Abstract: Systems and methods for transmitting content to a client via a communication network are provided. An insertion server, running within a firewall device associated with a private IP network, detects establishment of a transport communication protocol connection between a client associated with the network and a destination located external to the network by examining packets as they pass through the network and pass by the insertion server. A content request of an application protocol initiated by the client and directed to the destination is observed by the insertion server. The content request is negated by the insertion server by causing a canceling message of the transport communication protocol to be sent to the destination. Unsolicited content is caused to be selected for delivery to the client by the insertion server. The unsolicited content is sent by the insertion server to the client via the application protocol.

Abstract: Systems and methods for transmitting content to a client via a communication network are provided. According to one embodiment, an insertion server running within a firewall device of a network observes a content request of an application protocol by monitoring or proxying transport communication protocol connections established through the firewall device. The content request is (i) originated by a client device coupled to the network, (ii) directed to a destination device coupled to the network and (iii) associated with one of the multiple transport communication protocol connections. Responsive to observing the content request, the insertion server determines whether one or more conditions are satisfied. If so, the content request is negated by causing a canceling message of the transport communication protocol to be sent to the destination device and unsolicited content is selected and delivered to the client device via the application protocol.

Abstract: Systems and methods for transmitting content to a client via a communication network are provided. An insertion server, running within a firewall device associated with a private IP network, detects establishment of a transport communication protocol connection between a client associated with the network and a destination located external to the network by examining packets as they pass through the network and pass by the insertion server. A content request of an application protocol initiated by the client and directed to the destination is observed by the insertion server. The content request is negated by the insertion server by causing a canceling message of the transport communication protocol to be sent to the destination. Unsolicited content is caused to be selected for delivery to the client by the insertion server. The unsolicited content is sent by the insertion server to the client via the application protocol.

Abstract: Systems and methods for transmitting content to a client via a communication network are provided. According to one embodiment, an insertion server running within a firewall device of a network observes a content request of an application protocol by monitoring or proxying transport communication protocol connections established through the firewall device. The content request is (i) originated by a client device coupled to the network, (ii) directed to a destination device coupled to the network and (iii) associated with one of the multiple transport communication protocol connections. Responsive to observing the content request, the insertion server determines whether one or more conditions are satisfied. If so, the content request is negated by causing a canceling message of the transport communication protocol to be sent to the destination device and unsolicited content is selected and delivered to the client device via the application protocol.

Abstract: Systems and methods for transmitting content to a client via a communication network are provided. In one embodiment, a method of transmitting unsolicited content, such as an advertisement, to a client via the Internet may include one or more of the following steps: 1) intercepting a data transfer protocol request/response; 2) analyzing information contained within the data transfer protocol request/response; 3) selecting advertising content to send to the client; and 4) sending the selected content to the client. For example, a TCP/IP request, such as a hypertext transfer protocol (HTTP) request, from the client may be detected. Next, substitute or supplemental content may be selected for sending to the client. Lastly, the selected substitute or supplemental content may be sent to the client in lieu of or in addition to the originally requested content.

Abstract: Systems and methods for transmitting content to a client via a communication network are provided. According to one embodiment, a system includes a content server, an insertion server and a policy server. The content server stores and selects substitute or supplemental content. The insertion server monitors client traffic, detects client TCP/IP requests or destination TCP/IP responses and sends the selected substitute or supplemental content retrieved from the content server to the client in lieu of or in addition to content requested by the client TCP/IP requests or provided by the destination TCP/IP responses. The policy server provides instructions to the insertion server with respect to timing of detecting the client TCP/IP requests or destination TCP/IP responses and a delay associated with completing the client TCP/IP requests or destination TCP/IP responses.

Abstract: Methods and systems are provided for delaying local information classification until global intelligence has an opportunity to be gathered. According to one embodiment, an initial information identification process, e.g., an initial spam detection, is performed on received electronic information, e.g., an e-mail message. Based on the initial information identification process, classification of the received electronic information is attempted. If the received electronic information cannot be unambiguously classified as being within one of a set of predetermined categories (e.g., spam or clean), then an opportunity is provided for global intelligence to be gathered regarding the received electronic information by queuing the received electronic information for re-evaluation. The electronic information is subsequently classified by performing a re-evaluation information identification process, e.g.

Abstract: Systems and methods for tracking electronic messages and data are provided. According to one embodiment, a linking object insertion routine identifies an electronic mail (email) message as a candidate for user feedback based on the email message having been previously classified as spam by a real-time email spam scanning routine associated with a commercial anti-spam service. The linking object insertion routine facilitates user submission of the user feedback regarding the email message to the commercial anti-spam service by embedding a linking object within the email message. The linking object is configured to automate communication of one or more digital signatures of the email message generated by the real-time email spam scanning routine to the commercial anti-spam service by performing out-of-band signaling with the commercial anti-spam service.

Abstract: Systems and methods for tracking electronic messages and data are provided. In one embodiment, the invention consists of a method of tracking email messages. In various embodiments, steps may include a) identifying an email message for tracking and b) inserting a linking object, into a tracked email message. Responsive to activation by a receiver of the email message, the linking object enables the receiver to submit information to a commercial anti-spam service or a commercial anti-virus service. The method can be used to identify and track email messages defined as spam or defined as containing viruses. The receiver's privacy may be preserved with respect to content of the email message by limiting the information submitted to signatures of the electronic message and other information associated with the electronic message that are reasonably required for spam or virus analysis.

Abstract: Systems and methods for transmitting content to a client via a communication network are provided. According to one embodiment, a system includes a content server, an insertion server and a policy server. The content server stores and selects substitute or supplemental content. The insertion server monitors client traffic, detects client TCP/IP requests or destination TCP/IP responses and sends the selected substitute or supplemental content retrieved from the content server to the client in lieu of or in addition to content requested by the client TCP/IP requests or provided by the destination TCP/IP responses. The policy server provides instructions to the insertion server with respect to timing of detecting the client TCP/IP requests or destination TCP/IP responses and a delay associated with completing the client TCP/IP requests or destination TCP/IP responses.

Abstract: Systems and methods for tracking electronic messages and data are provided. In one embodiment, the invention consists of a method of tracking email messages. In various embodiments, steps may include a) identifying an email message for tracking and b) inserting a linking object, into a tracked email message. Responsive to activation by a receiver of the email message, the linking object enables the receiver to submit information to a commercial anti-spam service or a commercial anti-virus service. The method can be used to identify and track email messages defined as spam or defined as containing viruses. The receiver's privacy may be preserved with respect to content of the email message by limiting the information submitted to signatures of the electronic message and other information associated with the electronic message that are reasonably required for spam or virus analysis.

Abstract: Systems and methods for tracking electronic messages and data are provided. According to one embodiment, steps for tracking an email message, or other electronic message, may include identifying an email message for tracking, associating a linking object with the tracked message, and responsive to activation of the linking object by a receiver of the electronic message, automatically submitting information regarding the electronic message to be tracked to a designated resource. According to various embodiments, a linking object may include a Universal Resource Identifier (URI), a java script, an executable file, a visual basic script (VBS), and/or the like. In accordance with one embodiment, the linking object facilitates submission of information regarding the tracked email message to an anti-spam system by a receiver of the tracked email message.

Abstract: Systems are provided for delaying e-mail classification until global intelligence has an opportunity to be gathered. According to one embodiment, a spam detection system includes a global intelligence network and a network device. The global intelligence network contains global intelligence servers coupled to a public network and configured to (i) gather intelligence from distributed anti-spam engines, (ii) maintain and update e-mail message signatures and associated reputation information and (iii) readjust spam detection characteristics of the distributed anti-spam engines.

Abstract: Methods and systems are provided for delaying local information classification until global intelligence has an opportunity to be gathered. According to one embodiment, an initial information identification process, e.g., an initial spam detection, is performed on received electronic information, e.g., an e-mail message. Based on the initial information identification process, classification of the received electronic information is attempted. If the received electronic information cannot be unambiguously classified as being within one of a set of predetermined categories (e.g., spam or clean), then an opportunity is provided for global intelligence to be gathered regarding the received electronic information by queuing the received electronic information for re-evaluation. The electronic information is subsequently classified by performing a re-evaluation information identification process, e.g.

Abstract: Systems and methods for transmitting content to a client via a communication network are provided. In one embodiment, a method of transmitting unsolicited content, such as an advertisement, to a client via the Internet may include one or more of the following steps: 1) intercepting a data transfer protocol request/response; 2) analyzing information contained within the data transfer protocol request/response; 3) selecting advertising content to send to the client; and 4) sending the selected content to the client. For example, a TCP/IP request, such as a hypertext transfer protocol (HTTP) request, from the client may be detected. Next, substitute or supplemental content may be selected for sending to the client. Lastly, the selected substitute or supplemental content may be sent to the client in lieu of or in addition to the originally requested content.

Abstract: Systems and methods for tracking electronic messages and data are provided. According to one embodiment, steps for tracking an email message, or other electronic message, may include identifying an email message for tracking, associating a linking object with the tracked message, and responsive to activation of the linking object by a receiver of the electronic message, automatically submitting information regarding the electronic message to be tracked to a designated resource. According to various embodiments, a linking object may include a Universal Resource Identifier (URI), a java script, an executable file, a visual basic script (VBS), and/or the like. In accordance with one embodiment, the linking object facilitates submission of information regarding the tracked email message to an anti-spam system by a receiver of the tracked email message.