VR; and the packet is forwarded to the destination.

Abstract: Methods and systems for hardware-accelerated packet multicasting are provided. According to one embodiment, a multicast packet is received at an ingress system of a packet-forwarding engine (PFE). Multiple flow classification indices are identified for the multicast packet by the ingress system. The multiple flow classification indices are sent to an egress system of the PFE by the ingress system. A single copy of the multicast packet is buffered in a memory accessible by the egress system. Corresponding transform control instructions are identified by the egress system based on each flow classification index. The single copy of the multicast packet is read from the memory. The multicast packet is transformed to an outgoing packet for each instance of the multicast packet based on the corresponding transform control instructions. The outgoing packet is transmitted for routing to a network.

Abstract: Methods and systems are provided for applying metering and rate-limiting in a virtual router environment and supporting a hierarchy of metering/rate-limiting contexts per packet flow. According to one embodiment, multiple first level metering options and multiple second level metering options associated with a hierarchy of metering levels are provided. A virtual routing engine receives packets associated with a first packet flow and packets associated with a second packet flow. The virtual routing engine performs a first type of metering of the first level metering options on the packets associated with the first packet flow using a first metering control block (MCB) and performs a second type of metering of the second level metering options on the packets associated with the first packet flow and the packets associated with the second packet flow using a second MCB.

Abstract: Methods and systems for hardware-accelerated packet multicasting are provided. According to one embodiment, a multicast packet is received at an ingress system of a packet-forwarding engine (PFE). Multiple flow classification indices are identified for the multicast packet by the ingress system. The multiple flow classification indices are sent to an egress system of the PFE by the ingress system. A single copy of the multicast packet is buffered in a memory accessible by the egress system. Corresponding transform control instructions are identified by the egress system based on each flow classification index. The single copy of the multicast packet is read from the memory. The multicast packet is transformed to an outgoing packet for each instance of the multicast packet based on the corresponding transform control instructions. The outgoing packet is transmitted for routing to a network.

Abstract: Methods and systems are provided for hardware-accelerated packet multicasting in a virtual routing system. According to one embodiment, a virtual routing engine (VRE) including virtual routing processors and corresponding memory systems are provided. The VRE implements virtual routers (VRs) operable on the virtual routing processors and associated routing contexts utilizing potentially overlapping multicast address spaces resident in the memory systems. Multicasting of multicast flows originated by subscribers of a service provider is simultaneously performed on behalf of the subscribers. A VR is selected to handle multicast packets associated with a multicast flow. A routing context of the VRE is switched to one associated with the VR. A packet of the multicast flow is forwarded to multiple destinations by reading a portion of the packet from a common buffer for each instance of multicasting and applying transform control instructions to the packet for each instance of multicasting.

Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a flow data structure is established that identifies current packet flows associated with multiple virtual routers in the virtual router-based network device. When an incoming packet is received by the virtual router-based network device, it is then determined whether the incoming packet is associated with a current packet flow by accessing the flow data structure based on a header associated with the incoming packet. If it is determined that the incoming packet is associated with the current packet flow, then the incoming packet is hardware forwarded via a network interface of the virtual router-based network device without intervention by a processor of the virtual router-based network device, otherwise the incoming packet is forwarded to software on the processor for flow learning.

Abstract: A method of treating diseased tissue in a patient, the diseased tissue being proximate a hardened previously implanted bone cement including relatively high atomic number elements in a patient. The method includes generating a photon beam and directing the generated photon beam into the patient in a direction such that at least a portion of the photon beam impinges on the hardened bone cement and generates Compton interaction knock-out electrons from the high atomic number elements included in the hardened bone cement as a result of interaction of the at least a portion of the photon beam with the bone cement, wherein the direction of the photon beam is such that the at least a portion of the photon beam impinges on the hardened bone cement so that at least some of the Compton interaction knock-out electrons impinge upon the diseased tissue.