Abstract: This disclosure describes techniques of using a hosting device to provide multiple versions of a single web application. As described in detail below, the hosting device stores resources associated with different versions of the web application in different subdirectories. When the hosting device receives a request associated with the web application, the hosting device automatically identifies one of the versions of the web application as an applicable version of the web application. The hosting device rewrites a pathname in the request to include a subdirectory name of the subdirectory that stores the applicable version of the web application. The hosting device then dereferences the resource identified by the rewritten pathname. In this way, the hosting device uses the resources of the applicable version of the web application to process the request.

Abstract: A method and system for distributing and enforcing security policies is provided. A firewall agent executing at a host computer system that is to be protected receives security policies for the enforcement engines responsible for enforcing the security policies on the host computer system. A security policy has rules that each provide a condition and action to be performed when the condition is satisfied. A rule also has a rule type that is used by the distribution system to identify the security components that are responsible for enforcing the rules. To distribute the security policies that have been received at a host computer system, the firewall agent identifies to which enforcement engine a rule applies based in part on rule type. The firewall agent then distributes the rule to the identified enforcement engine, which then enforces the rule.

Abstract: A method is provided for allocating resources for users of a service based on whether a user has expressed intent to fully utilize capabilities of the service. If the intent is expressed by a user, an infrastructure is created that enables the user to maintain, via a user interface, artifacts associated with an account of the user on the service. A user that has not yet expressed such intent is presented with a prospective user interface simulating the user interface without enabling the prospective user to maintain the artifacts associated with an account of the prospective user.

Abstract: A centralized location for discovery and data exchange for web applications. Embodiments of the invention are directed to providing a centralized interface location to send data to and receive data from one or more web applications hosted on application servers different from a server hosting the centralized interface. An application developer for a subscriber having an account with the web application may therefore easily extend the functionality of one or more web applications by communicating with a single interface provided, rather than with separate interfaces for each application. The centralized interface may provide information such as a list of all web applications or functionality to which a particular subscriber has access, and may support any desired extension (e.g., addition of users).

Abstract: A system and method for management of software application use licenses and software application subscription licenses are provided. A software subscription service of one or more client computing devices having a number of subscriber-based software applications and a software subscriber agent. The software applications are associated with a software application use license and a software application subscription license. The system can also include a software subscription service for generating and transmitting software application subscription licenses to the client computing devices based upon a comparison of credentials. During the execution of the software application, the software subscription agent periodically transmits a request to update the software application subscription license based upon a detected condition.

Abstract: A method and system for distributing and enforcing security policies is provided. A firewall agent executing at a host computer system that is to be protected receives security policies for the enforcement engines responsible for enforcing the security policies on the host computer system. A security policy has rules that each provide a condition and action to be performed when the condition is satisfied. A rule also has a rule type that is used by the distribution system to identify the security components that are responsible for enforcing the rules. To distribute the security policies that have been received at a host computer system, the firewall agent identifies to which enforcement engine a rule applies based in part on rule type. The firewall agent then distributes the rule to the identified enforcement engine, which then enforces the rule.

Abstract: A method and system for combining and enforcing security policies is provided. The security system is provided with security policies that have process set criteria and associated rules. The security system combines the security policies by generating a rule list of the security policies and associated process set criteria. The rules of the rule list are ordered based on rule type and action of the rule. When a new process is started to execute an application, the security system determines the process set criteria that are satisfied by the application. The security system then identifies the rules of the rule list that are associated with the satisfied process set criteria. When a security enforcement event associated with the process occurs, the security system applies each of the rules associated with the process to the security enforcement event in an order specified by the rule list.

Abstract: A system, method, and computer-accessible medium for facilitating parsing content from an XML document are provided. A parser and an agent processes XML events from an event-based XML reader in accordance with a parsing map. The parsing map defines XML elements of interest and custom parsing code. The agent comprises a communications channel through which it receives the parsing map, and further through which the agent returns the content of the defined XML elements. The agent further comprises a state machine that is automatically generated in accordance with the parsing map. The automatically generated state machine advantageously avoids the need for the user to construct their own state machine when parsing XML elements using an event-based XML reader.