Abstract: A security server assigns users sessions to a provider that provides virtual private networks. The security server trains a machine-learned model to identify a provider from a set of providers. The security server obtains connection parameters associated with a requested VPN connection. Connection parameters comprise a location of a computing device that requested the VPN connection, a time of the requested VPN connection, a current and/or historical state of VPN performance data, and user preferences. The security server applies the machine-learned model to the connection parameters to identify a provider. The security server provisions a user session based on the provider and establishes a connection through the provider.

Abstract: A system manages the rate of false positive detections of malware by controlling release of malware definition updates. The system determines a cohort of target devices for distributing an initial release of an update of malware definitions and sends the update exclusively to the target devices. The system then obtains telemetry data which include information associated with usage of the target devices following the update. The system analyzes the telemetry data for instances of false positive detections of malware arising from the update to the malware definitions. Based on the analysis of the telemetry data, the system determines whether to further distribute the update outside of the cohort of target client devices or to roll back the update provided to the cohort. The system executes the decision to further distribute the update or to roll back the update.

Abstract: An example operation may include one or more of storing state information of a system component via a data block included among a hash-linked chain of data blocks of a blockchain, the state information identifying operating features of the system component at a first point in time, receiving, from the system component, re-computed state information of the system component captured at a second point in time that is subsequent to the first point in time, determining an integrity of the system component based on the re-computed state information and the previously stored state information of the system component stored among the hash-linked chain of data blocks, and transmitting information about the determined integrity to a computing system associated with the system component.

Abstract: Systems, computer program products, and methods are described herein for implementing a resource evaluation engine within a technical environment. The present invention is configured to establish a communication link with a technology platform of a third party system; electronically receive, via the communication link, one or more resources associated with the technology platform of the third party system; determine one or more supervisory requirements associated with the entity; determine whether the one or more resources associated with the technology platform meets the one or more supervisory requirements associated with the entity; and validate the technology platform of the third party based on at least determining that the one or more resources associated with the technology platform meets the one or more supervisory requirements associated with the entity.

Abstract: A computer security system includes a test management system and associated communication architecture that enables creation of customized tests of computer security application features. A server stores a test script in a custom scripting language. The test script includes a set of control statements that may be organized in a decision tree to control facilitation of the test. Clients poll the server to independently obtain and execute the control statements. Execution of the control statements control which clients participate in a test, which feature will be tested in the test, and what telemetry data will be collected from the clients to evaluate the test. The server evaluates the telemetry data to determine an outcome of the test and determines whether to further distribute or roll back the tested feature based on the test outcome. The testing can be utilized to rapidly and robustly deploy features that will enhance computer security.

Abstract: A content delivery system may receive and aggregate video content from one or more content sources. In a first embodiment, the content delivery system may start streaming a video to a first viewer on a first device and then receive a request for a catch up version to be streamed to a second viewer viewing a second device. The content delivery system may send replacement segments of the video that are shortened summaries to the second device until the second viewer has caught up to the first viewer on the first device. In a second embodiment, the content delivery system may detect two or more viewers and customize a video content for both viewers. In a third embodiment, the content delivery system, in real time, may customize a segment of a video (possibly using a “green screen” or overlaying a second video over the original video segment) based on characteristics of the viewer and then stream the customized video segment to the viewer.

Abstract: A malware infection prediction method predicts a likelihood that a client device is to be infected with in a period of time based on state and behavior telemetry data. A malware infection prediction system receives telemetry data associated with use (i.e. behavior data) and configuration (i.e. state data) of a client device. By using a trained model, the system predicts a likelihood of the client device becoming infected within a given time frame. Based on the predicted likelihood, the system generates recommendations including recommended actions for reducing the likelihood of the client device becoming infected. The system then generates notifications including the recommendations and sends the notifications to the client device or to an administrative account associated with the client device.

Abstract: An example operation may include one or more of connecting, by a data aggregation node, to a blockchain configured to store data, configuring, by the data aggregation node, a transformation of the data, instantiating, by the data aggregation node, at least one rollup blockchain, transforming, by the data aggregation node, the data based on the configuration, executing, by the data aggregation node, a smart contract to populate the transformed data into the at least one rollup blockchain, and archiving the data on a data store outside of the blockchain.

Abstract: A workflow server can receive requests, each for a business process workflow conforming to a business process model. Each business process workflow can include a set of interdependent tasks. The workflow server can satisfy received requests by assigning tasks to different service providers that provide software services. Each of the tasks can be assigned to corresponding ones of the software services. For each task, the workflow server can also defines an allocated cost per software service, and a time allocation per software service for completing the corresponding one of the tasks. Different service providers, including those assigned to tasks, can receive information for ones of the tasks not directly assigned to them by the workflow server. The different service providers can then bid on these tasks. Wherein when bids are won, tasks for a business process flow can be reassigned based on winning bids.

Abstract: In an approach to dynamic network management based on user, device, application, and predicted network characteristics, one or more computer processors identify one or more network interfaces. The one or more computer processors determine one or more network performance parameters and capabilities of the identified network interfaces. The one or more computer processors determine a highest ranked network connection based on the determined network performance parameters and capabilities of the identified network interfaces. The one or more computer processors generate one or more network templates based on the determined highest ranked network connection and associated network performance parameters. The one or more computer processors apply the one or more generated network templates to a plurality of entities and devices.

Abstract: Provided is a method for generating a personalized response to a user query. An omnichannel assistant receives a query from a user. The query is parsed to identify a user request. A user profile of the user is analyzed to determine one or more sources for responding to the query. The user profile includes a set of trusted sources for the user. Data for responding to the query is retrieved from the one or more sources. A channel for a response is selected based at least in part on the user profile. The response to the query is generated. The response is generated using the retrieved data, the selected channel, and the user profile. The response is then transmitted to the user.

Abstract: An approach for creating dynamic content. The approach receives advertiser data associated with activities of one or more advertisers and receives publisher data associated with activities of one or more publishers. The approach manages the one or more DSPs activities associated with the received advertiser data and publisher data. Furthermore, the approach manages the one or more SSPs activities associated with the received advertiser data, publisher data and the one or more DSPs activities and selects one or more advertisement for one or more website. Finally, the approach manages the one or more consumer behaviors associated with the selected one or more advertisement.

Abstract: Client devices detect malware based on a ruleset received from a security server. To evaluate a current ruleset, an administrative client device initiates a ruleset evaluation of the malware detection ruleset. A security server partitions stored malware samples into a group of evaluation lists based on an evaluation policy. The security server then creates scanning nodes on an evaluation server according to the evaluation policy. The scanning nodes scan the malware samples of the evaluation lists using the rulesets and associate each malware sample with a rule of the ruleset based on the detections, if any. The security server analyzes the associations and optimizes the ruleset and stored malware samples. The security server sends the optimized ruleset to client devices such that they more efficiently detect malware samples.

Abstract: Client devices detect malware based on a ruleset received from a security server. To evaluate a current ruleset, an administrative client device initiates a ruleset evaluation of the malware detection ruleset. A security server partitions stored malware samples into a group of evaluation lists based on an evaluation policy. The security server then creates scanning nodes on an evaluation server according to the evaluation policy. The scanning nodes scan the malware samples of the evaluation lists using the rulesets and associate each malware sample with a rule of the ruleset based on the detections, if any. The security server analyzes the associations and optimizes the ruleset and stored malware samples. The security server sends the optimized ruleset to client devices such that they more efficiently detect malware samples.

Abstract: In an approach to dynamic network management based on user, device, application, and predicted network characteristics, one or more computer processors identify one or more network interfaces. The one or more computer processors determine one or more network performance parameters and capabilities of the identified network interfaces. The one or more computer processors determine a highest ranked network connection based on the determined network performance parameters and capabilities of the identified network interfaces. The one or more computer processors generate one or more network templates based on the determined highest ranked network connection and associated network performance parameters. The one or more computer processors apply the one or more generated network templates to a plurality of entities and devices.

Abstract: A network traffic associated with a communication request within a computing device can be identified. The device can comprise of a first and second communication stack which can addresses a first and a second network interface within the computing device. The first network interface can be associated with a mobile broadband network and the second network interface can be associated with a computing network. A first and second portion of the network traffic associated with the communication request can be programmatically determined to be conveyed to the first and second network interfaces. The first and second portions of network traffic can be conveyed simultaneously to the mobile broadband network associated with the first network interface and the computing network associated with the second network interface.

Abstract: An example operation may include one or more of storing state information of a system component via a data block included among a hash-linked chain of data blocks of a blockchain, the state information identifying operating features of the system component at a first point in time, receiving, from the system component, re-computed state information of the system component captured at a second point in time that is subsequent to the first point in time, determining an integrity of the system component based on the re-computed state information and the previously stored state information of the system component stored among the hash-linked chain of data blocks, and transmitting information about the determined integrity to a computing system associated with the system component.

Abstract: This invention relates to compounds of the general formula: in which the variable groups are as defined herein, and to their preparation and use.

Abstract: A content delivery system may receive and aggregate video content from one or more content sources. In a first embodiment, the content delivery system may start streaming a video to a first viewer on a first device and then receive a request for a catch up version to be streamed to a second viewer viewing a second device. The content delivery system may send replacement segments of the video that are shortened summaries to the second device until the second viewer has caught up to the first viewer on the first device. In a second embodiment, the content delivery system may detect two or more viewers and customize a video content for both viewers. In a third embodiment, the content delivery system, in real time, may customize a segment of a video (possibly using a “green screen” or overlaying a second video over the original video segment) based on characteristics of the viewer and then stream the customized video segment to the viewer.

Abstract: A channel programming associated with a channel can be selected. The channel can be associated with a programming broadcasting system. The channel programming can be displayed upon a presentation device. An immediate content from a content delivery entity interrupting the presentation of the channel programming can be received. The channel programming and the immediate content can be simultaneously presented on the presentation device.