Abstract: Significant and aggregate user authentication activity may be analyzed across a population of users and computers in one or more networks to differentiate between authorized users and intruders in a network, and/or to detect inappropriate behavior by otherwise authorized users. Dynamic graphs and graph models over user and computer authentication activity, including time-constrained models, may be used for the purposes of profiling and analyzing user behavior in computer networks. More specifically, an edge-based breadth first search of graphs may be used that enforces time-constraints while maintaining traditional breadth first search computational complexity equivalence.

Abstract: One embodiment provides a method, including: accepting, on a touch surface, ink stroke data; identifying, using a processor, that the ink stroke comprises a stroke change; determining, using the processor, if the stroke change is within a predetermined zone; interpreting, using the processor, the ink stroke as a gesture command if the stroke change is within the predetermined zone; and executing, based on the gesture command, at least one action. Other aspects are described and claimed.

Abstract: One embodiment provides a method, including: detecting, using a processor, an input method editor application is running on a device; detecting, using a processor, a data entry field is active; and responsive to detecting the input method editor application is running and the data entry field is active, suppressing, using a processor, an on screen keyboard from being displayed on a display device.

Abstract: An embodiment provides a method, including: in a system, determining a set of processes which run at system boot; monitoring the processes at system boot for system resource utilization; categorizing processes of the set of processes based on said monitoring; and changing a start time during boot of at least one process based on said categorizing. Other aspects are described and claimed.

Abstract: Apparatuses, methods, and program products are disclosed for erasing with a stylus. By use of a processor, an orientation of a stylus relative to a display is determined. Whether a touch event of the display occurs is determined. An erase function is performed in response to the touch event occurring and the orientation of the stylus being is in a substantially inverted position.

Abstract: One embodiment provides a method, including: receiving, at an information handling device, an indication to produce voice output; identifying, using a processor, a voice profile; generating, using a processor, the voice output, said voice output being tuned based on the voice profile; and providing, using a speaker, the voice output. Other aspects are described and claimed.

Abstract: One embodiment provides a method, involving: receiving, at a device, handwriting input from a user; detecting, using a processor, a location of at least a part of the handwriting input; and providing, on a display device, at least one adaptive line to guide the handwriting input; wherein the at least one adaptive line is positioned based on the location of at least a part of the handwriting input. Other aspects are described and claimed.

Abstract: In one aspect, a device includes a processor, at least one lens accessible to the processor, and a memory accessible to the processor. The memory bears instructions executable by the processor to receive synchronization information from another device, and based on the synchronization information, actuate the at least one lens to permit visible light to pass therethrough at times at which first frames of first content are presented and not at times that second frames different from the first frames for second content different from the first content are presented.

Abstract: One embodiment provides a method, including: receiving, on a touch input device, user input; indentifying, using a processor, syntax in the user input; modifying, based on the identified syntax, the user input; and inserting, using a processor, the modified user input into a data field. Other aspects are described and claimed.

Abstract: One embodiment provides a method, including: detecting, using a processor, an input method editor application is running on a device; detecting, using a processor, a data entry field is active; and responsive to detecting the input method editor application is running and the data entry field is active, suppressing, using a processor, an on screen keyboard from being displayed on a display device.

Abstract: One embodiment provides a method, including: accepting, on a touch surface, ink stroke data; identifying, using a processor, that the ink stroke comprises a stroke change; determining, using the processor, if the stroke change is within a predetermined zone; interpreting, using the processor, the ink stroke as a gesture command if the stroke change is within the predetermined zone; and executing, based on the gesture command, at least one action. Other aspects are described and claimed.

Abstract: Significant and aggregate user authentication activity may be analyzed across a population of users and computers in one or more networks to differentiate between authorized users and intruders in a network, and/or to detect inappropriate behavior by otherwise authorized users. Dynamic graphs and graph models over user and computer authentication activity, including time-constrained models, may be used for the purposes of profiling and analyzing user behavior in computer networks. More specifically, an edge-based breadth first search of graphs may be used that enforces time-constraints while maintaining traditional breadth first search computational complexity equivalence.

Abstract: One embodiment provides a method, including: accepting, in an overlay input application, one or more ink strokes provided to an input field overlay area; wherein the input field overlay area is located on top of an underlying application display; and providing, in the input field overlay area, an at least partially opaque background. Other embodiments are described and claimed.

Abstract: Non-harmful data mimicking computer network attacks may be inserted in a computer network. Anomalous real network connections may be generated between a plurality of computing systems in the network. Data mimicking an attack may also be generated. The generated data may be transmitted between the plurality of computing systems using the real network connections and measured to determine whether an attack is detected.

Abstract: Apparatuses, methods, and program products are disclosed for erasing with a stylus. By use of a processor, an orientation of a stylus relative to a display is determined. Whether a touch event of the display occurs is determined. An erase function is performed in response to the touch event occurring and the orientation of the stylus being is in a substantially inverted position.

Abstract: One embodiment provides a method, including: accepting, at an input surface, pen input; determining, using a processor of an electronic device, a modifier key characteristic of the pen input; and executing, using the processor, a modifier key function associated with the pen input. Other embodiments are described and claimed.

Abstract: A method includes receiving an image of a display surface from a pointing device having a camera with a field of view wider than a tip of the pointing device, processing the received image to identify an area on the display surface within the field of view of the camera, and identifying a position of the tip of the pointing device on the display surface as a function of the identified area on the display surface.

Abstract: In one aspect, a device includes a processor, at least one lens accessible to the processor, and a memory accessible to the processor. The memory bears instructions executable by the processor to receive synchronization information from another device, and based on the synchronization information, actuate the at least one lens to permit visible light to pass therethrough at times at which first frames of first content are presented and not at times that second frames different from the first frames for second content different from the first content are presented.

Abstract: One embodiment provides a method, including: accepting, at an input and display device, an ink stroke provided to an input overlay application; providing a display of the ink stroke on the input and display device; converting the ink stroke input into a converted input for an underlying application; providing the converted input to the underlying application; detecting a user input associated with the converted input; and reverting to the ink stroke on the input and display device. Other embodiments are described and claimed.

Abstract: One embodiment provides a method, including: providing, on an input and display device, an input field overlay application occupying an initial area of the input and display device, the input field overlay application overlaying an input field of an underlying application; accepting, using the input and display device, one or more handwriting input strokes provided to the input field overlay application; and resizing, on the input and display device, the initial area. Other embodiments are described and claimed.