Abstract: Systems, methods, and software can be used for securing in-tunnel messages. One example of a method includes establishing a tunneling connection between a server and an endpoint. The method further includes receiving a packet from the server over the tunneling connection. The method yet further includes determining that the packet comprises a tunneling control message based on at least one address in the packet. Based on the determination of a received packet comprising a tunneling control message, the method can ensure the security of in-tunnel messages based on an indication in the tunneling control message.

Abstract: Systems, methods, and software can be used to detect domain name system tunneling (DNST). In some aspects, a method comprises: receiving a plurality of domain name system (DNS) requests to access one or more domains; processing, by using a machine learning model, the plurality of DNS requests to determine one or more suspicious DNS requests among the plurality of DNS requests; and processing, by using a statistical analysis model, the one or more suspicious DNS requests to determine whether the one or more suspicious DNS requests are potentially malicious DNS requests.

Abstract: Methods and devices are provided for determining a service associated with an unclassified traffic flow in a computer network. Classification information for a plurality of classified traffic flows in the computer network are obtained that indicate an association between each of the classified flows and a service. A primary cluster analysis is performed on the plurality of classified flows and the unclassified flow to associate the unclassified flow to a group of classified flows having a common service. The association between the unclassified flow and the common service is provided to a network security management system.

Abstract: Systems, methods, and software can be used to determine a classification of a network accessible page, for example a web page on Internet. In some aspects, a method comprises receiving, at a gateway, a request for accessing a network accessible page from an end-user device; processing the network accessible page to generate a first embedding that characterizes network attributes of a domain of the network accessible page, and a second embedding that characterizes content attributes of the network accessible page; generating, from the first embedding, a first score that characterizes a predicted similarity between the network accessible page and one or more known network accessible pages; generating, from the second embedding, a second score that characterizes a predicted likelihood that the network accessible page is asking for sensitive information; and using at least the first score and the second score to determine a classification of the network accessible page.

Abstract: A dual sensory input speech detection method includes receiving, at a first time, a first video image input of a conference participant of the video conference and a first audio input of the conference participant; communicating the first video image input to the video conference; identifying the first video image input as a first facial image of the conference participant; determining, based on the first facial image, the first video image input indicates the conference participant is in a speaking state; identifying the first audio input as a first speech sound; determining, while in the speaking state, the first speech sound originates from the conference participant; and communicating the first audio input to an audio output for the video conference.

Abstract: Systems, methods, and software can be used for securing in-tunnel messages. One example of a method includes establishing a tunneling connection between a server and an endpoint. The method further includes receiving a packet from the server over the tunneling connection. The method yet further includes determining that the packet comprises a tunneling control message based on at least one address in the packet. Based on the determination of a received packet comprising a tunneling control message, the method can ensure the security of in-tunnel messages based on an indication in the tunneling control message.

Abstract: A dual sensory input speech detection method includes receiving, at a first time, a first video image input of a conference participant of the video conference and a first audio input of the conference participant; communicating the first video image input to the video conference; identifying the first video image input as a first facial image of the conference participant; determining, based on the first facial image, the first video image input indicates the conference participant is in a speaking state; identifying the first audio input as a first speech sound; determining, while in the speaking state, the first speech sound originates from the conference participant; and communicating the first audio input to an audio output for the video conference.

Abstract: Methods and devices are provided for determining a service associated with an unclassified traffic flow in a computer network. Classification information for a plurality of classified traffic flows in the computer network are obtained that indicate an association between each of the classified flows and a service. A primary cluster analysis is performed on the plurality of classified flows and the unclassified flow to associate the unclassified flow to a group of classified flows having a common service. The association between the unclassified flow and the common service is provided to a network security management system.

Abstract: A dual sensory input speech detection method includes receiving, at a first time, a first video image input of a conference participant of the video conference and a first audio input of the conference participant; communicating the first video image input to the video conference; identifying the first video image input as a first facial image of the conference participant; determining, based on the first facial image, the first video image input indicates the conference participant is in a speaking state; identifying the first audio input as a first speech sound; determining, while in the speaking state, the first speech sound originates from the conference participant; and communicating the first audio input to an audio output for the video conference.

Abstract: A system and method for determining and providing updates of message status for a message sent from a sender mobile device to a recipient mobile device includes a provider system configured to transmit notifications of messages to a recipient device using a push notification service in addition to transmitting the message to the recipient device over a distinct communication path. When a message is received from a sending device, the provider system initiates a push notification, which may be routed through a third-party service, and based on that push notification sends an initial notification of delivery to the sending device. When the recipient device acknowledges successful receipt and processing of the message, the provider system transmits a final delivery notification to the sending device. The use of the push notification service may be based on a determination of a current state of a receiving application executing on the recipient device.

Abstract: A method and electronic device are provided for maintaining a message store having a plurality of messages includes maintaining at the electronic device a client bookmark indicating a point in the message store up to which the content of the message store maintained at the electronic device is known to be complete, and a maximum message identifier (ID) indicating the largest message identifier of the plurality of messages of the message store that the electronic device has received, sending to a server a sync request message for the message store, the sync request message including the client bookmark in response to determining at least one of the client bookmark and the maximum message ID do not match, and the electronic device connecting with the server after a period of being disconnected.

Abstract: A system and method for private text chatting. A request is sent to a remote device to establish a private text chat session. Prior to receiving an acceptance of the private chat session request from the remote device, at least one text chat message is received from the remote device and stored. The acceptance of the private chat session request is received from the remote device. Subsequent to receiving the acceptance of the private chat session request, a private text chat session interface is displayed to conduct the private text chat session. The received at least one text chat message is displayed in the private text chat session interface.

Abstract: A method and electronic device are provided for maintaining a message store having a plurality of messages includes maintaining at the electronic device a client bookmark indicating a point in the message store up to which the content of the message store maintained at the electronic device is known to be complete, and a maximum message identifier (ID) indicating the largest message identifier of the plurality of messages of the message store that the electronic device has received, sending to a server a sync request message for the message store, the sync request message including the client bookmark in response to determining at least one of the client bookmark and the maximum message ID do not match, and the electronic device connecting with the server after a period of being disconnected.

Abstract: A system and method for private text chatting. A request is sent to a remote device to establish a private text chat session. Prior to receiving an acceptance of the private chat session request from the remote device, at least one text chat message is received from the remote device and stored. The acceptance of the private chat session request is received from the remote device. Subsequent to receiving the acceptance of the private chat session request, a private text chat session interface is displayed to conduct the private text chat session. The received at least one text chat message is displayed in the private text chat session interface.

Abstract: A system and method for private text chatting. A request to a remote device to establish a private text chat session is either sent or received. Based on the sending or receiving, an acceptance from the remote device accepting the request is received. Based on the sending or receiving, a separate user interface to conduct the private text chat session is presented. Private text chat messages are exchanged in association with the private text chat session based on and subsequent to the receiving and the presenting.

Abstract: A method of responding to a text-based communication on a portable electronic device includes receiving the text-based communication at the portable electronic device, performing textual analysis on the text-based communication to determine a set of possible responses, for each possible response of the set of possible responses, ranking the possible responses based at least on auxiliary information at the portable electronic device, and selecting a first possible response as a suggested response based on the ranking of the possible responses.

Abstract: A system and method for private text chatting. A request to a remote device to establish a private text chat session is either sent or received. Based on the sending or receiving, an acceptance from the remote device accepting the request is received. Based on the sending or receiving, a separate user interface to conduct the private text chat session is presented. Private text chat messages are exchanged in association with the private text chat session based on and subsequent to the receiving and the presenting.

Abstract: A method of responding to a text-based communication on a portable electronic device includes receiving the text-based communication at the portable electronic device, performing textual analysis on the text-based communication to determine a set of possible responses, for each possible response of the set of possible responses, ranking the possible responses based at least on auxiliary information at the portable electronic device, and selecting a first possible response as a suggested response based on the ranking of the possible responses.

Abstract: A system, method, and apparatus for integrating active interest information with an address book are provided. Active interest information is indicative of a current or ongoing interest of a first user and may be generated based on use of an application client by the first user. The active interest information is used to update an active interest field in a contact record describing the first user in an address book associated with a second user. The contact record may be updated by an address book client or a converged address book server. Provided is a converged address book server that manages the sharing and updating of active interest information and address books. The active interest information may also be updated using a personal contact card associated with the first user. Also provided is a method and apparatus for prompting communication between contacts based on active interest information.

Abstract: A wireless communication device, computer program product and method of establishing secure communications between a first wireless communication device and a second wireless communication device for an instant messaging application is provided. Contact information representing a contact associated with a second wireless communication device is received at the first device. The contact information includes capability information. The first device determines from the capability information whether the second device is capable of communicating using an enhanced encryption scheme, and if so, establishes a protected communication session by sending a pass phrase to the second device via an out of band channel and receiving the pass phrase back from the second device via the instant messaging application. Communication between the devices is performed using an enhanced encryption scheme.