Abstract: A malware detection/identification system scores each subject file and/or scores ‘tags’ obtained from the subject file to determine the potential that the file contains malicious components. A file or tag score tending to indicate that the subject file may contain malicious components/properties/attributes, may be used to notify the system (and a user of the system) that the file may be potentially malicious, so that the file may be quarantined and subject to further analysis. Embodiments of the current disclosure utilize a database structure that contains multitudes (e.g., hundreds, thousands, or even millions) of “tags” that have been pulled from known malicious and known benign sample files, where the database provides many-to-many relations between the known sample files and the tags.

Abstract: Attacks from automated scripts or processes, such as Web bots, can be dynamically blocked by monitoring dimensions of requests or submissions received by a system. Each host receiving requests can log information about the requests over a specified period of time. For each period of time, specified dimensions of the requests for that host can be analyzed to determine whether the number of requests having a common value for any of those dimensions meets or exceeds a specified threshold. If so, any requests having those specified dimension values can be automatically blocked for the next specified period of time. The requests can be automatically unblocked after that period of time if the requests do not again meet or exceed the threshold, but can be dynamically blocked for subsequent periods of time if the threshold is again met or exceeded.

Abstract: Systems and methods for managing forwarded infectious messages are provided. Managing electronic message comprises receiving a message, forwarding the message, determining that the forwarded message is infectious after the message has been forwarded and preventing the infectious forwarded message from spreading.

Abstract: Provided is an intrusion detection system configured to detect anomalies indicative of a zero-day attack by statistically analyzing substantially all traffic on a network in real-time. The intrusion detection system, in some aspects, includes a network interface; one or more processors communicatively coupled to the network interface; system memory communicatively coupled to the processors. The system memory, in some aspects, stores instructions that when executed by the processors cause the processors to perform steps including: buffering network data from the network interface in the system memory; retrieving the network data buffered in the system memory; applying each of a plurality of statistical or machine-learning intrusion-detection models to the retrieved network data; aggregating intrusion-likelihood scores from each of the intrusion-detection models in an aggregate score, and upon the aggregate score exceeding a threshold, outputting an alert.

Abstract: Technologies are directed to prevention of malicious attacks through cartography of co-processors at a datacenter. According to some examples, configuration data to create a co-processor at a field programmable gate array (FPGA) may be received at a configuration controller. The configuration controller may determine unused arrangements for the co-processor and unused placements at the FPGA corresponding to the unused arrangements. The used arrangements and the unused placements, associated with a type of the co-processor, may be stored in a configuration matrix. One of the unused arrangements and one of the unused placements corresponding to the selected unused arrangement may then be selected by the configuration controller to create the co-processor.

Abstract: An Internet infrastructure that supports search operations along with malware screening that uses a search server of a search string from a client device. The search server comprises a search engine for searching the Internet and contains modules for malware detection and quarantine functions. The search server identifies the malwares in the search results, generates malware metadata, and provides appropriate messages to the client device that initiated the search service so the user can avoid malware while browsing and searching Internet. The search results that span to a desired level of sub-domain Universal Resource Locators (URLs) and links are quarantined and denied access when found to be infected with malwares. The associated status messages of the search results are displayed with color code and a popup window displays all the information about the searched links when accessed.

Abstract: A method and system for detecting fraud in an electronic session performed over a network, the session including communications between a purported customer and a bank operating system, the communications from the customer including headers. The method including inputting the headers, including header attributes, from the purported customer during the session; comparing the header attributes from different communications during the session; determining that the comparison of the header attributes are irregular; and flagging, based on the determining that the comparison of the header attributes are irregular, the session as suspect.

Abstract: Traffic control techniques are provided for intercepting an initial message in a handshaking procedure for a secure communication between a first device and a second device at a proxy device. Identification information associated with the second device is extracted from the initial message. A policy is applied to communications between the first device and second device based on the identification information.

Abstract: A method and apparatus of a device that distinguishes multiplexed media and signaling data traffic is described. In an exemplary embodiment, the device receives, on a single port, a packet of the multiplexed data traffic, where the multiplexed data traffic includes a plurality of packets and each of the plurality of packets is one of a media packet and an encapsulated signaling packet. The device further examines an initial data element of a header of the received packet to determine if the received packet is one of a media packet and a signal packet. The device further forwards the packet to a corresponding module for further processing based on the examining.

Abstract: Embodiments of the present disclosure include data loss prevention (DLP) methods and architectures by a cloud-based service. The disclosed techniques of the cloud-based platform (e.g., collaboration platform in an enterprise environment) can detect (and may optionally prevent) violations to, e.g., corporate policies, which can be configurable by a corporate administrator, for example regarding the use, storage, or transmission of sensitive information. The types of sensitive information can include, for example, financial information—credit card and bank account numbers, Personally Identifiable Information (PII)—Social Security Number (SSN), health/healthcare information, Intellectual Property—earnings forecasts, sales pipeline, trade secrets, source code, etc.

Abstract: A method is provided in one example embodiment that includes monitoring a first interface, monitoring a second interface, and taking a policy action if the second interface is not executed before the first interface. In more particular embodiments, monitoring the second interface may include walking a call stack associated with the first interface. Moreover, a program context for calling code associated with the second interface may be identified and acted upon.

Abstract: In-band signaling may be used between two stations to determine the capabilities of the stations and/or send actionable information between the stations participating in the call. The in-band signals are indicative that the station that is transmitting the in-band signals can use in-band signals as a conduit to send and/or receive various types of information and are used to probe whether the receiving station can operate similarly. If the receiving station detects and reacts to the in-band signals, then both stations can pass control information and data as well as enhancements between each other, without any need of infrastructure upgrade and/or quality compromise to legacy phone users. Additionally or alternatively, out of band interfaces and watermarking may also be used.

Abstract: A method that incorporates teachings of the present disclosure may include, for example, receiving an assignment to provide communication services to a communication device, supplying a first telephone number mapping system of a first internet protocol multimedia subsystem communication system with contact information of the communication device and a serving call session control function operating in the first internet protocol multimedia subsystem communication system, supplying a second telephone number mapping system of a second internet protocol multimedia subsystem communication system with contact information of the communication device and the serving call session control function, and receiving a session initiation protocol INVITE from an originating serving call session control function of the second internet protocol multimedia subsystem communication system for establishing communications with the communication device. Additional embodiments are disclosed.

Abstract: A system of managing collaborative session control when controller is lost or changes to passive-control mode in a data communication network comprising of a control-capable terminal device that can generate and send user preferences on successive controller selection and control policy, a master server device that can make control transfer decisions or take over control upon events, a normal terminal device that can process and response to master server queries on control capacity and its willingness to take over control. These apparatus are connected to each other inside one collaborative session, regardless of their subscriptions. A method of control management of the collaborative session without constant enrollment of controller comprises the steps of sending different types of preferences to master server device; making control transfer or handover decision; and interacting with affected terminals.

Abstract: Techniques are disclosed for virtualizing internet protocol (IP) addresses in terminal server sessions. A client component comprises a layer service provider (LSP) and a name service provider (NSP) that intercept a socket call to associate a port with a socket for a terminal server session. The client component queries a server component for a virtual IP address, and the server component determines whether the terminal server session can use a virtual IP address. Where the session can use a virtual IP address, the server returns a virtual IP address and the client component binds the socket call to the virtual IP address. Where the session cannot use a virtual IP address, the server returns an indication of that, and the client component acts as a proxy for that socket call and any future calls for that socket.

Abstract: A system that incorporates teachings of the subject disclosure may include, for example, selecting a first multimedia stream including a first video stream and selecting a second audio stream associated with common subject matter. A timing offset is determined according to a time difference between a first input coincident with a visual aspect of an event observable in playback of the first video stream and a second input coincident with an audible aspect of the event observable in playback of the second audio stream. One of the first input, the second input, or the first and second inputs comprises performing an action during playback of the first video stream and the second audio stream at a multimedia center. The first video stream and the second audio stream are synchronized in in real-time according to the timing offset. Other embodiments are disclosed.

Abstract: A method for displaying data is disclosed. The method may include displaying an application on a mobile electronic communication device. The method may further include contacting at least one media server configured to store media data and receiving, at the mobile electronic communication device, first available media data from the at least one media server. The method may further include displaying the received available media data in a media stream within the application. The method may also include contacting, after a predetermined amount of time, the at least one media server and receiving, in response to the contacting, at the mobile electronic communication device, second available media data from the at least one media server. The method may further include displaying the second available media data in the media stream.

Abstract: A system and method for providing media streaming are provided. A media description file having a range string indicator is used to specify location offsets of a plurality of media fragments within a media file. The range string may be stored directly in the media description file or the media description file may contain an indicator specifying a file containing the range string. The media description file may also include a range unit specifying the size of the offsets in the range string. In an embodiment, offsets within the individual media fragments may also be provided, either in the media description file or in a different file.

Abstract: A Method is described for synchronizing the output of terminals. The method according to the invention may be used in a system comprising a station, which transmits a packetized stream to at least a first and second terminal. Each terminal comprises a variable delay unit and each terminal is connected through a low-delay communication channel to at least one synchronization unit for calculating delay information. Further, each terminal is capable of determining media reference information of a received media unit from the stream.

Abstract: A system and method is provided for managing verification of configuration item changes. Discovered configuration data associated with a configuration item may be received. A determination may be made regarding whether a change order for the configuration item exists. A determination may be made regarding whether the change order is in a “verification in progress” state. When the change order is in the “verification in progress” state, alignment of the discovered configuration data with the change order may be determined and a verification policy may be determined based on the determined alignment.

Abstract: A unified data exchange method between an automobile head unit and a mobile device is provided, in which the automobile head unit directly provides a web user interface to the mobile device or drives a mobile application of the mobile device to provide a user interface when the automobile head unit does not provide the web user interface. Further, in the data exchange method, a user interface is dynamically provided from a third user interface server connected to the mobile device.

Abstract: Systems and methods for a situated multi-user environment are provided. In one aspect, the method includes a step for receiving a user event message for a first user based on data received by a data source. The method also includes a step for updating a display based on the received user event message for the first user, wherein the display provides an indication of a relative physical location of the first user amongst a group of users within a certain proximity of each other. The method also includes a step for receiving a command from a first user to share a content item with a second user in the group of users. The method also includes a step for providing access to the shared content item to a device of the second user.

Abstract: A system for maintaining a domain in a premises, wherein the domain is coupled with a remote server, is disclosed. The system includes an instruction receiver; a secure connection establisher for establishing a secure connection between the local and remote server; a data exchange module for exchanging device configuration information between the local and the remote server; and an updating module for updating an application and device configuration information. The instruction receiver receives a set of instructions relating to managing the domain, wherein the set of instructions comprises a complete set of instructions associated with said managing a configuration of the domain such that the domain functions according to the complete set of instructions without any further communication necessary between the remote server with the local server until a change in the domain occurs, wherein the change requires an update to the remote server and components coupled therewith.

Abstract: A wireless sensor network including a plurality of Smart Sensors coupled to a wide area network such as the Internet via a Wireless Sensor Coordinator. Each wireless sensor network comprises a plurality of Smart Sensors, each operable to measure one or more physical quantities. Each wireless sensor communicates the measured data to a Wireless Sensor Coordinator which then stores the collected data in memory. The Wireless Sensor Coordinator further includes a web server operable to post a web site on a network that is accessible by a common web browser. Upon receiving a request for sensed data via the web site, the Wireless Sensor Coordinator retrieves the appropriate measured and stored data and converts it into HTML format pages which are then posted on the web site for review by the requestor.

Abstract: In one embodiment, a file transfer apparatus includes a storing device, a determination unit, and a notification unit. The storing unit stores transfer information between the file transfer apparatus and a second file transfer apparatus. The determination unit determines an insufficient state when the latest value of a numerical value which varies depending on a use situation of the region meets a predetermined condition. The notification unit notifies, as a response to the determination of the insufficient state by the determination unit, the gist thereof to a user.

Abstract: A graphical user interface used in a virtual media system for allowing a server computer to access objects (files and folders) on storage devices of a client computer. The server is controlled by input signals from the client. The desktop of the client displays a first file management window showing objects on the storage devices, and a second window representing a desktop of the server. Using input devices connected to the client, a user selects objects in the first window and drags and drops them on the second window. In response, the client performs a virtual media mounting process to present the selected objects to the server as objects on a local drive of the server, without presenting any unselected content on the storage devices. The local drive is shown in the second window on the client's desktop to allow the user to explore its content.

Abstract: Embodiments of the present invention disclose a method, computer program product, and system for partitioning digital media content for consumption. A computer identifies a digital media content request which includes user subscription preferences and a list of free time slots from a user's electronic calendar. The computer identifies a first episode of digital media content, wherein the identified first episode matches subscription preferences, and has a first duration. The computer retrieves the identified first episode of digital media content from a data store. The computer determines if the first duration of the identified first episode is greater than the associated duration of each of the two or more free time slots. The computer partitions the identified first episode into a plurality of segments. The computer matches the first of the two or more free time slots in the user's electronic calendar to the first segment of the plurality of segments.

Abstract: A set of techniques is described for enabling a virtual machine based transcoding system. The system enables any transcoding provider to make their transcoding service available to other users over a network. The system can automate the deployment, execution and delivery of the transcoding service on behalf of the transcoding provider and enable other users to use the transcoding services to transcode content. The system receives a virtual machine image, transfers the image to a location where the media content is stored and creates a virtual private network of resources that will perform the transcoding of the media content. The virtual private network may be firewalled or otherwise restricted from opening connections with external clients when transcoding the content in order to prevent malicious use of the media content.

Abstract: A first client device performs a handoff operation to a second client device by transmitting application information, associated with a first application, to the second client device when the first client device is positioned within a predefined proximity of the second client device. The first application has a first client device user interface state when the handoff operation is performed. Further, the first client device, in response to receiving from another client device application information associated with a second application executed by the other first client device, executes a third application corresponding to the second application with a user interface state corresponding to a user interface state of the other client device.

Abstract: A node and a method for generating a shortened name robust against a change in a hierarchical name in a Content-Centric Network (CCN) are provided. The method includes receiving a packet requesting content including a hierarchical name of the content, and determining whether a prefix of the hierarchical name is identical to a name of the node. The method further includes generating a shortened name by removing the prefix from the hierarchical name if the prefix is identical to the name component, and changing the hierarchical name to the shortened name. The shortened name is used to check whether the corresponding content is stored in the content cache, to check whether the same content-request packet is already under processing, and to decide an outgoing face to which the content-request packet is transmitted.

Abstract: A mechanism is provided for controlling a distributed application. An indication of a computational capability of a client computing machine and of a server computing machine is detected. At least part of a page is built in response to a request received by the server computing machine from the client computing machine. The at least part of the page comprising a set of commands each one for submitting a next request on the client computing machine. Processing logic for serving each next request being split between a client processing component and a server processing component. The page with the client processing component for each command is returned to the client computing machine for causing the client computing machine to load the page and execute each client processing component in response to the corresponding next request. Each server processing component is executed in response to the corresponding next request.

Abstract: One embodiment of the present method and apparatus adaptive in-operator load shedding includes receiving at least two data streams (each comprising a plurality of tuples, or data items) into respective sliding windows of memory. A throttling fraction is then calculated based on input rates associated with the data streams and on currently available processing resources. Tuples are then selected for processing from the data streams in accordance with the throttling fraction, where the selected tuples represent a subset of all tuples contained within the sliding window.

Abstract: Several different embodiments of a massively scalable object storage system are described. The object storage system is particularly useful for storage in a cloud computing installation whereby shared servers provide resources, software, and data to computers and other devices on demand. In several embodiments, the object storage system includes a ring implementation used to associate object storage commands with particular physical servers such that certain guarantees of consistency, availability, and performance can be met. In other embodiments, the object storage system includes a synchronization protocol used to order operations across a distributed system. In a third set of embodiments, the object storage system includes a metadata management system. In a fourth set of embodiments, the object storage system uses a structured information synchronization system. Features from each set of embodiments can be used to improve the performance and scalability of a cloud computing object storage system.

Abstract: A method and system may receive a request to configure a computing resource, such as a load balancer or firewall based on configuration information received from a user via a web portal. The configuration information may be stored and a subsequent request to commit the stored configuration information may be received. One or more jobs may be queued in a jobs database based on the request to commit the configuration information. The one or more jobs may be dequeued by a workflow engine and executed to configure the computing resource.

Abstract: Methods and apparatuses for operating a storage system are provided. In one example, a storage system includes a storage server and a virtual storage appliance (VSA) implemented in a virtual machine. The storage server provides access to a first shared namespace of data. The VSA is operatively connected to the storage server system over a network connection and provides access to a second shared namespace of data over the network connection. The second shared namespace is defined by a policy and includes a subset of the first shared namespace. The VSA also replicates data of a third shared namespace of data at the VSA making the third shared namespace available at the VSA when the network connection is unavailable. The third namespace is defined by the policy and includes a subset of the second shared namespace.

Abstract: The present invention provides a method and apparatus for setting up a gateway for an AUTOSAR-based vehicle network. The apparatus for setting up the gateway includes a candidate selection unit for selecting an Electronic Control Unit (ECU) connected to at least two communication clusters, from among a plurality of ECUs, as a gateway candidate, and a gateway generation unit for generating a gateway instance with reference to the ECU selected by the candidate selection unit, and generating a gateway meta-model including the gateway instance based on instance generation input values entered by a user.

Abstract: A method of controlling media content between a portable device and a head control unit. A first link is initiated for transmitting control signals between a control client and a control server. A second link is initiated for transmitting media content between a data server and a data client. The first link has a lower traffic volume capacity than the second link and a shorter latency for the control signals than for the media content signal over the second link. The control client generates control signals identifying a user's request and transmits the control signals to the control server using the first link. The control server provides instructions to the data server for executing the user request. The retrieved media data is transmitted from the data server to the data client using the second link. The media data is output to the user over the media output device.

Abstract: An embodiment provides a user equipment that includes a processor configured to receive a Session Initiation Protocol (SIP) NOTIFY message transmitted by a network component as a result of a registration event. The SIP NOTIFY message contains at least a portion of information included in a first SIP message sent between a first user equipment and the network component. Another embodiment provides method and apparatus for a network node to determine whether filter criteria include one or more indicators that specify the need for information, and including in a second SIP message the information specified by the one or more indicators.

Abstract: Contiguous location based user networks are disclosed herein. A method includes receiving an identification of an area of interest associated with a user of, and transmitting the identification of the area of interest to a server. The method includes determining a location of the user device and transmitting the location to the server. The method includes receiving information identifying a proximity group comprising the user and a plurality of other users. The proximity group includes least one other user being within a proximate area of the location of the user device and having an area of interest corresponding to the area of interest of the user. The proximate area corresponds to a second geographic region smaller than the area of interest. The proximity group further comprising at least one additional other user identified as a neighbor of each of the user and the at least one other user.

Abstract: It would be beneficial to allow one or more of information, applications, desktops, and in general any information to be shared between a computer and a communications device. For example, it would be useful to be able to move a presentation from a computer to a mobile communications device. Some solutions attempt to address this by requiring a user to load the information on a laptop, USB key, burn it to an optical disk or the like, and then “open” the information on another device located at the remote destination. In one embodiment, through the use of one or more of virtualization and content translation, any information and/or applications can be exchanged between a computer and a communications device. More specifically, one embodiment utilizes metadata in conjunction with a virtualization environment to allow the exchange of information and/or applications between a personal computer and a communications device, or vice versa.

Abstract: In one embodiment, a first computing device determines a communication to be pushed to a second computing device associated with a user. The first computing device determines whether one or more conditions are satisfied for refraining from pushing the communication to the second computing device. The one or more conditions are based at least in part on the relevance of the communication to the user and one or more activities of the user. If the one or more conditions are satisfied, then the first computing device refrains from sending the communication to the second computing device. If the one or more conditions are not satisfied, then the first computing device sends information to push the communication to the second computing device.

Abstract: A computer implemented method includes receiving an object scheduled for automatic deletion after a specified viewing period, a specified number of views or a specified period of time. Object push criteria are evaluated. The object is pushed to an edge server cache in response to evaluating. The object is served in response to a request for the object.

Abstract: In a system for the customization of media content metadata, media content metadata includes a plurality of records which are associated with a particular type of media content and each of the records includes a plurality of fields for defining the type of media content. At least one end user device is capable of displaying the media content metadata, and a content server is operable to obtain or receive the metadata from one or more available metadata providers. The content server is also operable to transmit the metadata to the end user device in response to a request from the end user device. A customization scheme is utilized by the content server to customize the quantity of records or the types of fields included within each record which is transmitted to the end user device in response to the request.

Abstract: This specification generally relates to using redirect messages to implement caching. One example method includes receiving from a client a first request for a network resource, the first request including an original location of the network resource; determining that a response to the first request is to be cached; sending a redirect response to the client including a cache location for the network resource; receiving a second request for the network resource from the client, the second request including the cache location; in response to receiving the second request for the network resource from the client: determining that the network resource has not been previously cached; retrieving the network resource from the original location; caching the retrieved network resource in a location associated with the cache location for the network resource; and sending the retrieved network resource to the client.

Abstract: The present invention includes methods and technologies for defining and administering device manners policy (“DMP”), propagating DMP, reception and recognition of, and compliance with DMP. Such policy may be used to communicate to various mobile and other devices the “manners” with which compliance is expected or required. Similar to some of the social manners honored among people, such as with “no smoking” or “employees only” zones, “no swimming” or “no flash photography” areas, and scenarios for “please wash your hands” or “no talking out loud”, devices may recognize and comply with analogous “device manners” policy.

Abstract: A method and apparatus for updating personal information in a communication system supporting a Converged Address Book (CAB) service are provided. The method and apparatus includes subscribing to external personal profile information from a non-CAB system, and updating personal information in accordance with a user preference-based synchronization method using the external personal profile information.

Abstract: A device, system, and method is provided for running mobile applications, including a server for running applications and a client installed in a mobile device. The client may connect to the server via a network. The client may display content, receive user input, and send user input to the server. The server may use the client to receive user input and to display content for running applications for the mobile device.

Abstract: The present disclosure presents systems and methods for maintaining original source and destination IP addresses of a request while performing intermediary cache redirection. An intermediary receives a request from a client destined to a server identifying a client IP address as a source IP address and a server IP address as a destination IP address. The intermediary transmits the request to a cache server, the request maintaining original IP addresses and identifying a MAC address of the cache server as the destination MAC address. The intermediary receives the request from the cache server responsive to a cache miss, the received request maintaining the original source and destination IP addresses. The intermediary identifying that the third request is coming from the cache server via one or more data link layer properties of the third transport layer connection.

Abstract: A method and apparatus are used to support the transmission of data to a user over multiple allocated data channels. Data packets are transmitted in timeslots of the allocated data channels to corresponding target receivers without the need for explicitly assigning particular time-slots to a target user well in advance of transmitting any data packets in the time-slots. Instead, each data packet transmitted in a time-slot includes a header label or preamble indicating to which of multiple possible receivers a data packet is directed. The preamble also preferably includes decoding information indicating how a corresponding data payload of the data packet is to be processed for recapturing transmitted raw data.

Abstract: The present application relates to an Internet access method, a terminal and a storage medium. The method comprises transmitting a first webpage access-request to a second server via a first server; packaging address information of a webpage to be accessed into a second webpage access-request whose destination address is an address of a proxy server when the terminal confirms the first webpage access has failed and transmitting the second webpage access-request to the second server via the first server and the proxy server; and receiving a by the second server via the proxy server and the first server and presenting the returned webpage content. The present application can increases the reliability of accessing the Internet so as to improve the user experience of using the service.